This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft File: buWafawHoiW5GzRmrRoHRkk9jiQ.mft (raw, json) Hash identifier: JBPsbs5+vEJGa/COZzZxf6EKBj3tycUCzJdpb7gHK4g= Subject key identifier: 3C:4F:9E:78:74:56:03:EB:37:47:ED:16:A5:19:5F:9F:79:D5:42:34 Authority key identifier: 6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 Certificate issuer: /CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Certificate serial: 062F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft Manifest number: 0628 Signing time: Sat 20 Dec 2025 22:06:46 +0000 Manifest this update: Sat 20 Dec 2025 22:06:45 +0000 Manifest next update: Sat 27 Dec 2025 22:06:45 +0000 Files and hashes: 1: buWafawHoiW5GzRmrRoHRkk9jiQ.crl (hash: 4EsH8BZsFeAIR7B6pNvJc12NtICSNgrIjl+gxqPmsh8=) 2: 581F68DAD48A11EEB7A00557C4F9AE02.roa (hash: Cb+Fd72gPRV5Z7Th9MT+3K1J11y33W768SuL3j3Pm7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1583 (0x62f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D5D, serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Validity Not Before: Dec 20 22:06:45 2025 GMT Not After : Dec 27 22:06:45 2025 GMT Subject: CN=69471df6-7f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3a:95:2f:f9:30:8c:76:2f:c6:f0:bf:be:a0: 20:28:24:19:c5:3a:ce:ec:fd:3b:d8:1e:a9:ab:11: b3:7a:6d:87:31:20:e2:3a:74:23:13:d1:f5:9c:ff: 9e:d1:48:df:4b:38:5b:41:51:f6:ca:0c:5f:a8:dd: 6d:3c:1e:3c:74:9a:df:b9:53:18:80:a3:98:5b:0c: 12:f9:3a:8c:bd:dd:e0:cd:e8:84:3e:fb:ca:d6:ce: d0:9c:32:bb:11:32:d2:03:49:81:6d:4b:25:cf:5a: 05:5a:ed:a7:e6:39:94:0f:39:8b:c0:53:de:07:bc: b7:45:03:44:b7:9c:ff:74:3a:63:59:c2:12:37:28: c7:2a:6a:cd:fd:77:d3:77:ee:af:8e:f2:0a:6f:97: be:d3:0a:34:9c:9d:9f:0b:e7:0b:5b:67:64:f4:5e: 99:35:6a:8d:e5:4f:ce:f1:db:7a:b8:77:07:f3:8c: 20:1d:3f:f2:ec:9f:ef:be:a2:d6:c5:ed:69:66:db: 39:c6:51:13:b0:8a:67:c5:3c:b5:11:49:b9:4b:5b: 2d:59:2b:32:f1:17:d2:0d:3c:69:32:1b:b3:16:90: 35:0e:c9:f0:ea:b6:91:8c:45:e9:eb:bb:a6:59:46: 35:a4:b6:62:c2:ea:30:75:7c:42:34:be:29:37:ac: fd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4F:9E:78:74:56:03:EB:37:47:ED:16:A5:19:5F:9F:79:D5:42:34 X509v3 Authority Key Identifier: keyid:6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:fc:25:09:6c:bd:a0:6c:a6:fd:2e:35:b6:b0:66:54:5a:c6: 3c:b2:3a:45:d4:32:8c:69:39:e6:e7:cd:5c:67:c6:5c:1c:df: 3c:45:cd:ff:1c:c2:72:d3:d8:84:f1:11:39:a4:69:a8:88:7f: 4d:6c:c3:08:5a:ce:02:98:7e:a6:04:13:7b:7a:23:f1:64:b0: 9b:79:91:ee:fd:db:37:74:f2:1f:b7:b0:d5:c2:63:8f:a8:d3: a9:b9:e0:90:80:d4:77:e4:a2:e7:cf:71:22:a5:18:60:37:21: 47:41:a4:bc:1b:99:f0:85:b2:b9:1b:c8:41:92:f0:00:4f:d0: a0:ee:0e:18:b4:05:b6:04:01:c3:bf:54:b8:ac:3f:d5:56:22: 72:e3:88:98:e5:92:7d:fe:e6:4a:49:2f:97:fb:f7:7e:7f:e4: b9:fa:c3:07:e2:b5:62:c2:8d:a9:22:e7:ca:35:bb:c0:e9:1a: b6:8a:d8:02:5c:7c:b3:e0:76:e6:b5:be:c4:cb:f3:99:ce:4c: 15:6d:32:f3:cb:2c:c8:da:92:c9:15:b3:8c:81:dc:01:89:1e: 6e:36:be:3c:8f:a9:a7:23:a6:ed:91:53:8e:3a:bc:0c:0d:b6: 5c:a5:cc:f7:28:81:2c:59:7f:25:78:1b:97:6d:fa:57:9b:dc: 5b:42:26:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlENUQxMTAvBgNVBAUTKDZFRTU5QTdEQUMwN0EyMjVCOTFCMzQ2NkFEMUEwNzQ2 NDkzRDhFMjQwHhcNMjUxMjIwMjIwNjQ1WhcNMjUxMjI3MjIwNjQ1WjAYMRYwFAYD VQQDDA02OTQ3MWRmNi03ZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDqVL/kwjHYvxvC/vqAgKCQZxTrO7P072B6pqxGzem2HMSDiOnQjE9H1nP+e 0UjfSzhbQVH2ygxfqN1tPB48dJrfuVMYgKOYWwwS+TqMvd3gzeiEPvvK1s7QnDK7 ETLSA0mBbUslz1oFWu2n5jmUDzmLwFPeB7y3RQNEt5z/dDpjWcISNyjHKmrN/XfT d+6vjvIKb5e+0wo0nJ2fC+cLW2dk9F6ZNWqN5U/O8dt6uHcH84wgHT/y7J/vvqLW xe1pZts5xlETsIpnxTy1EUm5S1stWSsy8RfSDTxpMhuzFpA1Dsnw6raRjEXp67um WUY1pLZiwuowdXxCNL4pN6z9fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxPnnh0 VgPrN0ftFqUZX5951UI0MB8GA1UdIwQYMBaAFG7lmn2sB6IluRs0Zq0aB0ZJPY4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQ1RC80MDAxQTE2Q0M0 NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9pVzVHelJtclJvSFJrazlq aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J1V2FmYXdIb2lXNUd6Um1yUm9IUmtrOWppUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQ1RC80MDAxQTE2Q0M0NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9p VzVHelJtclJvSFJrazlqaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo/CUJbL2gbKb9LjW2sGZUWsY8sjpF1DKMaTnm581cZ8ZcHN88Rc3/ HMJy09iE8RE5pGmoiH9NbMMIWs4CmH6mBBN7eiPxZLCbeZHu/ds3dPIft7DVwmOP qNOpueCQgNR35KLnz3EipRhgNyFHQaS8G5nwhbK5G8hBkvAAT9Cg7g4YtAW2BAHD v1S4rD/VViJy44iY5ZJ9/uZKSS+X+/d+f+S5+sMH4rViwo2pIufKNbvA6Rq2itgC XHyz4Hbmtb7Ey/OZzkwVbTLzyyzI2pLJFbOMgdwBiR5uNr48j6mnI6btkVOOOrwM DbZcpcz3KIEsWX8leBuXbfpXm9xbQiaV -----END CERTIFICATE-----Generated at Mon Dec 22 05:18:56 2025 by rpki-client