This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft File: buWafawHoiW5GzRmrRoHRkk9jiQ.mft (raw, json) Hash identifier: j9rdV7pBIdZTrVCaAwjWR6V/XAExgAj9UhPPPaBy+hI= Subject key identifier: 67:D3:C9:6B:49:72:D4:AE:B8:FD:AF:B3:0A:4C:81:71:6F:F3:B2:44 Authority key identifier: 6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 Certificate issuer: /CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Certificate serial: 0627 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft Manifest number: 0620 Signing time: Thu 04 Dec 2025 21:33:32 +0000 Manifest this update: Thu 04 Dec 2025 21:33:32 +0000 Manifest next update: Thu 11 Dec 2025 21:33:31 +0000 Files and hashes: 1: buWafawHoiW5GzRmrRoHRkk9jiQ.crl (hash: Zlabja0goeowkogtRT4xU4DcN30sGdk+Bsgs4KvE+d4=) 2: 581F68DAD48A11EEB7A00557C4F9AE02.roa (hash: Cb+Fd72gPRV5Z7Th9MT+3K1J11y33W768SuL3j3Pm7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1575 (0x627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D5D, serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Validity Not Before: Dec 4 21:33:32 2025 GMT Not After : Dec 11 21:33:31 2025 GMT Subject: CN=6931fe2c-8d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:e7:22:ff:74:42:28:28:9c:57:76:4a:b4: 9c:be:b4:c8:a7:c3:ac:66:83:c3:0b:3c:96:9c:3a: 08:f8:aa:09:ec:d3:00:bd:3c:ea:69:80:4c:bb:27: 22:4b:8d:a2:5c:36:0e:68:5b:ee:25:72:29:e6:ef: b1:30:1f:7e:28:40:1e:04:f6:0f:42:31:e7:ac:08: 6a:80:dd:be:6a:d5:ac:e1:d5:84:1a:91:50:e0:b4: 9f:7d:5f:00:3b:e8:36:e2:cf:c7:53:af:2a:4e:75: 47:1c:99:7b:89:aa:93:f3:3c:5d:00:8c:e4:d4:47: 63:bb:36:d2:53:61:bc:d6:ef:b4:29:c3:59:b7:44: 35:55:c1:48:48:43:c2:1e:dc:b3:a8:39:d0:75:db: f9:56:d1:2c:13:45:82:c5:34:10:0a:4b:09:e6:c6: c3:e1:f4:0a:a6:b8:6c:9a:d1:95:a6:75:94:fb:bb: ea:3a:5a:88:b0:5e:1b:11:da:7f:5e:bf:f4:5c:55: 59:6c:23:d5:ae:79:a6:66:9f:28:0b:80:96:47:4f: be:35:f4:75:3e:1e:26:87:19:fb:a0:1b:1c:4f:da: c8:41:c8:89:ee:fc:1c:21:d9:f2:d2:c2:d1:35:9c: 3e:6c:2e:7e:27:d6:bd:2e:1b:4c:50:ce:36:cf:3b: 87:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D3:C9:6B:49:72:D4:AE:B8:FD:AF:B3:0A:4C:81:71:6F:F3:B2:44 X509v3 Authority Key Identifier: keyid:6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3d:82:b9:dd:fc:54:4c:15:51:11:a8:61:d2:0c:7a:af:9d: 42:ed:e9:be:ba:c8:5b:ba:aa:dc:b3:5a:62:66:68:40:5f:22: 12:d2:09:44:a0:f7:6b:ba:c9:c1:8b:85:67:b6:24:26:50:d0: 56:0b:27:0c:e5:e3:e1:d7:9a:bf:cc:2d:70:22:be:15:01:aa: ac:9b:13:de:ff:c4:55:63:e3:e8:e7:b6:0c:21:f4:77:22:63: 00:69:b3:32:c3:4a:15:88:5b:0e:e0:9c:de:e9:03:1d:e1:8c: 5f:7b:91:f9:8b:67:7c:3b:2b:c0:8f:58:62:0c:eb:9b:62:cd: f7:33:19:55:a2:4f:9a:5d:96:79:24:02:5c:2d:1c:36:db:a8: a1:c5:1c:ec:80:9e:5e:7f:89:c1:c5:eb:14:72:9c:62:17:6e: 37:76:25:ae:5e:8b:51:45:3d:c1:31:b1:f2:e1:a8:4a:44:e2: 0b:de:e8:3f:3e:c4:a2:12:89:bc:08:4b:15:a4:69:63:e1:1d: 75:68:cd:ef:59:9f:79:c3:05:1c:44:9d:d0:d7:8f:b9:4a:fd: 14:64:16:f5:0c:83:10:cf:ef:ad:1b:6c:56:de:0d:38:d0:d6: a7:76:78:e4:83:2e:c7:6b:df:69:3b:19:2d:84:dc:fd:27:b8: 16:6e:c4:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlENUQxMTAvBgNVBAUTKDZFRTU5QTdEQUMwN0EyMjVCOTFCMzQ2NkFEMUEwNzQ2 NDkzRDhFMjQwHhcNMjUxMjA0MjEzMzMyWhcNMjUxMjExMjEzMzMxWjAYMRYwFAYD VQQDEw02OTMxZmUyYy04ZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDLnIv90QigonFd2SrScvrTIp8OsZoPDCzyWnDoI+KoJ7NMAvTzqaYBMuyci S42iXDYOaFvuJXIp5u+xMB9+KEAeBPYPQjHnrAhqgN2+atWs4dWEGpFQ4LSffV8A O+g24s/HU68qTnVHHJl7iaqT8zxdAIzk1EdjuzbSU2G81u+0KcNZt0Q1VcFISEPC HtyzqDnQddv5VtEsE0WCxTQQCksJ5sbD4fQKprhsmtGVpnWU+7vqOlqIsF4bEdp/ Xr/0XFVZbCPVrnmmZp8oC4CWR0++NfR1Ph4mhxn7oBscT9rIQciJ7vwcIdny0sLR NZw+bC5+J9a9LhtMUM42zzuHVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfTyWtJ ctSuuP2vswpMgXFv87JEMB8GA1UdIwQYMBaAFG7lmn2sB6IluRs0Zq0aB0ZJPY4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQ1RC80MDAxQTE2Q0M0 NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9pVzVHelJtclJvSFJrazlq aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J1V2FmYXdIb2lXNUd6Um1yUm9IUmtrOWppUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQ1RC80MDAxQTE2Q0M0NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9p VzVHelJtclJvSFJrazlqaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbPYK53fxUTBVREahh0gx6r51C7em+ushbuqrcs1piZmhAXyIS0glE oPdrusnBi4VntiQmUNBWCycM5ePh15q/zC1wIr4VAaqsmxPe/8RVY+Po57YMIfR3 ImMAabMyw0oViFsO4Jze6QMd4Yxfe5H5i2d8OyvAj1hiDOubYs33MxlVok+aXZZ5 JAJcLRw226ihxRzsgJ5ef4nBxesUcpxiF243diWuXotRRT3BMbHy4ahKROIL3ug/ PsSiEom8CEsVpGlj4R11aM3vWZ95wwUcRJ3Q14+5Sv0UZBb1DIMQz++tG2xW3g04 0Nandnjkgy7Ha99pOxkthNz9J7gWbsRb -----END CERTIFICATE-----Generated at Sat Dec 6 20:07:07 2025 by rpki-client