This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft File: CHspwfvXREICrgAqSXEn_WbyStk.mft (raw, json) Hash identifier: xQFFAZswDufStR4qjaPm5rLWj7r/FNn/XTUCcIktm7Q= Subject key identifier: 2D:77:5A:DF:8E:1E:9C:A2:42:23:D6:43:31:75:B5:EE:21:F6:5D:6D Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 Certificate issuer: /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Certificate serial: 04D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft Manifest number: 04D4 Signing time: Thu 04 Dec 2025 22:21:13 +0000 Manifest this update: Thu 04 Dec 2025 22:21:13 +0000 Manifest next update: Thu 11 Dec 2025 22:21:13 +0000 Files and hashes: 1: CHspwfvXREICrgAqSXEn_WbyStk.crl (hash: +ZFq9LjGEK2ZCXatesgXxAv93SMhv6R9OUBPQ1kjPcY=) 2: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (hash: TOciMmg+YXh13dYfOrB14chWnhLKZ+JRHOQLiS8Jf5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1241 (0x4d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAED9, serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Validity Not Before: Dec 4 22:21:13 2025 GMT Not After : Dec 11 22:21:13 2025 GMT Subject: CN=69320959-1d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c3:83:4e:8e:aa:ce:a9:d1:18:80:35:7b:b0: ca:6d:0c:6b:b8:2b:23:08:76:c3:ef:fc:07:f2:f3: dc:1a:c6:f6:33:08:5c:f2:99:57:09:75:90:c9:e1: b3:21:1f:fc:af:2e:27:a4:f3:d0:09:0e:42:4c:37: 0f:62:e9:76:e0:97:2c:42:dd:4e:27:63:82:30:df: 16:a7:4e:cc:e9:09:29:d9:07:24:c2:28:31:a8:60: 45:c4:e5:4c:7f:d3:bc:69:04:29:a0:b2:3e:30:f5: fa:4a:34:80:a3:0b:74:d8:bb:65:8e:51:f2:fe:1b: c4:19:d7:04:2f:71:3e:e1:f8:8a:9f:85:03:8a:55: a5:61:24:c8:75:c6:c5:76:d5:e7:8c:5c:f9:1d:98: 5c:c6:45:4f:3a:04:75:2e:f4:55:fc:76:09:50:9a: 75:38:be:15:ca:7b:02:b6:45:26:21:86:6e:ec:2f: 5a:27:fc:cd:24:dc:e7:54:ba:8d:88:c9:db:69:3f: 7a:8d:3c:68:05:02:55:4a:25:16:9c:d1:f9:61:4b: b4:15:47:d6:45:4c:5c:f2:13:48:89:e3:37:35:b1: 64:c0:27:a6:f1:b3:83:12:9b:d6:ad:21:94:4e:1a: 92:07:42:d8:45:b2:f7:b5:ee:13:4d:54:f9:0c:96: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:77:5A:DF:8E:1E:9C:A2:42:23:D6:43:31:75:B5:EE:21:F6:5D:6D X509v3 Authority Key Identifier: keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:6f:cd:e3:c0:c7:78:48:95:ee:41:48:86:49:f8:ce:6d:b5: 24:bf:14:9e:ba:d7:1c:cc:a7:d7:53:03:e8:5e:97:1e:a2:53: 20:e4:57:81:82:f7:f1:29:9e:0d:bf:8e:7a:c0:53:bc:89:3c: 9e:df:b5:fa:04:9a:f8:4d:c0:cd:bd:fb:08:00:ad:0e:93:9b: 3f:83:74:02:20:8a:ef:69:d9:03:f9:11:39:79:28:44:8d:dd: db:6b:ef:76:7d:a1:90:f3:69:de:dc:42:04:b4:1d:52:c1:b7: e2:2b:15:ed:76:76:6e:d7:32:b1:69:8a:b2:66:d1:e8:d8:bf: f5:80:8c:cb:02:7a:d5:13:1f:76:3a:af:c3:e3:94:9c:97:30: de:ee:5a:64:88:5d:39:b7:dc:3c:27:87:fb:58:b1:2d:38:79: 9a:64:32:b3:9d:55:4b:04:69:9e:9d:17:f0:3b:7b:38:77:40: 64:b8:ba:3e:b2:68:eb:f1:59:35:8d:69:1d:e5:f4:47:1d:fc: 53:4b:57:e3:73:d8:8a:3a:52:d3:b0:27:46:d5:e4:1d:74:22: 7e:ab:a3:b2:9a:32:f3:cb:f4:8c:a7:98:2d:1b:11:ec:f0:31: 4d:a3:5c:a5:6c:73:fc:7d:e2:6c:09:33:8b:c1:33:27:35:84: a1:3e:15:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFFRDkxMTAvBgNVBAUTKDA4N0IyOUMxRkJENzQ0NDIwMkFFMDAyQTQ5NzEyN0ZE NjZGMjRBRDkwHhcNMjUxMjA0MjIyMTEzWhcNMjUxMjExMjIyMTEzWjAYMRYwFAYD VQQDEw02OTMyMDk1OS0xZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5cODTo6qzqnRGIA1e7DKbQxruCsjCHbD7/wH8vPcGsb2Mwhc8plXCXWQyeGz IR/8ry4npPPQCQ5CTDcPYul24JcsQt1OJ2OCMN8Wp07M6Qkp2QckwigxqGBFxOVM f9O8aQQpoLI+MPX6SjSAowt02LtljlHy/hvEGdcEL3E+4fiKn4UDilWlYSTIdcbF dtXnjFz5HZhcxkVPOgR1LvRV/HYJUJp1OL4VynsCtkUmIYZu7C9aJ/zNJNznVLqN iMnbaT96jTxoBQJVSiUWnNH5YUu0FUfWRUxc8hNIieM3NbFkwCem8bODEpvWrSGU ThqSB0LYRbL3te4TTVT5DJbJPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC13Wt+O HpyiQiPWQzF1te4h9l1tMB8GA1UdIwQYMBaAFAh7KcH710RCAq4AKklxJ/1m8krZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUVEOS82QTc2NUFBQTQ1 REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJFSUNyZ0FxU1hFbl9XYnlT dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIc3B3ZnZYUkVJQ3JnQXFTWEVuX1dieVN0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUVEOS82QTc2NUFBQTQ1REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJF SUNyZ0FxU1hFbl9XYnlTdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBb83jwMd4SJXuQUiGSfjObbUkvxSeutcczKfXUwPoXpceolMg5FeB gvfxKZ4Nv456wFO8iTye37X6BJr4TcDNvfsIAK0Ok5s/g3QCIIrvadkD+RE5eShE jd3ba+92faGQ82ne3EIEtB1SwbfiKxXtdnZu1zKxaYqyZtHo2L/1gIzLAnrVEx92 Oq/D45SclzDe7lpkiF05t9w8J4f7WLEtOHmaZDKznVVLBGmenRfwO3s4d0BkuLo+ smjr8Vk1jWkd5fRHHfxTS1fjc9iKOlLTsCdG1eQddCJ+q6OymjLzy/SMp5gtGxHs 8DFNo1ylbHP8feJsCTOLwTMnNYShPhVw -----END CERTIFICATE-----Generated at Sat Dec 6 21:25:59 2025 by rpki-client