This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft File: WOkI0McaSfSCp8fZVSozVZyuJkM.mft (raw, json) Hash identifier: UH9R1EctBTj15wTQvuchS4B17OFEZnsr/J1VarHeCCE= Subject key identifier: AB:45:F4:69:DB:D8:FD:26:6A:7E:8C:91:31:B3:37:A5:3D:1C:B1:67 Authority key identifier: 58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 Certificate issuer: /CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Certificate serial: 0620 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft Manifest number: 0619 Signing time: Sat 20 Dec 2025 22:08:27 +0000 Manifest this update: Sat 20 Dec 2025 22:08:27 +0000 Manifest next update: Sat 27 Dec 2025 22:08:27 +0000 Files and hashes: 1: WOkI0McaSfSCp8fZVSozVZyuJkM.crl (hash: j1FhazvGAVfo/raCtLMmqjnT8t8jlNkT6Os2D+l8Ugw=) 2: F189CB86C81D11EBA4C0E321C4F9AE02.roa (hash: S5y137jYfy0MIB/O4qGenQWe0yCgY06a7wP6x5FBr7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1568 (0x620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB5CE, serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Validity Not Before: Dec 20 22:08:27 2025 GMT Not After : Dec 27 22:08:27 2025 GMT Subject: CN=69471e5b-5fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:84:d9:13:ac:18:d6:0f:7f:a9:b0:8a:3f:fa: 57:9b:81:5a:c7:12:ad:fe:db:2d:76:08:1c:f9:58: db:33:4e:99:35:37:27:f8:52:b4:dc:ad:db:73:09: 61:df:de:f8:4e:0c:15:ed:6c:67:c3:f0:e9:c0:09: 80:aa:13:e1:b9:3c:93:fe:84:0d:96:74:7f:d8:78: ce:5a:7f:df:ba:e0:f3:5c:ce:69:27:c6:3a:99:4c: b8:1b:6d:70:32:ff:31:b3:2d:dc:18:81:9c:e8:b4: 64:0e:35:f0:ff:73:a3:fa:fb:ee:ec:87:1c:ae:85: 42:e8:a2:8d:8c:fc:ce:3d:a2:d9:4e:ce:3e:77:80: bb:f1:6c:99:f4:c8:89:33:5a:49:0a:69:9d:6d:02: 42:5d:07:29:c8:13:55:f1:16:b2:f1:b7:38:4e:67: 3b:74:fd:82:c3:f6:73:95:4c:e1:4b:28:85:1d:2b: d9:9d:2b:bc:8b:d5:a5:32:1f:c9:89:69:da:ce:c5: f6:de:c4:f1:4e:f2:04:d4:a5:71:c9:c5:32:fa:bd: 19:26:49:88:21:51:f1:21:a6:cc:f7:22:05:99:48: 69:60:c4:1d:35:e8:73:1b:68:d4:e1:d8:23:c0:3d: 10:d0:7a:ec:2c:7d:e7:2c:67:ed:f4:2e:74:96:4e: d9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:45:F4:69:DB:D8:FD:26:6A:7E:8C:91:31:B3:37:A5:3D:1C:B1:67 X509v3 Authority Key Identifier: keyid:58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:a8:b0:33:0d:4f:96:fc:29:7b:0c:36:95:09:5f:12:cf:94: fa:86:18:48:97:05:1d:75:ce:c7:ec:3b:6c:d6:f1:9f:3d:db: 4c:f8:9f:28:d6:18:4b:0a:62:ea:75:20:47:16:1f:9a:7f:2b: 2c:5f:ba:6b:58:88:52:2f:b5:ef:9e:b4:d1:2c:b8:2c:9a:9a: f3:da:d8:3a:65:2c:0e:af:c1:61:c2:7a:f0:ff:ba:9e:17:a5: fa:54:aa:b4:53:46:4c:8f:a4:d5:b9:9a:bd:bd:4d:e1:67:14: 6c:c5:02:23:da:3f:be:6c:b2:b3:19:42:43:a2:82:ec:8b:36: c1:6a:2c:0d:79:62:ea:f6:eb:5e:a2:19:61:08:d0:32:2a:d5: fa:1b:ab:70:ce:cd:58:43:8a:4f:31:95:20:b4:8b:94:c2:79: 9f:85:7f:a6:2d:4c:63:4b:34:04:fb:8b:8b:b1:42:d5:88:dc: 39:10:46:55:5a:e0:3a:41:b9:4f:44:0a:37:44:dd:d9:b7:4d: 99:53:3c:7c:e8:58:10:cd:57:60:49:64:98:97:c1:80:c5:da: 27:3e:f7:2a:47:30:03:5f:f7:46:d6:e6:59:c4:89:44:b6:b1: b3:67:fd:58:ea:0c:8a:8c:01:64:71:56:87:a0:24:07:ed:63: 75:da:5f:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI1Q0UxMTAvBgNVBAUTKDU4RTkwOEQwQzcxQTQ5RjQ4MkE3QzdEOTU1MkEzMzU1 OUNBRTI2NDMwHhcNMjUxMjIwMjIwODI3WhcNMjUxMjI3MjIwODI3WjAYMRYwFAYD VQQDDA02OTQ3MWU1Yi01ZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4TZE6wY1g9/qbCKP/pXm4FaxxKt/tstdggc+VjbM06ZNTcn+FK03K3bcwlh 3974TgwV7Wxnw/DpwAmAqhPhuTyT/oQNlnR/2HjOWn/fuuDzXM5pJ8Y6mUy4G21w Mv8xsy3cGIGc6LRkDjXw/3Oj+vvu7IccroVC6KKNjPzOPaLZTs4+d4C78WyZ9MiJ M1pJCmmdbQJCXQcpyBNV8Ray8bc4Tmc7dP2Cw/ZzlUzhSyiFHSvZnSu8i9WlMh/J iWnazsX23sTxTvIE1KVxycUy+r0ZJkmIIVHxIabM9yIFmUhpYMQdNehzG2jU4dgj wD0Q0HrsLH3nLGft9C50lk7ZhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtF9Gnb 2P0man6MkTGzN6U9HLFnMB8GA1UdIwQYMBaAFFjpCNDHGkn0gqfH2VUqM1WcriZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjVDRS9CMDk2QzUwMEM4 MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNmU0NwOGZaVlNvelZaeXVK a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dPa0kwTWNhU2ZTQ3A4ZlpWU296Vlp5dUprTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjVDRS9CMDk2QzUwMEM4MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNm U0NwOGZaVlNvelZaeXVKa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQqLAzDU+W/Cl7DDaVCV8Sz5T6hhhIlwUddc7H7Dts1vGfPdtM+J8o 1hhLCmLqdSBHFh+afyssX7prWIhSL7XvnrTRLLgsmprz2tg6ZSwOr8Fhwnrw/7qe F6X6VKq0U0ZMj6TVuZq9vU3hZxRsxQIj2j++bLKzGUJDooLsizbBaiwNeWLq9ute ohlhCNAyKtX6G6twzs1YQ4pPMZUgtIuUwnmfhX+mLUxjSzQE+4uLsULViNw5EEZV WuA6QblPRAo3RN3Zt02ZUzx86FgQzVdgSWSYl8GAxdonPvcqRzADX/dG1uZZxIlE trGzZ/1Y6gyKjAFkcVaHoCQH7WN12l8F -----END CERTIFICATE-----Generated at Sun Dec 21 11:29:03 2025 by rpki-client