This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft File: hf--WNwc9_kcLTgTTiC27wssOl8.mft (raw, json) Hash identifier: ypKDkMfYWm7rvmnZtUJh8pBRZhFu8VAqC60mast508U= Subject key identifier: 6C:30:0C:0C:2B:BE:E7:01:F2:45:F7:C3:11:14:82:4B:4E:62:DB:66 Authority key identifier: 85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F Certificate issuer: /CN=A911954F/serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft Manifest number: 0294 Signing time: Fri 05 Dec 2025 01:57:25 +0000 Manifest this update: Fri 05 Dec 2025 01:57:25 +0000 Manifest next update: Fri 12 Dec 2025 01:57:25 +0000 Files and hashes: 1: hf--WNwc9_kcLTgTTiC27wssOl8.crl (hash: mA9rBdP+rsjz6yIJE4JnVmo9j7es6dWTIgAbbW4liII=) 2: 6BCEC330344311EFB7DD0D34C4F9AE02.roa (hash: V5GXfj7MVmj/bsrh8ZK5BOMK+sTslcHA1M5O9HLWM8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911954F, serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F Validity Not Before: Dec 5 01:57:25 2025 GMT Not After : Dec 12 01:57:25 2025 GMT Subject: CN=69323c05-1bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:43:ce:8b:a1:3a:f0:99:e5:b6:81:03:2c: 11:e9:4a:a3:d8:ac:c4:63:c6:26:32:cd:3c:ee:6f: 01:07:14:d4:6d:90:68:bc:4c:e7:e0:2a:f3:5e:a6: 83:17:0c:a8:9e:ca:1e:ad:07:56:8a:80:7f:d6:fd: 3f:d7:d4:97:05:82:cc:db:3d:50:ca:a5:36:6f:17: db:cf:9e:2f:f9:2e:3e:d8:b6:8b:7d:64:20:42:f3: fe:d0:09:69:96:4e:0a:42:a7:37:8c:ae:5c:0c:6a: d6:07:e4:4e:97:9f:f2:c0:e8:81:41:b1:d8:58:e3: 65:26:44:f5:18:62:e0:bd:4a:e5:0e:99:4a:97:f8: 14:56:3a:53:75:d7:bb:51:90:4d:d3:a5:2f:32:be: 49:1c:07:a4:42:dc:03:e2:be:2f:6d:dd:7c:1e:19: 00:9d:e8:c3:6a:2c:61:5e:8b:4a:43:6a:98:f9:99: a5:30:91:e7:5b:70:92:e8:d8:cd:54:42:18:83:2f: 47:8d:45:ef:19:6b:32:f2:16:cc:f0:e7:1c:77:82: bd:01:6c:a5:3f:84:84:ee:89:04:7f:aa:c0:13:fc: 7e:ad:50:ed:e1:19:dd:93:7e:02:11:36:3e:c6:d6: c0:c8:21:12:36:3e:68:50:cc:32:29:56:53:aa:5b: a8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:30:0C:0C:2B:BE:E7:01:F2:45:F7:C3:11:14:82:4B:4E:62:DB:66 X509v3 Authority Key Identifier: keyid:85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:e9:93:9e:4f:ac:ac:34:7d:4f:ef:f9:0c:1c:e9:87:ff:fa: b5:a2:f5:27:64:91:7d:f2:41:33:fa:84:6f:b8:94:34:22:91: d6:55:36:04:7f:a2:01:1f:36:80:9c:a0:cc:4c:b6:bc:79:84: da:0e:23:1b:de:72:3b:25:95:6c:55:60:8b:9f:2c:a5:dc:58: 98:be:09:e2:de:d6:5f:44:1d:d1:32:71:f1:ad:ce:27:e0:93: de:a6:70:52:16:fc:5e:9b:3e:98:cb:a4:6b:40:95:e3:b7:9b: 6d:1f:dd:b2:73:b5:ef:c0:bf:7b:10:55:26:fb:29:d3:e3:80: 49:be:0a:3a:a9:6c:c5:13:7a:64:e9:81:9c:95:b3:11:58:fd: ef:f1:5d:b8:d3:03:eb:a2:7b:7d:ef:e9:0c:37:4f:b2:9f:a4: 89:3c:ed:ea:b7:be:5f:49:c9:2f:e1:19:97:31:0a:1e:68:42: f8:d9:f0:75:da:b1:20:4d:f8:ec:8c:c5:81:be:41:ea:cb:c1: 16:b3:20:18:d4:f9:e8:cb:37:c6:c6:db:6e:f7:aa:ca:d4:a8: 8b:f1:0d:35:5d:9a:55:bb:f0:e8:c1:d6:27:a1:8d:ae:bb:72: bf:87:ca:a0:df:56:3b:89:86:39:88:73:dd:ac:c3:a1:d9:fc: a3:ac:d5:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1NEYxMTAvBgNVBAUTKDg1RkZCRTU4REMxQ0Y3RjkxQzJEMzgxMzRFMjBCNkVG MEIyQzNBNUYwHhcNMjUxMjA1MDE1NzI1WhcNMjUxMjEyMDE1NzI1WjAYMRYwFAYD VQQDEw02OTMyM2MwNS0xYmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaVDzouhOvCZ5baBAywR6Uqj2KzEY8YmMs087m8BBxTUbZBovEzn4CrzXqaD FwyonsoerQdWioB/1v0/19SXBYLM2z1QyqU2bxfbz54v+S4+2LaLfWQgQvP+0Alp lk4KQqc3jK5cDGrWB+ROl5/ywOiBQbHYWONlJkT1GGLgvUrlDplKl/gUVjpTdde7 UZBN06UvMr5JHAekQtwD4r4vbd18HhkAnejDaixhXotKQ2qY+ZmlMJHnW3CS6NjN VEIYgy9HjUXvGWsy8hbM8Occd4K9AWylP4SE7okEf6rAE/x+rVDt4Rndk34CETY+ xtbAyCESNj5oUMwyKVZTqluo3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwwDAwr vucB8kX3wxEUgktOYttmMB8GA1UdIwQYMBaAFIX/vljcHPf5HC04E04gtu8LLDpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU0Ri81OTFBMzIyMDkx NEExMUVFOTQyQ0M4NzFDNEY5QUUwMi9oZi0tV053Yzlfa2NMVGdUVGlDMjd3c3NP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hmLS1XTndjOV9rY0xUZ1RUaUMyN3dzc09sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTU0Ri81OTFBMzIyMDkxNEExMUVFOTQyQ0M4NzFDNEY5QUUwMi9oZi0tV053Yzlf a2NMVGdUVGlDMjd3c3NPbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj6ZOeT6ysNH1P7/kMHOmH//q1ovUnZJF98kEz+oRvuJQ0IpHWVTYE f6IBHzaAnKDMTLa8eYTaDiMb3nI7JZVsVWCLnyyl3FiYvgni3tZfRB3RMnHxrc4n 4JPepnBSFvxemz6Yy6RrQJXjt5ttH92yc7XvwL97EFUm+ynT44BJvgo6qWzFE3pk 6YGclbMRWP3v8V240wPront97+kMN0+yn6SJPO3qt75fSckv4RmXMQoeaEL42fB1 2rEgTfjsjMWBvkHqy8EWsyAY1PnoyzfGxttu96rK1KiL8Q01XZpVu/DowdYnoY2u u3K/h8qg31Y7iYY5iHPdrMOh2fyjrNVp -----END CERTIFICATE-----Generated at Sat Dec 6 15:36:58 2025 by rpki-client