This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft File: wzct4f6eU8GLMFFtlkxDZyLrPss.mft (raw, json) Hash identifier: jmXF9YluE+e/vJAvjgmUTe6muJNZyDAIFxZ2TgOHi/U= Subject key identifier: D1:AF:D5:01:E4:21:31:7E:64:1A:E2:F8:7D:71:7A:2D:F8:61:52:97 Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB Certificate issuer: /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft Manifest number: F8 Signing time: Fri 05 Dec 2025 03:18:29 +0000 Manifest this update: Fri 05 Dec 2025 03:18:28 +0000 Manifest next update: Fri 12 Dec 2025 03:18:28 +0000 Files and hashes: 1: wzct4f6eU8GLMFFtlkxDZyLrPss.crl (hash: vqPM6nV58Fo3391xhDsrDPRP2nNPehD7xx//ksHai5g=) 2: 5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (hash: +1ovp2NN4rcx7JakHr8vwRXXsKphyunMjKUMuwNMqnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C7CD, serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Validity Not Before: Dec 5 03:18:28 2025 GMT Not After : Dec 12 03:18:28 2025 GMT Subject: CN=69324f04-d601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:e6:51:d9:0e:ec:66:ab:86:30:ad:9d:1b: 3d:46:cd:6d:94:e6:05:5d:19:35:6e:fb:bf:49:34: 17:ce:be:e8:c6:e9:7e:df:83:ce:05:13:81:63:f1: 46:40:b1:69:d2:d6:66:05:89:fe:cc:b9:fe:3c:40: 23:9d:7e:59:58:cf:38:96:2f:bc:c0:44:fa:60:49: c1:cb:5c:3c:2f:78:4c:06:ae:fc:30:f5:99:a3:4e: 33:b2:3e:8e:8a:98:73:b8:b7:af:f0:fa:3f:e9:a2: f4:6f:2a:a5:9a:1e:d2:ed:56:0f:bb:f7:d1:80:6e: 26:03:60:2d:9f:8f:ba:ed:ee:f7:2c:0f:b2:22:00: 70:4b:70:1c:f1:d5:c0:25:fc:03:bb:a7:49:64:5a: 73:41:69:11:f6:94:bc:48:53:20:64:7a:55:88:18: dd:3d:59:67:e1:67:87:54:cb:d5:a6:1d:21:9b:5e: 9a:ad:ef:80:77:4c:60:e8:71:a2:05:31:d8:b7:fb: cb:6d:d5:27:5f:3e:fd:ca:b0:31:dd:2c:e4:b7:83: 26:30:85:0b:84:9c:03:26:fa:92:e6:a5:3e:57:18: 05:8f:8d:e8:58:cd:aa:de:c9:c8:a8:19:08:af:fc: 97:5e:fb:ca:29:42:18:c0:9a:16:54:ba:7c:ba:e1: b2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AF:D5:01:E4:21:31:7E:64:1A:E2:F8:7D:71:7A:2D:F8:61:52:97 X509v3 Authority Key Identifier: keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e5:2f:1c:6e:0f:6e:20:d7:65:87:6c:78:c6:6f:c3:33:9e: a5:4e:7e:24:6c:23:4e:70:ba:5c:0a:91:0b:8f:94:32:69:05: 57:3c:7d:f5:bc:2c:82:d4:50:78:27:8c:95:51:02:44:a6:a0: 76:38:bb:b9:e3:01:6d:3e:c6:98:c8:25:14:8c:d3:76:ac:48: dc:76:c6:0f:c6:d8:41:5f:87:0f:bb:84:a7:a8:5f:5b:46:96: 57:fd:4b:78:5d:49:ae:5b:60:d6:05:e1:e8:26:5f:22:fc:d9: e0:fe:9e:db:a0:a0:08:4c:dd:77:01:70:59:2d:54:38:c7:bf: 9a:dc:ed:f0:77:8e:43:74:a8:69:c1:09:56:97:45:42:e1:f5: 1f:e2:07:67:aa:79:2e:74:3a:28:c5:58:ed:41:99:1a:4e:b0: 6b:fc:8d:2f:b7:15:a1:85:98:e6:ce:09:b4:54:2f:04:0f:cb: 33:7e:12:15:7c:de:2f:6e:6e:8a:a9:7c:28:1c:b6:b9:20:6f: 68:2c:bd:64:a5:70:4f:fc:3c:84:5c:c4:5b:eb:c2:ca:83:1d: 0c:5f:09:46:1a:a4:e4:11:c5:ff:66:4c:44:21:ac:24:e2:5a: b7:58:ea:7e:8d:6b:13:b4:18:0d:d8:41:8b:9b:fb:21:d2:aa: 13:9d:b1:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3Q0QxMTAvBgNVBAUTKEMzMzcyREUxRkU5RTUzQzE4QjMwNTE2RDk2NEM0MzY3 MjJFQjNFQ0IwHhcNMjUxMjA1MDMxODI4WhcNMjUxMjEyMDMxODI4WjAYMRYwFAYD VQQDEw02OTMyNGYwNC1kNjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuw7mUdkO7GarhjCtnRs9Rs1tlOYFXRk1bvu/STQXzr7oxul+34POBROBY/FG QLFp0tZmBYn+zLn+PEAjnX5ZWM84li+8wET6YEnBy1w8L3hMBq78MPWZo04zsj6O iphzuLev8Po/6aL0byqlmh7S7VYPu/fRgG4mA2Atn4+67e73LA+yIgBwS3Ac8dXA JfwDu6dJZFpzQWkR9pS8SFMgZHpViBjdPVln4WeHVMvVph0hm16are+Ad0xg6HGi BTHYt/vLbdUnXz79yrAx3Szkt4MmMIULhJwDJvqS5qU+VxgFj43oWM2q3snIqBkI r/yXXvvKKUIYwJoWVLp8uuGyEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGv1QHk ITF+ZBri+H1xei34YVKXMB8GA1UdIwQYMBaAFMM3LeH+nlPBizBRbZZMQ2ci6z7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzdDRC9ENjRBMUZCNDVF QTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4R0xNRkZ0bGt4RFp5THJQ c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3d6Y3Q0ZjZlVThHTE1GRnRsa3hEWnlMclBzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzdDRC9ENjRBMUZCNDVFQTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4 R0xNRkZ0bGt4RFp5THJQc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+5S8cbg9uINdlh2x4xm/DM56lTn4kbCNOcLpcCpELj5QyaQVXPH31 vCyC1FB4J4yVUQJEpqB2OLu54wFtPsaYyCUUjNN2rEjcdsYPxthBX4cPu4SnqF9b RpZX/Ut4XUmuW2DWBeHoJl8i/Nng/p7boKAITN13AXBZLVQ4x7+a3O3wd45DdKhp wQlWl0VC4fUf4gdnqnkudDooxVjtQZkaTrBr/I0vtxWhhZjmzgm0VC8ED8szfhIV fN4vbm6KqXwoHLa5IG9oLL1kpXBP/DyEXMRb68LKgx0MXwlGGqTkEcX/ZkxEIawk 4lq3WOp+jWsTtBgN2EGLm/sh0qoTnbHn -----END CERTIFICATE-----Generated at Sat Dec 6 16:12:28 2025 by rpki-client