This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft File: WfIhqdcBRydJAka2joLCl2fHDTg.mft (raw, json) Hash identifier: 69YgEgLx2yolhxz+gpiaYsY8OvbIrDzUhcDIvSm+jhI= Subject key identifier: 50:EC:18:BD:D8:C1:74:F0:50:A5:AA:D1:6F:01:6A:98:38:E4:D8:AF Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 Certificate issuer: /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Certificate serial: 0325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft Manifest number: 0320 Signing time: Thu 04 Dec 2025 23:29:20 +0000 Manifest this update: Thu 04 Dec 2025 23:29:19 +0000 Manifest next update: Thu 11 Dec 2025 23:29:19 +0000 Files and hashes: 1: WfIhqdcBRydJAka2joLCl2fHDTg.crl (hash: /pRarOQoAJ6aSGVn3F/8WMnr/m3Yj0GcF4JCQn9qitk=) 2: A033FFB4F7F511ECADEAB528C4F9AE02.roa (hash: S2C+VMQaXNDpZ4wrKaK1oLzxt+RZ0aWeTadlNJ8ZR5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CE21, serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Validity Not Before: Dec 4 23:29:19 2025 GMT Not After : Dec 11 23:29:19 2025 GMT Subject: CN=6932194f-fd34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7a:f6:10:5c:00:79:4b:5e:50:d5:68:74:62: ef:e6:bf:82:e8:d1:1c:98:cd:f0:7b:d8:09:da:8d: 1a:d5:06:82:96:de:26:f8:de:f8:2d:5f:ff:1e:43: ea:28:5b:5b:ae:a3:27:6d:a5:38:e8:1e:66:d6:1f: 54:a1:f2:99:d9:7b:84:a4:c3:8e:e3:d9:21:26:80: 82:b8:16:ee:77:0b:3d:26:8f:f5:71:ba:6f:cc:85: ef:41:af:3f:9c:90:0f:18:4a:92:b8:98:b2:6e:8f: 37:7c:05:5b:2d:ee:ee:05:c8:bf:6c:3c:af:b9:28: 94:f0:41:99:d5:eb:96:8f:22:00:a6:7f:4f:e1:e9: fa:ef:45:72:a8:7e:c0:8c:53:c7:44:f4:22:17:f3: 11:42:d8:7b:af:d3:ca:7f:6d:ef:4e:a9:4a:c4:91: fc:1c:f5:08:b4:a1:1d:9e:9c:a8:24:84:ab:55:b7: c5:c9:25:89:2d:90:b4:fe:2d:58:ef:f7:d1:d3:c4: f4:be:30:74:a3:0a:1a:c7:b7:bf:74:c6:3f:1b:4f: 7b:5d:ef:c0:32:2d:83:d0:68:f1:82:3a:6d:81:16: eb:ea:f4:a4:a0:bf:32:60:cb:d0:84:4c:70:b3:f9: c7:e3:ce:68:41:2a:b7:f2:05:98:ec:52:36:b8:d0: 01:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EC:18:BD:D8:C1:74:F0:50:A5:AA:D1:6F:01:6A:98:38:E4:D8:AF X509v3 Authority Key Identifier: keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:45:aa:4e:0f:58:ea:45:62:af:66:44:7b:46:12:3d:62:06: 3d:f0:1e:c2:b2:85:8c:3f:ab:81:f0:ab:33:92:56:5d:40:bf: c6:63:ae:43:49:87:ef:e9:31:fd:67:d7:8a:6d:2b:29:50:a5: fb:eb:2a:8f:fc:5b:b6:c0:17:04:50:d6:85:27:2d:bc:1e:c7: 31:04:4c:f2:37:b7:6e:61:50:ce:d2:7c:dc:45:f5:a4:f4:46: 6d:0c:6d:a8:80:0b:3d:3d:51:09:99:bf:3d:2c:4a:4e:e6:f8: 3e:fd:63:10:87:ed:21:71:5b:1f:1a:26:cb:7e:66:00:2d:2f: 62:6e:3f:06:48:77:d5:7c:3a:2e:b6:15:b9:dd:47:1b:d6:a8: 40:96:03:fc:9d:5d:bb:8c:48:57:fb:32:b6:4a:32:af:7d:c9: 3b:a5:96:cc:c1:1c:a2:60:ca:11:38:35:86:21:d0:3b:aa:f2: 39:09:07:0b:5c:76:95:3b:ee:93:05:40:42:7c:33:7d:54:d1: ec:3b:87:03:99:2e:d6:e1:5a:55:25:c1:37:be:c1:73:bf:01: 73:75:09:78:ef:e8:50:8a:e2:31:b4:e8:0b:fc:b5:57:7f:41: cc:3b:40:11:05:a1:97:31:cf:b1:bb:ae:76:05:6f:91:6f:60: c0:a2:73:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFMjExMTAvBgNVBAUTKDU5RjIyMUE5RDcwMTQ3Mjc0OTAyNDZCNjhFODJDMjk3 NjdDNzBEMzgwHhcNMjUxMjA0MjMyOTE5WhcNMjUxMjExMjMyOTE5WjAYMRYwFAYD VQQDEw02OTMyMTk0Zi1mZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Hr2EFwAeUteUNVodGLv5r+C6NEcmM3we9gJ2o0a1QaClt4m+N74LV//HkPq KFtbrqMnbaU46B5m1h9UofKZ2XuEpMOO49khJoCCuBbudws9Jo/1cbpvzIXvQa8/ nJAPGEqSuJiybo83fAVbLe7uBci/bDyvuSiU8EGZ1euWjyIApn9P4en670VyqH7A jFPHRPQiF/MRQth7r9PKf23vTqlKxJH8HPUItKEdnpyoJISrVbfFySWJLZC0/i1Y 7/fR08T0vjB0owoax7e/dMY/G097Xe/AMi2D0GjxgjptgRbr6vSkoL8yYMvQhExw s/nH485oQSq38gWY7FI2uNABVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDsGL3Y wXTwUKWq0W8Bapg45NivMB8GA1UdIwQYMBaAFFnyIanXAUcnSQJGto6Cwpdnxw04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0UyMS9DRTQ4RTdDOEYx OUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5ZEpBa2Eyam9MQ2wyZkhE VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dmSWhxZGNCUnlkSkFrYTJqb0xDbDJmSERUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0UyMS9DRTQ4RTdDOEYxOUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5 ZEpBa2Eyam9MQ2wyZkhEVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYRapOD1jqRWKvZkR7RhI9YgY98B7CsoWMP6uB8KszklZdQL/GY65D SYfv6TH9Z9eKbSspUKX76yqP/Fu2wBcEUNaFJy28HscxBEzyN7duYVDO0nzcRfWk 9EZtDG2ogAs9PVEJmb89LEpO5vg+/WMQh+0hcVsfGibLfmYALS9ibj8GSHfVfDou thW53Ucb1qhAlgP8nV27jEhX+zK2SjKvfck7pZbMwRyiYMoRODWGIdA7qvI5CQcL XHaVO+6TBUBCfDN9VNHsO4cDmS7W4VpVJcE3vsFzvwFzdQl47+hQiuIxtOgL/LVX f0HMO0ARBaGXMc+xu652BW+Rb2DAonP2 -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:38 2025 by rpki-client