This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft File: wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json) Hash identifier: IsnnhFF8WxDGarTGYEUhlpxQZYeKlfOJFsq20sItMnQ= Subject key identifier: BD:99:CB:58:E6:45:0E:76:1D:25:DD:8D:1F:4B:B3:2D:AD:5D:67:12 Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 Certificate issuer: /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft Manifest number: AE Signing time: Fri 05 Dec 2025 04:05:55 +0000 Manifest this update: Fri 05 Dec 2025 04:05:54 +0000 Manifest next update: Fri 12 Dec 2025 04:05:54 +0000 Files and hashes: 1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: OfuDRPBJlL3WbasAT7iia5r3x4YopIg3jw3bV1ab1qo=) 2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: sznnb83JGGX6kxaOiYhmv1K3OAoUlfeqG+/vLr2w58w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Validity Not Before: Dec 5 04:05:54 2025 GMT Not After : Dec 12 04:05:54 2025 GMT Subject: CN=69325a22-a968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:b6:31:27:43:79:65:9e:14:7b:76:2d:79: 1a:77:53:d6:bb:57:d6:24:06:21:6d:ea:08:38:d5: d2:ff:61:35:aa:e4:d5:0b:63:fe:28:06:74:6b:be: d7:ed:83:75:3b:ef:46:0c:91:7c:42:14:bd:42:2d: 2e:25:bc:75:13:00:a7:42:cd:76:43:a6:9e:3c:28: a7:0e:2f:32:7e:3e:89:0c:27:fc:ca:09:b4:ec:5a: fb:ab:0b:30:cf:61:80:50:2b:ec:7d:a7:fa:c7:c8: cb:10:d7:60:a1:43:b5:cf:a8:e8:3c:6c:82:e6:c0: af:2a:93:fe:3b:8a:5e:d2:82:f9:ac:42:18:dd:29: dc:bc:f0:d6:4e:6c:33:9d:9a:8e:14:77:8e:84:b1: 05:00:a2:6a:ec:d5:c7:af:a0:8e:a0:24:d4:a2:1f: d5:25:d5:3f:8a:c0:3d:5f:66:d9:e0:e2:b2:3a:5e: 26:0a:d2:d4:7a:8d:fc:7b:66:eb:16:cf:cd:92:bd: 06:84:a7:dc:89:55:d3:7a:8d:9d:2d:37:83:86:82: cc:00:04:c4:61:44:19:87:5a:91:e7:35:3d:b2:e5: 70:43:f9:16:be:8c:8a:ef:b5:c6:6d:c8:39:a6:84: eb:fb:e2:80:e0:d8:6b:0b:3a:5f:f7:68:8b:6d:10: 81:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:99:CB:58:E6:45:0E:76:1D:25:DD:8D:1F:4B:B3:2D:AD:5D:67:12 X509v3 Authority Key Identifier: keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:93:ca:9c:67:4d:7f:0b:ad:6b:b1:1d:02:33:d8:00:7f:b7: 92:66:b0:58:71:32:a5:0d:7f:2f:3f:eb:00:ee:b0:af:58:a6: d5:32:58:62:63:d3:b5:7a:13:7f:24:77:92:b0:73:1f:06:89: 61:74:70:cf:4e:90:c2:4d:25:51:8a:27:1f:a6:36:0f:74:93: 65:25:dd:46:ea:9a:3d:82:31:1b:2d:28:a8:ad:2a:38:58:4c: 8d:85:8e:84:db:dc:dd:b2:0b:81:c9:f2:12:b7:33:86:d8:77: 69:d0:85:a9:d9:f1:3b:b5:56:43:39:7b:c8:52:67:9e:9b:d1: 97:da:af:3d:cb:37:f4:34:8a:c2:3e:c5:f8:9a:7d:14:9b:41: 71:a3:02:77:87:cd:a3:21:a9:38:2c:1b:f1:a7:35:ed:a5:02: 38:c6:a1:9e:da:20:4c:13:3c:0d:da:db:dd:58:5c:1a:a9:99: c3:70:31:99:3d:1f:45:3d:81:97:1a:ef:aa:66:bd:94:36:56: 66:f6:dd:78:fd:cd:9a:2d:6a:3f:5e:6c:60:98:4a:94:d7:a4: 1a:bf:50:4f:33:cd:80:cd:73:7c:e3:95:13:b2:87:2a:67:4e: 50:0f:cd:ec:e7:2e:62:3c:f4:e3:50:57:0b:c2:fd:34:c2:66: 3a:10:17:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyODExMTAvBgNVBAUTKEMxQjc2NkRBMjlFRDI5M0RERkE1Q0NFQjBBRTQyOTc0 NTQ0NEQ2MTUwHhcNMjUxMjA1MDQwNTU0WhcNMjUxMjEyMDQwNTU0WjAYMRYwFAYD VQQDEw02OTMyNWEyMi1hOTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVy2MSdDeWWeFHt2LXkad1PWu1fWJAYhbeoIONXS/2E1quTVC2P+KAZ0a77X 7YN1O+9GDJF8QhS9Qi0uJbx1EwCnQs12Q6aePCinDi8yfj6JDCf8ygm07Fr7qwsw z2GAUCvsfaf6x8jLENdgoUO1z6joPGyC5sCvKpP+O4pe0oL5rEIY3SncvPDWTmwz nZqOFHeOhLEFAKJq7NXHr6COoCTUoh/VJdU/isA9X2bZ4OKyOl4mCtLUeo38e2br Fs/Nkr0GhKfciVXTeo2dLTeDhoLMAATEYUQZh1qR5zU9suVwQ/kWvoyK77XGbcg5 poTr++KA4NhrCzpf92iLbRCBNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2Zy1jm RQ52HSXdjR9Lsy2tXWcSMB8GA1UdIwQYMBaAFMG3Ztop7Sk936XM6wrkKXRURNYV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjI4MS8xQUY3REY2QUM2 NkUxMUVGQTc4N0Y4NjVDNEY5QUUwMi93YmRtMmludEtUM2ZwY3pyQ3VRcGRGUkUx aFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diZG0yaW50S1QzZnBjenJDdVFwZEZSRTFoVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjI4MS8xQUY3REY2QUM2NkUxMUVGQTc4N0Y4NjVDNEY5QUUwMi93YmRtMmludEtU M2ZwY3pyQ3VRcGRGUkUxaFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkk8qcZ01/C61rsR0CM9gAf7eSZrBYcTKlDX8vP+sA7rCvWKbVMlhi Y9O1ehN/JHeSsHMfBolhdHDPTpDCTSVRiicfpjYPdJNlJd1G6po9gjEbLSiorSo4 WEyNhY6E29zdsguByfIStzOG2Hdp0IWp2fE7tVZDOXvIUmeem9GX2q89yzf0NIrC PsX4mn0Um0FxowJ3h82jIak4LBvxpzXtpQI4xqGe2iBMEzwN2tvdWFwaqZnDcDGZ PR9FPYGXGu+qZr2UNlZm9t14/c2aLWo/XmxgmEqU16Qav1BPM82AzXN845UTsocq Z05QD83s5y5iPPTjUFcLwv00wmY6EBdt -----END CERTIFICATE-----Generated at Sat Dec 6 13:29:26 2025 by rpki-client