This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json) Hash identifier: gFvpi3AXzKyuhsRV5Il5Xf+6JIT3oH/GPA+rGVhnI+g= Subject key identifier: 30:5B:6C:4C:E0:02:D2:BC:1E:CC:69:EC:1E:7F:53:FB:DE:A1:11:09 Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0BC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft Manifest number: 0B80 Signing time: Thu 04 Dec 2025 18:32:33 +0000 Manifest this update: Thu 04 Dec 2025 18:32:33 +0000 Manifest next update: Thu 11 Dec 2025 18:32:33 +0000 Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: SbJoIT+v4hy44ZzGzZxUgc31OBLRQ5LvOCx1PMtpjOI=) 2: A30B6882B3DE11F0B2D83330C4F9AE02.roa (hash: 1s0ebn+BQVw0yPfQmnoFsQomr8t/uDwXlJRNpXKjLCg=) 3: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: 2WI4sxtYmY5FbIMN92teU/BhJO18tsufNaqCJaxaAYc=) 4: 04231ECC326F11F0B0723439C4F9AE02.roa (hash: wpvZSX4Ai883Xdr1hC5KTmB0OUTHuAgLOOQUpAhUGNw=) 5: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: od3A6kHPsKQb/WA2j5c2wSIgSUJ4UzMllV3CZbEVjw8=) 6: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: 59n+gu+EUda4F6OyRblddZCM/Oz6PZd0iuMKXNtGtAQ=) 7: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: bv9UqKRpe2dK9awx88ukTzuBQtbCq2A6so4i83ApdUU=) 8: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: 7ysdJMJMSfwY+oJifcqCNWD3yAzN5pEUaePQMVaSij8=) 9: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: lGL0VdzbPRk7U+2MSj/Z4BFvq55DtucvPe+Abmi+lZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3013 (0xbc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Dec 4 18:32:33 2025 GMT Not After : Dec 11 18:32:33 2025 GMT Subject: CN=6931d3c1-8d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:69:4b:97:62:b1:c3:02:37:82:fc:8e:f1:2f: 8a:9e:e9:ce:63:93:be:e0:45:24:4f:3c:f4:d3:73: e6:da:73:d3:bc:20:54:dc:2c:77:1c:10:6c:8e:20: f7:b1:aa:eb:b6:9c:96:c9:a2:62:0e:4b:cc:dc:d8: b8:8c:e4:1a:a9:e3:9a:42:dc:8f:cd:4e:70:3e:be: a8:03:7c:c6:11:ae:b9:0a:07:fc:3e:8f:cf:87:c3: 5f:70:38:94:1e:7d:43:10:e1:50:a8:a8:ab:19:86: 3b:ff:d0:36:04:22:12:4c:f6:05:91:f4:76:7b:ce: aa:38:6e:d8:4f:8a:27:c2:7b:51:ae:ea:47:fe:97: 84:4c:4d:a5:75:b6:c0:91:6c:db:ac:a8:ff:1c:35: 13:6d:3b:1a:f6:9e:ed:84:bb:76:4e:a8:fb:3c:5d: 53:70:45:3f:59:a0:12:b1:20:2a:3d:6f:2f:44:db: 58:11:db:48:8d:ae:d4:be:5f:08:14:66:5b:1d:6b: 98:36:96:e6:db:78:47:40:ba:35:3e:48:28:a6:f0: 10:33:65:7f:53:82:3e:a3:b0:40:5d:8b:92:9d:57: d2:49:6d:b3:1f:b5:7b:15:b0:87:ae:72:89:73:00: 77:23:b2:f5:8f:ff:df:04:05:2a:57:99:d0:86:c2: 18:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5B:6C:4C:E0:02:D2:BC:1E:CC:69:EC:1E:7F:53:FB:DE:A1:11:09 X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a9:a2:d1:61:bc:4f:2f:a2:10:d4:16:f7:46:d7:4b:51:f4: 5a:ca:b7:82:7a:d0:7c:01:a8:0f:68:5d:70:50:7e:5c:7e:7f: 0c:b5:de:b6:c9:12:01:1c:01:8e:0a:15:13:2d:56:a1:09:a3: 08:00:f6:3c:12:ff:87:6f:b8:90:c9:b8:d2:75:95:2f:49:d0: 28:14:5a:7b:b3:2b:0f:51:9d:c5:6b:0f:f2:fc:4b:46:04:35: 8e:00:e4:3e:fe:c5:22:41:a6:b7:79:62:11:59:5e:13:40:3f: aa:f4:f3:42:37:85:ef:ae:9c:ae:5a:69:5b:14:b3:b9:97:e3: e8:c6:22:42:24:8f:2b:62:db:34:c6:ab:01:15:33:f7:20:7f: 1a:f6:fa:d8:92:16:e2:12:22:a0:37:45:45:63:c1:c0:07:74: 49:5e:fd:02:72:fb:6c:b0:0d:ca:67:f8:9e:4c:60:3f:72:4f: 8b:3c:48:82:f7:b7:16:3d:aa:c8:48:6b:8f:1a:b0:fa:d9:8a: fe:42:be:0d:64:f2:60:98:ca:fb:72:f5:d5:3d:3f:ce:81:a9: 6d:a8:13:d8:80:cc:77:4d:3e:94:91:17:04:71:82:47:1f:29: 54:20:3b:fe:0c:84:f9:cf:75:44:f1:e4:c1:58:a8:aa:06:1b: 4b:a6:db:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjUxMjA0MTgzMjMzWhcNMjUxMjExMTgzMjMzWjAYMRYwFAYD VQQDEw02OTMxZDNjMS04ZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mlLl2KxwwI3gvyO8S+KnunOY5O+4EUkTzz003Pm2nPTvCBU3Cx3HBBsjiD3 sarrtpyWyaJiDkvM3Ni4jOQaqeOaQtyPzU5wPr6oA3zGEa65Cgf8Po/Ph8NfcDiU Hn1DEOFQqKirGYY7/9A2BCISTPYFkfR2e86qOG7YT4onwntRrupH/peETE2ldbbA kWzbrKj/HDUTbTsa9p7thLt2Tqj7PF1TcEU/WaASsSAqPW8vRNtYEdtIja7Uvl8I FGZbHWuYNpbm23hHQLo1PkgopvAQM2V/U4I+o7BAXYuSnVfSSW2zH7V7FbCHrnKJ cwB3I7L1j//fBAUqV5nQhsIYMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBbbEzg AtK8Hsxp7B5/U/veoREJMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9BMzc0QTFCNjQ2NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5 MnlUMmlPYkMwYi1wUENZNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLqaLRYbxPL6IQ1Bb3RtdLUfRayreCetB8AagPaF1wUH5cfn8Mtd62 yRIBHAGOChUTLVahCaMIAPY8Ev+Hb7iQybjSdZUvSdAoFFp7sysPUZ3Faw/y/EtG BDWOAOQ+/sUiQaa3eWIRWV4TQD+q9PNCN4XvrpyuWmlbFLO5l+PoxiJCJI8rYts0 xqsBFTP3IH8a9vrYkhbiEiKgN0VFY8HAB3RJXv0CcvtssA3KZ/ieTGA/ck+LPEiC 97cWParISGuPGrD62Yr+Qr4NZPJgmMr7cvXVPT/OgaltqBPYgMx3TT6UkRcEcYJH HylUIDv+DIT5z3VE8eTBWKiqBhtLpts5 -----END CERTIFICATE-----Generated at Sat Dec 6 17:16:45 2025 by rpki-client