This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft File: wHDviCxuSAhkJKm18UZuG3dKRJo.mft (raw, json) Hash identifier: yu755nc+PtVy5YE2OUwJfKgUH2rCeWFTt0M7ofY2YuY= Subject key identifier: CC:BF:C6:44:9B:FD:CF:FE:1C:F4:84:45:73:F6:9A:26:8D:85:97:F1 Authority key identifier: C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A Certificate issuer: /CN=A914EB9A/serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft Manifest number: 0117 Signing time: Fri 05 Dec 2025 02:53:13 +0000 Manifest this update: Fri 05 Dec 2025 02:53:12 +0000 Manifest next update: Fri 12 Dec 2025 02:53:12 +0000 Files and hashes: 1: wHDviCxuSAhkJKm18UZuG3dKRJo.crl (hash: px/Lvdn9NJ6IHiALI4ocHmFkR1dfxDc7PMxCQlEhOOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB9A, serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Validity Not Before: Dec 5 02:53:12 2025 GMT Not After : Dec 12 02:53:12 2025 GMT Subject: CN=69324919-68c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:99:7b:7c:b4:e8:9c:ff:1a:2f:50:09:97:0b: e1:5c:c4:c2:53:b7:a3:8d:bd:26:93:0a:a1:8a:aa: 04:48:4b:cb:64:f0:bf:72:12:0f:52:28:69:00:db: b9:ab:26:86:63:6c:34:5a:dc:50:9f:a0:4b:2c:5b: 80:c2:23:44:45:4a:db:51:03:66:bd:1f:83:74:02: 07:1c:18:8c:ad:d4:21:f6:4f:d8:2d:76:cc:fd:c1: 2c:a9:d4:bc:df:69:6d:16:8d:0c:d0:62:4d:63:92: 13:0d:cb:44:25:f7:f7:98:03:ee:31:6c:b5:23:60: 70:c1:51:7a:c4:06:2c:25:57:47:b3:13:b4:9e:39: 32:3d:8a:ec:46:e5:c5:a7:30:30:3e:9d:fc:48:5a: 17:23:f5:5f:99:ba:6e:09:81:e5:b5:f9:3b:a1:49: 8a:68:02:83:4f:f7:b6:6c:49:f4:9a:3e:25:66:1d: 96:d7:d4:0b:b2:64:e9:a2:bb:2c:c1:3f:23:d3:b4: 32:6f:78:ff:47:e3:d2:cf:11:90:87:4d:9b:9b:96: 51:ad:01:44:76:35:26:b1:8f:d8:fd:4f:82:97:3a: 77:be:1c:ed:44:24:10:22:1d:77:49:ba:66:fb:c1: ac:cc:dd:e4:53:83:72:22:80:1f:41:2a:1c:95:99: da:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BF:C6:44:9B:FD:CF:FE:1C:F4:84:45:73:F6:9A:26:8D:85:97:F1 X509v3 Authority Key Identifier: keyid:C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:2d:16:36:19:27:81:e3:76:35:8f:17:7b:8b:4c:a8:26:62: 1f:9f:e9:17:eb:f9:e8:7b:a1:31:50:1f:4e:bb:db:9c:9f:a7: 46:3a:1a:9a:60:68:02:02:f9:0d:f4:b1:3f:21:84:34:1c:f7: 87:e4:dc:ab:e2:42:1c:bf:98:8c:ff:3c:b8:1d:36:ed:db:64: 63:a4:2f:e6:d9:ee:31:5d:45:9f:37:c2:d0:db:9f:4b:f9:1a: 50:bc:45:c2:f9:a6:ca:e4:3e:5e:9f:55:ef:a9:44:50:67:dc: 47:65:8a:88:ac:08:37:69:26:f6:64:3e:1e:90:3a:62:f5:77: 1b:a1:73:60:d0:75:6f:28:93:2c:25:dd:e6:9d:ad:45:71:f6: 0d:c3:d7:a7:4c:d8:92:7d:15:d5:fd:57:eb:59:3d:6a:df:c1: 58:22:20:d8:c6:5b:d2:a1:b3:fb:d9:54:94:56:18:23:52:14: d9:e5:bd:ac:77:76:8e:fb:e6:32:a0:83:e2:8e:a0:3d:1e:07: 76:99:b7:83:63:b5:a0:49:16:1f:17:8e:bc:7f:20:87:1e:d6: d6:62:55:9b:6e:b7:94:0d:0e:25:b4:85:a4:19:db:fb:63:ad: d7:39:5a:6b:c2:24:45:9f:6b:db:b8:0b:3f:80:b6:d2:9d:e2: 84:c1:40:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCOUExMTAvBgNVBAUTKEMwNzBFRjg4MkM2RTQ4MDg2NDI0QTlCNUYxNDY2RTFC Nzc0QTQ0OUEwHhcNMjUxMjA1MDI1MzEyWhcNMjUxMjEyMDI1MzEyWjAYMRYwFAYD VQQDEw02OTMyNDkxOS02OGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Zl7fLTonP8aL1AJlwvhXMTCU7ejjb0mkwqhiqoESEvLZPC/chIPUihpANu5 qyaGY2w0WtxQn6BLLFuAwiNERUrbUQNmvR+DdAIHHBiMrdQh9k/YLXbM/cEsqdS8 32ltFo0M0GJNY5ITDctEJff3mAPuMWy1I2BwwVF6xAYsJVdHsxO0njkyPYrsRuXF pzAwPp38SFoXI/VfmbpuCYHltfk7oUmKaAKDT/e2bEn0mj4lZh2W19QLsmTporss wT8j07Qyb3j/R+PSzxGQh02bm5ZRrQFEdjUmsY/Y/U+Clzp3vhztRCQQIh13Sbpm +8GszN3kU4NyIoAfQSoclZna/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMy/xkSb /c/+HPSERXP2miaNhZfxMB8GA1UdIwQYMBaAFMBw74gsbkgIZCSptfFGbht3SkSa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI5QS9EQTY5MDdBMDIz QzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNBaGtKS20xOFVadUczZEtS Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dIRHZpQ3h1U0Foa0pLbTE4VVp1RzNkS1JKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI5QS9EQTY5MDdBMDIzQzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNB aGtKS20xOFVadUczZEtSSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACLRY2GSeB43Y1jxd7i0yoJmIfn+kX6/noe6ExUB9Ou9ucn6dGOhqa YGgCAvkN9LE/IYQ0HPeH5Nyr4kIcv5iM/zy4HTbt22RjpC/m2e4xXUWfN8LQ259L +RpQvEXC+abK5D5en1XvqURQZ9xHZYqIrAg3aSb2ZD4ekDpi9XcboXNg0HVvKJMs Jd3mna1FcfYNw9enTNiSfRXV/VfrWT1q38FYIiDYxlvSobP72VSUVhgjUhTZ5b2s d3aO++YyoIPijqA9Hgd2mbeDY7WgSRYfF468fyCHHtbWYlWbbreUDQ4ltIWkGdv7 Y63XOVprwiRFn2vbuAs/gLbSneKEwUCb -----END CERTIFICATE-----Generated at Sun Dec 7 01:59:12 2025 by rpki-client