This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft File: wA8Frg-ptoCpG1bw0yHFGIwecSw.mft (raw, json) Hash identifier: S+yAIkv3CKL6LF9HSh0SweeGRGyPYDdHSseW4wKfNf4= Subject key identifier: F4:BE:8F:40:BA:13:1A:6D:9B:EF:64:3D:9F:72:70:07:AC:E9:CA:1E Authority key identifier: C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C Certificate issuer: /CN=A914F937/serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft Manifest number: 0198 Signing time: Fri 05 Dec 2025 01:35:37 +0000 Manifest this update: Fri 05 Dec 2025 01:35:36 +0000 Manifest next update: Fri 12 Dec 2025 01:35:36 +0000 Files and hashes: 1: wA8Frg-ptoCpG1bw0yHFGIwecSw.crl (hash: IwRktUcznOoIRURYRL2wlOAG/2tZlhhwR4NY3P+iXM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937, serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C Validity Not Before: Dec 5 01:35:36 2025 GMT Not After : Dec 12 01:35:36 2025 GMT Subject: CN=693236e8-a112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:59:f0:84:a9:a8:33:15:e6:32:b0:07:11:7a: 1e:e3:bf:c0:51:c2:c3:3a:28:5c:54:63:e1:86:5e: 9e:30:3d:29:37:a4:a6:9d:f6:4a:6e:d1:a9:bb:ab: 1a:f5:bc:3d:ee:86:f8:02:f7:6f:d2:3d:91:6a:1b: a9:9c:fc:f4:40:5d:0b:9b:e0:23:ca:b0:4c:6b:78: 3c:9c:12:93:5e:7e:a0:4d:dc:8e:cd:65:b6:72:80: b3:dc:a4:80:96:29:74:b0:d0:91:e5:1a:7f:a3:90: 70:a3:02:91:a6:0b:1b:f1:0b:ce:0d:86:ad:6c:96: 82:7f:04:7e:b0:38:0c:fb:7c:2c:06:92:76:0f:17: 36:3a:3c:c7:c8:88:1d:d8:a9:0d:96:7d:70:27:61: a4:8c:58:b1:dc:a9:f3:64:d5:23:2b:8c:d2:bb:68: 9a:d2:ef:9f:72:87:f0:20:ef:a3:c2:93:14:bb:a5: cb:05:c0:39:e7:d4:67:4e:d1:e9:91:fd:2f:8d:f7: 77:9a:b1:84:61:a4:62:34:c1:6a:79:4b:5c:47:60: f6:77:99:33:b4:2a:32:4f:c7:25:2f:92:38:1f:3b: 3b:e2:67:13:26:de:22:71:58:d3:d2:35:3f:f9:8a: 1e:c8:7f:97:c4:29:17:e3:4f:e0:7b:73:2d:24:ec: e2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BE:8F:40:BA:13:1A:6D:9B:EF:64:3D:9F:72:70:07:AC:E9:CA:1E X509v3 Authority Key Identifier: keyid:C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:41:54:74:c2:0b:99:e0:7c:cc:12:e4:6d:00:83:f9:f0:fd: 60:33:e1:a0:ac:18:5f:ab:47:b2:70:24:4c:9a:6c:ba:fb:2d: f3:ea:96:03:c6:16:2e:e0:40:21:71:6e:27:f5:80:52:b5:cd: ce:a3:75:ac:2c:6c:c7:02:48:0f:23:29:ac:e1:4b:3d:90:ea: 3f:47:00:fa:e9:86:77:25:77:ed:aa:a7:9f:76:f5:1f:bb:9f: 12:20:ad:2a:0a:6e:90:1b:fc:fd:94:e8:5e:8a:90:fe:71:ad: 2b:d7:dd:de:87:d1:96:cf:c4:c1:fc:bd:c1:bc:8b:fa:95:50: a2:8e:e8:53:d2:54:cd:02:1f:00:0e:1e:20:1a:97:26:d3:3b: 2d:ea:d7:93:dd:b2:44:c9:1a:55:dc:ff:52:0e:8e:66:11:57: 03:84:42:b0:07:49:4e:4c:a8:a7:e4:5e:6c:40:84:87:45:fb: 9f:d4:0d:83:cc:f7:22:1c:8d:ed:2f:e0:d7:6d:08:5f:73:27: 15:34:89:8d:3c:01:6a:c6:27:4a:e5:a1:c0:df:42:aa:bc:b5: 35:68:b4:fb:69:76:c6:53:40:a0:70:7a:a8:80:03:99:30:67: dc:81:43:ef:9a:14:fd:aa:9a:d5:e4:77:2d:91:4b:c3:63:8e: b4:6f:58:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY5MzcxMTAvBgNVBAUTKEMwMEYwNUFFMEZBOUI2ODBBOTFCNTZGMEQzMjFDNTE4 OEMxRTcxMkMwHhcNMjUxMjA1MDEzNTM2WhcNMjUxMjEyMDEzNTM2WjAYMRYwFAYD VQQDEw02OTMyMzZlOC1hMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21nwhKmoMxXmMrAHEXoe47/AUcLDOihcVGPhhl6eMD0pN6SmnfZKbtGpu6sa 9bw97ob4Avdv0j2RahupnPz0QF0Lm+AjyrBMa3g8nBKTXn6gTdyOzWW2coCz3KSA lil0sNCR5Rp/o5BwowKRpgsb8QvODYatbJaCfwR+sDgM+3wsBpJ2Dxc2OjzHyIgd 2KkNln1wJ2GkjFix3KnzZNUjK4zSu2ia0u+fcofwIO+jwpMUu6XLBcA559RnTtHp kf0vjfd3mrGEYaRiNMFqeUtcR2D2d5kztCoyT8clL5I4Hzs74mcTJt4icVjT0jU/ +YoeyH+XxCkX40/ge3MtJOziDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPS+j0C6 Exptm+9kPZ9ycAes6coeMB8GA1UdIwQYMBaAFMAPBa4PqbaAqRtW8NMhxRiMHnEs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yRjJCM0YyMDVC MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRvQ3BHMWJ3MHlIRkdJd2Vj U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dBOEZyZy1wdG9DcEcxYncweUhGR0l3ZWNTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjkzNy8yRjJCM0YyMDVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRv Q3BHMWJ3MHlIRkdJd2VjU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBQVR0wguZ4HzMEuRtAIP58P1gM+GgrBhfq0eycCRMmmy6+y3z6pYD xhYu4EAhcW4n9YBStc3Oo3WsLGzHAkgPIyms4Us9kOo/RwD66YZ3JXftqqefdvUf u58SIK0qCm6QG/z9lOheipD+ca0r193eh9GWz8TB/L3BvIv6lVCijuhT0lTNAh8A Dh4gGpcm0zst6teT3bJEyRpV3P9SDo5mEVcDhEKwB0lOTKin5F5sQISHRfuf1A2D zPciHI3tL+DXbQhfcycVNImNPAFqxidK5aHA30KqvLU1aLT7aXbGU0CgcHqogAOZ MGfcgUPvmhT9qprV5HctkUvDY460b1g0 -----END CERTIFICATE-----Generated at Sat Dec 6 15:36:09 2025 by rpki-client