This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft File: WR4siXPGPwtQ7voTRGvLFexS5R8.mft (raw, json) Hash identifier: w6OpjAc9/CtosxsvTFnylxfdCkG/IdMgGfhIgT322T8= Subject key identifier: 8C:06:AD:11:FA:BE:1A:4D:E9:69:7A:8A:8C:09:FD:5B:0A:49:6C:97 Authority key identifier: 59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F Certificate issuer: /CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft Manifest number: 01D2 Signing time: Fri 05 Dec 2025 01:14:11 +0000 Manifest this update: Fri 05 Dec 2025 01:14:10 +0000 Manifest next update: Fri 12 Dec 2025 01:14:10 +0000 Files and hashes: 1: WR4siXPGPwtQ7voTRGvLFexS5R8.crl (hash: rUJsiy6oiEuSZ13eVw7OQIwxWXtIMYE/KevXJxapcD0=) 2: 7893F3DC0B8511F086B2C121C4F9AE02.roa (hash: muoRT5YVa+lZ9dmEo5amL/VfGYBrEqrfaPqq9DzwYGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159E90, serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F Validity Not Before: Dec 5 01:14:10 2025 GMT Not After : Dec 12 01:14:10 2025 GMT Subject: CN=693231e3-0b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:41:a5:e3:7c:b8:f5:e3:72:1f:87:23:4a:1a: 31:c4:af:1a:9b:ae:23:a9:00:d1:ad:d6:57:c0:0e: 68:73:0e:f3:ab:43:18:42:92:89:c3:87:55:ac:64: a0:d0:71:6a:b2:e4:4b:88:1b:7b:af:f1:be:0e:c4: 9d:3c:2f:df:f1:60:77:89:2d:50:d5:21:b2:c2:e8: 70:8b:e9:fd:94:94:4b:d5:53:92:29:3f:bf:65:95: d4:f2:4a:ed:b2:63:3e:12:ef:ab:c4:a9:4f:46:e2: 51:01:12:da:c2:cb:7a:a4:97:81:9b:c5:c4:41:18: 67:fd:89:09:21:3e:1f:73:89:78:39:cb:ab:d6:51: 95:db:75:e7:29:87:30:b8:b4:c0:b8:d6:56:b1:84: d9:32:71:28:0a:e2:35:b0:47:14:6a:ba:00:cb:08: 66:15:f1:6d:81:c0:e5:03:41:14:33:3b:5e:52:f9: b8:3d:04:aa:a8:a4:8e:be:03:d4:fa:65:ce:35:06: 51:7a:ec:ab:c6:30:5c:52:a3:38:23:de:de:57:be: 36:06:86:1c:af:ea:d1:7b:67:d5:b5:f6:6a:38:e3: aa:90:4e:2e:81:0a:7b:f1:c3:93:c2:97:4a:a6:a8: 7b:13:0f:3f:62:a4:cb:da:45:02:f4:66:98:cb:df: 6e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:06:AD:11:FA:BE:1A:4D:E9:69:7A:8A:8C:09:FD:5B:0A:49:6C:97 X509v3 Authority Key Identifier: keyid:59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:a7:e3:c3:f2:b7:f1:c4:01:34:b3:03:b5:0d:88:e7:32:11: cb:32:10:be:91:38:ad:df:4b:70:72:b7:70:33:6e:41:b3:8a: 19:d3:00:89:7a:ad:10:93:ce:22:2c:98:45:ec:c6:2b:91:1d: 10:71:60:26:e3:4d:c3:d2:79:48:c6:3d:9c:a2:d5:38:bb:cf: 79:06:28:36:ff:df:60:39:87:a2:66:ba:e0:20:96:9e:3d:11: b6:fe:e6:2b:4c:97:4f:88:52:17:2b:a4:45:cf:05:d3:86:17: 57:f3:0c:28:69:94:16:c8:59:83:1f:c7:07:39:6f:39:68:92: e0:56:37:9d:78:52:8a:09:29:c7:a6:3c:b6:c0:21:c4:15:cf: 6d:3a:dd:13:12:04:51:2f:7b:4f:8b:09:38:91:ec:69:09:f4: a1:93:51:42:d0:45:53:8b:a2:06:7c:db:a0:b0:aa:cc:31:79: af:af:d3:2f:6d:26:3d:26:79:8d:60:b6:e8:8d:71:21:9f:62: 4e:7d:2b:c0:9f:f1:67:18:09:d5:d2:3c:4f:0e:05:ac:59:8c: 19:6a:2a:b3:24:c2:b0:6b:4b:b2:d0:f9:5f:fe:0e:df:ac:0e: 84:98:b1:50:61:bd:bb:00:92:c7:5e:41:68:b5:7b:65:ef:1f: 4a:d0:2f:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFOTAxMTAvBgNVBAUTKDU5MUUyQzg5NzNDNjNGMEI1MEVFRkExMzQ0NkJDQjE1 RUM1MkU1MUYwHhcNMjUxMjA1MDExNDEwWhcNMjUxMjEyMDExNDEwWjAYMRYwFAYD VQQDEw02OTMyMzFlMy0wYjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0Gl43y49eNyH4cjShoxxK8am64jqQDRrdZXwA5ocw7zq0MYQpKJw4dVrGSg 0HFqsuRLiBt7r/G+DsSdPC/f8WB3iS1Q1SGywuhwi+n9lJRL1VOSKT+/ZZXU8krt smM+Eu+rxKlPRuJRARLawst6pJeBm8XEQRhn/YkJIT4fc4l4Ocur1lGV23XnKYcw uLTAuNZWsYTZMnEoCuI1sEcUaroAywhmFfFtgcDlA0EUMzteUvm4PQSqqKSOvgPU +mXONQZReuyrxjBcUqM4I97eV742BoYcr+rRe2fVtfZqOOOqkE4ugQp78cOTwpdK pqh7Ew8/YqTL2kUC9GaYy99uwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwGrRH6 vhpN6Wl6iowJ/VsKSWyXMB8GA1UdIwQYMBaAFFkeLIlzxj8LUO76E0RryxXsUuUf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUU5MC9BNTcyQjY3QzFG MzIxMUVFQjM2NERENTNDNEY5QUUwMi9XUjRzaVhQR1B3dFE3dm9UUkd2TEZleFM1 UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dSNHNpWFBHUHd0UTd2b1RSR3ZMRmV4UzVSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUU5MC9BNTcyQjY3QzFGMzIxMUVFQjM2NERENTNDNEY5QUUwMi9XUjRzaVhQR1B3 dFE3dm9UUkd2TEZleFM1UjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByp+PD8rfxxAE0swO1DYjnMhHLMhC+kTit30twcrdwM25Bs4oZ0wCJ eq0Qk84iLJhF7MYrkR0QcWAm403D0nlIxj2cotU4u895Big2/99gOYeiZrrgIJae PRG2/uYrTJdPiFIXK6RFzwXThhdX8wwoaZQWyFmDH8cHOW85aJLgVjedeFKKCSnH pjy2wCHEFc9tOt0TEgRRL3tPiwk4kexpCfShk1FC0EVTi6IGfNugsKrMMXmvr9Mv bSY9JnmNYLbojXEhn2JOfSvAn/FnGAnV0jxPDgWsWYwZaiqzJMKwa0uy0Plf/g7f rA6EmLFQYb27AJLHXkFotXtl7x9K0C+0 -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:36 2025 by rpki-client