This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json) Hash identifier: Me9LNfSbKWgNf3iNsGQMoWddwdLew12+nTMCHHlkejA= Subject key identifier: 5F:31:2C:4A:D1:6B:E1:F9:20:62:AC:F9:AD:02:C1:73:47:E6:B7:5C Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0C93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft Manifest number: 0C6F Signing time: Thu 04 Dec 2025 17:58:23 +0000 Manifest this update: Thu 04 Dec 2025 17:58:22 +0000 Manifest next update: Thu 11 Dec 2025 17:58:22 +0000 Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: mIdS/DfRdlf+gkXGoUEGUyKQ2sXuWeC83ZOO0muMZPw=) 2: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: gf3Sdo19qyXM6SMAtIZiiG8nFm/lM81I+lk8U/mxJ0A=) 3: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: m3cQPwvPfynkpVZQ6ovTIwwV/a4OxHBn+kGRuN/3tCk=) 4: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: iJYPLuFQNCCH+UvB8S/XoN2BohnkZQZo7wuZ5vZn4KI=) 5: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: OT8lFgnYcC18UV02Y4GD3JZ3PmqRrvihPECOx7skEQw=) 6: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: b4w7QgPcZzJXvh0ZqyON2NEy/TPDBAfSWtVCJWQUkJM=) 7: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: +57K4ut0qq2fKWCTFqpHNS42ff+KxP45CLdJafu2rsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3219 (0xc93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: Dec 4 17:58:22 2025 GMT Not After : Dec 11 17:58:22 2025 GMT Subject: CN=6931cbbe-fb87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:10:3f:f9:97:2f:20:19:ba:a5:9c:1d:ad: 3a:94:79:83:45:1b:ff:44:08:fb:09:9a:2d:97:b8: 98:e4:6a:ff:6e:6b:8e:dc:13:b3:5a:66:b7:c9:91: 9d:df:56:e9:cc:90:93:3b:4d:c3:33:71:5c:f1:bc: c5:29:e3:6d:e2:4c:28:92:42:24:b2:cf:d9:84:64: e0:4c:00:38:76:f3:4d:8c:90:04:8e:02:00:01:83: a1:e2:88:3c:b9:c1:db:50:80:fc:ea:64:9a:cf:02: bc:71:c1:43:14:31:e5:27:e2:17:f0:6b:f2:22:f4: 8c:dc:4a:4f:d0:4f:bc:ad:c0:91:3f:6a:fc:ea:59: 21:5a:cc:a1:ad:03:5a:e8:c5:d2:19:e0:cc:92:fb: 47:b3:4b:12:52:3b:36:51:8d:b0:01:92:6e:58:5d: 62:bc:b1:fc:90:f8:bc:11:57:90:df:96:7b:47:56: 5d:e2:8b:79:23:76:55:a7:2a:d9:16:eb:f2:9d:0a: 5c:f8:ce:68:c7:08:6e:57:1c:ed:11:44:57:ce:1c: 90:ad:33:13:65:4f:fc:d5:ca:81:15:46:45:e1:ab: 11:16:69:65:44:9f:30:94:06:c7:f5:14:51:ca:7c: dc:a3:48:2e:3f:ed:ff:86:31:41:16:98:c5:70:c1: bb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:31:2C:4A:D1:6B:E1:F9:20:62:AC:F9:AD:02:C1:73:47:E6:B7:5C X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption eb:c7:e3:42:90:86:21:80:2e:0a:07:7a:4c:6b:f0:fb:f9:48: 2a:c0:cf:d6:25:17:06:11:3d:69:b7:b5:60:c8:2a:51:c3:bc: 6e:c2:38:95:66:2c:e4:93:0a:3c:85:fe:8e:e4:6f:c1:93:d5: 46:7c:f7:5b:cb:92:ce:29:0f:4b:a5:3b:1d:49:d3:63:ef:c4: ea:c3:a9:65:df:6e:19:93:2b:ef:12:bd:06:99:26:ba:62:77: 89:37:f2:fe:30:37:4e:af:da:1d:cb:e5:a6:44:15:e3:ca:30: 79:8c:3c:92:2c:c1:37:7b:16:6f:bd:87:00:32:f5:9d:e7:9d: cd:96:1a:4a:92:0b:92:cd:bb:23:4d:e1:b8:79:77:f9:8e:e0: 28:c3:21:31:5b:8f:be:47:fd:88:c8:eb:19:2a:58:8f:f7:66: ff:e1:d2:57:ca:91:c6:79:ec:20:e1:19:0c:d8:3d:14:ed:f6: a4:6f:a4:18:d4:25:44:28:3b:86:6b:03:61:43:92:fd:e1:14: cf:bb:12:49:c8:53:c8:be:07:59:81:d5:6b:25:2c:8c:97:af: a1:94:63:6f:51:30:c8:58:ed:cf:40:e3:f3:a9:15:86:b5:ad: e1:66:86:5c:ab:44:0f:3e:14:c0:3a:b0:0a:a4:83:2d:ce:c3: c8:09:bc:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjUxMjA0MTc1ODIyWhcNMjUxMjExMTc1ODIyWjAYMRYwFAYD VQQDEw02OTMxY2JiZS1mYjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApG8QP/mXLyAZuqWcHa06lHmDRRv/RAj7CZotl7iY5Gr/bmuO3BOzWma3yZGd 31bpzJCTO03DM3Fc8bzFKeNt4kwokkIkss/ZhGTgTAA4dvNNjJAEjgIAAYOh4og8 ucHbUID86mSazwK8ccFDFDHlJ+IX8GvyIvSM3EpP0E+8rcCRP2r86lkhWsyhrQNa 6MXSGeDMkvtHs0sSUjs2UY2wAZJuWF1ivLH8kPi8EVeQ35Z7R1Zd4ot5I3ZVpyrZ FuvynQpc+M5oxwhuVxztEURXzhyQrTMTZU/81cqBFUZF4asRFmllRJ8wlAbH9RRR ynzco0guP+3/hjFBFpjFcMG7RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8xLErR a+H5IGKs+a0CwXNH5rdcMB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkZEQS82ODEyN0UyMDBGNEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJ RURmWFhsWlJwTTdEYjM3NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDrx+NCkIYhgC4KB3pMa/D7+UgqwM/WJRcGET1pt7VgyCpRw7xuwjiV Zizkkwo8hf6O5G/Bk9VGfPdby5LOKQ9LpTsdSdNj78Tqw6ll324ZkyvvEr0GmSa6 YneJN/L+MDdOr9ody+WmRBXjyjB5jDySLME3exZvvYcAMvWd553NlhpKkguSzbsj TeG4eXf5juAowyExW4++R/2IyOsZKliP92b/4dJXypHGeewg4RkM2D0U7fakb6QY 1CVEKDuGawNhQ5L94RTPuxJJyFPIvgdZgdVrJSyMl6+hlGNvUTDIWO3PQOPzqRWG ta3hZoZcq0QPPhTAOrAKpIMtzsPICbxY -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:28 2025 by rpki-client