This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft File: WM2A__9oRR1A_ALHDduR-tjsMT0.mft (raw, json) Hash identifier: LylL3WovF6HAf7cF0d1VDMmOmTuMqbx/8kJRFy9dDE4= Subject key identifier: E9:A0:89:54:C2:D4:D4:39:D9:9D:57:0E:49:71:C4:39:9A:27:DA:59 Authority key identifier: 58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D Certificate issuer: /CN=A916D17C/serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D Certificate serial: 04E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft Manifest number: 04E0 Signing time: Sat 06 Dec 2025 22:30:06 +0000 Manifest this update: Sat 06 Dec 2025 22:30:06 +0000 Manifest next update: Sat 13 Dec 2025 22:30:06 +0000 Files and hashes: 1: WM2A__9oRR1A_ALHDduR-tjsMT0.crl (hash: hpMoY42awpHS9++Nl5CDAniRjPVBJBUtd5haGniQd6c=) 2: 980C961041CB11EC9262BD80C4F9AE02.roa (hash: flGZY0OZ/isSxgXY6JSmW0PQxMoPLoOfi+JFDAY+z3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1253 (0x4e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D17C, serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D Validity Not Before: Dec 6 22:30:06 2025 GMT Not After : Dec 13 22:30:06 2025 GMT Subject: CN=6934ae6e-201c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f7:e8:14:8a:07:7b:6a:15:2a:a8:b6:e9:45: 96:76:2b:6c:e4:c0:44:42:de:58:9d:ce:ef:a3:e0: d1:79:d6:35:df:85:f4:ad:45:c3:f3:3e:72:6a:5f: 3b:e0:e1:f8:3a:8e:58:65:e4:45:df:7d:07:ae:d7: 48:d3:59:6f:c2:34:fc:55:83:01:02:3c:b4:4c:29: 90:72:3d:90:e3:2b:ec:a8:8a:b9:00:19:f5:7e:a6: 78:90:49:ac:bc:55:23:6a:00:8f:dc:8c:f0:10:7a: 3d:0d:77:c1:0c:d2:26:b6:98:12:4b:47:f1:e8:32: f8:10:2d:22:de:8b:0f:ef:82:45:28:ba:ba:0a:7d: f5:a3:ef:83:d6:b7:d8:7b:44:2c:78:a3:6f:69:7b: 59:aa:65:df:4b:0b:7a:8d:83:e7:c6:a9:6c:e9:33: dc:60:5e:84:4e:b5:44:f5:07:59:da:cc:2c:fa:e8: c9:ae:a3:25:07:51:2a:e8:c3:4e:5a:1d:fe:52:a1: eb:90:36:c2:f9:d1:a7:4a:45:c4:0a:9e:55:53:ac: 30:68:c5:ec:8a:5b:00:73:af:70:1c:41:7b:17:d1: a5:6d:af:e9:02:72:a9:23:62:b0:ae:03:ac:c7:aa: 2f:21:5f:dd:8a:a3:1b:2d:e3:15:16:76:e3:2a:d2: d2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A0:89:54:C2:D4:D4:39:D9:9D:57:0E:49:71:C4:39:9A:27:DA:59 X509v3 Authority Key Identifier: keyid:58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:25:68:f1:d5:90:15:74:65:f4:82:40:cd:28:32:a0:3b:d4: 17:cd:2a:0a:df:f9:09:5f:bc:2f:83:42:72:e3:67:e6:84:96: 21:62:2c:59:b9:77:af:de:47:f2:2e:6e:db:40:4d:a1:5d:44: 61:fa:8f:d6:f3:10:9f:51:01:51:0a:95:9e:21:01:89:1c:ec: cb:02:6d:42:e8:c0:ca:01:b6:bd:6b:9e:61:ec:9a:75:16:6e: e7:01:a8:03:c0:dc:76:2f:b5:11:b4:ba:b6:78:0c:0f:bb:d6: 64:69:b8:0f:dc:80:10:05:55:0b:b5:b3:1b:c7:1a:9d:9e:f9: 00:06:a4:c1:88:9c:5e:dc:ea:84:12:c3:c4:04:32:e2:b7:46: 7f:5f:89:3b:80:6c:a2:3f:e9:08:47:09:45:58:f3:6c:9a:cf: b9:71:62:d2:bb:63:0e:fb:71:72:2f:ea:c5:b9:4f:f6:04:74: ac:c3:14:30:2b:e2:b6:d0:6a:74:64:e1:07:ca:cd:4d:e9:0c: b8:42:65:70:7c:11:52:55:72:32:f0:09:8f:05:67:24:6d:e5: 8a:f5:8d:79:1b:d8:c0:85:51:81:67:71:47:32:18:93:97:f3: f7:d4:11:ef:77:fc:87:27:c6:cc:2e:50:31:3f:02:27:41:d8: 52:a5:7a:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxN0MxMTAvBgNVBAUTKDU4Q0Q4MEZGRkY2ODQ1MUQ0MEZDMDJDNzBEREI5MUZB RDhFQzMxM0QwHhcNMjUxMjA2MjIzMDA2WhcNMjUxMjEzMjIzMDA2WjAYMRYwFAYD VQQDEw02OTM0YWU2ZS0yMDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuffoFIoHe2oVKqi26UWWdits5MBEQt5Ync7vo+DRedY134X0rUXD8z5yal87 4OH4Oo5YZeRF330HrtdI01lvwjT8VYMBAjy0TCmQcj2Q4yvsqIq5ABn1fqZ4kEms vFUjagCP3IzwEHo9DXfBDNImtpgSS0fx6DL4EC0i3osP74JFKLq6Cn31o++D1rfY e0QseKNvaXtZqmXfSwt6jYPnxqls6TPcYF6ETrVE9QdZ2sws+ujJrqMlB1Eq6MNO Wh3+UqHrkDbC+dGnSkXECp5VU6wwaMXsilsAc69wHEF7F9Glba/pAnKpI2KwrgOs x6ovIV/diqMbLeMVFnbjKtLSRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmgiVTC 1NQ52Z1XDklxxDmaJ9pZMB8GA1UdIwQYMBaAFFjNgP//aEUdQPwCxw3bkfrY7DE9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDE3Qy8xODM5NzgwODQx QzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JSMUFfQUxIRGR1Ui10anNN VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dNMkFfXzlvUlIxQV9BTEhEZHVSLXRqc01UMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDE3Qy8xODM5NzgwODQxQzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JS MUFfQUxIRGR1Ui10anNNVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzJWjx1ZAVdGX0gkDNKDKgO9QXzSoK3/kJX7wvg0Jy42fmhJYhYixZ uXev3kfyLm7bQE2hXURh+o/W8xCfUQFRCpWeIQGJHOzLAm1C6MDKAba9a55h7Jp1 Fm7nAagDwNx2L7URtLq2eAwPu9ZkabgP3IAQBVULtbMbxxqdnvkABqTBiJxe3OqE EsPEBDLit0Z/X4k7gGyiP+kIRwlFWPNsms+5cWLSu2MO+3FyL+rFuU/2BHSswxQw K+K20Gp0ZOEHys1N6Qy4QmVwfBFSVXIy8AmPBWckbeWK9Y15G9jAhVGBZ3FHMhiT l/P31BHvd/yHJ8bMLlAxPwInQdhSpXqO -----END CERTIFICATE-----Generated at Sun Dec 7 12:03:07 2025 by rpki-client