This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft File: W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft (raw, json) Hash identifier: X3yZDfI83ShQ2Hvcxiqea8IJ0XEVClokfy4RoP53n8Q= Subject key identifier: B9:CE:B3:BB:14:02:2E:3C:11:4B:B1:CA:FC:EA:8B:D5:74:B1:34:B0 Authority key identifier: 5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F Certificate issuer: /CN=A9171882/serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft Manifest number: 0139 Signing time: Sun 07 Dec 2025 02:48:04 +0000 Manifest this update: Sun 07 Dec 2025 02:48:03 +0000 Manifest next update: Sun 14 Dec 2025 02:48:03 +0000 Files and hashes: 1: W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl (hash: 5/3AmV3Jk9fK/838Ysy1IW73ZdmcEcejegUTdml5hPM=) 2: FD990E7AF0B311EE9923BC84C4F9AE02.roa (hash: XWibtqlVyPdPRt9izLBx3ZYroA9isT1xxkvokh85YPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171882, serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F Validity Not Before: Dec 7 02:48:03 2025 GMT Not After : Dec 14 02:48:03 2025 GMT Subject: CN=6934eae3-00c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:64:44:1b:a2:4a:c7:42:20:0d:ae:4e:7e:0d: 62:55:68:da:d0:1e:10:73:7b:73:74:a8:4d:38:2a: 91:78:ce:bb:8f:01:db:ef:50:a1:37:6f:da:5e:e3: 32:87:36:d1:9d:ca:7b:f3:ae:c6:b9:4c:11:0a:74: 71:a4:4c:d9:71:1b:9c:28:c6:63:79:3c:5c:b8:75: b8:bf:23:ff:0a:87:64:db:57:65:fa:92:2d:01:f0: 7d:dd:30:82:76:cf:50:6a:21:a5:ee:ef:c2:49:11: f9:96:6d:60:0f:39:2a:3c:5f:d2:e3:fa:43:c0:9c: 32:28:96:2a:4b:b5:96:57:6f:70:80:c9:71:53:9b: 40:d0:17:bf:54:e6:93:f7:15:f9:de:92:9c:0a:f2: 90:e8:58:ab:f5:1f:ad:c3:bf:01:ef:e3:ea:fd:4c: 70:ce:35:71:e8:0a:1c:69:98:f5:52:97:15:66:53: a5:92:2f:a7:57:b0:d2:f4:f5:3b:67:83:f0:64:b3: 48:27:60:95:ff:65:1b:14:5d:0d:74:54:62:d6:a8: a3:a7:a6:e5:54:a5:db:f6:a9:9a:c9:83:2a:a1:da: 09:3c:50:6f:95:a9:be:a3:e5:a8:67:40:79:bf:d3: 0d:a8:67:5f:f1:7a:c6:44:b2:a2:60:ce:f2:28:f6: a1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CE:B3:BB:14:02:2E:3C:11:4B:B1:CA:FC:EA:8B:D5:74:B1:34:B0 X509v3 Authority Key Identifier: keyid:5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:ef:6a:1d:48:12:bf:f4:10:19:65:b4:13:24:e1:07:46:18: c0:45:4e:63:f5:66:c0:e5:54:6a:a3:03:77:0d:4d:da:39:28: 21:26:d6:b0:72:2f:75:21:45:82:dd:d5:d4:df:f1:46:69:93: 39:f3:80:34:64:d5:35:70:e5:57:db:c4:f6:e5:1a:81:6f:9d: 53:84:04:06:3c:73:6a:f2:6b:10:9b:eb:8a:72:c0:6b:13:c2: c0:89:8b:2f:7f:83:3e:69:d6:0f:aa:92:98:5d:a7:0a:d8:6b: 8a:ec:41:6c:78:4f:7e:a3:52:0a:38:43:9d:63:4d:d9:e0:b4: 38:56:48:21:18:b3:16:0c:4f:62:3b:d0:f7:0e:d7:84:9d:06: 7e:18:02:d2:5e:2c:ba:09:89:ec:f1:53:c8:2a:3b:36:9f:53: 6b:b7:cd:8c:e3:05:e0:9c:87:32:62:10:fa:52:c3:fc:9f:0f: 19:57:5f:20:ea:bf:43:9b:f8:98:ac:74:f5:92:8c:d1:89:9e: 19:3d:42:b4:01:7f:6c:bd:b1:19:ac:1c:7b:fe:84:47:9b:2b: 6b:ca:51:f2:61:14:56:a6:18:eb:43:55:97:7a:37:8e:95:cd: 2a:3e:a0:3c:d3:b9:03:0c:70:db:47:a2:0a:6e:c9:cd:80:09: 2a:83:de:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4ODIxMTAvBgNVBAUTKDVCQzQ5NEU4OUQwQTQxNTVCNTUyNTM2M0QxMjM1QzVF REMwRkRFMkYwHhcNMjUxMjA3MDI0ODAzWhcNMjUxMjE0MDI0ODAzWjAYMRYwFAYD VQQDEw02OTM0ZWFlMy0wMGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmREG6JKx0IgDa5Ofg1iVWja0B4Qc3tzdKhNOCqReM67jwHb71ChN2/aXuMy hzbRncp7867GuUwRCnRxpEzZcRucKMZjeTxcuHW4vyP/Codk21dl+pItAfB93TCC ds9QaiGl7u/CSRH5lm1gDzkqPF/S4/pDwJwyKJYqS7WWV29wgMlxU5tA0Be/VOaT 9xX53pKcCvKQ6Fir9R+tw78B7+Pq/UxwzjVx6AocaZj1UpcVZlOlki+nV7DS9PU7 Z4PwZLNIJ2CV/2UbFF0NdFRi1qijp6blVKXb9qmayYMqodoJPFBvlam+o+WoZ0B5 v9MNqGdf8XrGRLKiYM7yKPahkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnOs7sU Ai48EUuxyvzqi9V0sTSwMB8GA1UdIwQYMBaAFFvElOidCkFVtVJTY9EjXF7cD94v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg4Mi9BOEMyNTFFQUYw QjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FWVzFVbE5qMFNOY1h0d1Az aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1c4U1U2SjBLUVZXMVVsTmowU05jWHR3UDNpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg4Mi9BOEMyNTFFQUYwQjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FW VzFVbE5qMFNOY1h0d1AzaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA172odSBK/9BAZZbQTJOEHRhjARU5j9WbA5VRqowN3DU3aOSghJtaw ci91IUWC3dXU3/FGaZM584A0ZNU1cOVX28T25RqBb51ThAQGPHNq8msQm+uKcsBr E8LAiYsvf4M+adYPqpKYXacK2GuK7EFseE9+o1IKOEOdY03Z4LQ4VkghGLMWDE9i O9D3DteEnQZ+GALSXiy6CYns8VPIKjs2n1Nrt82M4wXgnIcyYhD6UsP8nw8ZV18g 6r9Dm/iYrHT1kozRiZ4ZPUK0AX9svbEZrBx7/oRHmytrylHyYRRWphjrQ1WXejeO lc0qPqA807kDDHDbR6IKbsnNgAkqg96a -----END CERTIFICATE-----Generated at Sun Dec 7 04:42:30 2025 by rpki-client