This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft File: k-Wm1UXgDFaegN4yLrINV1d1BXU.mft (raw, json) Hash identifier: WZsxklO/TfHNLJkWkleN5VuAP+TjSBPbYDXmpbecjZM= Subject key identifier: A8:42:CB:C3:2C:57:2C:91:5C:73:92:8D:EB:88:CE:2D:20:1B:81:58 Authority key identifier: 93:E5:A6:D5:45:E0:0C:56:9E:80:DE:32:2E:B2:0D:57:57:75:05:75 Certificate issuer: /CN=A9171A47/serialNumber=93E5A6D545E00C569E80DE322EB20D5757750575 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-Wm1UXgDFaegN4yLrINV1d1BXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft Manifest number: 2A Signing time: Fri 05 Dec 2025 05:34:26 +0000 Manifest this update: Fri 05 Dec 2025 05:34:26 +0000 Manifest next update: Fri 12 Dec 2025 05:34:26 +0000 Files and hashes: 1: k-Wm1UXgDFaegN4yLrINV1d1BXU.crl (hash: 22PXzqHgYDeuUYtaHJCqlkiOUu3grPgkinOcvU9RLOk=) 2: 1805E4389DE011F0B44FDA76C4F9AE02.roa (hash: BVg645b1ajGzj9xavjn4EeQ2fjsg53CBWQRexvbeM1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.crl rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-Wm1UXgDFaegN4yLrINV1d1BXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A47, serialNumber=93E5A6D545E00C569E80DE322EB20D5757750575 Validity Not Before: Dec 5 05:34:26 2025 GMT Not After : Dec 12 05:34:26 2025 GMT Subject: CN=69326ee2-7865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d6:ca:59:de:c9:f6:71:1c:86:e5:4d:2f:68: ff:f2:5f:e0:ea:4c:5a:ba:01:a3:0e:68:bd:d1:68: 19:b4:9b:5c:75:ce:5b:3b:67:5a:84:fd:b5:53:8e: 0e:75:cc:e6:26:b6:8d:6b:5f:20:80:ad:15:60:90: 53:25:22:33:65:78:8a:1f:f2:4d:55:80:a1:6e:3d: 91:99:e8:d4:f6:1a:a9:c2:5f:00:bf:97:14:60:4e: 94:af:76:74:4c:ac:62:82:4e:68:c1:0c:b1:4e:86: 4e:c3:df:4d:3f:42:bc:81:da:f1:22:90:dc:5d:9e: 44:e8:14:31:8f:1a:d4:6e:48:66:96:a7:93:ff:8a: 70:00:05:08:98:ff:ae:09:09:cd:14:2d:ae:6c:df: d4:72:be:8f:68:c5:07:02:0e:b2:5e:58:9d:e8:ef: 3b:87:2a:fb:bd:16:88:61:1e:37:17:2b:92:fa:68: 6f:84:d6:e6:fd:cf:55:65:55:ce:95:fe:46:90:c8: f9:86:6e:02:e4:0a:ce:38:4b:36:9f:a2:70:fe:68: 0e:07:52:e4:fb:87:35:ce:76:73:96:9a:b8:94:01: 37:87:80:09:7c:fb:b5:f6:eb:57:bd:4b:31:56:f3: 9a:35:6d:0e:0c:d7:98:4e:bf:3f:d7:ef:28:dc:7c: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:42:CB:C3:2C:57:2C:91:5C:73:92:8D:EB:88:CE:2D:20:1B:81:58 X509v3 Authority Key Identifier: keyid:93:E5:A6:D5:45:E0:0C:56:9E:80:DE:32:2E:B2:0D:57:57:75:05:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-Wm1UXgDFaegN4yLrINV1d1BXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:d4:9d:0d:d3:33:b1:05:f3:40:48:7e:79:cc:f7:04:74:d0: a5:2d:a4:3a:fc:71:08:69:c3:8c:09:6e:3d:90:04:80:df:54: c5:b3:2d:c8:45:37:b6:1a:ba:01:ac:43:f7:dd:7e:dc:ad:c0: 1b:b6:fc:29:fd:31:a1:80:34:1a:e3:21:18:1b:55:5b:94:97: 65:4f:7a:7c:cd:89:6a:27:7d:00:0d:35:1c:a9:17:0d:14:51: 13:b0:e0:e1:31:e4:10:76:96:45:d3:64:0e:b3:35:bc:b0:f6: 09:47:6f:34:ed:19:3d:b9:3c:fe:bc:cc:d5:bc:75:94:ad:b2: 8f:9d:9b:d8:2e:03:34:ea:d2:0d:f5:f1:f4:cb:76:1f:1f:97: 75:9a:f5:7a:9a:c8:0d:ab:a1:3a:17:10:04:b4:9a:54:a1:3c: b8:e8:ff:ef:13:06:db:fa:f1:a6:9f:97:f6:34:ea:5d:70:6f: 1b:94:07:a3:7e:69:4c:8c:ee:26:ce:0f:0d:f4:e1:a1:14:4d: 93:c1:e7:9e:09:ff:75:50:20:af:91:2b:6b:fc:34:bd:8e:31: 5e:ee:39:10:5f:5f:44:68:ea:47:0d:38:8b:c6:ba:76:10:40: 54:59:d4:b1:47:81:98:05:6f:c1:2d:fb:10:78:2f:a1:4c:ce: a6:ef:80:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUE0NzExMC8GA1UEBRMoOTNFNUE2RDU0NUUwMEM1NjlFODBERTMyMkVCMjBENTc1 Nzc1MDU3NTAeFw0yNTEyMDUwNTM0MjZaFw0yNTEyMTIwNTM0MjZaMBgxFjAUBgNV BAMTDTY5MzI2ZWUyLTc4NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCn1spZ3sn2cRyG5U0vaP/yX+DqTFq6AaMOaL3RaBm0m1x1zls7Z1qE/bVTjg51 zOYmto1rXyCArRVgkFMlIjNleIof8k1VgKFuPZGZ6NT2GqnCXwC/lxRgTpSvdnRM rGKCTmjBDLFOhk7D300/QryB2vEikNxdnkToFDGPGtRuSGaWp5P/inAABQiY/64J Cc0ULa5s39Ryvo9oxQcCDrJeWJ3o7zuHKvu9FohhHjcXK5L6aG+E1ub9z1VlVc6V /kaQyPmGbgLkCs44SzafonD+aA4HUuT7hzXOdnOWmriUATeHgAl8+7X261e9SzFW 85o1bQ4M15hOvz/X7yjcfD49AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqELLwyxX LJFcc5KN64jOLSAbgVgwHwYDVR0jBBgwFoAUk+Wm1UXgDFaegN4yLrINV1d1BXUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxQTQ3Lzk3QzVBMDE0OURE NjExRjBBNDMxNUUwQUM0RjlBRTAyL2stV20xVVhnREZhZWdONHlMcklOVjFkMUJY VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvay1XbTFVWGdERmFlZ040eUxySU5WMWQxQlhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx QTQ3Lzk3QzVBMDE0OURENjExRjBBNDMxNUUwQUM0RjlBRTAyL2stV20xVVhnREZh ZWdONHlMcklOVjFkMUJYVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMLUnQ3TM7EF80BIfnnM9wR00KUtpDr8cQhpw4wJbj2QBIDfVMWzLchF N7YaugGsQ/fdftytwBu2/Cn9MaGANBrjIRgbVVuUl2VPenzNiWonfQANNRypFw0U UROw4OEx5BB2lkXTZA6zNbyw9glHbzTtGT25PP68zNW8dZStso+dm9guAzTq0g31 8fTLdh8fl3Wa9XqayA2roToXEAS0mlShPLjo/+8TBtv68aafl/Y06l1wbxuUB6N+ aUyM7ibODw304aEUTZPB554J/3VQIK+RK2v8NL2OMV7uORBfX0Ro6kcNOIvGunYQ QFRZ1LFHgZgFb8Et+xB4L6FMzqbvgH8= -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:58 2025 by rpki-client