This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft File: Wr4zfmXAC-qEfODSWciH5P2zuSE.mft (raw, json) Hash identifier: EQyUmmOiR4jURylPRcU0VHAkWeLdPzKh+eqZu8F9F6g= Subject key identifier: 40:CF:04:B9:F1:F1:E9:76:16:59:2E:DF:98:29:9F:6B:6A:62:70:69 Authority key identifier: 5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21 Certificate issuer: /CN=A9173CDD/serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft Manifest number: 8B Signing time: Fri 05 Dec 2025 04:32:01 +0000 Manifest this update: Fri 05 Dec 2025 04:31:59 +0000 Manifest next update: Fri 12 Dec 2025 04:31:59 +0000 Files and hashes: 1: Wr4zfmXAC-qEfODSWciH5P2zuSE.crl (hash: 8QN0FUnWqXmRaTLJ8xbo+/t7W/4RgiDK+cw8MAewU9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CDD, serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921 Validity Not Before: Dec 5 04:31:59 2025 GMT Not After : Dec 12 04:31:59 2025 GMT Subject: CN=69326040-3231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:76:e1:f5:dd:2c:45:c8:e7:73:d7:46:c0:72: 85:86:ba:47:83:a8:56:f2:8f:3c:4a:23:93:ed:10: 97:53:c5:42:6b:c4:7f:71:54:3b:5f:14:34:6d:f2: 4a:b0:2f:83:7b:34:b5:b9:69:2f:78:b5:cd:6e:89: f6:23:76:c5:13:a4:7e:b5:74:2a:80:ef:a6:0e:54: 92:3d:d8:0d:6b:a4:c9:09:e9:d8:65:f7:47:f9:87: 6a:cd:e6:24:e8:77:1e:1e:d1:e6:b5:d4:a1:a6:1a: 34:6c:fe:13:5d:f8:12:dd:e6:f1:bf:14:f6:8b:d0: 53:83:5f:6d:b2:da:71:63:17:72:98:49:18:51:99: ba:98:4f:ed:83:b1:1f:1b:5e:1f:72:ed:3a:ca:73: 52:99:69:94:cb:bc:a6:16:58:d2:ee:b7:dc:e1:52: 04:6b:2f:73:60:1f:a2:b1:51:3b:80:42:4f:d1:4c: 20:6a:e8:20:97:36:f1:ac:67:de:1b:17:f3:09:da: 38:cd:18:b1:0b:05:c3:f9:4a:de:7a:ae:aa:56:a0: 70:cd:ce:0c:3d:03:bc:67:80:d3:ed:0e:b8:8e:b0: f7:4d:a8:01:92:d3:36:3c:86:9e:1a:b1:8c:ff:c2: 82:36:80:96:b1:1b:88:e4:24:d6:f1:56:d4:fa:50: e3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CF:04:B9:F1:F1:E9:76:16:59:2E:DF:98:29:9F:6B:6A:62:70:69 X509v3 Authority Key Identifier: keyid:5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:ce:d1:bf:6f:d9:0d:6d:34:33:69:6e:f6:0e:e1:8b:23:54: c8:06:6d:96:46:2c:9f:d4:ef:2b:cb:3f:6c:01:d4:65:10:23: bd:85:01:5a:a1:fc:53:0a:83:84:b9:d4:66:03:0c:21:c1:8f: 4a:31:7a:a2:79:45:0d:86:18:93:4d:57:49:3e:ca:6b:1d:0e: 44:bc:80:38:2c:7a:68:e5:a1:df:63:f9:de:d5:32:da:81:5c: 83:86:c6:2d:53:21:5f:f3:ff:9d:f1:d6:1f:8a:02:88:61:d4: 7e:79:d3:07:0e:40:98:23:3b:0e:bc:e9:a2:18:40:84:65:2d: fb:6c:cf:27:00:d8:a3:71:c5:6d:15:e2:3b:77:81:d1:39:32: a4:e3:84:66:c1:43:f8:b2:df:e4:e7:03:24:b2:16:c6:76:35: f9:51:7a:02:e5:c0:5c:83:64:3e:df:a6:9e:0d:a0:4b:7c:62: 57:61:ea:e2:86:a5:3d:b5:21:31:00:7b:c9:34:aa:30:05:53: 29:92:d6:12:0f:69:c0:6c:3f:07:40:fa:90:ec:ec:70:36:f0: f3:0d:4e:67:3f:2b:23:2f:23:bf:cc:8d:47:00:3e:2a:ca:b1: d3:79:b4:e7:f4:ac:01:f6:04:d6:3d:f1:7c:ec:21:ea:91:25: 10:f9:99:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDREQxMTAvBgNVBAUTKDVBQkUzMzdFNjVDMDBCRUE4NDdDRTBEMjU5Qzg4N0U0 RkRCM0I5MjEwHhcNMjUxMjA1MDQzMTU5WhcNMjUxMjEyMDQzMTU5WjAYMRYwFAYD VQQDEw02OTMyNjA0MC0zMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nbh9d0sRcjnc9dGwHKFhrpHg6hW8o88SiOT7RCXU8VCa8R/cVQ7XxQ0bfJK sC+DezS1uWkveLXNbon2I3bFE6R+tXQqgO+mDlSSPdgNa6TJCenYZfdH+YdqzeYk 6HceHtHmtdShpho0bP4TXfgS3ebxvxT2i9BTg19tstpxYxdymEkYUZm6mE/tg7Ef G14fcu06ynNSmWmUy7ymFljS7rfc4VIEay9zYB+isVE7gEJP0UwgaugglzbxrGfe GxfzCdo4zRixCwXD+Ureeq6qVqBwzc4MPQO8Z4DT7Q64jrD3TagBktM2PIaeGrGM /8KCNoCWsRuI5CTW8VbU+lDjlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDPBLnx 8el2Flku35gpn2tqYnBpMB8GA1UdIwQYMBaAFFq+M35lwAvqhHzg0lnIh+T9s7kh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NERC8zOUIxQjM2MkZE RDgxMUVGQjUyNUI2NzRDNEY5QUUwMi9XcjR6Zm1YQUMtcUVmT0RTV2NpSDVQMnp1 U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dyNHpmbVhBQy1xRWZPRFNXY2lINVAyenVTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NERC8zOUIxQjM2MkZERDgxMUVGQjUyNUI2NzRDNEY5QUUwMi9XcjR6Zm1YQUMt cUVmT0RTV2NpSDVQMnp1U0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZztG/b9kNbTQzaW72DuGLI1TIBm2WRiyf1O8ryz9sAdRlECO9hQFa ofxTCoOEudRmAwwhwY9KMXqieUUNhhiTTVdJPsprHQ5EvIA4LHpo5aHfY/ne1TLa gVyDhsYtUyFf8/+d8dYfigKIYdR+edMHDkCYIzsOvOmiGECEZS37bM8nANijccVt FeI7d4HROTKk44RmwUP4st/k5wMkshbGdjX5UXoC5cBcg2Q+36aeDaBLfGJXYeri hqU9tSExAHvJNKowBVMpktYSD2nAbD8HQPqQ7OxwNvDzDU5nPysjLyO/zI1HAD4q yrHTebTn9KwB9gTWPfF87CHqkSUQ+Zni -----END CERTIFICATE-----Generated at Sat Dec 6 17:24:44 2025 by rpki-client