This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft File: WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft (raw, json) Hash identifier: ZyP9S2YiBK1tybZwbso9ZlKCZ2GcHhZ6rV7mfU1G/LU= Subject key identifier: 32:6E:C9:ED:7F:F2:DF:1A:5B:0A:73:AE:C2:F6:0B:68:E3:05:A9:5C Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 Certificate issuer: /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft Manifest number: BB Signing time: Fri 05 Dec 2025 04:04:50 +0000 Manifest this update: Fri 05 Dec 2025 04:04:49 +0000 Manifest next update: Fri 12 Dec 2025 04:04:49 +0000 Files and hashes: 1: WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl (hash: /3R4wo6fxL1abnCVwzTrrz5uG9PH35osAtlPDLQRiFw=) 2: 46C0C4E0770311F09B9D387BC4F9AE02.roa (hash: OeFUJInFH4cNkqvMFV8k9Dy5HiypZ14/pThp2DVW2AA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909, serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Validity Not Before: Dec 5 04:04:49 2025 GMT Not After : Dec 12 04:04:49 2025 GMT Subject: CN=693259e1-3ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:56:e0:80:06:de:51:2c:c4:7d:6e:cf:55: 31:36:66:02:0b:96:f7:92:c2:27:0d:ec:ce:0d:cf: 35:25:c8:3d:46:b0:2d:49:5e:c7:3f:c4:e7:cd:91: 9d:da:b3:b5:b5:07:24:d2:2b:0e:48:35:11:c9:22: 62:00:0a:f6:13:4f:79:44:72:c9:3e:89:f8:5c:3e: 3a:47:fb:ba:19:a0:10:3d:0c:3c:be:96:3c:c8:ca: e8:0f:d4:5e:b1:9d:82:2d:a0:21:36:4e:25:8a:21: 8c:a4:55:0e:a5:0f:5d:9a:d5:6a:1f:dd:8c:9b:ce: cf:5e:e3:eb:75:c3:69:b2:af:95:f8:75:a2:b5:eb: a1:e8:8f:f1:27:02:df:80:c4:eb:2d:aa:07:29:be: e7:22:bb:e5:7a:11:52:7b:c2:d3:d0:7c:60:c7:88: 94:fe:e9:19:0b:31:b2:45:57:0a:e2:4b:20:83:ea: 7f:41:aa:ab:bd:dc:dc:c4:00:a0:61:e2:f2:18:dd: 86:a7:b3:41:22:86:06:12:a9:a8:ea:48:9f:8e:2a: b0:f4:4a:84:6c:42:d1:5b:4d:49:20:a2:bf:4c:b6: 53:79:cd:af:20:ad:c4:24:20:eb:3c:e3:a4:03:96: 5f:2d:51:9f:55:fc:c8:b2:a3:a0:f4:9f:c4:0a:cb: f2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6E:C9:ED:7F:F2:DF:1A:5B:0A:73:AE:C2:F6:0B:68:E3:05:A9:5C X509v3 Authority Key Identifier: keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:c8:eb:fc:26:c3:00:cf:2b:7e:29:63:57:5f:93:f0:7d:c6: 14:ad:5b:c5:f3:51:a6:b2:5e:37:b5:a5:31:63:1c:32:bd:4c: 0d:1d:c6:5f:8c:3e:2e:61:04:d3:19:c4:f8:fa:f2:3a:18:d2: 1d:d8:7a:6e:d0:06:00:63:03:91:cd:b0:0f:91:f6:ee:84:a6: b2:16:1e:a1:19:a4:90:0d:81:b8:8e:95:42:09:2a:d8:8e:81: 55:14:cf:69:fc:2d:5c:f5:3f:5a:97:47:69:99:a4:19:0d:40: c9:4f:ef:67:c6:15:05:a8:cd:3e:80:b1:41:a2:f6:1b:81:ad: 46:6c:5f:c3:70:81:bc:ce:fa:a4:45:d5:8e:f0:e0:dc:4b:48: ff:5d:e6:90:72:64:fc:4b:4f:95:64:36:88:34:2c:c5:68:6a: 09:10:42:3b:11:14:9f:14:2a:d0:31:ae:3a:54:5c:bf:ca:27: 58:d3:36:55:3d:06:22:45:5d:ba:d8:6c:87:db:2d:77:7b:d0: 06:e2:33:0e:75:78:60:64:32:f4:ef:ef:4d:75:92:3b:44:a9: 0c:ac:78:37:39:57:c4:76:d9:75:fa:75:8c:25:70:1d:9e:88: 29:84:21:ca:93:52:9c:ba:3d:b9:76:67:cc:d3:a4:7b:34:da: 97:20:8e:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MDkxMTAvBgNVBAUTKDU5RjlENDhERDkxNjkwOTc4M0UzMTc3MUQ4QUQ3RUNC MzBEQzNCQTIwHhcNMjUxMjA1MDQwNDQ5WhcNMjUxMjEyMDQwNDQ5WjAYMRYwFAYD VQQDEw02OTMyNTllMS0zZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4pW4IAG3lEsxH1uz1UxNmYCC5b3ksInDezODc81Jcg9RrAtSV7HP8TnzZGd 2rO1tQck0isOSDURySJiAAr2E095RHLJPon4XD46R/u6GaAQPQw8vpY8yMroD9Re sZ2CLaAhNk4liiGMpFUOpQ9dmtVqH92Mm87PXuPrdcNpsq+V+HWiteuh6I/xJwLf gMTrLaoHKb7nIrvlehFSe8LT0Hxgx4iU/ukZCzGyRVcK4ksgg+p/QaqrvdzcxACg YeLyGN2Gp7NBIoYGEqmo6kifjiqw9EqEbELRW01JIKK/TLZTec2vIK3EJCDrPOOk A5ZfLVGfVfzIsqOg9J/ECsvyQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJuye1/ 8t8aWwpzrsL2C2jjBalcMB8GA1UdIwQYMBaAFFn51I3ZFpCXg+MXcditfssw3Dui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkwOS9GRjdDNUZEQ0Mw REIxMUVGOUU4NzE4NDRDNEY5QUUwMi9XZm5VamRrV2tKZUQ0eGR4MksxLXl6RGNP NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dmblVqZGtXa0plRDR4ZHgySzEteXpEY082SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzkwOS9GRjdDNUZEQ0MwREIxMUVGOUU4NzE4NDRDNEY5QUUwMi9XZm5VamRrV2tK ZUQ0eGR4MksxLXl6RGNPNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCByOv8JsMAzyt+KWNXX5PwfcYUrVvF81Gmsl43taUxYxwyvUwNHcZf jD4uYQTTGcT4+vI6GNId2Hpu0AYAYwORzbAPkfbuhKayFh6hGaSQDYG4jpVCCSrY joFVFM9p/C1c9T9al0dpmaQZDUDJT+9nxhUFqM0+gLFBovYbga1GbF/DcIG8zvqk RdWO8ODcS0j/XeaQcmT8S0+VZDaINCzFaGoJEEI7ERSfFCrQMa46VFy/yidY0zZV PQYiRV262GyH2y13e9AG4jMOdXhgZDL07+9NdZI7RKkMrHg3OVfEdtl1+nWMJXAd nogphCHKk1Kcuj25dmfM06R7NNqXII6O -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:40 2025 by rpki-client