This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft File: w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json) Hash identifier: ZtRioNwbQTgm6rNtGoZ5hFrfrvpqddt9ec5w94LN32Y= Subject key identifier: BC:A5:B9:F7:48:A0:2D:2B:61:BC:0C:E3:31:8B:7F:E9:A6:53:28:51 Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 Certificate issuer: /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Certificate serial: 1A25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft Manifest number: 1A1A Signing time: Sat 06 Dec 2025 16:00:11 +0000 Manifest this update: Sat 06 Dec 2025 16:00:10 +0000 Manifest next update: Sat 13 Dec 2025 16:00:10 +0000 Files and hashes: 1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: 03h6VNHDXIV6sIsAZFg4/KD6Ngkw0gTBjpquZZhJsAo=) 2: 885DA760AA8811E799348329C4F9AE02.roa (hash: QtE9Adpom4Nm5iw3CCvblvKPpzJSJvhQFoud1x1FLEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6693 (0x1a25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Validity Not Before: Dec 6 16:00:10 2025 GMT Not After : Dec 13 16:00:10 2025 GMT Subject: CN=6934530b-0e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2e:43:bf:c5:3c:23:83:b5:5f:0f:ba:39:bf: 50:f8:ce:d1:86:96:9b:9b:fa:54:02:39:10:c4:5a: 18:af:eb:35:ab:9c:84:8d:42:9b:64:42:95:53:28: cc:b3:7b:34:53:8f:3b:26:48:f7:ee:7e:85:ac:5c: 99:30:26:f6:cd:7f:a1:79:6f:73:2a:9c:e7:c7:1f: 3d:00:1b:ff:99:7a:11:56:d9:ac:1f:bc:19:c7:00: c3:9f:b2:6e:2b:15:12:71:1d:8a:11:fb:bc:4f:2d: 79:48:40:9e:dc:48:3d:f6:89:c7:1b:84:77:0f:28: 36:00:89:90:d9:9c:7f:41:6a:08:ef:3f:28:2e:dd: aa:fe:4d:d5:3c:ce:09:99:dc:32:0a:ec:93:53:c9: a6:c6:7e:ed:57:0a:3d:41:bd:35:99:66:ad:aa:67: a5:74:82:b4:ed:9b:0d:4c:99:9d:84:6c:10:a3:e1: 00:65:0f:42:9b:55:0f:cb:9a:79:80:2e:39:43:c3: 57:28:4c:22:51:b3:cd:f9:f4:a5:10:d2:4f:fe:21: 29:60:58:e2:16:bf:50:c7:0e:b0:00:c5:18:54:17: 13:78:33:a8:f0:44:36:f5:68:6d:33:2e:4d:86:85: 16:94:f3:50:30:76:61:23:91:82:20:1c:84:90:1b: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A5:B9:F7:48:A0:2D:2B:61:BC:0C:E3:31:8B:7F:E9:A6:53:28:51 X509v3 Authority Key Identifier: keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:6c:13:c1:47:3f:a3:1f:62:22:6f:e8:2e:c8:a5:49:28:09: 71:38:d6:6f:db:45:6d:52:0c:b1:32:5a:04:f1:22:c7:a6:d3: 24:3b:cb:61:cb:78:1d:df:01:99:fa:e9:49:90:59:c2:9e:f8: 3e:ef:9f:a7:42:16:5e:72:fd:58:00:05:62:bc:39:f2:ca:5c: 0d:fc:57:98:89:ce:9f:e5:46:92:8e:29:a4:49:1e:a3:6d:f0: f3:19:2d:2c:d7:40:ca:89:1b:6f:14:34:8b:b4:66:23:64:20: 29:ae:f2:80:08:b5:bd:a7:33:12:9a:ef:6d:81:d7:4e:98:e5: 71:e9:ec:fb:22:69:7e:72:5b:45:88:47:2c:7f:24:d0:59:d2: fe:e5:f1:5b:35:e2:30:b6:55:af:65:dd:b9:80:50:58:9b:24: 0f:dc:e9:70:1b:51:7b:a9:fe:c5:74:77:09:de:0a:12:ec:67: 50:7a:d8:d2:12:78:54:17:58:52:f3:ce:19:f4:43:1d:de:a4: 2b:47:e6:00:e0:84:a0:0c:f9:c5:99:36:e1:d1:cc:23:de:98: cc:2b:fb:f1:69:ad:c9:d1:c2:3c:49:f0:58:5f:cf:07:c9:6a: 3f:3b:7a:e9:c0:2b:1d:d1:5a:3c:67:a9:7d:e0:ec:00:67:0f: 5e:da:60:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyNjUxMTAvBgNVBAUTKEMzQkFEOEYwQTVEQTA1OEU5RjkyNTAzN0QwNEFBNzFD OTI4QkExNzMwHhcNMjUxMjA2MTYwMDEwWhcNMjUxMjEzMTYwMDEwWjAYMRYwFAYD VQQDEw02OTM0NTMwYi0wZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqS5Dv8U8I4O1Xw+6Ob9Q+M7Rhpabm/pUAjkQxFoYr+s1q5yEjUKbZEKVUyjM s3s0U487Jkj37n6FrFyZMCb2zX+heW9zKpznxx89ABv/mXoRVtmsH7wZxwDDn7Ju KxUScR2KEfu8Ty15SECe3Eg99onHG4R3Dyg2AImQ2Zx/QWoI7z8oLt2q/k3VPM4J mdwyCuyTU8mmxn7tVwo9Qb01mWatqmeldIK07ZsNTJmdhGwQo+EAZQ9Cm1UPy5p5 gC45Q8NXKEwiUbPN+fSlENJP/iEpYFjiFr9Qxw6wAMUYVBcTeDOo8EQ29WhtMy5N hoUWlPNQMHZhI5GCIByEkBuyvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLylufdI oC0rYbwM4zGLf+mmUyhRMB8GA1UdIwQYMBaAFMO62PCl2gWOn5JQN9BKpxySi6Fz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2NS9EOEI0QjYxRTYw MjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZNmZrbEEzMEVxbkhKS0xv WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3clk4S1hhQlk2ZmtsQTMwRXFuSEpLTG9YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTI2NS9EOEI0QjYxRTYwMjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZ NmZrbEEzMEVxbkhKS0xvWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFbBPBRz+jH2Iib+guyKVJKAlxONZv20VtUgyxMloE8SLHptMkO8th y3gd3wGZ+ulJkFnCnvg+75+nQhZecv1YAAVivDnyylwN/FeYic6f5UaSjimkSR6j bfDzGS0s10DKiRtvFDSLtGYjZCAprvKACLW9pzMSmu9tgddOmOVx6ez7Iml+cltF iEcsfyTQWdL+5fFbNeIwtlWvZd25gFBYmyQP3OlwG1F7qf7FdHcJ3goS7GdQetjS EnhUF1hS884Z9EMd3qQrR+YA4ISgDPnFmTbh0cwj3pjMK/vxaa3J0cI8SfBYX88H yWo/O3rpwCsd0Vo8Z6l94OwAZw9e2mBo -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:08 2025 by rpki-client