This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft File: WatjEmbskGVhP9Z3y9tP8TvvZEE.mft (raw, json) Hash identifier: CqDSJI8Rn02PUZXvbWvnzF5yKJ7uv1CClNzJH65O7mw= Subject key identifier: 11:4D:35:F5:A1:C1:94:9A:59:73:A3:40:C3:F9:E3:BF:DF:68:58:06 Authority key identifier: 59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 Certificate issuer: /CN=A9191010/serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Certificate serial: 1F6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft Manifest number: 1F6E Signing time: Sat 06 Dec 2025 15:42:57 +0000 Manifest this update: Sat 06 Dec 2025 15:42:57 +0000 Manifest next update: Sat 13 Dec 2025 15:42:57 +0000 Files and hashes: 1: WatjEmbskGVhP9Z3y9tP8TvvZEE.crl (hash: scd67HrdASy4z0GlykaCkCzjByOrkvVayYTsTXpOwjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8046 (0x1f6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191010, serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Validity Not Before: Dec 6 15:42:57 2025 GMT Not After : Dec 13 15:42:57 2025 GMT Subject: CN=69344f01-d43b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8b:f8:4b:1c:c7:45:ee:24:e4:f3:36:74:ff: d7:02:9e:61:f0:a0:f3:a3:69:af:ca:b5:f3:26:d5: ef:6c:2e:84:86:d2:a1:c9:4d:a7:81:c3:d9:f7:22: 6e:bc:60:5f:07:5a:60:67:32:4b:12:b9:bb:61:b3: d1:14:8d:6d:ac:fa:0f:7f:0a:03:e1:22:33:e9:f7: 95:62:e8:e8:79:92:60:71:1a:d9:6c:07:37:74:84: 75:ba:d0:46:0a:6f:f5:9d:97:88:ea:ce:41:a0:44: 10:07:c7:3b:7e:92:fd:ec:9d:4a:8a:6d:1f:46:e8: c6:6b:df:16:b2:b4:dc:c7:73:ab:0d:3d:c3:7a:a7: d5:f5:10:cf:8f:e7:3b:53:8b:eb:41:10:a1:18:5c: c7:32:be:da:de:3d:d2:5d:07:f9:75:fc:19:35:0e: de:3c:b0:87:b9:1f:34:81:fd:b3:e5:e8:29:38:4b: ab:ed:5b:51:e2:83:9c:8a:04:05:9f:9b:41:9b:89: c0:4b:67:a2:a3:68:bf:cc:e8:62:1b:e1:0e:be:a7: bc:18:5b:bb:43:e6:ae:15:1f:05:5a:c3:ae:bc:2f: f4:e8:76:2e:d4:76:cf:01:c2:cc:99:c7:e0:0b:6b: a7:99:4d:37:86:42:3a:6d:7d:4a:e1:3d:36:58:5a: 9e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4D:35:F5:A1:C1:94:9A:59:73:A3:40:C3:F9:E3:BF:DF:68:58:06 X509v3 Authority Key Identifier: keyid:59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:a2:a0:27:d6:df:4b:a9:8d:4e:55:21:b0:fc:17:1a:ab:d4: ab:36:9e:db:ce:7d:84:03:66:8e:04:2c:12:24:aa:54:3c:04: 70:64:70:de:11:a8:a0:07:a0:cd:a8:a5:82:05:12:19:b9:30: df:9d:6f:2b:75:58:64:31:3d:d4:0d:d0:d7:ce:74:12:13:bd: f2:97:57:89:22:81:22:a7:44:3a:9c:e8:7b:d5:37:db:e9:8e: 2b:4c:7d:9c:ee:41:db:c9:8d:7b:e8:16:25:aa:20:0e:ec:a9: 3d:a5:22:fe:56:73:05:ed:4c:7d:22:63:41:5d:19:4d:09:1d: 42:c1:5c:fa:98:50:1b:f4:f8:bd:f3:0c:27:5d:e0:58:f7:dc: b5:e0:33:12:41:74:9a:f7:8d:43:56:ea:ff:55:86:2c:d5:f8: 9a:2e:f6:0c:8d:6d:21:ad:23:dd:7b:f7:ba:75:c7:ed:d1:3f: b1:b8:26:7e:d1:b0:2d:90:c6:b7:39:8e:8f:5a:ca:2a:72:11: ff:42:78:86:be:ef:0d:77:0f:96:03:e0:e2:e2:c6:0b:77:0c: 4a:6f:39:42:ea:cb:51:8e:3e:97:96:8a:0b:a3:7f:a2:ed:fc: 45:14:c3:f2:91:b8:13:d7:f4:31:ee:ab:33:76:dc:1d:ce:ac: d0:58:ee:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwMTAxMTAvBgNVBAUTKDU5QUI2MzEyNjZFQzkwNjU2MTNGRDY3N0NCREI0RkYx M0JFRjY0NDEwHhcNMjUxMjA2MTU0MjU3WhcNMjUxMjEzMTU0MjU3WjAYMRYwFAYD VQQDEw02OTM0NGYwMS1kNDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Iv4SxzHRe4k5PM2dP/XAp5h8KDzo2mvyrXzJtXvbC6EhtKhyU2ngcPZ9yJu vGBfB1pgZzJLErm7YbPRFI1trPoPfwoD4SIz6feVYujoeZJgcRrZbAc3dIR1utBG Cm/1nZeI6s5BoEQQB8c7fpL97J1Kim0fRujGa98WsrTcx3OrDT3DeqfV9RDPj+c7 U4vrQRChGFzHMr7a3j3SXQf5dfwZNQ7ePLCHuR80gf2z5egpOEur7VtR4oOcigQF n5tBm4nAS2eio2i/zOhiG+EOvqe8GFu7Q+auFR8FWsOuvC/06HYu1HbPAcLMmcfg C2unmU03hkI6bX1K4T02WFqecQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFNNfWh wZSaWXOjQMP547/faFgGMB8GA1UdIwQYMBaAFFmrYxJm7JBlYT/Wd8vbT/E772RB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAxMC8wOUU1Nzc0NDU1 NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tHVmhQOVozeTl0UDhUdnZa RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhdGpFbWJza0dWaFA5WjN5OXRQOFR2dlpFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAxMC8wOUU1Nzc0NDU1NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tH VmhQOVozeTl0UDhUdnZaRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBooqAn1t9LqY1OVSGw/Bcaq9SrNp7bzn2EA2aOBCwSJKpUPARwZHDe EaigB6DNqKWCBRIZuTDfnW8rdVhkMT3UDdDXznQSE73yl1eJIoEip0Q6nOh71Tfb 6Y4rTH2c7kHbyY176BYlqiAO7Kk9pSL+VnMF7Ux9ImNBXRlNCR1CwVz6mFAb9Pi9 8wwnXeBY99y14DMSQXSa941DVur/VYYs1fiaLvYMjW0hrSPde/e6dcft0T+xuCZ+ 0bAtkMa3OY6PWsoqchH/QniGvu8Ndw+WA+Di4sYLdwxKbzlC6stRjj6XlooLo3+i 7fxFFMPykbgT1/Qx7qszdtwdzqzQWO40 -----END CERTIFICATE-----Generated at Mon Dec 8 09:12:19 2025 by rpki-client