This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft File: WHRSDaeB94Db1xDULIQcE6etF1c.mft (raw, json) Hash identifier: tetytvelWQqdhsNGaelaz/iyaKFEz4l8IrLAX5jpTkc= Subject key identifier: DE:5E:01:BB:5A:89:C0:E0:44:93:0D:BF:06:0B:42:90:13:14:76:C7 Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 Certificate issuer: /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft Manifest number: 020A Signing time: Fri 05 Dec 2025 00:50:34 +0000 Manifest this update: Fri 05 Dec 2025 00:50:34 +0000 Manifest next update: Fri 12 Dec 2025 00:50:34 +0000 Files and hashes: 1: WHRSDaeB94Db1xDULIQcE6etF1c.crl (hash: l4G1ja0w/RhFuP6HfMWY9+fm+FtyZvF3F+a+27vAGmo=) 2: 06CD7DF074F211F09D01EA15C4F9AE02.roa (hash: wlIu/nl9TYANb0F4m3+htDbTyhazmTRCofxCf5SqanI=) 3: B412DC700EC011EE8C18290AC4F9AE02.roa (hash: QaySh+U2ImR7fI4OfAXAG1QKvLn5LnVgI5Wmw5xhFUc=) 4: CF85B73C74F011F0847A5D0DC4F9AE02.roa (hash: ROJkHjEex+krTnEbfnPSXsQUMEVZuDVq8C6r5b58NiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Validity Not Before: Dec 5 00:50:34 2025 GMT Not After : Dec 12 00:50:34 2025 GMT Subject: CN=69322c5a-ee8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4c:af:df:eb:41:ee:9f:0f:95:08:42:2b:3a: e9:49:cf:d8:0b:3d:1b:4e:d9:50:92:9b:6e:68:a2: 92:7b:0e:17:bf:47:a6:96:37:12:02:a7:a9:6c:bf: 56:7d:0c:9c:42:0a:30:44:ae:01:25:59:17:32:fc: 35:5a:8d:01:96:f0:9a:d3:2a:b7:be:67:ef:09:de: f6:74:18:bf:d5:16:49:91:6c:a3:d3:16:a4:80:2d: 59:b1:b7:35:f9:2f:78:39:80:a6:da:64:79:df:63: 38:8f:99:dd:9f:6b:b0:b2:97:d4:da:b9:83:d3:84: e4:93:fe:6c:fb:1a:bc:85:b5:ba:eb:96:88:08:b1: 8f:c2:8a:5c:2c:0c:af:e9:3d:f3:ff:c3:99:05:81: 89:0a:25:de:d2:6d:ee:44:0c:11:36:cb:18:15:70: 4e:71:28:31:c2:59:6c:11:ac:e6:ac:94:97:07:da: 75:9e:12:64:aa:f0:3f:c5:5f:e3:b7:06:a5:4c:5d: 95:ef:69:cb:3a:29:66:af:cc:e0:21:16:0e:c5:40: cd:66:82:5f:02:6d:62:3a:bf:a0:56:50:f1:f9:e8: 9d:d1:8a:5e:1c:2b:33:97:1d:8d:6b:04:8e:1f:53: 42:3d:ca:f5:f9:22:48:84:29:73:f6:2d:76:f6:2f: 78:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5E:01:BB:5A:89:C0:E0:44:93:0D:BF:06:0B:42:90:13:14:76:C7 X509v3 Authority Key Identifier: keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:44:9e:b4:83:30:3c:2e:d8:97:19:3a:e8:08:c1:ce:e3:06: 56:aa:6f:f2:c2:27:b2:82:0b:d4:5f:84:08:44:4d:c0:02:1e: aa:5c:4c:3c:b0:f1:ac:e9:3d:58:34:80:a6:41:ee:75:a0:02: 80:39:7a:86:3a:f6:e2:f2:0f:cd:4d:6e:a9:0b:b8:af:3a:76: 5c:82:0b:d8:e8:8b:c1:6d:c2:2c:b9:39:33:a3:5e:73:0f:0e: 4c:bf:4b:81:d5:78:f6:63:68:7e:99:75:fb:ae:e2:0c:54:56: c8:5e:88:65:c2:9b:72:d9:38:0f:f7:ed:9a:44:7d:2b:e5:1f: 22:d6:31:b2:a2:6b:e1:bc:70:49:e4:50:eb:9b:a4:f0:0d:73: a0:21:df:dd:50:cc:53:86:39:e9:7e:9f:84:3c:83:69:90:80: 39:d5:30:bd:94:7f:6d:c4:d3:d8:fb:4b:95:d3:ab:d2:6a:42: 7b:e1:8e:55:9a:8e:92:31:46:82:f3:ff:76:77:fd:5f:d4:45: 6c:a9:78:50:9a:e9:23:86:e5:59:b5:1b:7c:59:c9:51:b1:89: 0a:69:72:c1:ba:bb:99:16:db:e3:12:08:cf:79:c1:bf:e7:1f: 87:47:82:8a:e4:4f:f3:90:31:aa:95:10:0a:b9:be:fc:d8:e0: 77:77:2b:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyQ0QxMTAvBgNVBAUTKDU4NzQ1MjBEQTc4MUY3ODBEQkQ3MTBENDJDODQxQzEz QTdBRDE3NTcwHhcNMjUxMjA1MDA1MDM0WhcNMjUxMjEyMDA1MDM0WjAYMRYwFAYD VQQDEw02OTMyMmM1YS1lZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0yv3+tB7p8PlQhCKzrpSc/YCz0bTtlQkptuaKKSew4Xv0emljcSAqepbL9W fQycQgowRK4BJVkXMvw1Wo0BlvCa0yq3vmfvCd72dBi/1RZJkWyj0xakgC1Zsbc1 +S94OYCm2mR532M4j5ndn2uwspfU2rmD04Tkk/5s+xq8hbW665aICLGPwopcLAyv 6T3z/8OZBYGJCiXe0m3uRAwRNssYFXBOcSgxwllsEazmrJSXB9p1nhJkqvA/xV/j twalTF2V72nLOilmr8zgIRYOxUDNZoJfAm1iOr+gVlDx+eid0YpeHCszlx2NawSO H1NCPcr1+SJIhClz9i129i94PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5eAbta icDgRJMNvwYLQpATFHbHMB8GA1UdIwQYMBaAFFh0Ug2ngfeA29cQ1CyEHBOnrRdX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJDRC80RkNCQUMwMEQ0 NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0RGIxeERVTElRY0U2ZXRG MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dIUlNEYWVCOTREYjF4RFVMSVFjRTZldEYxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJDRC80RkNCQUMwMEQ0NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0 RGIxeERVTElRY0U2ZXRGMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4RJ60gzA8LtiXGTroCMHO4wZWqm/ywieyggvUX4QIRE3AAh6qXEw8 sPGs6T1YNICmQe51oAKAOXqGOvbi8g/NTW6pC7ivOnZcggvY6IvBbcIsuTkzo15z Dw5Mv0uB1Xj2Y2h+mXX7ruIMVFbIXohlwpty2TgP9+2aRH0r5R8i1jGyomvhvHBJ 5FDrm6TwDXOgId/dUMxThjnpfp+EPINpkIA51TC9lH9txNPY+0uV06vSakJ74Y5V mo6SMUaC8/92d/1f1EVsqXhQmukjhuVZtRt8WclRsYkKaXLBuruZFtvjEgjPecG/ 5x+HR4KK5E/zkDGqlRAKub782OB3dysv -----END CERTIFICATE-----Generated at Sat Dec 6 14:27:47 2025 by rpki-client