This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft File: WkoaHy2STehVVccdPbZrm7DkNkM.mft (raw, json) Hash identifier: IHMIhce9FQeR3EBheHy71iCh8euFnMl+yKRqyNS96Cs= Subject key identifier: 42:4B:22:B2:C5:FE:06:C8:57:88:8D:BA:37:63:6E:91:EF:CF:10:26 Authority key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 Certificate issuer: /CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Certificate serial: 0C7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft Manifest number: 0C62 Signing time: Thu 04 Dec 2025 18:01:13 +0000 Manifest this update: Thu 04 Dec 2025 18:01:13 +0000 Manifest next update: Thu 11 Dec 2025 18:01:13 +0000 Files and hashes: 1: WkoaHy2STehVVccdPbZrm7DkNkM.crl (hash: DvRh+qafmMRlDT030Se39ojJH3WUcl4rSafkoKa3Hyg=) 2: 4EB9FBD63CDE11EAB553996BC4F9AE02.roa (hash: 5Pl69Ojf2kmCxfLr0FSueU3iqe1LbesPtFydiCfx1IQ=) 3: 4F4A22E23CDE11EAB553996BC4F9AE02.roa (hash: 5dNjtUvyRJQ8rKds7M86B2djQAg4WheDaP9EfyZTla8=) 4: 504C179A3CDE11EAB553996BC4F9AE02.roa (hash: bqf4/Z70iNIgP7UdmtL9Kr8ESUyHQDpHnkrIZZGc+Nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3194 (0xc7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E87, serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Validity Not Before: Dec 4 18:01:13 2025 GMT Not After : Dec 11 18:01:13 2025 GMT Subject: CN=6931cc69-2fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:11:32:42:1b:8a:06:a8:cd:c4:c3:d7:a5:51: 38:ad:8b:8f:e0:6e:40:cc:0a:76:e3:2e:cb:60:f4: 27:25:b6:4d:72:ae:ba:03:55:a8:98:19:81:a4:e0: 72:5f:23:c4:e2:11:c2:00:93:aa:e7:81:8b:a6:2d: 11:3f:e2:c9:7d:d1:c2:08:14:01:a3:e4:3b:f1:c5: 50:fa:8d:9e:05:e4:cd:66:f7:ff:c6:f8:43:85:a7: 39:75:1a:8c:9f:96:d0:77:a6:ac:91:70:24:6b:04: 52:d9:ba:87:67:02:36:38:00:26:7d:80:21:7d:40: ff:d1:8c:ff:05:f1:bf:84:54:1f:fb:fc:0c:29:72: 90:56:36:0a:5f:51:47:09:40:91:6e:ae:34:41:44: db:42:da:94:48:b0:a0:ff:cf:ac:df:ea:e2:6b:30: 85:66:1c:7d:ce:8b:1f:46:5b:30:7a:4c:77:d8:a6: b7:db:03:a3:96:45:27:1e:fc:07:85:76:e7:01:bf: b8:42:02:9d:a8:5b:42:d6:32:f1:1d:37:fe:6f:ea: 4f:d6:76:cf:9b:03:61:e0:38:5f:62:33:01:24:0f: b7:26:ca:91:6f:74:9d:a4:a5:51:04:65:e7:d8:7a: 77:38:26:58:56:72:ad:37:e3:ac:71:7e:95:92:ec: 0d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4B:22:B2:C5:FE:06:C8:57:88:8D:BA:37:63:6E:91:EF:CF:10:26 X509v3 Authority Key Identifier: keyid:5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0d:d0:85:ef:9b:1b:e8:67:cd:9e:1b:ba:35:af:f8:df:8f: 8f:67:87:2c:5d:be:b9:19:14:64:56:4b:55:9c:c0:83:97:4c: 15:e6:1d:4d:58:41:f8:66:9a:b0:ae:ef:14:6c:e9:9c:6e:be: 77:af:5d:4c:6d:19:6e:15:f5:44:bf:c1:62:0a:c8:6f:2c:45: f0:4c:89:07:af:6a:26:9f:96:e7:ce:5e:af:43:f7:23:0f:56: 0a:09:3c:56:15:c4:8d:32:86:39:d8:d6:29:3a:91:5a:99:3d: fd:05:46:91:34:41:02:29:33:30:a9:e5:b2:65:5e:dc:98:fe: 54:d5:4e:ea:87:4b:39:5f:fe:1b:54:c0:00:0f:4b:3a:e2:cc: fa:08:44:a6:d9:ad:f7:96:95:68:86:a3:3b:72:08:62:08:99: 68:38:42:52:99:63:fd:94:57:a0:1d:a6:56:81:c4:17:74:ec: 76:28:e1:11:65:ae:e7:90:3a:e7:63:59:1d:41:3c:42:f8:f5: fb:37:55:bd:d1:64:30:db:06:bf:d8:b1:7e:ad:79:f0:b3:51: b4:0b:4b:81:0e:08:a6:9e:ee:c2:55:fe:9f:43:05:2b:cf:8e: ee:94:36:2d:cb:4b:38:27:ac:27:13:b5:f3:b0:72:4e:5b:6d: c6:95:8a:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFODcxMTAvBgNVBAUTKDVBNEExQTFGMkQ5MjRERTg1NTU1QzcxRDNEQjY2QjlC QjBFNDM2NDMwHhcNMjUxMjA0MTgwMTEzWhcNMjUxMjExMTgwMTEzWjAYMRYwFAYD VQQDEw02OTMxY2M2OS0yZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwREyQhuKBqjNxMPXpVE4rYuP4G5AzAp24y7LYPQnJbZNcq66A1WomBmBpOBy XyPE4hHCAJOq54GLpi0RP+LJfdHCCBQBo+Q78cVQ+o2eBeTNZvf/xvhDhac5dRqM n5bQd6askXAkawRS2bqHZwI2OAAmfYAhfUD/0Yz/BfG/hFQf+/wMKXKQVjYKX1FH CUCRbq40QUTbQtqUSLCg/8+s3+riazCFZhx9zosfRlswekx32Ka32wOjlkUnHvwH hXbnAb+4QgKdqFtC1jLxHTf+b+pP1nbPmwNh4DhfYjMBJA+3JsqRb3SdpKVRBGXn 2Hp3OCZYVnKtN+OscX6VkuwNHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJLIrLF /gbIV4iNujdjbpHvzxAmMB8GA1UdIwQYMBaAFFpKGh8tkk3oVVXHHT22a5uw5DZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU4Ny9BOUYzQzZFRTEy OUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1RlaFZWY2NkUGJacm03RGtO a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1drb2FIeTJTVGVoVlZjY2RQYlpybTdEa05rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU4Ny9BOUYzQzZFRTEyOUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1Rl aFZWY2NkUGJacm03RGtOa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMDdCF75sb6GfNnhu6Na/434+PZ4csXb65GRRkVktVnMCDl0wV5h1N WEH4Zpqwru8UbOmcbr53r11MbRluFfVEv8FiCshvLEXwTIkHr2omn5bnzl6vQ/cj D1YKCTxWFcSNMoY52NYpOpFamT39BUaRNEECKTMwqeWyZV7cmP5U1U7qh0s5X/4b VMAAD0s64sz6CESm2a33lpVohqM7cghiCJloOEJSmWP9lFegHaZWgcQXdOx2KOER Za7nkDrnY1kdQTxC+PX7N1W90WQw2wa/2LF+rXnws1G0C0uBDgimnu7CVf6fQwUr z47ulDYty0s4J6wnE7XzsHJOW23GlYrM -----END CERTIFICATE-----Generated at Sat Dec 6 17:21:48 2025 by rpki-client