This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft File: wsFz12JIhbwL1vwZPvvO6VQ_okM.mft (raw, json) Hash identifier: SU+RLryL9Z8skoyN65jkapPC7bt88/7OxZ9uB9YHxGc= Subject key identifier: CC:54:6E:EC:48:EF:39:43:7F:3E:B9:94:2E:AA:43:69:00:5F:58:C6 Authority key identifier: C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43 Certificate issuer: /CN=A91C8DF1/serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft Manifest number: 1C Signing time: Fri 05 Dec 2025 05:38:14 +0000 Manifest this update: Fri 05 Dec 2025 05:38:14 +0000 Manifest next update: Fri 12 Dec 2025 05:38:14 +0000 Files and hashes: 1: wsFz12JIhbwL1vwZPvvO6VQ_okM.crl (hash: jwSsaeAUq73PorBjgQhLWpSx/Vsdkype/uNfJHw8ZxQ=) 2: BD37307CAAD011F0ACA9F95DC4F9AE02.roa (hash: EBR7I5Emy01zmCBxXGGOXl37lY5pYBdqwHQoDpK1N3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8DF1, serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243 Validity Not Before: Dec 5 05:38:14 2025 GMT Not After : Dec 12 05:38:14 2025 GMT Subject: CN=69326fc6-eaa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ce:c4:ab:70:e2:b0:a6:83:89:de:09:5a:d6: 6b:8d:2f:0f:a0:b9:e0:a5:a3:81:f5:04:f9:ca:66: a2:82:3f:09:41:02:2b:39:71:fe:ad:d4:eb:31:36: b9:37:7e:09:49:f4:76:d9:16:ba:30:53:a3:94:7a: 88:75:1c:c4:16:16:7a:fc:82:87:0b:18:16:90:da: 21:61:80:14:4f:58:8a:37:f1:bf:9e:7d:7b:29:01: df:55:54:63:f8:51:8b:fc:33:65:9d:ce:24:19:f6: a2:39:23:47:90:9f:bb:b2:f7:64:83:d0:72:c4:da: da:72:80:f6:81:32:32:06:d6:28:40:51:04:31:d4: 62:df:b6:02:5d:22:a2:c6:a0:76:30:32:4b:01:0f: 42:f3:f3:64:8b:da:7f:82:11:43:b7:56:c6:0c:04: 1e:f4:bf:03:e8:36:ef:f4:2f:46:b0:aa:92:e2:20: c0:88:d4:7e:c3:27:59:b1:e9:d4:3b:14:f4:ef:ba: 6e:80:24:90:d1:dd:8b:cf:08:52:aa:18:f0:27:81: 88:12:06:8d:87:45:36:92:63:f5:e7:e8:1f:a7:4d: d7:3c:c7:6c:81:56:9a:d4:98:a7:83:bb:43:d3:29: cb:5a:8b:c1:0f:0f:96:53:2f:ba:7f:1a:ae:09:43: 6a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:54:6E:EC:48:EF:39:43:7F:3E:B9:94:2E:AA:43:69:00:5F:58:C6 X509v3 Authority Key Identifier: keyid:C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:11:b9:ba:40:25:3d:a4:7f:c7:90:86:a1:68:e2:ec:c3:25: 59:df:70:54:6d:67:5a:2f:73:2e:9c:04:72:cd:c9:6c:5b:be: 2d:e4:95:1b:18:ab:15:a7:dc:85:7e:fa:da:f9:50:1b:ff:58: 51:37:6f:40:54:ed:84:fc:4d:7d:a2:61:89:44:8b:80:fb:8d: c3:9b:91:da:38:9b:b3:23:05:2e:52:71:4d:b8:42:6d:5d:ee: c8:13:cb:dc:ea:2a:10:2f:ec:74:c2:06:96:75:75:a5:ce:b5: 1c:c3:7d:3d:7e:e6:b5:5b:fb:04:a2:b8:77:f6:4a:ae:88:ce: 0d:b4:d6:62:28:5f:0b:6b:36:24:15:40:3c:39:dc:b3:9c:09: 2d:d5:e0:ee:c1:74:36:3b:51:2b:46:69:d5:71:4d:c5:a6:4f: 14:14:62:df:57:08:84:1c:f7:e0:85:ba:95:7a:8b:f4:53:17: 69:91:c6:8a:86:44:26:d6:79:97:92:9b:03:2e:b7:fa:24:94: 7c:21:4e:31:e7:00:3d:66:de:cc:0e:4e:27:2c:03:68:8c:a0: a6:ce:4d:16:14:48:49:8a:4d:64:ba:9f:8b:f2:01:24:00:8f: 5b:84:f8:aa:40:79:18:75:d7:a6:f9:56:a1:e4:3b:13:dd:2c: 16:e2:7b:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OERGMTExMC8GA1UEBRMoQzJDMTczRDc2MjQ4ODVCQzBCRDZGQzE5M0VGQkNFRTk1 NDNGQTI0MzAeFw0yNTEyMDUwNTM4MTRaFw0yNTEyMTIwNTM4MTRaMBgxFjAUBgNV BAMTDTY5MzI2ZmM2LWVhYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDazsSrcOKwpoOJ3gla1muNLw+gueClo4H1BPnKZqKCPwlBAis5cf6t1OsxNrk3 fglJ9HbZFrowU6OUeoh1HMQWFnr8gocLGBaQ2iFhgBRPWIo38b+efXspAd9VVGP4 UYv8M2WdziQZ9qI5I0eQn7uy92SD0HLE2tpygPaBMjIG1ihAUQQx1GLftgJdIqLG oHYwMksBD0Lz82SL2n+CEUO3VsYMBB70vwPoNu/0L0awqpLiIMCI1H7DJ1mx6dQ7 FPTvum6AJJDR3YvPCFKqGPAngYgSBo2HRTaSY/Xn6B+nTdc8x2yBVprUmKeDu0PT Kctai8EPD5ZTL7p/Gq4JQ2pLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzFRu7Ejv OUN/PrmULqpDaQBfWMYwHwYDVR0jBBgwFoAUwsFz12JIhbwL1vwZPvvO6VQ/okMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4REYxL0U2MTdBRDkyQUFD RjExRjBCQjExRkI1QkM0RjlBRTAyL3dzRnoxMkpJaGJ3TDF2d1pQdnZPNlZRX29r TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd3NGejEySkloYndMMXZ3WlB2dk82VlFfb2tNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 REYxL0U2MTdBRDkyQUFDRjExRjBCQjExRkI1QkM0RjlBRTAyL3dzRnoxMkpJaGJ3 TDF2d1pQdnZPNlZRX29rTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKURubpAJT2kf8eQhqFo4uzDJVnfcFRtZ1ovcy6cBHLNyWxbvi3klRsY qxWn3IV++tr5UBv/WFE3b0BU7YT8TX2iYYlEi4D7jcObkdo4m7MjBS5ScU24Qm1d 7sgTy9zqKhAv7HTCBpZ1daXOtRzDfT1+5rVb+wSiuHf2Sq6Izg201mIoXwtrNiQV QDw53LOcCS3V4O7BdDY7UStGadVxTcWmTxQUYt9XCIQc9+CFupV6i/RTF2mRxoqG RCbWeZeSmwMut/oklHwhTjHnAD1m3swOTicsA2iMoKbOTRYUSEmKTWS6n4vyASQA j1uE+KpAeRh116b5VqHkOxPdLBbie8A= -----END CERTIFICATE-----Generated at Sat Dec 6 16:01:23 2025 by rpki-client