This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft File: wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft (raw, json) Hash identifier: EfLepzBaSg+PYMr43Fzvp55ttZ9p/dbWOHYOBLEwCiw= Subject key identifier: 64:55:27:85:9C:D1:A2:4C:DF:40:C5:E2:A6:70:FF:08:C4:6C:15:6F Authority key identifier: C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 Certificate issuer: /CN=A91DD1F9/serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft Manifest number: FF Signing time: Fri 05 Dec 2025 03:10:30 +0000 Manifest this update: Fri 05 Dec 2025 03:10:29 +0000 Manifest next update: Fri 12 Dec 2025 03:10:29 +0000 Files and hashes: 1: wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl (hash: In4gEagFoSvVVi+hhDGPzTGIaW/VgmvUE9SC6uD6YDQ=) 2: 36CFD1EE4AD011EF9B941D17C4F9AE02.roa (hash: R4BuH0z4o97i8tZeyVvIgqOfDLo2IBdC5O5u6V1sdyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1F9, serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Validity Not Before: Dec 5 03:10:29 2025 GMT Not After : Dec 12 03:10:29 2025 GMT Subject: CN=69324d26-8069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:25:e0:55:ae:f7:94:39:df:25:c9:60:a9:a4: 08:c0:d0:46:e8:90:85:2a:ff:91:0b:8e:4b:a0:15: 62:72:7d:06:9f:df:23:eb:a3:4f:a0:68:b7:6e:b8: 3d:e9:97:3d:e9:70:55:72:53:1f:e0:1c:a4:7d:67: fd:18:fe:1c:77:fb:39:34:8b:dd:28:be:85:41:0c: d6:1a:c5:f6:8c:a1:8d:8d:c0:cc:8b:ad:08:6d:1e: 36:75:10:5e:2d:ee:32:73:fb:d5:42:c9:fd:83:ce: bb:40:90:a9:0e:3f:3d:af:60:6b:2e:54:09:62:bd: ee:45:05:1d:5b:ac:6a:95:ae:a6:30:bf:46:26:a8: d9:9a:c2:c4:05:b2:d5:87:b1:84:06:82:ba:b7:4b: b4:85:60:7a:57:4c:86:6b:d1:02:72:97:33:b2:7d: 37:2e:63:1e:ef:77:41:4d:22:ff:ed:2f:ba:7e:7a: 15:af:f9:fc:b3:e9:a0:af:fd:2f:6a:d2:96:ad:2f: cd:28:6f:51:d0:75:c4:40:da:87:d2:62:01:af:b5: 04:53:82:9c:d0:8c:98:a7:ec:d3:bb:a5:70:33:f9: 21:84:06:63:b6:15:d5:9c:62:af:9b:85:53:f4:c0: ad:c7:17:a2:97:2d:63:e9:84:c8:4a:98:9f:1f:62: a6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:55:27:85:9C:D1:A2:4C:DF:40:C5:E2:A6:70:FF:08:C4:6C:15:6F X509v3 Authority Key Identifier: keyid:C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:04:6a:9d:f1:d3:f5:17:4b:ee:3f:27:76:17:af:d3:48:65: 54:ee:8a:98:08:16:e3:77:5b:da:41:bd:fb:37:da:cc:ab:dc: 85:38:92:fa:b5:9e:93:69:31:53:b7:56:e8:81:c7:36:34:48: f9:f7:ee:d8:fb:30:33:60:89:68:04:25:1f:47:86:46:c8:88: 2d:4d:75:a5:f2:52:04:53:90:be:b4:ae:90:d8:c8:12:ac:3e: 36:4e:46:cd:2c:37:42:89:72:75:c2:af:9a:a3:b1:48:d7:4b: 24:8c:6d:45:ae:33:c3:15:90:20:71:88:d4:86:b0:70:f0:42: 4b:d1:ba:24:c4:cd:08:10:4a:02:4c:8e:58:d4:d2:67:1e:46: 8a:57:93:4e:b8:67:bb:5b:d0:66:ad:7d:88:d2:d1:49:bf:c4: ba:fa:df:f8:02:6f:c1:76:66:21:74:11:2d:6c:ce:f7:a9:99: f9:56:1f:5d:f4:c4:00:fb:41:89:56:47:3a:40:42:2e:41:5c: 9d:ac:be:71:60:a5:b5:6a:f7:09:3d:7f:f4:7b:63:41:c1:dd: 50:09:bf:18:0c:1e:b5:e2:02:67:35:7f:55:8b:be:7a:60:38: 1e:48:40:ab:c2:6e:5f:8d:fd:23:1d:5e:ea:77:8e:ce:5a:e1: 0d:6c:c8:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxRjkxMTAvBgNVBAUTKEMyN0FFMUQxNjQ3MjlGNDNEOUUwRkE2NEJFNTFEMEI2 QUUwOUVCOTkwHhcNMjUxMjA1MDMxMDI5WhcNMjUxMjEyMDMxMDI5WjAYMRYwFAYD VQQDEw02OTMyNGQyNi04MDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yXgVa73lDnfJclgqaQIwNBG6JCFKv+RC45LoBVicn0Gn98j66NPoGi3brg9 6Zc96XBVclMf4BykfWf9GP4cd/s5NIvdKL6FQQzWGsX2jKGNjcDMi60IbR42dRBe Le4yc/vVQsn9g867QJCpDj89r2BrLlQJYr3uRQUdW6xqla6mML9GJqjZmsLEBbLV h7GEBoK6t0u0hWB6V0yGa9ECcpczsn03LmMe73dBTSL/7S+6fnoVr/n8s+mgr/0v atKWrS/NKG9R0HXEQNqH0mIBr7UEU4Kc0IyYp+zTu6VwM/khhAZjthXVnGKvm4VT 9MCtxxeily1j6YTISpifH2KmuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRVJ4Wc 0aJM30DF4qZw/wjEbBVvMB8GA1UdIwQYMBaAFMJ64dFkcp9D2eD6ZL5R0LauCeuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDFGOS80MDJFRDI3MjRB Q0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4wUFo0UHBrdmxIUXRxNEo2 NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ducmgwV1J5bjBQWjRQcGt2bEhRdHE0SjY1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDFGOS80MDJFRDI3MjRBQ0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4w UFo0UHBrdmxIUXRxNEo2NWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaBGqd8dP1F0vuPyd2F6/TSGVU7oqYCBbjd1vaQb37N9rMq9yFOJL6 tZ6TaTFTt1bogcc2NEj59+7Y+zAzYIloBCUfR4ZGyIgtTXWl8lIEU5C+tK6Q2MgS rD42TkbNLDdCiXJ1wq+ao7FI10skjG1FrjPDFZAgcYjUhrBw8EJL0bokxM0IEEoC TI5Y1NJnHkaKV5NOuGe7W9BmrX2I0tFJv8S6+t/4Am/BdmYhdBEtbM73qZn5Vh9d 9MQA+0GJVkc6QEIuQVydrL5xYKW1avcJPX/0e2NBwd1QCb8YDB614gJnNX9Vi756 YDgeSECrwm5fjf0jHV7qd47OWuENbMiw -----END CERTIFICATE-----Generated at Sun Dec 7 01:55:13 2025 by rpki-client