This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft File: wzct4f6eU8GLMFFtlkxDZyLrPss.mft (raw, json) Hash identifier: hQD6tL7yjWf5gUTexOVQNQih5c/6DhBTye+vx+yJWOQ= Subject key identifier: 5E:80:B2:8F:2B:EA:20:D4:AC:29:89:B1:64:17:7F:A6:3E:64:C8:1E Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB Certificate issuer: /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft Manifest number: F7 Signing time: Wed 03 Dec 2025 03:41:08 +0000 Manifest this update: Wed 03 Dec 2025 03:41:07 +0000 Manifest next update: Wed 10 Dec 2025 03:41:07 +0000 Files and hashes: 1: wzct4f6eU8GLMFFtlkxDZyLrPss.crl (hash: P+JITP/TLXQak+tnQ7J0Kg+Vbj6DoFw0SFy1BgRSrsw=) 2: 5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (hash: +1ovp2NN4rcx7JakHr8vwRXXsKphyunMjKUMuwNMqnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 03:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C7CD, serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Validity Not Before: Dec 3 03:41:07 2025 GMT Not After : Dec 10 03:41:07 2025 GMT Subject: CN=692fb153-3bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:89:bb:64:36:cd:8a:1a:ae:f7:ba:9c:45:30: 65:22:1e:d0:e5:08:6b:b5:0d:1e:1e:d8:7e:16:ff: 97:6b:91:94:9b:20:f0:4e:18:88:41:64:cd:5c:55: 28:63:4a:53:6b:50:04:f2:44:0f:7b:ad:ff:74:ff: 0a:20:68:ac:64:15:b6:4c:bb:ea:c9:08:9d:11:cd: 8d:4c:e3:60:16:d0:e9:2f:99:be:b4:27:91:46:59: b7:27:7a:63:a7:08:c4:03:78:6d:38:8a:ae:82:38: 67:99:4a:a9:ce:33:cb:c3:4c:4e:c0:cf:c5:e8:5c: b6:f3:67:ae:ae:a2:40:41:78:03:3a:b9:72:b1:39: ff:af:b7:91:83:ec:15:bc:fb:3b:b9:72:12:50:bf: 26:c1:db:43:00:1d:22:8d:06:11:ba:46:77:11:59: 4e:81:c6:22:2e:8b:1d:60:44:5b:c3:74:c6:9d:f9: 89:83:82:e8:1f:f9:e5:75:17:9b:85:b4:ed:4b:d6: 78:67:4e:0c:0b:e8:ee:49:61:ed:ee:75:91:46:5a: cd:80:42:62:bc:cb:cb:aa:7c:a7:f9:f2:fa:26:ee: 5a:d8:43:f0:87:05:b3:7b:0c:f0:8c:5c:b1:c8:a3: 0c:74:a0:76:ca:d4:c3:0d:48:4c:7e:b3:4b:bf:80: 15:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:80:B2:8F:2B:EA:20:D4:AC:29:89:B1:64:17:7F:A6:3E:64:C8:1E X509v3 Authority Key Identifier: keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:09:9f:97:ee:10:f9:24:1b:f8:3d:ba:0e:c5:86:54:53:b6: 6f:d4:52:9c:bf:4d:56:f0:30:28:6d:09:9c:9e:78:ec:38:61: 26:27:8b:2d:18:e3:fb:bd:99:a3:50:b2:ff:81:00:c8:64:e6: f2:35:df:ac:4b:0d:a1:2c:b9:4b:51:77:0f:11:e8:38:39:77: 1c:69:a7:19:62:e6:e6:7e:38:43:32:cd:8a:96:b1:57:47:d4: 02:13:06:93:ec:d5:c0:c1:41:35:11:9f:bb:ad:38:1b:09:84: 3a:6a:dc:b7:48:ec:c8:33:83:bb:60:68:80:c6:8e:f5:e5:dd: 86:bb:7c:e2:6d:d6:7b:cd:8c:63:92:04:0f:da:77:53:84:50: 90:c0:8e:64:96:2b:ed:ff:5b:77:a8:e5:52:78:29:3e:69:e5: 09:a0:5f:be:b3:0f:cb:4b:32:7f:9c:e2:0b:95:f0:c0:75:5e: 35:06:bf:bb:3a:7a:54:4c:57:06:87:66:7c:91:07:64:92:06: ad:62:84:a2:66:7a:17:39:79:b9:c2:3b:03:40:d3:23:a3:fd: b9:72:a2:7c:dc:6f:50:ba:dd:b2:e7:60:cb:73:84:d4:66:34: df:4c:a3:4b:1c:ae:fb:62:b9:ba:ae:ab:d7:e7:85:23:6c:91: 94:72:41:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3Q0QxMTAvBgNVBAUTKEMzMzcyREUxRkU5RTUzQzE4QjMwNTE2RDk2NEM0MzY3 MjJFQjNFQ0IwHhcNMjUxMjAzMDM0MTA3WhcNMjUxMjEwMDM0MTA3WjAYMRYwFAYD VQQDEw02OTJmYjE1My0zYmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxom7ZDbNihqu97qcRTBlIh7Q5QhrtQ0eHth+Fv+Xa5GUmyDwThiIQWTNXFUo Y0pTa1AE8kQPe63/dP8KIGisZBW2TLvqyQidEc2NTONgFtDpL5m+tCeRRlm3J3pj pwjEA3htOIqugjhnmUqpzjPLw0xOwM/F6Fy282eurqJAQXgDOrlysTn/r7eRg+wV vPs7uXISUL8mwdtDAB0ijQYRukZ3EVlOgcYiLosdYERbw3TGnfmJg4LoH/nldReb hbTtS9Z4Z04MC+juSWHt7nWRRlrNgEJivMvLqnyn+fL6Ju5a2EPwhwWzewzwjFyx yKMMdKB2ytTDDUhMfrNLv4AVkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6Aso8r 6iDUrCmJsWQXf6Y+ZMgeMB8GA1UdIwQYMBaAFMM3LeH+nlPBizBRbZZMQ2ci6z7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzdDRC9ENjRBMUZCNDVF QTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4R0xNRkZ0bGt4RFp5THJQ c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3d6Y3Q0ZjZlVThHTE1GRnRsa3hEWnlMclBzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzdDRC9ENjRBMUZCNDVFQTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4 R0xNRkZ0bGt4RFp5THJQc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKCZ+X7hD5JBv4PboOxYZUU7Zv1FKcv01W8DAobQmcnnjsOGEmJ4st GOP7vZmjULL/gQDIZObyNd+sSw2hLLlLUXcPEeg4OXccaacZYubmfjhDMs2KlrFX R9QCEwaT7NXAwUE1EZ+7rTgbCYQ6aty3SOzIM4O7YGiAxo715d2Gu3zibdZ7zYxj kgQP2ndThFCQwI5klivt/1t3qOVSeCk+aeUJoF++sw/LSzJ/nOILlfDAdV41Br+7 OnpUTFcGh2Z8kQdkkgatYoSiZnoXOXm5wjsDQNMjo/25cqJ83G9Qut2y52DLc4TU ZjTfTKNLHK77Yrm6rqvX54UjbJGUckFM -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:05 2025 by rpki-client