This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft File: wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft (raw, json) Hash identifier: 9jVzMst8j/cXqT+4Jrx2yTMyrxSonkESzQmExOL0a08= Subject key identifier: C2:95:2F:1B:C9:FD:86:31:18:C3:2E:DE:90:89:E3:E4:43:2E:C9:BF Authority key identifier: C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF Certificate issuer: /CN=A911EB2D/serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF Certificate serial: 0921 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft Manifest number: 09F3 Signing time: Wed 24 Dec 2025 19:46:52 +0000 Manifest this update: Wed 24 Dec 2025 19:46:52 +0000 Manifest next update: Wed 31 Dec 2025 19:46:52 +0000 Files and hashes: 1: wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl (hash: nS9gU97ExIX1MkJrwLWyRu79tUCGEbiiNZ3oc0rKH9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2337 (0x921) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EB2D, serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF Validity Not Before: Dec 24 19:46:52 2025 GMT Not After : Dec 31 19:46:52 2025 GMT Subject: CN=694c432c-b65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:ec:d2:63:72:15:4a:ef:d0:cc:cb:96:71: 44:1d:39:33:67:7e:68:9b:ce:c1:b0:92:dd:af:39: 25:a0:47:da:54:ed:4a:41:71:0f:2d:2c:6c:76:87: 59:77:d4:9b:68:62:25:5e:af:1e:bd:8f:78:ed:06: 95:5e:8d:cb:86:e5:81:bd:ed:91:f8:87:63:8f:55: 01:51:8a:3e:b8:15:be:9f:91:97:f5:4e:f6:43:e3: 80:d3:14:4a:7b:72:a6:52:00:6f:04:b3:84:77:09: ff:4c:2e:80:3e:be:72:56:ed:c2:b9:a2:00:8b:06: e1:7f:5b:e2:8f:42:d6:50:ef:b9:c1:4e:f4:24:e1: 87:7b:51:e3:bb:cf:1f:b5:71:32:b0:c4:46:86:89: c3:fc:5e:63:4c:ef:20:4d:a4:a1:ed:82:66:b4:be: 87:08:f0:d1:24:80:fb:bd:ac:9c:3e:13:28:5a:df: 96:d5:db:5a:5d:c4:20:38:23:fb:c1:0b:56:1e:b4: b6:bf:69:88:5a:9f:a1:b6:d7:6e:3a:da:99:e5:76: 13:2f:1f:e3:aa:c8:03:7e:b9:3c:74:b0:cb:55:a1: a0:f1:85:25:f2:19:ca:34:d7:d3:8e:7c:5d:03:f4: 55:67:93:01:ee:23:a1:b9:7d:05:75:c2:d9:1d:79: 48:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:95:2F:1B:C9:FD:86:31:18:C3:2E:DE:90:89:E3:E4:43:2E:C9:BF X509v3 Authority Key Identifier: keyid:C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f6:09:c1:c2:ea:dc:95:e2:8d:05:52:00:f9:c0:30:b9:f9: fb:77:45:74:18:92:84:b4:fb:d6:9a:b7:0a:72:12:0b:cc:d8: c6:e2:c8:9c:c8:71:2c:c3:35:e9:b1:bb:0a:b4:ed:f7:9b:9d: 64:d3:07:78:95:48:a6:0d:11:0e:41:bb:18:5e:3f:17:64:7f: 0f:df:d1:59:58:7f:72:10:71:de:db:1c:d3:23:22:cf:7a:c2: 0e:da:ea:2c:eb:34:a8:14:5e:da:9e:39:f7:39:ec:4b:82:c0: 49:2b:74:c9:df:44:76:2c:61:07:01:43:0f:14:dc:f2:e2:91: 91:71:c8:4d:2a:74:06:4a:ca:ff:0f:16:95:b4:7c:62:8e:0d: 5c:98:7a:85:b1:d8:6f:cc:bc:28:fa:6b:1f:cf:96:50:12:62: 05:52:15:71:7e:b1:fd:31:7a:dc:a8:a0:4a:f6:03:6a:a1:f9: a9:3f:eb:95:15:33:7e:e4:4f:41:09:3d:8b:b0:7e:35:24:6d: ce:80:d3:0f:33:38:4e:bf:06:5e:e0:14:6d:ba:24:8a:9b:a5: ee:2d:9e:ad:d1:3f:c3:34:32:59:9f:01:f1:fa:6f:20:a0:6f: 0b:72:38:9a:30:12:6a:cb:b7:c4:05:a0:22:54:bf:7a:d5:c5: 19:f4:2b:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVCMkQxMTAvBgNVBAUTKEMwMzA1NkY2ODA5OTY0N0FGNzU4NUU1M0Y2QTk4RUNG RjNEOTg4REYwHhcNMjUxMjI0MTk0NjUyWhcNMjUxMjMxMTk0NjUyWjAYMRYwFAYD VQQDDA02OTRjNDMyYy1iNjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtTs0mNyFUrv0MzLlnFEHTkzZ35om87BsJLdrzkloEfaVO1KQXEPLSxsdodZ d9SbaGIlXq8evY947QaVXo3LhuWBve2R+Idjj1UBUYo+uBW+n5GX9U72Q+OA0xRK e3KmUgBvBLOEdwn/TC6APr5yVu3CuaIAiwbhf1vij0LWUO+5wU70JOGHe1Hju88f tXEysMRGhonD/F5jTO8gTaSh7YJmtL6HCPDRJID7vaycPhMoWt+W1dtaXcQgOCP7 wQtWHrS2v2mIWp+httduOtqZ5XYTLx/jqsgDfrk8dLDLVaGg8YUl8hnKNNfTjnxd A/RVZ5MB7iOhuX0FdcLZHXlIOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKVLxvJ /YYxGMMu3pCJ4+RDLsm/MB8GA1UdIwQYMBaAFMAwVvaAmWR691heU/apjs/z2Yjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUIyRC80QTZDRURBQ0JF QjMxMUVBODI2ODc2NDNDNEY5QUUwMi93REJXOW9DWlpIcjNXRjVUOXFtT3pfUFpp TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dEQlc5b0NaWkhyM1dGNVQ5cW1Pel9QWmlOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUIyRC80QTZDRURBQ0JFQjMxMUVBODI2ODc2NDNDNEY5QUUwMi93REJXOW9DWlpI cjNXRjVUOXFtT3pfUFppTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb9gnBwurcleKNBVIA+cAwufn7d0V0GJKEtPvWmrcKchILzNjG4sic yHEswzXpsbsKtO33m51k0wd4lUimDREOQbsYXj8XZH8P39FZWH9yEHHe2xzTIyLP esIO2uos6zSoFF7anjn3OexLgsBJK3TJ30R2LGEHAUMPFNzy4pGRcchNKnQGSsr/ DxaVtHxijg1cmHqFsdhvzLwo+msfz5ZQEmIFUhVxfrH9MXrcqKBK9gNqofmpP+uV FTN+5E9BCT2LsH41JG3OgNMPMzhOvwZe4BRtuiSKm6XuLZ6t0T/DNDJZnwHx+m8g oG8LcjiaMBJqy7fEBaAiVL961cUZ9CtK -----END CERTIFICATE-----Generated at Wed Dec 24 21:24:00 2025 by rpki-client