This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft File: W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft (raw, json) Hash identifier: 1LKl5yOv9kK0hmh4zYHwuy3qUBQPU6RPvZ/urKRD/xM= Subject key identifier: 48:AD:04:E1:D8:85:4B:8C:A2:D8:68:BF:3B:BE:36:BE:84:9E:B7:AF Authority key identifier: 5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD Certificate issuer: /CN=A9122DC4/serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft Manifest number: 0184 Signing time: Sun 21 Dec 2025 03:07:32 +0000 Manifest this update: Sun 21 Dec 2025 03:07:31 +0000 Manifest next update: Sun 28 Dec 2025 03:07:31 +0000 Files and hashes: 1: W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl (hash: 5MwsD7xhJqAbxdKF5ZfyhPDkR89extikW348S1rohYM=) 2: 2D55C84C25CE11F0A36ACB18C4F9AE02.roa (hash: Ha1RED7wj5vvuljsqQyxT/3es50bYuYX2UgeIHA9Bqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122DC4, serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Validity Not Before: Dec 21 03:07:31 2025 GMT Not After : Dec 28 03:07:31 2025 GMT Subject: CN=69476474-8052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1a:8c:7d:30:95:b4:6b:09:f8:a5:1e:3c:c0: 20:c4:63:7c:8e:ad:60:a0:02:da:f3:b0:65:e3:d6: 1c:f4:ec:61:90:0c:78:fb:ca:bc:3d:97:7e:29:b1: fe:20:3e:87:86:92:62:9d:31:7f:78:ac:5d:2e:9b: f7:5f:f0:56:d4:f3:5d:21:01:5e:45:0b:27:7a:3d: 9e:d1:96:8e:36:a7:0d:73:fe:c3:de:05:08:f3:8a: 77:88:e7:14:d0:cc:17:6e:08:49:c4:77:ad:c2:fa: dc:cd:e2:b8:25:4c:ed:5e:ac:3f:df:2d:a5:eb:ce: dd:ea:5f:3d:bd:9d:a9:9c:df:1d:92:20:fa:20:80: 99:5f:62:6f:22:5a:df:2d:27:63:e8:9b:11:31:5a: 03:9a:2a:55:1b:3c:fb:f4:5d:34:f5:b0:5f:03:61: 60:44:73:51:da:c0:3a:10:41:55:10:01:22:08:9d: 1e:3d:4b:d1:e6:75:ec:9c:28:89:af:58:e6:89:d8: 27:97:a5:01:c2:a1:0f:4d:f0:c0:af:a7:77:9b:70: 6e:a8:11:7d:5f:e3:c6:8f:df:9c:36:09:a6:c6:66: 77:ee:f7:94:bc:2f:bc:5c:ca:2d:cd:9c:1a:94:23: f3:7e:e5:c4:61:21:5f:d2:51:bb:52:9d:d7:f3:e8: eb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AD:04:E1:D8:85:4B:8C:A2:D8:68:BF:3B:BE:36:BE:84:9E:B7:AF X509v3 Authority Key Identifier: keyid:5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7c:10:ce:67:ae:3c:df:7e:90:4a:4d:c6:cb:21:75:ad:2f: 63:29:4c:76:30:d3:8e:3c:21:be:89:d5:52:2f:bd:15:64:01: c7:f6:90:f4:cc:b7:10:da:94:68:b5:3b:90:b4:2e:44:b5:a4: 8d:b9:e4:59:1c:b9:c1:7f:91:56:a2:ab:95:54:b6:3c:72:55: 58:a0:c3:b2:4b:6c:89:85:ab:9c:08:99:f2:31:43:89:f9:ff: 29:7b:f8:26:0d:ec:4a:11:7d:d5:1d:63:3e:0d:b4:7a:0e:a1: d4:ef:89:81:96:00:bd:aa:7b:3d:c5:51:42:08:da:c1:c9:e7: 58:2c:82:e1:90:d2:42:db:fa:5b:e0:cf:1d:d8:c5:bd:80:6f: 08:af:91:31:c2:45:30:54:93:93:54:29:07:e4:48:b7:d4:25: 1e:87:f6:e3:80:61:ef:18:26:eb:24:f1:11:b7:bb:d8:0e:c0: 84:a7:24:bb:4e:9b:c6:01:82:f2:4b:82:87:73:27:94:3d:77: dc:a7:53:49:b9:d8:b5:19:dc:1b:6b:63:3c:9a:36:e4:0c:89: 01:75:e8:ea:49:2c:5d:f4:48:76:50:20:2a:91:0f:22:fc:f4: 04:d7:17:f2:65:d7:54:1d:91:fe:89:ad:4f:10:fc:7c:49:92: 83:db:94:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEQzQxMTAvBgNVBAUTKDVCNDMwMEZFNDlBRUUwRTQxNUNDNjE5NzZDMDJCNUI5 QzAyMDRBQUQwHhcNMjUxMjIxMDMwNzMxWhcNMjUxMjI4MDMwNzMxWjAYMRYwFAYD VQQDDA02OTQ3NjQ3NC04MDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRqMfTCVtGsJ+KUePMAgxGN8jq1goALa87Bl49Yc9OxhkAx4+8q8PZd+KbH+ ID6HhpJinTF/eKxdLpv3X/BW1PNdIQFeRQsnej2e0ZaONqcNc/7D3gUI84p3iOcU 0MwXbghJxHetwvrczeK4JUztXqw/3y2l687d6l89vZ2pnN8dkiD6IICZX2JvIlrf LSdj6JsRMVoDmipVGzz79F009bBfA2FgRHNR2sA6EEFVEAEiCJ0ePUvR5nXsnCiJ r1jmidgnl6UBwqEPTfDAr6d3m3BuqBF9X+PGj9+cNgmmxmZ37veUvC+8XMotzZwa lCPzfuXEYSFf0lG7Up3X8+jrEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEitBOHY hUuMothovzu+Nr6EnrevMB8GA1UdIwQYMBaAFFtDAP5JruDkFcxhl2wCtbnAIEqt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkRDNC81QkVERDA1NEIz MTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRPUVZ6R0dYYkFLMXVjQWdT cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cwTUFfa211NE9RVnpHR1hiQUsxdWNBZ1NxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkRDNC81QkVERDA1NEIzMTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRP UVZ6R0dYYkFLMXVjQWdTcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6fBDOZ648336QSk3GyyF1rS9jKUx2MNOOPCG+idVSL70VZAHH9pD0 zLcQ2pRotTuQtC5EtaSNueRZHLnBf5FWoquVVLY8clVYoMOyS2yJhaucCJnyMUOJ +f8pe/gmDexKEX3VHWM+DbR6DqHU74mBlgC9qns9xVFCCNrByedYLILhkNJC2/pb 4M8d2MW9gG8Ir5ExwkUwVJOTVCkH5Ei31CUeh/bjgGHvGCbrJPERt7vYDsCEpyS7 TpvGAYLyS4KHcyeUPXfcp1NJudi1Gdwba2M8mjbkDIkBdejqSSxd9Eh2UCAqkQ8i /PQE1xfyZddUHZH+ia1PEPx8SZKD25RR -----END CERTIFICATE-----Generated at Mon Dec 22 17:32:28 2025 by rpki-client