This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft File: WYUGlV49GgWTCLSexvcnjZpeGrg.mft (raw, json) Hash identifier: 0tukAGVpcnv1idvPcKUcklYUz4oUvY+zZsPT2KsgdV4= Subject key identifier: EC:7D:76:CC:C9:DA:08:05:6E:63:82:5C:54:35:3F:29:2E:16:7A:8F Authority key identifier: 59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 Certificate issuer: /CN=A9124F2F/serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Certificate serial: 068F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft Manifest number: 0685 Signing time: Thu 18 Dec 2025 21:53:12 +0000 Manifest this update: Thu 18 Dec 2025 21:53:11 +0000 Manifest next update: Thu 25 Dec 2025 21:53:11 +0000 Files and hashes: 1: WYUGlV49GgWTCLSexvcnjZpeGrg.crl (hash: FG1U2lPnY9xO1ikEVNUT9wDOLx0oAClO6hT3N2wU+Dc=) 2: 60A7536AC83311EC8981520CC4F9AE02.roa (hash: /cj0RGnam1KCeb071udMdtYeVjNS+MGC0Nq9zxgjO8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124F2F, serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Validity Not Before: Dec 18 21:53:11 2025 GMT Not After : Dec 25 21:53:11 2025 GMT Subject: CN=694477c8-0f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:6d:ee:d0:de:64:b0:b7:1f:74:6c:02:78: fb:41:48:15:a5:d5:32:a1:ba:ce:74:18:57:e4:89: 0d:21:f9:50:18:c6:cf:08:22:a4:2d:b2:1c:6c:db: e2:61:4c:a7:f0:1b:d1:b8:e8:21:9a:d8:67:c8:db: d8:2b:d9:15:73:6d:bf:ed:53:6d:bb:1d:f9:89:63: 68:43:66:f2:fb:b8:9b:af:ef:95:92:de:63:a7:1c: 49:41:7a:d0:b6:67:b9:42:a7:0d:24:e8:94:2e:a0: cc:01:97:16:ce:cb:ec:47:91:47:f0:ac:b2:b9:bd: cc:cd:09:32:e5:1c:57:bf:d2:07:25:f0:14:67:17: d9:22:57:88:09:65:cf:d1:69:8b:46:5b:d0:fe:97: 70:c3:51:70:52:c8:9f:7c:fe:0d:7b:d5:6a:32:8f: 94:33:29:73:b6:ae:a5:51:1c:01:13:46:a1:22:62: 65:89:5e:dc:16:25:96:ba:de:ac:ea:2a:c7:3b:ef: 64:a6:da:26:bb:8c:d8:06:27:32:4c:91:1f:1a:03: 89:fc:e7:a2:dd:32:18:54:d1:5f:9a:6a:52:60:7e: 1c:ec:7b:f0:2e:72:ef:7b:72:0e:7a:50:72:96:fe: 30:6c:aa:01:d1:0c:66:6b:ec:41:7a:f6:09:7c:fa: 41:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7D:76:CC:C9:DA:08:05:6E:63:82:5C:54:35:3F:29:2E:16:7A:8F X509v3 Authority Key Identifier: keyid:59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:7e:c1:5f:82:03:68:c6:c0:c8:e2:37:ef:ca:f2:0d:74:cd: 49:83:fe:7c:b2:bf:9d:15:36:f5:09:d8:67:70:3d:c8:99:24: 12:16:18:f9:f1:ce:6c:1d:fa:3e:58:cf:aa:5e:26:c3:91:29: 32:ad:3a:07:57:be:d8:25:78:0c:93:65:6c:5e:71:30:43:4b: 27:18:3c:dd:c7:be:d2:09:c5:cb:68:5b:9b:a0:39:f9:74:7e: af:01:7d:a1:4b:b8:db:42:4e:79:0a:98:52:bb:25:dc:b3:60: 46:bd:de:e9:c8:15:6c:54:1d:c2:76:a6:cf:a6:44:f1:60:8b: 73:eb:6d:78:b0:ff:55:d2:52:fe:2e:a5:a1:14:fd:2d:64:64: 1b:bf:76:7c:74:c3:c6:ea:be:17:a9:6c:83:81:2a:ec:8b:f3: 56:a9:8d:44:42:60:08:f8:0c:37:9a:9b:f4:6e:2c:d4:63:92: 8f:e3:7d:22:6e:4d:c1:55:af:b7:90:a4:c2:89:06:3a:d5:3d: 82:cc:c3:0e:50:4c:9c:8e:e4:90:7d:c4:b9:d4:e2:c6:1b:25: 5f:ce:1a:e2:03:0f:db:5c:32:e0:91:cc:b5:90:5a:e8:77:b8: ed:8f:8c:73:c8:70:f7:78:46:3a:81:4f:5c:dd:80:03:32:a3: 19:61:05:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRGMkYxMTAvBgNVBAUTKDU5ODUwNjk1NUUzRDFBMDU5MzA4QjQ5RUM2RjcyNzhE OUE1RTFBQjgwHhcNMjUxMjE4MjE1MzExWhcNMjUxMjI1MjE1MzExWjAYMRYwFAYD VQQDDA02OTQ0NzdjOC0wZjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8Jt7tDeZLC3H3RsAnj7QUgVpdUyobrOdBhX5IkNIflQGMbPCCKkLbIcbNvi YUyn8BvRuOghmthnyNvYK9kVc22/7VNtux35iWNoQ2by+7ibr++Vkt5jpxxJQXrQ tme5QqcNJOiULqDMAZcWzsvsR5FH8Kyyub3MzQky5RxXv9IHJfAUZxfZIleICWXP 0WmLRlvQ/pdww1FwUsiffP4Ne9VqMo+UMylztq6lURwBE0ahImJliV7cFiWWut6s 6irHO+9kptomu4zYBicyTJEfGgOJ/Oei3TIYVNFfmmpSYH4c7HvwLnLve3IOelBy lv4wbKoB0Qxma+xBevYJfPpB0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOx9dszJ 2ggFbmOCXFQ1PykuFnqPMB8GA1UdIwQYMBaAFFmFBpVePRoFkwi0nsb3J42aXhq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEYyRi8zRTRFRUQ5MjlF QzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdnV1RDTFNleHZjbmpacGVH cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZVUdsVjQ5R2dXVENMU2V4dmNualpwZUdyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEYyRi8zRTRFRUQ5MjlFQzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdn V1RDTFNleHZjbmpacGVHcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhfsFfggNoxsDI4jfvyvINdM1Jg/58sr+dFTb1CdhncD3ImSQSFhj5 8c5sHfo+WM+qXibDkSkyrToHV77YJXgMk2VsXnEwQ0snGDzdx77SCcXLaFuboDn5 dH6vAX2hS7jbQk55CphSuyXcs2BGvd7pyBVsVB3CdqbPpkTxYItz6214sP9V0lL+ LqWhFP0tZGQbv3Z8dMPG6r4XqWyDgSrsi/NWqY1EQmAI+Aw3mpv0bizUY5KP430i bk3BVa+3kKTCiQY61T2CzMMOUEycjuSQfcS51OLGGyVfzhriAw/bXDLgkcy1kFro d7jtj4xzyHD3eEY6gU9c3YADMqMZYQXh -----END CERTIFICATE-----Generated at Sat Dec 20 10:51:00 2025 by rpki-client