This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft File: wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft (raw, json) Hash identifier: FcOZZUrJTorIhG62vkF+xXYpLi3BEQDn2HOb5xCIgrk= Subject key identifier: F9:59:B6:CC:48:A1:E1:7B:94:7F:A7:C3:EA:41:B3:6C:93:6B:9B:E7 Authority key identifier: C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59 Certificate issuer: /CN=A912B85B/serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59 Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft Manifest number: 016A Signing time: Tue 23 Dec 2025 02:56:19 +0000 Manifest this update: Tue 23 Dec 2025 02:56:18 +0000 Manifest next update: Tue 30 Dec 2025 02:56:18 +0000 Files and hashes: 1: wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl (hash: WuHj72N0ObrgkEuhFQwLIbIE9UI5R8UxN+H5XndaMWg=) 2: 7DE2804AB4BC11EEA02E9A19C4F9AE02.roa (hash: mx+hZNnEHjoWsdsKMFKjqe1rg9GBHxL9Qf87GWS5aXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B85B, serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59 Validity Not Before: Dec 23 02:56:18 2025 GMT Not After : Dec 30 02:56:18 2025 GMT Subject: CN=694a04d3-1d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:05:b9:90:5c:63:14:5d:53:d6:b3:57:fe:f9: 8e:68:dd:62:83:4b:6f:f1:45:23:36:6f:26:b4:79: e1:c2:f6:a6:d4:0a:c5:97:b9:35:29:c0:50:e5:ce: d2:77:d3:81:16:c8:18:1a:4c:b1:25:19:2f:77:aa: 4f:e1:88:26:c9:20:aa:d8:bc:1d:31:db:68:bc:f1: d9:af:7e:14:b1:e6:f9:06:30:22:59:a6:d6:bd:8a: 01:8f:27:39:93:16:b8:36:a3:df:42:4f:bf:e7:13: 4c:77:24:7c:44:0f:a8:ef:61:90:fd:8f:32:7f:f1: e2:ad:65:24:d3:1e:6b:4a:8f:01:3c:2c:c8:84:b8: fe:61:00:9b:56:8f:d2:65:8b:c2:46:a0:f3:55:c8: f6:9c:2c:96:6a:8f:64:ca:c4:c2:09:94:85:d2:69: 13:86:28:2b:4a:1d:18:e8:2d:1a:69:18:6e:2e:b6: 06:4b:cb:21:0d:ed:67:81:0c:c8:2c:68:98:74:85: 02:20:91:63:d7:be:9c:4d:09:46:68:9b:bb:ad:56: a5:69:54:2d:e5:b5:90:fe:8b:31:da:0e:6b:28:37: c6:c5:fe:90:9f:45:d5:6f:3f:9e:90:10:42:62:aa: 9d:7a:d4:21:ac:ae:f0:b5:e8:99:d9:c5:a7:53:17: 95:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:59:B6:CC:48:A1:E1:7B:94:7F:A7:C3:EA:41:B3:6C:93:6B:9B:E7 X509v3 Authority Key Identifier: keyid:C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:71:04:37:ba:47:c2:87:76:93:9b:8d:72:be:5e:ca:c6:1c: 32:37:9f:31:a3:cf:48:e5:01:d1:a6:e4:eb:1f:21:50:ac:88: 2b:b6:c6:26:df:a1:a5:1b:13:6e:ca:df:7f:44:0c:c3:a5:9e: 74:b8:cb:4a:5f:8e:6f:28:d7:bb:5f:fa:1b:ac:cf:c1:c3:70: b5:20:31:92:9a:65:c0:75:6a:e7:41:9e:af:06:6c:b9:c3:fe: 6d:f6:27:69:5d:cb:ce:0e:1e:44:2a:3d:01:8d:e6:39:4d:fa: b2:bf:f5:dd:45:ee:df:04:a3:a7:72:82:b4:fe:dc:67:fb:d7: a1:8c:4a:f3:d2:7d:51:e4:1f:ff:e6:af:70:a6:c4:88:80:1c: 1a:09:4a:10:c2:c4:a7:87:45:d5:be:2c:dd:18:12:f0:ce:51: 88:f3:b7:27:9c:72:9b:0a:73:16:45:29:ca:82:43:de:49:96: 60:10:fc:93:3c:24:ed:7b:19:4d:58:7a:57:09:13:5d:1b:b8: d7:3a:f8:47:57:79:31:80:d6:0e:1d:0b:29:22:21:5b:4c:e2: b1:fe:6a:a0:b9:5d:73:df:30:3b:aa:7a:cf:87:2e:33:2b:34: 37:df:64:aa:d4:51:87:23:c9:8b:28:26:12:53:60:37:0a:0e: 92:dd:15:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI4NUIxMTAvBgNVBAUTKEMyNzVGN0I4QUVDQzI5NDhENEI0QkE5OTlGQTlDMEUy QUQ1NEVBNTkwHhcNMjUxMjIzMDI1NjE4WhcNMjUxMjMwMDI1NjE4WjAYMRYwFAYD VQQDDA02OTRhMDRkMy0xZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAW5kFxjFF1T1rNX/vmOaN1ig0tv8UUjNm8mtHnhwvam1ArFl7k1KcBQ5c7S d9OBFsgYGkyxJRkvd6pP4YgmySCq2LwdMdtovPHZr34Useb5BjAiWabWvYoBjyc5 kxa4NqPfQk+/5xNMdyR8RA+o72GQ/Y8yf/HirWUk0x5rSo8BPCzIhLj+YQCbVo/S ZYvCRqDzVcj2nCyWao9kysTCCZSF0mkThigrSh0Y6C0aaRhuLrYGS8shDe1ngQzI LGiYdIUCIJFj176cTQlGaJu7rValaVQt5bWQ/osx2g5rKDfGxf6Qn0XVbz+ekBBC YqqdetQhrK7wteiZ2cWnUxeVAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlZtsxI oeF7lH+nw+pBs2yTa5vnMB8GA1UdIwQYMBaAFMJ197iuzClI1LS6mZ+pwOKtVOpZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjg1Qi8yMDQ3RDc0NkI0 QkMxMUVFOEQwM0E1MThDNEY5QUUwMi93blgzdUs3TUtValV0THFabjZuQTRxMVU2 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3duWDN1SzdNS1VqVXRMcVpuNm5BNHExVTZsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjg1Qi8yMDQ3RDc0NkI0QkMxMUVFOEQwM0E1MThDNEY5QUUwMi93blgzdUs3TUtV alV0THFabjZuQTRxMVU2bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8cQQ3ukfCh3aTm41yvl7KxhwyN58xo89I5QHRpuTrHyFQrIgrtsYm 36GlGxNuyt9/RAzDpZ50uMtKX45vKNe7X/obrM/Bw3C1IDGSmmXAdWrnQZ6vBmy5 w/5t9idpXcvODh5EKj0BjeY5Tfqyv/XdRe7fBKOncoK0/txn+9ehjErz0n1R5B// 5q9wpsSIgBwaCUoQwsSnh0XVvizdGBLwzlGI87cnnHKbCnMWRSnKgkPeSZZgEPyT PCTtexlNWHpXCRNdG7jXOvhHV3kxgNYOHQspIiFbTOKx/mqguV1z3zA7qnrPhy4z KzQ332Sq1FGHI8mLKCYSU2A3Cg6S3RW4 -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:36 2025 by rpki-client