This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft File: wfSjmGHK0883hCGN7aegXoUvIn8.mft (raw, json) Hash identifier: 5ZslP7xsJtDzR4oSraJZQHegUnN0dsvFLDIXpYX9Y68= Subject key identifier: 1A:AB:6C:B4:D0:8B:87:B8:0A:B4:FD:D5:31:1C:45:E8:67:BC:18:76 Authority key identifier: C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F Certificate issuer: /CN=A912DB97/serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft Manifest number: 8B Signing time: Tue 23 Dec 2025 05:30:45 +0000 Manifest this update: Tue 23 Dec 2025 05:30:44 +0000 Manifest next update: Tue 30 Dec 2025 05:30:44 +0000 Files and hashes: 1: wfSjmGHK0883hCGN7aegXoUvIn8.crl (hash: MfJsjBlLZVPmMASqMYI5+1/tSN97LcjVVi1s0F3ukMc=) 2: 28F87D180A1611F0BC8FD10DC4F9AE02.roa (hash: kwR4HiPzGhpK5SEPo+ThTcF7apxZuPZzTOyt4h1UDag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB97, serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F Validity Not Before: Dec 23 05:30:44 2025 GMT Not After : Dec 30 05:30:44 2025 GMT Subject: CN=694a2904-bbb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:10:ec:6e:fe:92:28:97:47:8e:6f:65:55:be: 04:b9:fd:1c:a7:7b:c8:0d:5e:3b:d0:86:fe:32:5d: f9:e1:8a:61:84:bc:7f:f9:bc:8f:a9:28:4e:15:67: 8c:ce:a1:25:4b:94:90:23:30:14:3b:03:31:96:67: fd:13:c9:cb:a3:7b:52:43:b4:d8:c2:c1:7a:2d:ce: fe:6c:f0:ae:e7:90:da:db:fd:c5:ac:00:41:94:2a: e4:0c:f8:9e:04:10:74:fe:d3:55:0c:ca:88:72:42: 3e:76:98:a0:71:30:82:3e:11:d0:7f:b0:1e:6a:84: 27:cd:1b:53:b5:a6:d6:14:31:b7:f8:7b:27:5a:5d: 0c:1e:72:e9:58:6b:4d:02:23:bc:fd:b7:8e:73:7f: a9:54:c2:70:89:92:0b:74:ed:2e:d0:be:89:72:2f: c4:d3:24:c6:ed:0d:3f:e6:0e:de:99:88:37:8c:b8: c2:20:94:a3:a3:37:08:70:17:4c:49:96:ca:93:ac: 8a:d4:23:8e:e0:f2:fb:35:43:7e:91:43:e3:24:a1: e5:55:ad:30:5e:05:d9:05:fd:af:02:4c:d9:70:30: 79:a5:9e:62:41:f2:c4:69:ca:f2:45:22:61:c8:51: 40:b3:8d:d1:e3:a9:5c:6e:6b:c6:ad:31:7f:cb:8c: 9c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AB:6C:B4:D0:8B:87:B8:0A:B4:FD:D5:31:1C:45:E8:67:BC:18:76 X509v3 Authority Key Identifier: keyid:C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:82:14:70:32:f9:ac:df:ed:e1:e1:20:59:54:6c:93:18:02: db:4a:4e:b7:c4:ac:4d:1b:2d:89:c6:5f:30:71:24:0b:ad:64: 22:08:13:c7:a0:5c:45:68:5a:cd:dd:21:dd:1d:53:84:3d:df: aa:e4:34:76:b8:18:68:fa:ed:54:f4:6d:27:d5:01:64:f3:45: e0:1b:dc:91:52:e6:da:bd:fa:c7:d0:9a:8e:7f:14:95:8c:c5: 3a:28:9f:93:f7:fd:e0:08:c2:ec:af:95:02:6f:54:ed:7a:74: 59:a9:db:bd:08:30:09:3a:bf:43:99:1a:2f:01:bc:8d:d2:46: e8:12:9a:51:c1:9f:bf:8d:ca:c9:8a:5b:90:c7:97:bf:22:38: 2e:81:7b:67:84:57:14:a5:7c:8f:e4:46:59:6d:a8:65:2f:6d: c1:b5:6e:4e:71:69:95:61:c4:7d:60:9f:a6:a5:ae:6f:b8:ef: 43:0e:7b:49:e3:36:65:11:7e:c4:e0:ae:9c:80:64:0a:af:44: 3a:86:3c:ed:4b:46:b9:5a:aa:90:df:c6:1d:89:c5:51:25:50: 3f:83:08:fd:84:44:b5:41:47:0a:0c:43:db:3e:f0:ae:8f:49: 78:9d:11:5c:34:8b:ef:87:b1:bf:e0:a3:3a:bd:66:eb:db:51: 5a:0f:a8:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRCOTcxMTAvBgNVBAUTKEMxRjRBMzk4NjFDQUQzQ0YzNzg0MjE4REVEQTdBMDVF ODUyRjIyN0YwHhcNMjUxMjIzMDUzMDQ0WhcNMjUxMjMwMDUzMDQ0WjAYMRYwFAYD VQQDDA02OTRhMjkwNC1iYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshDsbv6SKJdHjm9lVb4Euf0cp3vIDV470Ib+Ml354YphhLx/+byPqShOFWeM zqElS5SQIzAUOwMxlmf9E8nLo3tSQ7TYwsF6Lc7+bPCu55Da2/3FrABBlCrkDPie BBB0/tNVDMqIckI+dpigcTCCPhHQf7AeaoQnzRtTtabWFDG3+HsnWl0MHnLpWGtN AiO8/beOc3+pVMJwiZILdO0u0L6Jci/E0yTG7Q0/5g7emYg3jLjCIJSjozcIcBdM SZbKk6yK1COO4PL7NUN+kUPjJKHlVa0wXgXZBf2vAkzZcDB5pZ5iQfLEacryRSJh yFFAs43R46lcbmvGrTF/y4ycZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqrbLTQ i4e4CrT91TEcRehnvBh2MB8GA1UdIwQYMBaAFMH0o5hhytPPN4Qhje2noF6FLyJ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI5Ny81RDhCNTI2NDBB MTQxMUYwQjQzREM1ODZDNEY5QUUwMi93ZlNqbUdISzA4ODNoQ0dON2FlZ1hvVXZJ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dmU2ptR0hLMDg4M2hDR043YWVnWG9VdkluOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REI5Ny81RDhCNTI2NDBBMTQxMUYwQjQzREM1ODZDNEY5QUUwMi93ZlNqbUdISzA4 ODNoQ0dON2FlZ1hvVXZJbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9ghRwMvms3+3h4SBZVGyTGALbSk63xKxNGy2Jxl8wcSQLrWQiCBPH oFxFaFrN3SHdHVOEPd+q5DR2uBho+u1U9G0n1QFk80XgG9yRUubavfrH0JqOfxSV jMU6KJ+T9/3gCMLsr5UCb1TtenRZqdu9CDAJOr9DmRovAbyN0kboEppRwZ+/jcrJ iluQx5e/IjgugXtnhFcUpXyP5EZZbahlL23BtW5OcWmVYcR9YJ+mpa5vuO9DDntJ 4zZlEX7E4K6cgGQKr0Q6hjztS0a5WqqQ38YdicVRJVA/gwj9hES1QUcKDEPbPvCu j0l4nRFcNIvvh7G/4KM6vWbr21FaD6gA -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:32 2025 by rpki-client