This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft File: WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json) Hash identifier: 3LWJwtzmYpxAfHTp0VWAvtoftfpA5GhAXu3nY/zqI4k= Subject key identifier: B5:BF:9C:4D:27:5D:51:14:CB:17:44:A4:F4:E3:26:FB:E2:3F:8C:85 Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 Certificate issuer: /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549 Certificate serial: 34E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft Manifest number: 34E3 Signing time: Tue 02 Dec 2025 14:50:00 +0000 Manifest this update: Tue 02 Dec 2025 14:49:59 +0000 Manifest next update: Tue 09 Dec 2025 14:49:59 +0000 Files and hashes: 1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: Nrn9MnfMg0WF745srfaYNGARIcEqKdD7z/DLNYQ+HTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13539 (0x34e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308CE, serialNumber=599B05EF3C093922DE989BDC73993F46D6257549 Validity Not Before: Dec 2 14:49:59 2025 GMT Not After : Dec 9 14:49:59 2025 GMT Subject: CN=692efc97-c894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:75:cb:c7:00:61:5e:9e:5a:11:56:c9:89:ea: e0:49:0a:36:23:34:87:89:08:cf:a4:58:49:65:f1: 4b:f7:b3:6f:09:a5:f5:7f:36:8c:8d:2f:d6:9a:8c: 43:28:d3:24:be:d3:91:40:31:bd:85:1d:84:0e:a2: b9:78:68:7a:fd:bb:49:ea:2d:55:ee:11:6f:a1:99: 78:6d:50:01:2b:96:16:a3:a9:ae:b7:7d:a6:f0:d6: 9b:45:91:78:2b:99:6d:2f:12:25:34:d9:cb:a3:a9: 3f:2b:a5:c0:fa:44:aa:03:b2:86:ca:10:97:7e:0b: db:0d:30:d7:b7:87:cf:78:14:a8:2f:07:e9:82:c0: 3f:21:3c:2f:ba:25:0c:59:aa:22:e9:92:4e:ec:48: c1:0b:0d:3f:85:63:b0:88:4e:05:ef:d1:db:cd:8d: af:ea:0e:74:6e:dc:15:77:09:67:c4:ff:07:22:e4: 2d:f0:1e:77:6f:b3:b4:cb:a6:a0:84:e1:31:0b:63: 28:56:e9:75:e7:65:a2:81:53:2a:31:e2:85:df:93: 5b:40:8b:7f:07:93:39:08:32:80:ce:6f:6e:15:c2: 30:93:d0:17:ad:89:f2:68:1b:c3:38:46:f3:9f:f6: f4:b7:82:0f:46:56:c5:cd:0d:4a:ca:8a:22:3a:a4: 69:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BF:9C:4D:27:5D:51:14:CB:17:44:A4:F4:E3:26:FB:E2:3F:8C:85 X509v3 Authority Key Identifier: keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:92:89:90:1b:d0:3f:7e:02:ea:28:0a:6f:a6:af:69:c7:21: aa:e6:55:ad:f3:81:f1:33:50:d0:ea:19:fb:b4:96:18:51:d3: f1:fa:df:b9:c7:1e:eb:0a:f7:c6:93:19:43:e1:5a:f9:6f:c1: 9a:a6:27:39:3e:fb:9c:b0:89:91:eb:7b:90:b8:13:d4:5b:9b: 23:1b:b6:ba:6f:97:f3:15:b8:d3:76:62:3c:f8:ab:bd:e9:80: a7:a3:40:4f:62:8a:4b:45:96:f5:9c:2c:61:42:12:48:4e:a7: f2:15:2a:83:18:53:33:50:b0:91:7f:0e:72:27:c9:2b:2b:1d: 0d:89:0f:e4:fc:c0:80:40:33:97:39:83:8e:0d:db:92:6d:b1: 6b:70:dc:fc:24:87:32:3b:31:ac:6b:2f:7b:d4:9f:52:73:d5: b8:63:55:29:f3:38:05:bf:43:16:fd:c1:be:eb:11:6b:8c:64: b9:1c:30:ad:b7:ef:19:0b:33:9e:df:46:b6:e8:f3:a9:70:c9: c8:e4:16:5e:82:9b:6b:9b:0e:82:3b:cb:01:97:27:f5:d1:7e: 80:0c:85:5c:75:3e:f3:0b:3c:70:36:ac:60:d2:34:e9:9f:5e: 0b:98:3e:d3:b0:39:54:4a:53:f5:ca:93:9c:4d:ff:4d:68:cd: 98:4d:33:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4Q0UxMTAvBgNVBAUTKDU5OUIwNUVGM0MwOTM5MjJERTk4OUJEQzczOTkzRjQ2 RDYyNTc1NDkwHhcNMjUxMjAyMTQ0OTU5WhcNMjUxMjA5MTQ0OTU5WjAYMRYwFAYD VQQDEw02OTJlZmM5Ny1jODk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA83XLxwBhXp5aEVbJiergSQo2IzSHiQjPpFhJZfFL97NvCaX1fzaMjS/WmoxD KNMkvtORQDG9hR2EDqK5eGh6/btJ6i1V7hFvoZl4bVABK5YWo6mut32m8NabRZF4 K5ltLxIlNNnLo6k/K6XA+kSqA7KGyhCXfgvbDTDXt4fPeBSoLwfpgsA/ITwvuiUM Waoi6ZJO7EjBCw0/hWOwiE4F79HbzY2v6g50btwVdwlnxP8HIuQt8B53b7O0y6ag hOExC2MoVul152WigVMqMeKF35NbQIt/B5M5CDKAzm9uFcIwk9AXrYnyaBvDOEbz n/b0t4IPRlbFzQ1KyooiOqRpXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLW/nE0n XVEUyxdEpPTjJvviP4yFMB8GA1UdIwQYMBaAFFmbBe88CTki3pib3HOZP0bWJXVJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhDRS8xODYwREZDNjFE OTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9TTGVtSnZjYzVrX1J0WWxk VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dac0Y3endKT1NMZW1KdmNjNWtfUnRZbGRVay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhDRS8xODYwREZDNjFEOTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9T TGVtSnZjYzVrX1J0WWxkVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9komQG9A/fgLqKApvpq9pxyGq5lWt84HxM1DQ6hn7tJYYUdPx+t+5 xx7rCvfGkxlD4Vr5b8Gapic5PvucsImR63uQuBPUW5sjG7a6b5fzFbjTdmI8+Ku9 6YCno0BPYopLRZb1nCxhQhJITqfyFSqDGFMzULCRfw5yJ8krKx0NiQ/k/MCAQDOX OYOODduSbbFrcNz8JIcyOzGsay971J9Sc9W4Y1Up8zgFv0MW/cG+6xFrjGS5HDCt t+8ZCzOe30a26POpcMnI5BZegptrmw6CO8sBlyf10X6ADIVcdT7zCzxwNqxg0jTp n14LmD7TsDlUSlP1ypOcTf9NaM2YTTOJ -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:17 2025 by rpki-client