This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft File: W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft (raw, json) Hash identifier: psdG89OmK4RP2nbZcZIBTIJkLCjrbEG5J6ZKO7iakzM= Subject key identifier: 15:4B:8C:C4:7D:C2:7E:4F:01:03:CF:52:84:3F:3C:F6:25:62:E9:1A Authority key identifier: 5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB Certificate issuer: /CN=A9131C4B/serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft Manifest number: 32 Signing time: Tue 23 Dec 2025 06:23:58 +0000 Manifest this update: Tue 23 Dec 2025 06:23:57 +0000 Manifest next update: Tue 30 Dec 2025 06:23:57 +0000 Files and hashes: 1: W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl (hash: cYNkJqTAOmfftpQxz8uAzV9M6S7JvyL0/hvyrJczqnQ=) 2: D65EFE0A91F711F087341C45C4F9AE02.roa (hash: kAhTjUWVZV9wMTU00Q644BmyUxt0di+mCyDgFqmBb/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131C4B, serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB Validity Not Before: Dec 23 06:23:57 2025 GMT Not After : Dec 30 06:23:57 2025 GMT Subject: CN=694a357e-dba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6b:98:4f:eb:54:0d:c7:2e:42:e4:6d:8a:83: 2a:2d:48:c4:f6:7c:1d:9a:35:5d:f1:64:e2:3f:42: 49:65:b7:ca:9a:45:1c:77:9d:e9:25:1a:70:a8:17: 66:ae:02:59:14:71:6d:96:e4:db:b1:81:b2:8a:1e: 83:e8:00:1b:48:0a:95:0d:1f:04:b5:9a:65:77:28: 6d:7d:8c:94:e5:dd:53:b4:15:bc:31:56:ff:37:8d: 83:1d:49:88:fa:f3:44:65:bc:00:2c:d6:3f:0c:c1: 3b:a9:68:9a:fc:cb:a4:5a:e1:24:3f:b6:7c:03:4f: e9:e4:ef:b6:52:e8:4e:83:c6:9b:02:6e:88:c3:6d: 04:a1:d7:79:cd:57:88:0d:91:42:04:77:a8:13:73: 2c:94:eb:ef:0c:00:22:a1:d4:9e:0b:1f:84:38:44: 90:f3:79:8d:24:65:d8:33:7b:80:e3:b1:7c:27:ef: 29:03:7e:a5:24:58:a5:13:fd:82:5c:f0:cd:7e:03: dc:34:fc:c8:fa:37:d8:e2:b5:1d:cf:08:04:27:aa: 1b:61:3f:cc:ff:9a:f1:f7:8e:fa:69:d8:25:8f:a9: 63:4a:db:0c:56:5f:68:7e:ad:6a:cf:ff:29:3c:ec: d3:ab:65:fd:14:5c:cb:eb:09:9f:2a:4d:0d:d2:5a: 90:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4B:8C:C4:7D:C2:7E:4F:01:03:CF:52:84:3F:3C:F6:25:62:E9:1A X509v3 Authority Key Identifier: keyid:5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:08:48:f6:d6:0c:81:e6:32:28:7f:45:53:53:46:3e:24:34: d0:93:cc:fc:6d:ca:ca:e5:3b:2d:bd:4a:d3:f9:0e:db:f2:40: c1:a8:c6:25:74:f9:d9:25:fc:08:8f:7b:72:16:b2:f4:c5:0c: 7f:24:66:ab:3e:67:71:65:cf:d3:5e:82:65:82:b3:44:a7:f6: e3:35:2b:17:ac:a1:90:be:90:91:a1:af:c7:75:14:db:96:cf: a7:ca:31:fe:ad:07:f6:93:af:51:b0:90:f3:84:42:cb:c0:c5: c9:36:72:df:64:3a:53:3f:79:6b:76:73:90:54:c3:7c:66:dd: 26:a5:2a:0c:43:2c:1c:4d:ab:8a:0b:7b:75:e9:8f:3c:80:b6: fe:c2:d1:54:fe:c0:f9:7f:f3:28:39:e2:a3:0b:2f:fc:47:c8: 36:c3:4f:2a:76:74:9c:22:8b:6f:a9:98:37:6d:f8:4b:94:39: 0e:74:76:be:4f:e1:6a:33:24:5c:80:a0:3c:f8:32:36:18:03: e9:b0:38:a0:5a:44:a0:83:c1:dd:39:47:d3:40:c6:7f:a0:cc: 12:12:09:8c:44:bb:63:3f:36:76:a1:e4:3c:cc:fa:03:20:42: 95:1c:45:5f:a8:d3:bc:58:57:93:9e:79:cb:ce:73:98:42:67: fb:72:9f:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MUM0QjExMC8GA1UEBRMoNUJGMDAwMTQ3MzRBRDFCNTY1QjEwODZEMTJGRkNBQjU5 MENDQjhCQjAeFw0yNTEyMjMwNjIzNTdaFw0yNTEyMzAwNjIzNTdaMBgxFjAUBgNV BAMMDTY5NGEzNTdlLWRiYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0a5hP61QNxy5C5G2KgyotSMT2fB2aNV3xZOI/Qkllt8qaRRx3neklGnCoF2au AlkUcW2W5NuxgbKKHoPoABtICpUNHwS1mmV3KG19jJTl3VO0FbwxVv83jYMdSYj6 80RlvAAs1j8MwTupaJr8y6Ra4SQ/tnwDT+nk77ZS6E6DxpsCbojDbQSh13nNV4gN kUIEd6gTcyyU6+8MACKh1J4LH4Q4RJDzeY0kZdgze4DjsXwn7ykDfqUkWKUT/YJc 8M1+A9w0/Mj6N9jitR3PCAQnqhthP8z/mvH3jvpp2CWPqWNK2wxWX2h+rWrP/yk8 7NOrZf0UXMvrCZ8qTQ3SWpCzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFUuMxH3C fk8BA89ShD889iVi6RowHwYDVR0jBBgwFoAUW/AAFHNK0bVlsQhtEv/KtZDMuLsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQzRCLzE0MDA2NjJBOTFG NTExRjA4ODM0RUIxQUM0RjlBRTAyL1dfQUFGSE5LMGJWbHNRaHRFdl9LdFpETXVM cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV19BQUZITkswYlZsc1FodEV2X0t0WkRNdUxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx QzRCLzE0MDA2NjJBOTFGNTExRjA4ODM0RUIxQUM0RjlBRTAyL1dfQUFGSE5LMGJW bHNRaHRFdl9LdFpETXVMcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC8ISPbWDIHmMih/RVNTRj4kNNCTzPxtysrlOy29StP5DtvyQMGoxiV0 +dkl/AiPe3IWsvTFDH8kZqs+Z3Flz9NegmWCs0Sn9uM1KxesoZC+kJGhr8d1FNuW z6fKMf6tB/aTr1GwkPOEQsvAxck2ct9kOlM/eWt2c5BUw3xm3SalKgxDLBxNq4oL e3XpjzyAtv7C0VT+wPl/8yg54qMLL/xHyDbDTyp2dJwii2+pmDdt+EuUOQ50dr5P 4WozJFyAoDz4MjYYA+mwOKBaRKCDwd05R9NAxn+gzBISCYxEu2M/Nnah5DzM+gMg QpUcRV+o07xYV5OeecvOc5hCZ/tynyE= -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:18 2025 by rpki-client