This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft File: WdGXNa3cboCAl6x3G0a7N1vCMOg.mft (raw, json) Hash identifier: tx2HwGiR9JekNLfd88u2GPQqwbiknd07hYp/gGzJ0n4= Subject key identifier: A7:AE:82:F0:26:25:11:1C:01:53:BD:0C:C2:5A:E6:0C:EB:2A:DE:D6 Authority key identifier: 59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 Certificate issuer: /CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Certificate serial: 0339 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft Manifest number: 049A Signing time: Tue 23 Dec 2025 00:02:27 +0000 Manifest this update: Tue 23 Dec 2025 00:02:26 +0000 Manifest next update: Tue 30 Dec 2025 00:02:26 +0000 Files and hashes: 1: WdGXNa3cboCAl6x3G0a7N1vCMOg.crl (hash: 7X6rr/bdKQAxL9ulOmkrpRpNTv4Q5sTRb0x2eOR7+8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 825 (0x339) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7, serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Validity Not Before: Dec 23 00:02:26 2025 GMT Not After : Dec 30 00:02:26 2025 GMT Subject: CN=6949dc13-29f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ae:13:55:9c:12:e9:50:cc:8a:dc:52:a8:97: 86:fd:13:27:d8:17:90:96:97:b6:8c:31:7a:c8:89: 88:07:a1:52:fa:b9:df:34:5d:fe:b4:ee:31:6d:8d: a5:ee:2b:74:59:bb:87:a8:6e:c2:65:dc:f5:21:60: 90:2e:ea:cf:6f:63:6c:33:85:65:c2:f1:fc:4f:a8: 7b:4e:40:77:87:26:79:09:1f:bd:21:9b:cd:65:85: 31:e5:e6:8a:be:46:77:0c:0f:32:b2:fe:96:f0:7e: f7:8f:06:e6:01:3d:1a:6f:7d:d3:87:84:8c:db:65: d9:ad:53:19:a3:e2:29:cc:c5:41:91:6e:6d:3f:94: 8e:a5:a6:75:d6:a7:c4:f8:1e:76:aa:ad:13:87:92: 89:f6:02:11:25:e4:ba:bb:27:c7:4e:bc:cb:1b:b9: bd:f1:c7:cb:89:61:3d:98:94:fa:2e:01:f4:50:1e: 2b:fb:da:54:ce:99:95:3f:41:1f:6b:c8:26:4b:02: e1:3d:63:56:56:7a:d3:51:bc:32:f7:0c:04:82:c6: 16:fe:4e:91:9f:78:86:0f:48:28:98:c6:e3:dc:f6: 90:cf:ee:a1:4f:07:a3:7a:a4:30:10:a4:66:7a:18: 98:ce:98:b1:16:4d:1e:ec:4f:bf:f4:55:75:e9:07: 4f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AE:82:F0:26:25:11:1C:01:53:BD:0C:C2:5A:E6:0C:EB:2A:DE:D6 X509v3 Authority Key Identifier: keyid:59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:29:2c:ad:8f:2a:15:dc:31:11:7b:29:a2:bc:ee:ff:28:bd: e8:81:27:5e:70:e6:01:54:08:6e:20:d6:fa:42:2a:60:3a:4a: b5:6d:06:25:73:fd:80:54:9a:91:44:6e:71:ab:fd:01:50:45: be:e8:e2:9c:e5:c7:a3:9a:f3:87:65:71:44:50:19:7e:ab:9e: 89:26:fe:75:0b:58:8b:d8:18:41:6d:ca:7f:97:4d:c4:a2:bd: b6:29:ee:12:78:a0:92:a9:3b:8c:67:98:e6:08:fb:19:90:74: d0:95:4d:ee:01:3b:ae:60:89:3a:16:75:17:5a:62:c4:ac:d6: 19:ec:f2:83:21:53:88:fe:33:22:9a:61:db:7b:90:82:e4:96: 44:20:c4:6f:ec:f2:de:33:db:74:bd:2a:b3:74:84:b6:1e:47: 93:7f:06:8a:e3:7c:3a:c0:80:d3:42:45:db:a3:d3:b6:33:a8: 92:96:73:7c:25:8f:4f:85:8c:ae:05:2a:13:40:5a:7b:80:ef: 73:a8:d7:44:74:ac:dc:cf:e4:a3:db:22:6d:ff:6b:cc:e7:be: d1:c5:f2:6e:e5:a3:78:cf:58:29:c0:9e:6e:96:89:23:15:9f: 1c:0a:74:41:d8:e1:3a:03:2f:f8:62:b9:41:22:8a:ad:c4:fb: dc:d3:7c:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKDU5RDE5NzM1QUREQzZFODA4MDk3QUM3NzFCNDZCQjM3 NUJDMjMwRTgwHhcNMjUxMjIzMDAwMjI2WhcNMjUxMjMwMDAwMjI2WjAYMRYwFAYD VQQDDA02OTQ5ZGMxMy0yOWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz64TVZwS6VDMitxSqJeG/RMn2BeQlpe2jDF6yImIB6FS+rnfNF3+tO4xbY2l 7it0WbuHqG7CZdz1IWCQLurPb2NsM4VlwvH8T6h7TkB3hyZ5CR+9IZvNZYUx5eaK vkZ3DA8ysv6W8H73jwbmAT0ab33Th4SM22XZrVMZo+IpzMVBkW5tP5SOpaZ11qfE +B52qq0Th5KJ9gIRJeS6uyfHTrzLG7m98cfLiWE9mJT6LgH0UB4r+9pUzpmVP0Ef a8gmSwLhPWNWVnrTUbwy9wwEgsYW/k6Rn3iGD0gomMbj3PaQz+6hTwejeqQwEKRm ehiYzpixFk0e7E+/9FV16QdPewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeugvAm JREcAVO9DMJa5gzrKt7WMB8GA1UdIwQYMBaAFFnRlzWt3G6AgJesdxtGuzdbwjDo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2JvQ0FsNngzRzBhN04xdkNN T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkR1hOYTNjYm9DQWw2eDNHMGE3TjF2Q01PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2Jv Q0FsNngzRzBhN04xdkNNT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvKSytjyoV3DEReymivO7/KL3ogSdecOYBVAhuINb6QipgOkq1bQYl c/2AVJqRRG5xq/0BUEW+6OKc5cejmvOHZXFEUBl+q56JJv51C1iL2BhBbcp/l03E or22Ke4SeKCSqTuMZ5jmCPsZkHTQlU3uATuuYIk6FnUXWmLErNYZ7PKDIVOI/jMi mmHbe5CC5JZEIMRv7PLeM9t0vSqzdIS2HkeTfwaK43w6wIDTQkXbo9O2M6iSlnN8 JY9PhYyuBSoTQFp7gO9zqNdEdKzcz+Sj2yJt/2vM577RxfJu5aN4z1gpwJ5ulokj FZ8cCnRB2OE6Ay/4YrlBIoqtxPvc03yS -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:30 2025 by rpki-client