This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft File: WAFITP9u_F0ACyYp-RFr4jXErDY.mft (raw, json) Hash identifier: CCNQ/oJ3sPfJKpASdUUqofDz5K21cYGioHaGndWgNZc= Subject key identifier: EB:E4:9E:AF:1C:F8:4C:4B:80:5C:69:25:2B:5B:73:4E:E3:F8:F7:0E Authority key identifier: 58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36 Certificate issuer: /CN=A914C531/serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft Manifest number: 010A Signing time: Tue 23 Dec 2025 04:07:59 +0000 Manifest this update: Tue 23 Dec 2025 04:07:59 +0000 Manifest next update: Tue 30 Dec 2025 04:07:59 +0000 Files and hashes: 1: WAFITP9u_F0ACyYp-RFr4jXErDY.crl (hash: 9GZdEZoPQvhdXRurQVV7sFVsD6WegN0z9pZzD5xIbWY=) 2: 5DC91E6E6E4611F09D8F426CC4F9AE02.roa (hash: y8hgCCBPI84qrp5W1tiqF8+NbZgro3HnrgturfTW64A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C531, serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36 Validity Not Before: Dec 23 04:07:59 2025 GMT Not After : Dec 30 04:07:59 2025 GMT Subject: CN=694a159f-e857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:48:ab:15:ef:0e:6b:d5:75:91:40:49:73:6d: aa:26:1c:87:5f:94:d9:6a:54:da:f9:2e:97:a8:ca: c6:63:59:2d:e8:e9:f1:fd:2e:5e:5f:b6:0b:cf:32: dd:5f:95:0e:a8:39:0f:66:0f:86:45:67:6e:db:57: f9:ad:06:d8:4b:37:d0:63:93:98:7a:ee:b5:78:f8: 9f:d6:87:c3:2e:16:5e:92:57:6f:6b:62:c5:1d:69: 17:64:68:84:93:4a:16:68:41:6a:95:c5:cf:cd:f9: 96:09:a2:c2:8d:87:b7:3d:50:48:ae:b3:2a:6b:29: a4:e4:c5:ff:3a:c7:98:18:9f:7f:b7:50:36:ef:09: 93:cd:09:41:2f:3e:6a:8a:8f:a6:68:11:19:a5:c0: e2:0d:45:5a:dd:22:cc:13:83:b9:94:4b:90:f0:29: 10:c4:42:ff:25:6f:ff:14:dd:8e:83:19:c3:77:86: 94:54:b0:7b:53:d5:bc:1f:a6:8b:4a:94:35:89:d9: 43:3f:20:91:af:0c:b0:6a:43:11:d8:c2:48:e9:50: be:8d:f1:19:59:b3:ee:1d:16:e3:9b:96:08:d5:81: e7:e4:98:3c:d4:c9:39:7f:02:21:8a:cf:70:ed:d6: 7d:fa:d6:e1:3e:9e:eb:b5:e2:7b:57:1c:ec:fa:70: 5b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E4:9E:AF:1C:F8:4C:4B:80:5C:69:25:2B:5B:73:4E:E3:F8:F7:0E X509v3 Authority Key Identifier: keyid:58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f6:5e:e4:ce:82:3f:9a:9a:7e:6d:8f:d5:5c:5f:ee:62:7d:44: 1c:55:71:d8:f8:68:5c:91:86:e7:b9:37:93:26:ce:79:58:81: c5:07:48:f2:86:67:77:bf:91:07:63:00:48:a4:8e:9c:6a:61: 97:15:69:f7:f4:fc:32:95:fd:68:2a:f8:0a:52:b1:28:af:d2: 23:e8:cf:17:16:94:fe:01:14:d6:d8:6d:23:d0:37:c5:57:94: ba:81:3a:e4:64:f3:9e:f3:82:39:ff:64:7e:ac:a4:38:07:37: 3b:dd:66:74:09:05:fb:01:0d:dc:80:b2:4b:80:68:89:a2:0b: 0d:ad:df:31:d8:c1:83:b4:c9:d3:71:19:1a:4b:85:4d:dd:e1: b1:62:0e:61:89:d8:e4:03:cc:8a:fe:2a:cc:e3:2d:37:c1:19: d0:77:0a:9b:cf:57:af:d1:61:b0:0e:f1:53:22:b4:cd:be:50: 5f:06:14:f9:f8:6b:2b:88:8c:a7:b7:09:06:64:11:ee:0c:e2: 28:d4:15:f6:bb:e1:ce:28:58:33:3d:41:56:47:83:57:50:7b: cb:1e:d7:35:2d:e5:cb:81:81:39:2b:35:79:86:ce:d8:9d:67: 5c:a1:4c:4b:51:ab:a2:35:81:76:ff:06:45:ac:7a:d7:8b:11: 2e:b9:e1:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM1MzExMTAvBgNVBAUTKDU4MDE0ODRDRkY2RUZDNUQwMDBCMjYyOUY5MTE2QkUy MzVDNEFDMzYwHhcNMjUxMjIzMDQwNzU5WhcNMjUxMjMwMDQwNzU5WjAYMRYwFAYD VQQDDA02OTRhMTU5Zi1lODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0irFe8Oa9V1kUBJc22qJhyHX5TZalTa+S6XqMrGY1kt6Onx/S5eX7YLzzLd X5UOqDkPZg+GRWdu21f5rQbYSzfQY5OYeu61ePif1ofDLhZekldva2LFHWkXZGiE k0oWaEFqlcXPzfmWCaLCjYe3PVBIrrMqaymk5MX/OseYGJ9/t1A27wmTzQlBLz5q io+maBEZpcDiDUVa3SLME4O5lEuQ8CkQxEL/JW//FN2OgxnDd4aUVLB7U9W8H6aL SpQ1idlDPyCRrwywakMR2MJI6VC+jfEZWbPuHRbjm5YI1YHn5Jg81Mk5fwIhis9w 7dZ9+tbhPp7rteJ7Vxzs+nBbmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvknq8c +ExLgFxpJStbc07j+PcOMB8GA1UdIwQYMBaAFFgBSEz/bvxdAAsmKfkRa+I1xKw2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzUzMS8wQjBEMEY2NjVE NUIxMUVGQTRGMzJCMTNDNEY5QUUwMi9XQUZJVFA5dV9GMEFDeVlwLVJGcjRqWEVy RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBRklUUDl1X0YwQUN5WXAtUkZyNGpYRXJEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzUzMS8wQjBEMEY2NjVENUIxMUVGQTRGMzJCMTNDNEY5QUUwMi9XQUZJVFA5dV9G MEFDeVlwLVJGcjRqWEVyRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQD2XuTOgj+amn5tj9VcX+5ifUQcVXHY+GhckYbnuTeTJs55WIHFB0jy hmd3v5EHYwBIpI6camGXFWn39Pwylf1oKvgKUrEor9Ij6M8XFpT+ARTW2G0j0DfF V5S6gTrkZPOe84I5/2R+rKQ4Bzc73WZ0CQX7AQ3cgLJLgGiJogsNrd8x2MGDtMnT cRkaS4VN3eGxYg5hidjkA8yK/irM4y03wRnQdwqbz1ev0WGwDvFTIrTNvlBfBhT5 +GsriIyntwkGZBHuDOIo1BX2u+HOKFgzPUFWR4NXUHvLHtc1LeXLgYE5KzV5hs7Y nWdcoUxLUauiNYF2/wZFrHrXixEuueFp -----END CERTIFICATE-----Generated at Wed Dec 24 19:26:09 2025 by rpki-client