This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft File: wA8Frg-ptoCpG1bw0yHFGIwecSw.mft (raw, json) Hash identifier: mM6LIZrv6HmNRRTaYlcAYzm81KQMa2Eik+UeasLNyNw= Subject key identifier: 4B:6C:D9:60:4B:51:B3:3F:ED:85:37:FC:8D:FD:52:BB:97:28:1E:50 Authority key identifier: C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C Certificate issuer: /CN=A914F937/serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft Manifest number: 01A1 Signing time: Tue 23 Dec 2025 02:17:25 +0000 Manifest this update: Tue 23 Dec 2025 02:17:24 +0000 Manifest next update: Tue 30 Dec 2025 02:17:24 +0000 Files and hashes: 1: wA8Frg-ptoCpG1bw0yHFGIwecSw.crl (hash: AN3fca+9vH5iN6LOgwijUDTJH3Ye0mjxGOMmM2QSDak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937, serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C Validity Not Before: Dec 23 02:17:24 2025 GMT Not After : Dec 30 02:17:24 2025 GMT Subject: CN=6949fbb5-b10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:34:10:55:1f:61:8c:a3:c1:70:2d:18:be:19: e7:b4:05:8c:87:89:7d:f0:3c:db:9d:36:26:3a:84: 63:0e:e9:3a:41:57:0f:d2:f1:a0:cd:16:d7:d6:8f: 11:2d:d4:df:53:9e:85:f2:b4:ea:2c:95:c4:4f:ff: d6:20:44:fa:d5:a7:03:12:f7:b8:0a:d5:91:0f:4c: 8f:14:70:ff:2b:a1:9e:aa:38:62:fb:10:99:29:fa: 76:27:80:bf:3b:cf:58:1a:52:e8:bf:48:52:ba:25: 9e:1b:ea:6e:f8:91:24:ab:fa:87:bd:8d:e3:f5:5c: 89:3d:8f:28:1a:d7:01:3e:b7:16:6c:18:fd:b9:29: 57:fb:61:f5:21:a7:0d:3f:30:02:0a:8f:63:fa:c4: 70:ca:7c:bc:4b:dd:7f:1c:b4:d4:56:ee:47:91:c8: 57:96:5a:b3:28:c5:55:94:e7:c5:d9:a5:0e:40:c3: a5:9a:45:37:0c:c2:27:be:2e:a4:8d:2c:73:8e:aa: 8b:4a:7d:1b:74:2d:c1:38:b7:71:9d:ee:42:cd:e1: a3:a6:51:ab:f0:0c:f4:4f:53:f9:1a:8e:32:e6:17: c9:3d:c1:bc:94:f7:8b:f5:e0:f0:f0:75:e3:64:1d: 90:0a:5c:2a:2d:52:f7:b9:52:1a:a2:9c:3f:01:a5: 66:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6C:D9:60:4B:51:B3:3F:ED:85:37:FC:8D:FD:52:BB:97:28:1E:50 X509v3 Authority Key Identifier: keyid:C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:71:2e:33:68:96:84:61:38:a9:87:85:a4:a3:56:ac:7c:49: b6:12:39:8f:2f:37:6e:03:b0:ef:2a:84:8a:b6:9b:99:9b:e0: 53:95:7b:cc:17:b0:27:be:91:6b:61:d9:a8:40:87:3c:6f:47: fa:0e:07:f9:8b:2e:93:34:1d:98:8a:8e:59:e8:66:94:c4:13: 2a:6d:25:e2:c1:a2:7d:e0:63:3e:f9:c1:74:a1:49:84:fc:d6: e5:02:f5:f6:27:f8:6c:b6:90:81:f7:43:16:af:ad:60:0f:e5: 22:b0:93:80:fa:12:85:cf:f8:6d:9a:54:9e:e9:be:ac:b3:ed: 65:5e:70:85:c1:cf:19:46:ab:e6:f5:f5:e8:58:0f:69:67:53: e6:8f:12:2e:f6:da:9d:bf:f1:66:71:54:b6:84:0c:5c:2a:cd: d4:a2:56:53:56:b6:0d:ba:27:ff:bc:b9:c5:08:5f:21:1e:09: 62:69:db:7f:74:46:0f:6a:c6:84:a5:30:b7:1a:52:ca:43:46: ec:d4:20:7a:9c:cc:44:84:5d:b9:14:3b:33:98:f2:38:08:32: 7c:1e:45:d2:43:5a:4b:86:2a:74:2b:43:3b:51:35:4a:4e:21: 4c:de:6a:4e:3c:50:c3:92:5d:b0:4f:13:69:7d:7c:7b:71:fa: dc:df:b3:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY5MzcxMTAvBgNVBAUTKEMwMEYwNUFFMEZBOUI2ODBBOTFCNTZGMEQzMjFDNTE4 OEMxRTcxMkMwHhcNMjUxMjIzMDIxNzI0WhcNMjUxMjMwMDIxNzI0WjAYMRYwFAYD VQQDDA02OTQ5ZmJiNS1iMTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDQQVR9hjKPBcC0YvhnntAWMh4l98DzbnTYmOoRjDuk6QVcP0vGgzRbX1o8R LdTfU56F8rTqLJXET//WIET61acDEve4CtWRD0yPFHD/K6Geqjhi+xCZKfp2J4C/ O89YGlLov0hSuiWeG+pu+JEkq/qHvY3j9VyJPY8oGtcBPrcWbBj9uSlX+2H1IacN PzACCo9j+sRwyny8S91/HLTUVu5HkchXllqzKMVVlOfF2aUOQMOlmkU3DMInvi6k jSxzjqqLSn0bdC3BOLdxne5CzeGjplGr8Az0T1P5Go4y5hfJPcG8lPeL9eDw8HXj ZB2QClwqLVL3uVIaopw/AaVm3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEts2WBL UbM/7YU3/I39UruXKB5QMB8GA1UdIwQYMBaAFMAPBa4PqbaAqRtW8NMhxRiMHnEs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yRjJCM0YyMDVC MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRvQ3BHMWJ3MHlIRkdJd2Vj U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dBOEZyZy1wdG9DcEcxYncweUhGR0l3ZWNTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjkzNy8yRjJCM0YyMDVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRv Q3BHMWJ3MHlIRkdJd2VjU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+cS4zaJaEYTiph4Wko1asfEm2EjmPLzduA7DvKoSKtpuZm+BTlXvM F7AnvpFrYdmoQIc8b0f6Dgf5iy6TNB2Yio5Z6GaUxBMqbSXiwaJ94GM++cF0oUmE /NblAvX2J/hstpCB90MWr61gD+UisJOA+hKFz/htmlSe6b6ss+1lXnCFwc8ZRqvm 9fXoWA9pZ1PmjxIu9tqdv/FmcVS2hAxcKs3UolZTVrYNuif/vLnFCF8hHgliadt/ dEYPasaEpTC3GlLKQ0bs1CB6nMxEhF25FDszmPI4CDJ8HkXSQ1pLhip0K0M7UTVK TiFM3mpOPFDDkl2wTxNpfXx7cfrc37Mk -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:42 2025 by rpki-client