This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft File: WR4siXPGPwtQ7voTRGvLFexS5R8.mft (raw, json) Hash identifier: Dq8TCY0gsDyI4JMEojWJP50Jk/HTUJywpslqxt+CIfs= Subject key identifier: F7:BE:FB:6B:09:C0:0B:A8:00:8C:A0:18:6E:DF:C3:81:DE:51:59:6B Authority key identifier: 59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F Certificate issuer: /CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft Manifest number: 01DB Signing time: Tue 23 Dec 2025 01:54:39 +0000 Manifest this update: Tue 23 Dec 2025 01:54:39 +0000 Manifest next update: Tue 30 Dec 2025 01:54:39 +0000 Files and hashes: 1: WR4siXPGPwtQ7voTRGvLFexS5R8.crl (hash: QX7WAVB2OG+53AsSvvZrLO8HeEAOi9uu0F0KYYaI+Js=) 2: 7893F3DC0B8511F086B2C121C4F9AE02.roa (hash: muoRT5YVa+lZ9dmEo5amL/VfGYBrEqrfaPqq9DzwYGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159E90, serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F Validity Not Before: Dec 23 01:54:39 2025 GMT Not After : Dec 30 01:54:39 2025 GMT Subject: CN=6949f65f-0116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9c:fd:83:01:9a:05:f5:f5:0b:a7:af:16:da: 85:c8:49:32:35:33:74:8a:6f:7d:1c:0d:b8:91:0f: 4b:d0:a1:3f:d7:40:15:d0:83:cd:ea:79:28:20:99: 91:5d:00:ac:56:0d:7a:31:99:d7:12:16:de:26:cc: 61:e2:c9:de:09:20:3b:b2:e2:60:72:69:e1:a2:27: f7:6f:a1:78:db:8d:dd:a1:9d:1d:f1:16:10:5d:5b: 9e:47:83:b5:92:90:a9:31:40:62:f0:44:e6:84:05: 49:c1:38:e8:02:dd:7e:8b:0e:10:46:b5:13:83:2e: 4e:e2:55:0a:5b:c0:b3:42:04:82:86:e2:4d:d4:97: 8d:52:38:35:83:5f:62:7d:78:ca:c6:5c:54:b9:27: a1:71:62:e3:cc:40:e9:3f:bb:42:a0:0f:f3:5f:d3: 4b:c5:75:df:e0:21:1a:96:15:11:63:67:47:04:6a: 12:cd:11:3b:c1:3a:ad:1e:cf:50:bf:43:fe:d6:c8: 14:3c:37:eb:3f:cb:01:2d:80:1e:4f:f0:89:23:00: bd:81:08:3b:12:a3:31:40:65:50:4f:a6:71:49:82: bc:f0:21:9f:6e:9f:b7:e8:e8:49:61:a8:1f:81:35: 62:b7:a4:47:7e:23:ea:e2:d6:7a:27:e1:61:05:42: cc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BE:FB:6B:09:C0:0B:A8:00:8C:A0:18:6E:DF:C3:81:DE:51:59:6B X509v3 Authority Key Identifier: keyid:59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:84:3f:8e:6b:ef:3f:5b:8a:6d:e2:57:02:46:42:6f:6b:5b: ba:55:48:bd:50:84:57:84:57:cc:da:59:f8:a2:7d:70:2b:ec: 4c:c9:cd:02:cb:6c:b7:4c:fe:7a:20:a2:7e:81:13:4d:42:82: 80:ab:2e:d4:c1:c8:ec:f8:3e:b6:9e:b5:a3:e8:df:26:e4:cb: 7b:2f:7c:bc:70:90:a2:ae:eb:b9:de:4f:bd:c1:25:85:a8:ff: 9e:00:7a:df:6c:f8:8e:8b:a8:0a:fd:11:3a:ea:f2:fc:04:0a: 1a:c4:e9:17:a1:b3:b9:30:32:97:c3:c8:20:41:df:97:d7:8e: 7d:d7:dc:86:7a:5a:ee:b5:0c:d5:a2:85:8a:46:bb:92:a4:88: de:04:a7:1f:17:a2:c3:75:cd:9c:f4:91:00:e3:7d:94:f0:00: 0e:73:52:65:2d:e0:dc:16:1f:9a:24:96:c0:c1:c2:a4:2a:9c: 0d:0e:ec:43:e1:04:34:94:f8:0a:17:ec:b0:69:0d:2b:2e:e5: 84:99:1f:60:0e:44:5c:3a:49:a4:56:6c:df:05:62:93:17:13: f9:a4:75:34:33:d8:32:94:e1:59:33:3f:5f:b1:fa:b8:67:f3: 8d:d9:d5:23:e1:d1:7a:df:d1:c6:4e:dd:a2:01:f2:6e:7e:67: 73:6c:d5:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFOTAxMTAvBgNVBAUTKDU5MUUyQzg5NzNDNjNGMEI1MEVFRkExMzQ0NkJDQjE1 RUM1MkU1MUYwHhcNMjUxMjIzMDE1NDM5WhcNMjUxMjMwMDE1NDM5WjAYMRYwFAYD VQQDDA02OTQ5ZjY1Zi0wMTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pz9gwGaBfX1C6evFtqFyEkyNTN0im99HA24kQ9L0KE/10AV0IPN6nkoIJmR XQCsVg16MZnXEhbeJsxh4sneCSA7suJgcmnhoif3b6F4243doZ0d8RYQXVueR4O1 kpCpMUBi8ETmhAVJwTjoAt1+iw4QRrUTgy5O4lUKW8CzQgSChuJN1JeNUjg1g19i fXjKxlxUuSehcWLjzEDpP7tCoA/zX9NLxXXf4CEalhURY2dHBGoSzRE7wTqtHs9Q v0P+1sgUPDfrP8sBLYAeT/CJIwC9gQg7EqMxQGVQT6ZxSYK88CGfbp+36OhJYagf gTVit6RHfiPq4tZ6J+FhBULM/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPe++2sJ wAuoAIygGG7fw4HeUVlrMB8GA1UdIwQYMBaAFFkeLIlzxj8LUO76E0RryxXsUuUf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUU5MC9BNTcyQjY3QzFG MzIxMUVFQjM2NERENTNDNEY5QUUwMi9XUjRzaVhQR1B3dFE3dm9UUkd2TEZleFM1 UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dSNHNpWFBHUHd0UTd2b1RSR3ZMRmV4UzVSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUU5MC9BNTcyQjY3QzFGMzIxMUVFQjM2NERENTNDNEY5QUUwMi9XUjRzaVhQR1B3 dFE3dm9UUkd2TEZleFM1UjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNhD+Oa+8/W4pt4lcCRkJva1u6VUi9UIRXhFfM2ln4on1wK+xMyc0C y2y3TP56IKJ+gRNNQoKAqy7Uwcjs+D62nrWj6N8m5Mt7L3y8cJCiruu53k+9wSWF qP+eAHrfbPiOi6gK/RE66vL8BAoaxOkXobO5MDKXw8ggQd+X145919yGelrutQzV ooWKRruSpIjeBKcfF6LDdc2c9JEA432U8AAOc1JlLeDcFh+aJJbAwcKkKpwNDuxD 4QQ0lPgKF+ywaQ0rLuWEmR9gDkRcOkmkVmzfBWKTFxP5pHU0M9gylOFZMz9fsfq4 Z/ON2dUj4dF639HGTt2iAfJufmdzbNW+ -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:37 2025 by rpki-client