This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft File: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft (raw, json) Hash identifier: nGVatelTXcAlIy11YncK3rGT6VJ/1JEw51/u0vmQOvA= Subject key identifier: 41:1B:21:11:2E:01:74:D0:C0:A2:9D:AE:F6:9F:BE:3A:67:06:F1:17 Authority key identifier: 58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B Certificate issuer: /CN=A915B50D/serialNumber=586F933176F6545435BB0697FE5F982A2093941B Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft Manifest number: EA Signing time: Tue 23 Dec 2025 04:22:03 +0000 Manifest this update: Tue 23 Dec 2025 04:22:03 +0000 Manifest next update: Tue 30 Dec 2025 04:22:03 +0000 Files and hashes: 1: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl (hash: LKrmk2I/88MpM3gA7UlQIL74Dkig/bhOyFScsPqDchI=) 2: EABF54FA7BC111EFA1A45E4BC4F9AE02.roa (hash: iP5vBpep621bA7XFAwnUEXsQLF6f2HgJTc6XMRta7XQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B50D, serialNumber=586F933176F6545435BB0697FE5F982A2093941B Validity Not Before: Dec 23 04:22:03 2025 GMT Not After : Dec 30 04:22:03 2025 GMT Subject: CN=694a18eb-fdae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3a:c2:a9:e5:72:ae:2f:a5:51:4f:d7:8c:3b: d5:6e:69:15:2f:95:77:aa:8c:47:54:e9:09:b8:7e: dc:55:bf:45:5d:85:7e:af:8f:91:0f:1e:db:bb:47: c2:23:c0:79:c3:a1:4b:17:78:d4:3f:ff:63:f0:83: 96:18:ab:85:1f:4a:bf:ee:d1:b1:49:cf:cd:ef:09: 1b:62:e9:74:e6:7d:95:10:50:61:ec:b2:9a:81:5b: 08:b4:2f:00:57:0b:07:99:32:1e:9f:7f:98:64:b3: d2:8f:fa:d5:f0:d4:55:c2:c0:2c:a6:73:15:05:1c: 69:15:98:de:55:59:ab:59:ee:62:fa:27:42:1e:cc: 75:2a:ef:4d:d4:6d:3b:08:49:b8:f0:58:91:70:71: 67:2b:b5:5a:2f:46:f1:9c:5f:a5:91:da:39:e7:ec: 94:3f:b0:62:44:e9:b9:45:f3:3d:c8:b9:1c:77:4c: a5:fe:6a:b9:d5:72:76:1d:89:84:56:48:41:6a:91: 08:8b:18:78:8d:8c:6b:b6:a9:ef:31:6c:15:a6:b9: 10:e5:d7:25:2a:23:53:0d:1a:22:90:62:55:66:fb: 04:42:04:21:04:fa:0f:9c:4f:81:49:fe:6b:ee:b7: 09:f9:77:82:ec:7e:50:3a:3e:03:e4:66:e3:15:ff: 82:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1B:21:11:2E:01:74:D0:C0:A2:9D:AE:F6:9F:BE:3A:67:06:F1:17 X509v3 Authority Key Identifier: keyid:58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:13:7c:42:bc:94:05:4b:4d:59:3c:57:00:32:5c:5d:2b:15: b3:12:f0:9a:e8:92:33:4d:79:06:f1:89:96:4d:e1:b9:c3:78: 13:3f:ea:fb:6b:14:2a:0a:b4:78:bf:44:0f:6d:1c:cc:fb:21: 3c:9e:bc:1a:19:13:85:df:6d:07:ac:14:f2:2c:e1:a2:ea:19: c8:c1:f9:6a:84:17:b2:bf:3d:be:a1:ba:96:80:11:6f:8c:29: 50:be:7d:6d:0f:85:66:f0:de:03:88:06:fe:28:72:32:74:14: 4b:ea:54:a7:5b:65:d1:40:9a:39:12:b6:97:7b:ea:46:00:69: f0:b6:eb:dd:ab:f1:0c:af:31:5c:32:80:d0:a4:f2:fd:0f:41: d6:c7:9c:55:6e:04:dd:9e:68:24:71:60:21:40:ef:88:45:a3: 6e:a5:bb:95:dc:5e:9e:e4:65:dd:7f:9f:77:cc:67:0d:3e:27: ab:70:d7:6d:64:0c:54:b1:ee:2a:af:15:2b:6e:c7:96:02:28: 49:51:96:c7:cc:d6:1c:2d:04:c8:7a:12:ee:00:a0:70:5d:09: f4:ba:37:3b:97:0f:4b:17:04:85:05:9e:e0:90:12:62:61:b6: c5:dc:71:76:b3:69:9e:33:f3:38:bf:c3:65:54:17:30:89:0f: 58:14:77:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MEQxMTAvBgNVBAUTKDU4NkY5MzMxNzZGNjU0NTQzNUJCMDY5N0ZFNUY5ODJB MjA5Mzk0MUIwHhcNMjUxMjIzMDQyMjAzWhcNMjUxMjMwMDQyMjAzWjAYMRYwFAYD VQQDDA02OTRhMThlYi1mZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjrCqeVyri+lUU/XjDvVbmkVL5V3qoxHVOkJuH7cVb9FXYV+r4+RDx7bu0fC I8B5w6FLF3jUP/9j8IOWGKuFH0q/7tGxSc/N7wkbYul05n2VEFBh7LKagVsItC8A VwsHmTIen3+YZLPSj/rV8NRVwsAspnMVBRxpFZjeVVmrWe5i+idCHsx1Ku9N1G07 CEm48FiRcHFnK7VaL0bxnF+lkdo55+yUP7BiROm5RfM9yLkcd0yl/mq51XJ2HYmE VkhBapEIixh4jYxrtqnvMWwVprkQ5dclKiNTDRoikGJVZvsEQgQhBPoPnE+BSf5r 7rcJ+XeC7H5QOj4D5GbjFf+CHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEbIREu AXTQwKKdrvafvjpnBvEXMB8GA1UdIwQYMBaAFFhvkzF29lRUNbsGl/5fmCogk5Qb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUwRC9FRjhFM0RBQzdC QkMxMUVGOTJFRTFBNjZDNEY5QUUwMi9XRy1UTVhiMlZGUTF1d2FYX2wtWUtpQ1Rs QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dHLVRNWGIyVkZRMXV3YVhfbC1ZS2lDVGxCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUwRC9FRjhFM0RBQzdCQkMxMUVGOTJFRTFBNjZDNEY5QUUwMi9XRy1UTVhiMlZG UTF1d2FYX2wtWUtpQ1RsQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpE3xCvJQFS01ZPFcAMlxdKxWzEvCa6JIzTXkG8YmWTeG5w3gTP+r7 axQqCrR4v0QPbRzM+yE8nrwaGROF320HrBTyLOGi6hnIwflqhBeyvz2+obqWgBFv jClQvn1tD4Vm8N4DiAb+KHIydBRL6lSnW2XRQJo5EraXe+pGAGnwtuvdq/EMrzFc MoDQpPL9D0HWx5xVbgTdnmgkcWAhQO+IRaNupbuV3F6e5GXdf593zGcNPiercNdt ZAxUse4qrxUrbseWAihJUZbHzNYcLQTIehLuAKBwXQn0ujc7lw9LFwSFBZ7gkBJi YbbF3HF2s2meM/M4v8NlVBcwiQ9YFHcl -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:08 2025 by rpki-client