This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json) Hash identifier: GDg57aCEoaTtod3B7Sbd7/uwyS0aWkl5XJOVuL+NbgQ= Subject key identifier: 64:2D:E3:46:5C:05:FB:83:F6:6F:B2:78:80:E0:69:66:BF:1C:2A:F6 Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0C96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft Manifest number: 0C72 Signing time: Wed 10 Dec 2025 17:47:46 +0000 Manifest this update: Wed 10 Dec 2025 17:47:45 +0000 Manifest next update: Wed 17 Dec 2025 17:47:45 +0000 Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: K6TrLxkkp2dOr5QEOqqtB46eYwTGqdG3wWUx2FlpI6k=) 2: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: gf3Sdo19qyXM6SMAtIZiiG8nFm/lM81I+lk8U/mxJ0A=) 3: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: m3cQPwvPfynkpVZQ6ovTIwwV/a4OxHBn+kGRuN/3tCk=) 4: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: iJYPLuFQNCCH+UvB8S/XoN2BohnkZQZo7wuZ5vZn4KI=) 5: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: OT8lFgnYcC18UV02Y4GD3JZ3PmqRrvihPECOx7skEQw=) 6: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: b4w7QgPcZzJXvh0ZqyON2NEy/TPDBAfSWtVCJWQUkJM=) 7: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: +57K4ut0qq2fKWCTFqpHNS42ff+KxP45CLdJafu2rsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 17:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3222 (0xc96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: Dec 10 17:47:45 2025 GMT Not After : Dec 17 17:47:45 2025 GMT Subject: CN=6939b241-b030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f2:05:41:c0:6c:6e:a6:18:8d:34:30:3a:00: c3:6a:3b:45:e7:99:b8:a8:cf:68:62:ba:30:19:6b: 81:d1:7b:16:b7:b4:ed:9d:8c:1a:b1:7c:8b:b9:35: ae:38:4d:c0:fe:cc:e4:e5:4f:b0:0a:ba:20:d9:07: b9:bc:b1:8d:de:d6:bd:3b:31:5e:1b:1f:36:0e:df: a4:97:1e:90:dc:4c:08:a5:35:fa:74:20:32:a6:ae: 9a:1f:47:3c:55:bd:29:ac:9d:2c:4c:ce:d3:d2:8a: 8f:0f:ae:ae:57:78:f3:dc:98:b9:d3:50:c4:c3:5c: a5:9a:66:14:ec:bb:f0:64:97:e0:0f:cb:30:a0:e7: 62:26:a2:9d:ef:32:db:41:7b:9c:49:d9:3f:99:d6: 35:bf:e3:f9:83:07:ae:66:9a:af:7f:ae:a8:ef:66: 5c:da:9e:16:39:fb:56:56:4c:f0:50:7c:ec:03:af: 64:b4:9e:43:d8:15:c0:8f:b5:d2:65:b5:54:f9:cd: e5:e9:78:cc:72:4e:e0:a6:ff:48:b7:9d:2d:b2:0d: b9:0c:65:1e:12:01:f3:d2:9f:20:c3:95:9b:cf:0c: 6a:1a:6d:ad:cc:4f:65:74:90:77:f2:98:34:16:32: 6e:0b:a7:e7:a0:9f:6e:c6:e2:c1:d3:6f:f0:70:6a: 1e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2D:E3:46:5C:05:FB:83:F6:6F:B2:78:80:E0:69:66:BF:1C:2A:F6 X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:13:79:24:88:c8:b6:33:56:91:0d:fd:55:6e:76:89:8a:34: 32:f0:70:a3:cc:0a:25:4c:73:a2:05:06:f2:3a:7c:77:a8:44: 0b:71:3e:31:a5:19:a6:63:3a:d1:9e:56:2c:90:15:8d:1e:40: a2:d4:64:19:fa:85:27:cb:f8:3b:b3:0e:c2:b5:09:31:92:b4: cc:1b:82:b1:f6:98:42:5e:7f:97:60:3c:dc:e6:08:84:a0:66: 38:f1:c0:45:1d:1f:85:d8:6b:a5:7f:ef:d5:e5:46:ab:69:b7: fc:f6:b3:59:4b:dc:a3:9c:66:e3:ef:38:b2:1b:9b:da:13:a1: f6:87:e2:0e:1e:48:73:ce:09:ee:03:2d:d2:3c:2d:e7:97:48: 35:ee:3f:4f:7f:f9:43:2d:1e:af:92:63:0a:ed:63:74:f5:02: 42:9d:61:13:35:2f:e5:2d:aa:93:4d:a5:c7:30:bd:4c:73:57: 0e:3e:ba:09:10:50:1f:7c:fd:71:9f:72:86:0d:36:d9:1e:f0: d0:4d:cb:9f:95:b5:0b:e9:05:ca:ad:19:1a:75:de:43:bf:a4: f7:2d:7e:d2:95:3b:6a:47:b8:97:08:2e:b6:4e:80:ea:5d:cb: 82:ab:cf:67:03:0d:2d:ec:93:c9:0d:85:48:4e:07:7f:b1:69: 8b:db:c3:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjUxMjEwMTc0NzQ1WhcNMjUxMjE3MTc0NzQ1WjAYMRYwFAYD VQQDEw02OTM5YjI0MS1iMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fIFQcBsbqYYjTQwOgDDajtF55m4qM9oYrowGWuB0XsWt7TtnYwasXyLuTWu OE3A/szk5U+wCrog2Qe5vLGN3ta9OzFeGx82Dt+klx6Q3EwIpTX6dCAypq6aH0c8 Vb0prJ0sTM7T0oqPD66uV3jz3Ji501DEw1ylmmYU7LvwZJfgD8swoOdiJqKd7zLb QXucSdk/mdY1v+P5gweuZpqvf66o72Zc2p4WOftWVkzwUHzsA69ktJ5D2BXAj7XS ZbVU+c3l6XjMck7gpv9It50tsg25DGUeEgHz0p8gw5WbzwxqGm2tzE9ldJB38pg0 FjJuC6fnoJ9uxuLB02/wcGoexQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQt40Zc BfuD9m+yeIDgaWa/HCr2MB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkZEQS82ODEyN0UyMDBGNEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJ RURmWFhsWlJwTTdEYjM3NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoE3kkiMi2M1aRDf1VbnaJijQy8HCjzAolTHOiBQbyOnx3qEQLcT4x pRmmYzrRnlYskBWNHkCi1GQZ+oUny/g7sw7CtQkxkrTMG4Kx9phCXn+XYDzc5giE oGY48cBFHR+F2Gulf+/V5Uarabf89rNZS9yjnGbj7ziyG5vaE6H2h+IOHkhzzgnu Ay3SPC3nl0g17j9Pf/lDLR6vkmMK7WN09QJCnWETNS/lLaqTTaXHML1Mc1cOProJ EFAffP1xn3KGDTbZHvDQTcuflbUL6QXKrRkadd5Dv6T3LX7SlTtqR7iXCC62ToDq XcuCq89nAw0t7JPJDYVITgd/sWmL28Pb -----END CERTIFICATE-----Generated at Thu Dec 11 23:53:50 2025 by rpki-client