This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft File: WKIeeyP68huJ00Jw61b3RJwjmYY.mft (raw, json) Hash identifier: wK9haWgtHUYxk80/l91nveYHpv4VNbbwIjK0BOct82c= Subject key identifier: 83:43:77:74:7A:54:64:C8:A4:6D:1D:07:DB:AF:D2:F9:58:6E:E6:90 Authority key identifier: 58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86 Certificate issuer: /CN=A91656C7/serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft Manifest number: 61 Signing time: Tue 23 Dec 2025 05:52:14 +0000 Manifest this update: Tue 23 Dec 2025 05:52:14 +0000 Manifest next update: Tue 30 Dec 2025 05:52:14 +0000 Files and hashes: 1: WKIeeyP68huJ00Jw61b3RJwjmYY.crl (hash: +dO9elPZs8jmbRmpUfld6lvLRo/viKJLovxCwYDapfY=) 2: 559FC8C054F411F08DC15C53C4F9AE02.roa (hash: Bm8WKhY+hNcg+fjUuluI2/RvbnR7gkU6ugwO04YyI/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91656C7, serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986 Validity Not Before: Dec 23 05:52:14 2025 GMT Not After : Dec 30 05:52:14 2025 GMT Subject: CN=694a2e0e-7517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c7:25:28:68:37:fa:65:08:e9:8b:29:c0:32: b1:43:88:5d:02:db:32:e9:45:53:1f:43:1e:be:23: cc:29:1f:4b:fc:ce:c8:64:a2:4d:37:70:ee:cb:fe: b7:30:90:7c:1f:ee:d4:17:ec:79:ab:7f:1f:d3:8b: 21:4b:e2:b5:87:ac:0a:0d:0f:4f:8d:fe:f2:3e:c0: f8:0a:7e:7e:ec:70:dc:bd:93:00:c5:54:7d:40:28: 19:c1:2f:63:ae:4b:41:4b:c0:9d:7b:23:83:6f:8b: 40:59:32:40:c7:8b:ce:2c:b3:e5:42:28:ea:e3:5b: 37:c1:a0:73:92:f4:49:34:26:f4:90:7c:74:29:7b: 3b:c3:d5:0f:76:2e:c7:dc:bc:78:16:39:b3:02:c5: 59:30:b6:8f:d0:15:13:74:cf:71:43:85:b4:f4:28: 97:9b:0b:53:c8:00:b0:80:3c:c9:d0:46:f8:03:1a: b8:28:60:26:3d:79:ee:84:cc:45:a7:40:f6:d6:65: 7e:b9:c2:c2:50:27:33:26:a3:27:1d:1c:48:57:b5: 6e:bd:0a:94:32:9e:28:ab:0f:05:63:c9:c3:bc:bf: 3a:c6:36:7e:9f:d7:44:a2:8f:66:13:87:c6:83:61: e9:d9:d2:af:58:08:49:dd:cf:89:57:4c:57:c5:8c: 77:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:43:77:74:7A:54:64:C8:A4:6D:1D:07:DB:AF:D2:F9:58:6E:E6:90 X509v3 Authority Key Identifier: keyid:58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3b:47:46:b1:b0:08:c4:b2:bf:51:5e:d5:e1:bb:5f:a1:59: 90:7f:f4:e2:5d:a6:10:58:c5:52:29:5e:19:5e:da:a9:16:c2: 35:4d:32:d3:82:01:6d:2d:7d:70:6d:5b:8e:fc:8c:b5:a2:c3: 9c:72:0f:ff:7e:03:58:74:97:f4:9b:a2:06:77:8e:95:7a:2d: dd:63:68:5b:c4:6e:b3:3f:76:58:6e:81:39:59:1e:0c:ec:d0: 60:30:3d:70:55:13:e1:94:b9:3b:70:c2:84:b5:a6:ff:ca:87: 71:6c:5a:4a:13:e1:88:08:b2:bf:c0:94:ba:99:d5:1b:4a:c2: 71:4f:d3:6a:4f:f6:cc:1d:22:d4:31:71:4b:9e:6b:f1:ea:0d: 75:e6:da:74:73:08:82:c8:64:bb:20:db:48:37:c9:c3:03:a1: 0b:cc:68:2f:d1:ae:d1:94:b8:7b:96:0c:30:86:f0:cf:4a:01: a0:d9:85:61:a1:b3:04:d7:a3:93:fd:ae:1e:8a:da:6d:e4:07: fd:1c:a8:59:4b:f9:12:d7:a4:6e:92:11:98:f6:1d:d5:07:eb: 3a:f2:88:96:05:2e:a1:79:5b:bf:21:76:0f:6e:0a:5a:8d:47: 72:40:95:d1:8d:bb:57:89:e3:4a:18:bd:ef:53:3f:0b:25:98: f7:40:bc:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTZDNzExMC8GA1UEBRMoNThBMjFFN0IyM0ZBRjIxQjg5RDM0MjcwRUI1NkY3NDQ5 QzIzOTk4NjAeFw0yNTEyMjMwNTUyMTRaFw0yNTEyMzAwNTUyMTRaMBgxFjAUBgNV BAMMDTY5NGEyZTBlLTc1MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1xyUoaDf6ZQjpiynAMrFDiF0C2zLpRVMfQx6+I8wpH0v8zshkok03cO7L/rcw kHwf7tQX7Hmrfx/TiyFL4rWHrAoND0+N/vI+wPgKfn7scNy9kwDFVH1AKBnBL2Ou S0FLwJ17I4Nvi0BZMkDHi84ss+VCKOrjWzfBoHOS9Ek0JvSQfHQpezvD1Q92Lsfc vHgWObMCxVkwto/QFRN0z3FDhbT0KJebC1PIALCAPMnQRvgDGrgoYCY9ee6EzEWn QPbWZX65wsJQJzMmoycdHEhXtW69CpQyniirDwVjycO8vzrGNn6f10Sij2YTh8aD YenZ0q9YCEndz4lXTFfFjHcFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg0N3dHpU ZMikbR0H26/S+Vhu5pAwHwYDVR0jBBgwFoAUWKIeeyP68huJ00Jw61b3RJwjmYYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1NkM3Lzg1REVEQUQ4NTBB NTExRjBCMkQxREU0RkM0RjlBRTAyL1dLSWVleVA2OGh1SjAwSnc2MWIzUkp3am1Z WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV0tJZWV5UDY4aHVKMDBKdzYxYjNSSndqbVlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 NkM3Lzg1REVEQUQ4NTBBNTExRjBCMkQxREU0RkM0RjlBRTAyL1dLSWVleVA2OGh1 SjAwSnc2MWIzUkp3am1ZWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADo7R0axsAjEsr9RXtXhu1+hWZB/9OJdphBYxVIpXhle2qkWwjVNMtOC AW0tfXBtW478jLWiw5xyD/9+A1h0l/SbogZ3jpV6Ld1jaFvEbrM/dlhugTlZHgzs 0GAwPXBVE+GUuTtwwoS1pv/Kh3FsWkoT4YgIsr/AlLqZ1RtKwnFP02pP9swdItQx cUuea/HqDXXm2nRzCILIZLsg20g3ycMDoQvMaC/RrtGUuHuWDDCG8M9KAaDZhWGh swTXo5P9rh6K2m3kB/0cqFlL+RLXpG6SEZj2HdUH6zryiJYFLqF5W78hdg9uClqN R3JAldGNu1eJ40oYve9TPwslmPdAvOs= -----END CERTIFICATE-----Generated at Wed Dec 24 22:57:01 2025 by rpki-client