This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft File: WFcZh2wfmiD9644Ew9aTelrKpXw.mft (raw, json) Hash identifier: 3V3G7KUU2+dfGdYcx/6QHZNdMaVIXAsvHG19Qn7dyo4= Subject key identifier: 68:4C:4E:04:15:A4:A2:8F:77:75:EC:52:11:EF:3C:E5:3E:8F:C6:79 Authority key identifier: 58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C Certificate issuer: /CN=A916F1C6/serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C Certificate serial: 34EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft Manifest number: 34EA Signing time: Mon 22 Dec 2025 14:58:53 +0000 Manifest this update: Mon 22 Dec 2025 14:58:53 +0000 Manifest next update: Mon 29 Dec 2025 14:58:53 +0000 Files and hashes: 1: WFcZh2wfmiD9644Ew9aTelrKpXw.crl (hash: TdHmGZeZ7N0DkWvNQhwgnN+2iaOek8yFAZL3Z7YC79c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13546 (0x34ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F1C6, serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C Validity Not Before: Dec 22 14:58:53 2025 GMT Not After : Dec 29 14:58:53 2025 GMT Subject: CN=69495cad-aa7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:af:96:20:dc:c2:45:d4:43:d0:f1:0a:c8:78: b6:45:e2:43:44:6e:68:27:c1:32:40:2f:02:54:46: 65:ec:f9:bf:2a:1e:7b:84:29:75:48:04:4a:3d:2d: 35:1b:ba:aa:77:22:60:4a:bc:22:69:4b:5f:a6:26: d5:63:e4:00:22:90:b9:b1:0b:41:df:d3:2c:e9:8d: fe:dd:35:b1:21:76:73:dd:30:ff:8c:d3:51:de:24: d6:84:76:5b:ff:40:d9:67:0a:95:dc:2e:a2:2d:4c: 31:0c:6f:fb:75:b2:2c:ff:88:ba:83:0d:4b:e7:6d: 5e:e0:f2:b1:aa:ac:f8:2c:97:cb:3e:b2:be:a7:dd: bc:78:19:ac:76:e7:74:3a:81:5a:58:10:66:95:92: 20:08:d6:33:31:88:db:1d:81:23:51:9b:92:8d:6b: f2:de:38:dd:28:e2:95:a3:86:d6:b5:6a:1d:12:7c: 8d:d1:53:db:62:e1:ab:cd:e0:0f:dd:24:d4:45:87: f0:76:2c:fc:7a:b2:99:bd:59:6d:c6:7d:72:fc:f3: 90:08:54:67:80:9f:bb:e4:28:c3:9f:00:93:28:f9: 36:cf:e3:96:e1:37:c6:25:71:b7:9c:11:21:ec:e6: 73:d7:6c:63:c4:a5:58:10:db:61:b7:f0:3d:c1:7c: b3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4C:4E:04:15:A4:A2:8F:77:75:EC:52:11:EF:3C:E5:3E:8F:C6:79 X509v3 Authority Key Identifier: keyid:58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:5c:03:04:3e:77:de:0c:83:b0:b3:c5:8e:72:97:97:aa:ee: 6e:06:3a:8c:29:26:b3:bc:e3:7e:05:7a:5d:78:a6:ea:0a:7d: e5:64:44:e5:d8:59:ca:fe:53:3a:26:b5:8f:55:00:a5:68:e0: b6:e8:7f:89:f2:9a:65:1c:11:af:0f:56:df:14:da:85:11:50: 1a:41:0f:bd:9b:ca:cc:b1:86:d5:12:8e:b3:e2:1d:20:63:77: 71:57:99:7d:88:6a:38:7b:20:fb:63:40:10:f7:fe:87:29:f6: 6a:0f:1c:03:6c:41:fb:e2:22:00:3d:4f:d1:09:4a:7b:c8:b0: c7:4d:1a:72:7e:63:0a:ab:af:5a:f1:38:62:d3:de:0c:80:57: 46:4c:66:31:23:a8:cc:d5:a4:55:5a:04:fb:6f:e2:c4:b7:f6: 68:64:20:1e:c8:69:ae:a6:ee:8e:34:3c:39:d4:65:fb:35:18: 76:e2:01:39:61:17:2d:e5:33:91:1c:73:88:c5:22:4e:4b:0b: 15:8c:c6:72:c1:7e:c4:0b:9c:dc:57:17:ae:8c:2a:62:74:70: 84:91:b4:bb:a9:cc:77:71:b9:67:49:a4:0d:25:1d:93:c5:52: f8:c5:5d:24:4a:c8:16:aa:c2:12:4d:1f:09:3e:de:8b:4c:3b: c1:77:5b:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkYxQzYxMTAvBgNVBAUTKDU4NTcxOTg3NkMxRjlBMjBGREVCOEUwNEMzRDY5MzdB NUFDQUE1N0MwHhcNMjUxMjIyMTQ1ODUzWhcNMjUxMjI5MTQ1ODUzWjAYMRYwFAYD VQQDDA02OTQ5NWNhZC1hYTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6+WINzCRdRD0PEKyHi2ReJDRG5oJ8EyQC8CVEZl7Pm/Kh57hCl1SARKPS01 G7qqdyJgSrwiaUtfpibVY+QAIpC5sQtB39Ms6Y3+3TWxIXZz3TD/jNNR3iTWhHZb /0DZZwqV3C6iLUwxDG/7dbIs/4i6gw1L521e4PKxqqz4LJfLPrK+p928eBmsdud0 OoFaWBBmlZIgCNYzMYjbHYEjUZuSjWvy3jjdKOKVo4bWtWodEnyN0VPbYuGrzeAP 3STURYfwdiz8erKZvVltxn1y/POQCFRngJ+75CjDnwCTKPk2z+OW4TfGJXG3nBEh 7OZz12xjxKVYENtht/A9wXyzrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhMTgQV pKKPd3XsUhHvPOU+j8Z5MB8GA1UdIwQYMBaAFFhXGYdsH5og/euOBMPWk3payqV8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjFDNi8zN0JEQUFDQzFE QTExMUUyQTAxODMzOTMwOEIwMkNEMi9XRmNaaDJ3Zm1pRDk2NDRFdzlhVGVscktw WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dGY1poMndmbWlEOTY0NEV3OWFUZWxyS3BYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjFDNi8zN0JEQUFDQzFEQTExMUUyQTAxODMzOTMwOEIwMkNEMi9XRmNaaDJ3Zm1p RDk2NDRFdzlhVGVscktwWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/XAMEPnfeDIOws8WOcpeXqu5uBjqMKSazvON+BXpdeKbqCn3lZETl 2FnK/lM6JrWPVQClaOC26H+J8pplHBGvD1bfFNqFEVAaQQ+9m8rMsYbVEo6z4h0g Y3dxV5l9iGo4eyD7Y0AQ9/6HKfZqDxwDbEH74iIAPU/RCUp7yLDHTRpyfmMKq69a 8Thi094MgFdGTGYxI6jM1aRVWgT7b+LEt/ZoZCAeyGmupu6ONDw51GX7NRh24gE5 YRct5TORHHOIxSJOSwsVjMZywX7EC5zcVxeujCpidHCEkbS7qcx3cblnSaQNJR2T xVL4xV0kSsgWqsISTR8JPt6LTDvBd1tx -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:09 2025 by rpki-client