This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft File: JWZWaoTF3OdvO385CN5_MrhnZwc.mft (raw, json) Hash identifier: WCH1wJNJ76yWA8WeQ+gX1CjG8yq9yIaR7lKZtTP9MLs= Subject key identifier: 49:CA:9A:F5:7B:F6:84:09:5C:5C:D1:F4:DD:C3:EA:E2:9A:EA:9F:17 Authority key identifier: 25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07 Certificate issuer: /CN=A917AF37/serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707 Certificate serial: 02E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft Manifest number: 02E1 Signing time: Tue 23 Dec 2025 00:18:49 +0000 Manifest this update: Tue 23 Dec 2025 00:18:49 +0000 Manifest next update: Tue 30 Dec 2025 00:18:49 +0000 Files and hashes: 1: JWZWaoTF3OdvO385CN5_MrhnZwc.crl (hash: ReblspFxL4oYUtH7AeFF3bbd8ZOHuMQ0R4cJVWMtJUg=) 2: 282282B60D3011ED8DC4D26BC4F9AE02.roa (hash: MWEsRQVRa9qaHn6fTEOexcENWAVY9rzeLcSk3zwVJV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.crl rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 741 (0x2e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AF37, serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707 Validity Not Before: Dec 23 00:18:49 2025 GMT Not After : Dec 30 00:18:49 2025 GMT Subject: CN=6949dfe9-2c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bc:e3:62:4d:4a:6f:04:33:14:ab:15:87:e9: 51:03:41:63:0b:09:36:a4:9b:52:59:05:01:2b:2c: 47:6b:68:e6:73:8a:01:43:74:70:9c:9c:0c:fe:f9: f0:40:b7:21:76:ba:8d:aa:02:a5:ae:a3:5d:f8:cd: 72:72:5b:a9:51:ec:24:6a:56:69:f0:b7:4b:d8:c8: 3d:d2:3b:ba:f6:6f:4b:49:0d:40:cf:5a:ff:24:6f: 10:cb:74:81:fa:8f:74:a7:ab:ba:52:5e:d8:79:6a: 69:be:9f:b2:56:9a:e9:72:a9:85:ea:d3:c4:86:ed: 08:54:18:2d:7a:ac:70:45:2e:9e:ba:d0:c8:01:73: e6:1c:d9:93:a0:dc:fa:75:71:c7:b1:62:13:e7:6a: 0d:6c:7e:be:ae:9f:9b:29:be:00:7d:1f:a3:80:bb: 47:25:f3:a9:f0:9f:36:78:a6:e3:60:fe:3c:5b:7f: de:84:e5:01:67:5b:a9:f3:c8:cf:3c:40:2b:ea:8f: 10:92:95:75:47:7b:70:b6:07:6f:b3:7e:8d:32:71: 80:fa:58:6f:5b:04:0f:49:8e:19:44:5e:f9:ac:fa: d9:7b:02:2a:c0:3a:9b:c5:71:f3:36:c4:a9:13:a8: 47:d5:29:d1:05:a4:fa:0f:42:4a:3d:39:d1:8f:0b: 43:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CA:9A:F5:7B:F6:84:09:5C:5C:D1:F4:DD:C3:EA:E2:9A:EA:9F:17 X509v3 Authority Key Identifier: keyid:25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:f3:28:1c:dc:14:e0:d6:8e:34:08:97:7c:65:3f:bd:46:d4: 69:3f:74:92:aa:bf:c3:31:93:45:e1:04:c3:de:6d:b3:51:9f: 99:fd:cb:ce:c4:aa:96:c8:d7:ea:b5:ab:90:e8:67:8a:9f:4a: 6e:c5:47:03:c9:48:bc:4c:83:bb:7a:33:57:e6:2a:89:57:0e: 06:5f:e2:f2:3a:d6:b9:4a:a1:13:7e:4b:06:fe:00:97:d6:77: 62:d5:eb:19:ab:9b:86:e4:91:fc:7a:ec:92:88:1e:f9:ec:fb: 42:37:b1:c7:07:bb:0d:d6:fe:d3:10:19:d3:d2:de:b3:65:68: 32:22:0c:0b:0a:c9:b2:8a:67:fc:db:79:68:c4:40:55:21:d7: 40:0a:20:a0:78:73:12:20:24:4b:ae:29:aa:da:09:5d:d2:f8: 9f:7f:8c:35:d0:26:47:95:46:4e:f5:c1:60:1a:f0:9d:17:17: 36:28:9c:01:3b:aa:b2:7e:35:8b:64:53:a4:9c:a6:13:f2:8a: 09:0f:76:8a:a7:a0:5b:9f:eb:ec:e6:60:63:b7:5d:02:de:be: 62:55:bd:1f:96:70:c9:63:0e:80:da:d6:10:21:8c:8c:b4:c7: 07:22:f1:75:ae:4e:71:59:62:17:67:01:4e:e4:7c:9a:af:11: e3:1e:05:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGMzcxMTAvBgNVBAUTKDI1NjY1NjZBODRDNURDRTc2RjNCN0YzOTA4REU3RjMy Qjg2NzY3MDcwHhcNMjUxMjIzMDAxODQ5WhcNMjUxMjMwMDAxODQ5WjAYMRYwFAYD VQQDDA02OTQ5ZGZlOS0yYzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmLzjYk1KbwQzFKsVh+lRA0FjCwk2pJtSWQUBKyxHa2jmc4oBQ3RwnJwM/vnw QLchdrqNqgKlrqNd+M1yclupUewkalZp8LdL2Mg90ju69m9LSQ1Az1r/JG8Qy3SB +o90p6u6Ul7YeWppvp+yVprpcqmF6tPEhu0IVBgteqxwRS6eutDIAXPmHNmToNz6 dXHHsWIT52oNbH6+rp+bKb4AfR+jgLtHJfOp8J82eKbjYP48W3/ehOUBZ1up88jP PEAr6o8QkpV1R3twtgdvs36NMnGA+lhvWwQPSY4ZRF75rPrZewIqwDqbxXHzNsSp E6hH1SnRBaT6D0JKPTnRjwtD/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnKmvV7 9oQJXFzR9N3D6uKa6p8XMB8GA1UdIwQYMBaAFCVmVmqExdznbzt/OQjefzK4Z2cH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUYzNy9DOENDNUFCNDBE MkQxMUVEQjJDOUJCNjlDNEY5QUUwMi9KV1pXYW9URjNPZHZPMzg1Q041X01yaG5a d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXWldhb1RGM09kdk8zODVDTjVfTXJoblp3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUYzNy9DOENDNUFCNDBEMkQxMUVEQjJDOUJCNjlDNEY5QUUwMi9KV1pXYW9URjNP ZHZPMzg1Q041X01yaG5ad2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA48ygc3BTg1o40CJd8ZT+9RtRpP3SSqr/DMZNF4QTD3m2zUZ+Z/cvO xKqWyNfqtauQ6GeKn0puxUcDyUi8TIO7ejNX5iqJVw4GX+LyOta5SqETfksG/gCX 1ndi1esZq5uG5JH8euySiB757PtCN7HHB7sN1v7TEBnT0t6zZWgyIgwLCsmyimf8 23loxEBVIddACiCgeHMSICRLrimq2gld0viff4w10CZHlUZO9cFgGvCdFxc2KJwB O6qyfjWLZFOknKYT8ooJD3aKp6Bbn+vs5mBjt10C3r5iVb0flnDJYw6A2tYQIYyM tMcHIvF1rk5xWWIXZwFO5HyarxHjHgVA -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:24 2025 by rpki-client