This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft File: wFrpU0_TnWSMKEQ8SNURu6moyv4.mft (raw, json) Hash identifier: KIAPKN637slxJEWWWNY+SdMPFLxCZzo6wpeZzVSRfdI= Subject key identifier: 33:27:50:C5:B5:37:38:5F:71:7A:C5:34:4D:DE:15:F5:89:75:FD:41 Authority key identifier: C0:5A:E9:53:4F:D3:9D:64:8C:28:44:3C:48:D5:11:BB:A9:A8:CA:FE Certificate issuer: /CN=A917C11F/serialNumber=C05AE9534FD39D648C28443C48D511BBA9A8CAFE Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFrpU0_TnWSMKEQ8SNURu6moyv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft Manifest number: 065C Signing time: Sat 20 Dec 2025 21:55:24 +0000 Manifest this update: Sat 20 Dec 2025 21:55:24 +0000 Manifest next update: Sat 27 Dec 2025 21:55:24 +0000 Files and hashes: 1: wFrpU0_TnWSMKEQ8SNURu6moyv4.crl (hash: VWX983eaDZabHD6JuvUOxDZWDfau4n/YNwWUzJIDzxo=) 2: 2E7B4D90ACD411EBA8C2F944C4F9AE02.roa (hash: MwOY3BipT7r/AeBZi7pm11RmpGFzpmYVKaT5s//Pc50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.crl rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFrpU0_TnWSMKEQ8SNURu6moyv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C11F, serialNumber=C05AE9534FD39D648C28443C48D511BBA9A8CAFE Validity Not Before: Dec 20 21:55:24 2025 GMT Not After : Dec 27 21:55:24 2025 GMT Subject: CN=69471b4c-4506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ec:3c:30:c4:6b:45:f3:7f:96:92:5c:0e:2e: d3:4d:3a:b3:ea:8f:c1:12:e6:b0:9e:f3:90:67:dc: e0:24:e5:24:8d:f1:fe:8a:c2:b5:43:43:30:24:e7: 4d:c8:39:a0:42:76:f9:b2:0a:14:f2:bf:21:6a:b6: 7f:5b:a8:49:00:ed:34:04:56:1a:dc:85:e1:7e:95: 45:f9:9f:be:69:4f:74:b8:08:35:28:b2:b3:34:9c: b6:69:3e:c8:21:01:68:5a:d0:93:79:2d:76:ec:44: 26:c3:90:0a:0d:7b:77:c9:18:d4:50:98:82:61:b5: 90:a6:85:bd:d6:45:84:0a:66:45:61:1a:d4:0e:3b: f3:80:7a:bc:f2:64:1e:93:05:59:6d:3c:68:dd:24: 91:a2:42:ba:20:79:90:1c:2c:15:93:19:93:be:af: b2:e2:69:8d:7f:6c:a8:1a:74:3c:fc:54:cb:49:65: 7a:80:29:14:c7:13:c2:53:75:8a:6d:a4:f9:4c:89: 06:cc:2e:ea:8f:81:89:61:8a:f6:19:45:3c:b7:e4: 7c:37:34:03:b3:19:19:44:5a:3e:e8:6e:0f:83:7d: 7e:cd:09:7a:bf:10:b9:e9:5a:4c:04:48:9f:1f:4b: c3:9f:52:e8:73:d9:e3:1a:f0:cb:2c:1b:38:96:c8: 3c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:27:50:C5:B5:37:38:5F:71:7A:C5:34:4D:DE:15:F5:89:75:FD:41 X509v3 Authority Key Identifier: keyid:C0:5A:E9:53:4F:D3:9D:64:8C:28:44:3C:48:D5:11:BB:A9:A8:CA:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFrpU0_TnWSMKEQ8SNURu6moyv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:5c:c4:5a:f1:1b:db:b7:6e:04:99:41:98:3f:6b:cb:26:48: dc:30:c0:dc:bc:44:46:63:95:e2:a9:57:31:65:68:09:d7:b2: 23:c8:f9:c3:6a:51:7a:02:19:b0:ff:b8:d9:20:76:9d:0a:dc: 04:53:14:3c:57:57:d6:f4:14:3f:bb:d5:4a:97:21:1b:e1:da: 7a:ef:8c:b0:41:9b:7c:4d:1c:d3:0b:59:09:3f:42:20:6f:e5: b3:6d:81:ae:50:4d:f9:5f:92:2f:f3:8c:db:16:3d:32:5f:9f: 34:67:2a:35:6d:1a:55:b6:88:ba:b3:4c:cf:f2:0e:78:96:f5: 01:11:b4:a9:fb:66:1d:21:9d:d6:6e:95:34:5e:c8:84:0f:7b: 82:e7:b2:8e:60:30:dd:4f:93:2a:03:b2:bd:2b:b2:b3:d9:30: 21:c3:c7:4f:f5:3b:25:9a:d2:a4:c9:ce:d2:9f:94:b4:90:cd: 8b:81:4e:17:0f:10:25:dd:9c:db:11:ad:fd:60:c4:be:80:d6: 08:a5:72:c9:ee:07:27:b4:ee:94:51:d2:63:9e:02:6d:89:eb: c7:09:7a:55:4c:0a:70:08:49:61:69:16:cd:51:eb:5e:87:24: a7:5f:b2:a2:59:05:76:54:2f:c0:3c:98:11:0f:0d:a6:dc:cb: ba:08:aa:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxMUYxMTAvBgNVBAUTKEMwNUFFOTUzNEZEMzlENjQ4QzI4NDQzQzQ4RDUxMUJC QTlBOENBRkUwHhcNMjUxMjIwMjE1NTI0WhcNMjUxMjI3MjE1NTI0WjAYMRYwFAYD VQQDDA02OTQ3MWI0Yy00NTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArew8MMRrRfN/lpJcDi7TTTqz6o/BEuawnvOQZ9zgJOUkjfH+isK1Q0MwJOdN yDmgQnb5sgoU8r8harZ/W6hJAO00BFYa3IXhfpVF+Z++aU90uAg1KLKzNJy2aT7I IQFoWtCTeS127EQmw5AKDXt3yRjUUJiCYbWQpoW91kWECmZFYRrUDjvzgHq88mQe kwVZbTxo3SSRokK6IHmQHCwVkxmTvq+y4mmNf2yoGnQ8/FTLSWV6gCkUxxPCU3WK baT5TIkGzC7qj4GJYYr2GUU8t+R8NzQDsxkZRFo+6G4Pg31+zQl6vxC56VpMBEif H0vDn1Loc9njGvDLLBs4lsg8YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMnUMW1 NzhfcXrFNE3eFfWJdf1BMB8GA1UdIwQYMBaAFMBa6VNP051kjChEPEjVEbupqMr+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzExRi85RTg4QUUxOEFD RDIxMUVCOThGRTY5NDBDNEY5QUUwMi93RnJwVTBfVG5XU01LRVE4U05VUnU2bW95 djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dGcnBVMF9UbldTTUtFUThTTlVSdTZtb3l2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzExRi85RTg4QUUxOEFDRDIxMUVCOThGRTY5NDBDNEY5QUUwMi93RnJwVTBfVG5X U01LRVE4U05VUnU2bW95djQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjXMRa8Rvbt24EmUGYP2vLJkjcMMDcvERGY5XiqVcxZWgJ17IjyPnD alF6Ahmw/7jZIHadCtwEUxQ8V1fW9BQ/u9VKlyEb4dp674ywQZt8TRzTC1kJP0Ig b+WzbYGuUE35X5Iv84zbFj0yX580Zyo1bRpVtoi6s0zP8g54lvUBEbSp+2YdIZ3W bpU0XsiED3uC57KOYDDdT5MqA7K9K7Kz2TAhw8dP9TslmtKkyc7Sn5S0kM2LgU4X DxAl3ZzbEa39YMS+gNYIpXLJ7gcntO6UUdJjngJtievHCXpVTApwCElhaRbNUete hySnX7KiWQV2VC/APJgRDw2m3Mu6CKrn -----END CERTIFICATE-----Generated at Sun Dec 21 22:44:14 2025 by rpki-client