This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft File: WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft (raw, json) Hash identifier: O00tKKdzGGZVRpeXk3hibeXajCokhm/2S0w+pN9+zwc= Subject key identifier: 00:07:55:9A:DC:7A:D8:41:5D:06:AF:52:E7:56:57:E2:94:9E:56:B8 Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 Certificate issuer: /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft Manifest number: C3 Signing time: Sun 21 Dec 2025 05:06:23 +0000 Manifest this update: Sun 21 Dec 2025 05:06:23 +0000 Manifest next update: Sun 28 Dec 2025 05:06:23 +0000 Files and hashes: 1: WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl (hash: XMevhmyURZUFMxQqKuoZ55aBJ2jNwyxuPgMBbJuRqlU=) 2: 46C0C4E0770311F09B9D387BC4F9AE02.roa (hash: OeFUJInFH4cNkqvMFV8k9Dy5HiypZ14/pThp2DVW2AA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909, serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Validity Not Before: Dec 21 05:06:23 2025 GMT Not After : Dec 28 05:06:23 2025 GMT Subject: CN=6947804f-9027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ac:08:36:7e:f3:91:18:5d:21:8d:b4:d1:c7: 09:8e:0e:98:cb:55:5a:98:c7:f9:db:6d:cb:31:dd: ac:d3:a1:76:23:5b:72:87:6b:27:48:c2:83:18:bd: bc:88:a5:11:ed:7c:30:37:4d:6b:98:3e:17:7b:27: 0c:40:23:52:f0:5a:5b:b9:41:79:8c:f5:fc:f3:03: b3:ac:09:45:7a:42:54:f3:f3:9c:9c:59:fd:88:44: ce:41:93:5b:3b:d4:f4:76:c9:57:16:5b:bc:ba:b6: ec:19:57:d9:8f:df:3b:d9:8c:a5:3a:df:72:cf:30: 81:7d:73:c0:40:03:9f:3d:6d:c4:cd:27:ce:44:e7: 02:99:4e:30:8c:e0:c3:f1:23:25:62:f8:41:98:16: 51:df:92:76:40:84:49:03:04:df:a7:df:dd:7d:4c: a3:2f:31:60:76:2c:c0:ab:9a:e8:8e:38:9c:c2:87: 57:4a:8f:46:3d:56:88:70:25:d2:2d:cc:94:d6:bb: ba:a0:87:b0:97:05:65:85:7d:30:b5:dc:8a:9b:c1: dc:ad:6b:62:d8:5d:af:84:77:40:ac:c7:56:a3:47: e3:fa:7b:31:85:b8:5e:87:8e:a3:42:07:ca:94:ad: 0b:9a:b4:c9:b2:1f:fb:79:9e:fe:c3:0d:1d:20:72: 62:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:07:55:9A:DC:7A:D8:41:5D:06:AF:52:E7:56:57:E2:94:9E:56:B8 X509v3 Authority Key Identifier: keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:df:6e:37:04:28:e2:46:ce:76:37:5a:6c:dc:60:ee:96:f3: 9c:a5:48:8d:0e:84:b0:67:8b:2b:1f:58:e9:27:36:74:61:8b: ac:cb:10:a2:a9:bf:9e:c9:51:ff:b9:2e:47:d7:15:f7:c1:1e: 6f:ca:b3:e9:5a:f4:fd:91:a9:bd:ee:af:28:64:79:ee:46:e9: f5:89:b9:9d:cf:0c:28:b8:b0:a2:e9:61:b6:ac:32:c6:75:af: 00:36:e9:14:35:af:e3:23:9b:4a:5b:3e:5d:87:3c:7a:6e:47: d9:b9:9e:94:05:b5:5a:4f:6c:3e:0e:4f:fc:d0:59:cb:5e:4b: da:9e:13:bc:af:88:dc:81:f0:c6:05:6a:2c:ac:33:ad:5b:53: ea:89:37:4b:e7:20:4e:8b:5d:bb:89:f2:ac:d7:26:26:35:c6: 31:b2:d3:13:03:8f:18:59:90:3c:c8:b0:88:f0:3f:34:33:ed: 35:04:2e:1c:f0:4b:2a:24:13:0d:c4:12:9e:ac:f3:35:ca:f2: 46:08:7b:e1:99:e1:7e:9c:75:a4:4e:04:f2:65:07:ef:c7:9e: ec:9a:f1:d6:8b:ee:82:20:04:7b:8f:06:d7:3d:0d:2b:80:54: cb:40:aa:03:46:b0:a7:15:b8:4e:64:c6:f2:1d:e7:94:2c:53: 5d:9b:15:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MDkxMTAvBgNVBAUTKDU5RjlENDhERDkxNjkwOTc4M0UzMTc3MUQ4QUQ3RUNC MzBEQzNCQTIwHhcNMjUxMjIxMDUwNjIzWhcNMjUxMjI4MDUwNjIzWjAYMRYwFAYD VQQDDA02OTQ3ODA0Zi05MDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKwINn7zkRhdIY200ccJjg6Yy1VamMf5223LMd2s06F2I1tyh2snSMKDGL28 iKUR7XwwN01rmD4XeycMQCNS8FpbuUF5jPX88wOzrAlFekJU8/OcnFn9iETOQZNb O9T0dslXFlu8urbsGVfZj9872YylOt9yzzCBfXPAQAOfPW3EzSfOROcCmU4wjODD 8SMlYvhBmBZR35J2QIRJAwTfp9/dfUyjLzFgdizAq5rojjicwodXSo9GPVaIcCXS LcyU1ru6oIewlwVlhX0wtdyKm8HcrWti2F2vhHdArMdWo0fj+nsxhbheh46jQgfK lK0LmrTJsh/7eZ7+ww0dIHJiOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAHVZrc ethBXQavUudWV+KUnla4MB8GA1UdIwQYMBaAFFn51I3ZFpCXg+MXcditfssw3Dui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkwOS9GRjdDNUZEQ0Mw REIxMUVGOUU4NzE4NDRDNEY5QUUwMi9XZm5VamRrV2tKZUQ0eGR4MksxLXl6RGNP NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dmblVqZGtXa0plRDR4ZHgySzEteXpEY082SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzkwOS9GRjdDNUZEQ0MwREIxMUVGOUU4NzE4NDRDNEY5QUUwMi9XZm5VamRrV2tK ZUQ0eGR4MksxLXl6RGNPNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv3243BCjiRs52N1ps3GDulvOcpUiNDoSwZ4srH1jpJzZ0YYusyxCi qb+eyVH/uS5H1xX3wR5vyrPpWvT9kam97q8oZHnuRun1ibmdzwwouLCi6WG2rDLG da8ANukUNa/jI5tKWz5dhzx6bkfZuZ6UBbVaT2w+Dk/80FnLXkvanhO8r4jcgfDG BWosrDOtW1PqiTdL5yBOi127ifKs1yYmNcYxstMTA48YWZA8yLCI8D80M+01BC4c 8EsqJBMNxBKerPM1yvJGCHvhmeF+nHWkTgTyZQfvx57smvHWi+6CIAR7jwbXPQ0r gFTLQKoDRrCnFbhOZMbyHeeULFNdmxXx -----END CERTIFICATE-----Generated at Sun Dec 21 19:01:09 2025 by rpki-client