This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft File: w5XQGgjBWiERA86BBh4mgk9Wvdg.mft (raw, json) Hash identifier: jS3VpBBS5/2Pv9iWet+wPgRhvf27tqhwlbKgsONu0+0= Subject key identifier: FF:D1:EF:16:DD:C9:1A:CF:66:D8:7E:3B:64:6E:34:3A:2C:32:FF:BD Authority key identifier: C3:95:D0:1A:08:C1:5A:21:11:03:CE:81:06:1E:26:82:4F:56:BD:D8 Certificate issuer: /CN=A918D1BD/serialNumber=C395D01A08C15A211103CE81061E26824F56BDD8 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5XQGgjBWiERA86BBh4mgk9Wvdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft Manifest number: 1C Signing time: Wed 03 Dec 2025 05:58:16 +0000 Manifest this update: Wed 03 Dec 2025 05:58:15 +0000 Manifest next update: Wed 10 Dec 2025 05:58:15 +0000 Files and hashes: 1: w5XQGgjBWiERA86BBh4mgk9Wvdg.crl (hash: JZWhoSuehg9QmKE0lpcOgJ/0FoRxxFNQZl1O3o8gwd8=) 2: 7506D296A76311F0AD88321FC4F9AE02.roa (hash: frork6Vp5nTPit2f2Krk9q4CNRaNCPR0fWvNDj+VLgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.crl rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5XQGgjBWiERA86BBh4mgk9Wvdg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1BD, serialNumber=C395D01A08C15A211103CE81061E26824F56BDD8 Validity Not Before: Dec 3 05:58:15 2025 GMT Not After : Dec 10 05:58:15 2025 GMT Subject: CN=692fd177-29d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e5:6c:7c:90:dc:4d:09:1a:37:a0:3c:02:2e: 82:aa:93:72:82:ef:d4:0b:27:46:64:28:96:ae:73: da:79:21:0f:e3:ff:e1:f9:ed:8e:fe:1b:ed:08:db: 73:ef:eb:16:56:ac:c7:ae:33:ef:82:12:4a:f8:c0: c3:ba:1f:e1:aa:a6:1a:38:ab:c1:99:d2:ff:23:1c: b2:78:0c:84:89:dd:9b:71:1f:7a:5e:0b:ea:6c:d9: db:0d:7c:21:60:32:bd:20:bf:9b:d4:ae:00:44:f7: 83:6e:ed:e5:ae:b2:82:e0:a5:23:a7:e6:22:1b:5d: 79:b3:e5:02:bd:21:2f:6b:c4:6b:0f:b5:7b:10:93: 1f:4b:78:da:e8:04:f4:d8:fd:f1:06:fc:6f:53:ae: 7c:4a:65:c2:14:8e:bd:41:91:e5:44:4c:94:10:25: 17:2e:65:fa:09:8e:ad:1f:0f:12:7c:91:54:2d:ff: 7d:7c:ef:dc:19:c8:ce:c1:f9:ba:1e:e4:f4:cc:ce: 89:65:fc:65:94:e3:01:e4:8c:61:05:2b:f8:91:68: f3:82:6a:ab:4e:0c:02:ad:9e:64:85:cc:bd:89:08: ec:2a:21:46:0f:aa:0a:7b:f9:40:8e:e6:7d:62:6b: 6d:69:ce:77:3c:35:4a:6d:50:13:35:02:5f:e6:c0: e2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D1:EF:16:DD:C9:1A:CF:66:D8:7E:3B:64:6E:34:3A:2C:32:FF:BD X509v3 Authority Key Identifier: keyid:C3:95:D0:1A:08:C1:5A:21:11:03:CE:81:06:1E:26:82:4F:56:BD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5XQGgjBWiERA86BBh4mgk9Wvdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:2e:cb:37:4f:26:d9:a3:1e:41:e9:08:19:aa:82:8c:69:05: 5e:f4:74:4f:82:29:a7:71:f8:f7:20:d9:5c:bb:e6:d0:0b:14: a0:dc:c7:8a:5e:09:95:16:04:3d:df:23:77:63:97:e8:af:86: c6:64:f6:1e:0a:a1:79:d2:a0:35:40:ef:87:c8:09:10:46:4b: 0f:f5:b0:2e:80:6f:e0:28:7b:97:df:ff:0b:7d:b9:a6:45:8b: 6e:39:7c:37:57:2d:5e:90:2b:97:10:50:15:80:28:fb:3b:ff: 94:6f:1c:03:bb:c9:fb:28:a9:73:46:57:f3:40:01:77:10:3e: 20:ac:19:69:b8:f2:54:ac:85:20:32:64:23:19:a2:53:2f:73: 2a:be:a9:ab:44:2f:74:00:f8:4a:79:ce:8e:2d:67:d9:fe:4c: 93:ac:fd:77:dc:99:0e:44:1e:c9:d4:91:12:bc:37:49:ff:58: 89:fe:59:c5:0e:7f:30:41:21:c1:63:a9:a2:26:24:86:42:39: ca:4a:44:87:ba:59:9d:b3:d2:1f:a9:5c:da:35:f9:58:15:67: f2:2a:3c:01:db:fa:e5:9d:74:4a:ea:bc:6f:de:99:41:ff:84: 52:70:a0:bf:c3:65:43:f9:54:a7:00:31:7e:33:09:39:21:c0: c3:cc:a6:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDFCRDExMC8GA1UEBRMoQzM5NUQwMUEwOEMxNUEyMTExMDNDRTgxMDYxRTI2ODI0 RjU2QkREODAeFw0yNTEyMDMwNTU4MTVaFw0yNTEyMTAwNTU4MTVaMBgxFjAUBgNV BAMTDTY5MmZkMTc3LTI5ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd5Wx8kNxNCRo3oDwCLoKqk3KC79QLJ0ZkKJauc9p5IQ/j/+H57Y7+G+0I23Pv 6xZWrMeuM++CEkr4wMO6H+Gqpho4q8GZ0v8jHLJ4DISJ3ZtxH3peC+ps2dsNfCFg Mr0gv5vUrgBE94Nu7eWusoLgpSOn5iIbXXmz5QK9IS9rxGsPtXsQkx9LeNroBPTY /fEG/G9TrnxKZcIUjr1BkeVETJQQJRcuZfoJjq0fDxJ8kVQt/31879wZyM7B+boe 5PTMzoll/GWU4wHkjGEFK/iRaPOCaqtODAKtnmSFzL2JCOwqIUYPqgp7+UCO5n1i a21pznc8NUptUBM1Al/mwOL3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/9HvFt3J Gs9m2H47ZG40Oiwy/70wHwYDVR0jBBgwFoAUw5XQGgjBWiERA86BBh4mgk9Wvdgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEMUJEL0E3MDZGOEIyQTc2 MjExRjA4RkRFMzQxM0M0RjlBRTAyL3c1WFFHZ2pCV2lFUkE4NkJCaDRtZ2s5V3Zk Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdzVYUUdnakJXaUVSQTg2QkJoNG1nazlXdmRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE MUJEL0E3MDZGOEIyQTc2MjExRjA4RkRFMzQxM0M0RjlBRTAyL3c1WFFHZ2pCV2lF UkE4NkJCaDRtZ2s5V3ZkZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAMuyzdPJtmjHkHpCBmqgoxpBV70dE+CKadx+Pcg2Vy75tALFKDcx4pe CZUWBD3fI3djl+ivhsZk9h4KoXnSoDVA74fICRBGSw/1sC6Ab+Aoe5ff/wt9uaZF i245fDdXLV6QK5cQUBWAKPs7/5RvHAO7yfsoqXNGV/NAAXcQPiCsGWm48lSshSAy ZCMZolMvcyq+qatEL3QA+Ep5zo4tZ9n+TJOs/XfcmQ5EHsnUkRK8N0n/WIn+WcUO fzBBIcFjqaImJIZCOcpKRIe6WZ2z0h+pXNo1+VgVZ/IqPAHb+uWddErqvG/emUH/ hFJwoL/DZUP5VKcAMX4zCTkhwMPMpuA= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:19 2025 by rpki-client