This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft File: wTdkoKY6d2fzpHXXqBro3xiv4I0.mft (raw, json) Hash identifier: gLKKLHusc7/SZD7TPUe+59SHbVg/j0WW5rFc3Zjd4uA= Subject key identifier: 10:03:A7:20:B1:CB:DE:75:FA:1C:93:5B:63:3D:3F:97:DF:7C:67:AA Authority key identifier: C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D Certificate issuer: /CN=A919941E/serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft Manifest number: 022B Signing time: Tue 23 Dec 2025 01:08:46 +0000 Manifest this update: Tue 23 Dec 2025 01:08:46 +0000 Manifest next update: Tue 30 Dec 2025 01:08:46 +0000 Files and hashes: 1: wTdkoKY6d2fzpHXXqBro3xiv4I0.crl (hash: dDqkRO+GTKoF9B6RKJeCPJHAXEwlNYjbFU6Co1AeFek=) 2: 8A7D7EA2426B11F0B0160739C4F9AE02.roa (hash: /DDZk7wXmoPoez1s38SJjUYi204sJqoeZ/e78IsM+C0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919941E, serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D Validity Not Before: Dec 23 01:08:46 2025 GMT Not After : Dec 30 01:08:46 2025 GMT Subject: CN=6949eb9e-9cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9e:c8:a4:94:ad:fc:79:9c:40:b1:a2:6f:16: 76:d7:28:49:65:af:68:32:c8:4d:d5:8c:57:b1:81: 38:83:d9:b4:8b:b2:5c:73:d7:35:22:7e:d9:56:b9: 96:95:c1:c2:06:40:aa:35:df:1a:1c:e9:01:cf:5f: e6:25:dc:e6:e7:6a:74:c7:ed:ff:37:60:26:26:91: aa:11:df:c5:70:89:5e:1f:8b:ff:c2:9d:8e:95:7f: c4:9f:6b:b9:bb:59:c0:67:c5:a6:55:d9:12:96:b1: 0d:b9:f3:fb:aa:55:a6:e4:e3:56:d3:4f:24:20:e2: 04:da:13:d7:b8:0e:8a:48:1c:83:0e:2d:ec:27:a0: ce:fd:cb:48:b2:ae:30:48:c0:e8:63:da:f7:0d:d7: a6:6b:69:d7:92:36:d7:59:b4:78:d9:52:74:bc:14: b5:07:b0:cd:f0:35:db:cc:4a:9e:47:0c:eb:ab:b6: a0:79:ed:ab:4a:97:d5:a7:f3:19:26:a7:d2:ed:40: 70:91:f6:7c:44:77:6b:46:56:27:b0:fa:85:7c:22: 48:62:70:78:87:e7:a4:95:14:46:26:1f:1b:a4:fa: f0:c0:bb:4d:e6:96:89:4d:60:28:af:0f:16:79:fe: 6f:98:f0:5b:17:c6:59:8d:d8:67:10:c6:b6:da:90: 42:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:03:A7:20:B1:CB:DE:75:FA:1C:93:5B:63:3D:3F:97:DF:7C:67:AA X509v3 Authority Key Identifier: keyid:C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e4:27:1c:a5:f9:f6:42:53:14:2c:5b:27:7a:e9:fe:f8:62: 1a:be:bc:d1:b5:d5:ae:1e:69:55:65:33:3a:70:4d:f2:cd:b0: e6:67:e8:81:a4:86:60:50:5b:40:83:58:d4:c8:a8:58:93:d7: 19:93:95:1f:48:66:8d:71:91:29:12:5b:46:ff:61:0a:5a:5f: bc:80:5e:d2:6f:4f:2a:57:73:be:e2:9a:e3:40:11:1f:1f:de: 18:95:3e:c3:90:66:26:f9:69:bf:5b:fa:49:24:e0:66:ce:23: c2:40:e1:a7:38:2b:79:a6:5a:ae:05:c0:ee:e5:6b:7a:a5:30: 7c:5b:5b:20:bb:b3:72:c7:2e:a8:40:e1:03:ba:2e:eb:1c:e9: cd:8a:3d:e1:1b:f8:a7:78:e0:00:34:8c:36:c6:4f:c3:15:f6: be:7e:42:fe:c5:e7:b2:4e:91:da:bb:cd:02:d0:bb:30:08:5f: 0f:e0:53:85:70:9c:96:e3:d5:20:15:bd:1d:7a:91:6a:29:3c: bb:05:1a:80:b1:69:61:4f:25:ac:2a:fd:a2:47:ab:0b:6a:63: 0d:f9:4e:72:4e:3e:34:9a:71:96:56:1b:97:1a:63:05:fa:5e: a6:49:74:22:34:22:30:27:71:77:3a:e6:a4:fa:4c:b3:60:2b: dd:15:5f:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk0MUUxMTAvBgNVBAUTKEMxMzc2NEEwQTYzQTc3NjdGM0E0NzVEN0E4MUFFOERG MThBRkUwOEQwHhcNMjUxMjIzMDEwODQ2WhcNMjUxMjMwMDEwODQ2WjAYMRYwFAYD VQQDDA02OTQ5ZWI5ZS05Y2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm57IpJSt/HmcQLGibxZ21yhJZa9oMshN1YxXsYE4g9m0i7Jcc9c1In7ZVrmW lcHCBkCqNd8aHOkBz1/mJdzm52p0x+3/N2AmJpGqEd/FcIleH4v/wp2OlX/En2u5 u1nAZ8WmVdkSlrENufP7qlWm5ONW008kIOIE2hPXuA6KSByDDi3sJ6DO/ctIsq4w SMDoY9r3Ddema2nXkjbXWbR42VJ0vBS1B7DN8DXbzEqeRwzrq7agee2rSpfVp/MZ JqfS7UBwkfZ8RHdrRlYnsPqFfCJIYnB4h+eklRRGJh8bpPrwwLtN5paJTWAorw8W ef5vmPBbF8ZZjdhnEMa22pBCkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBADpyCx y951+hyTW2M9P5fffGeqMB8GA1UdIwQYMBaAFME3ZKCmOndn86R116ga6N8Yr+CN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTQxRS9FRjFGQUQxODk2 NkUxMUVEQjBFQ0MwNjlDNEY5QUUwMi93VGRrb0tZNmQyZnpwSFhYcUJybzN4aXY0 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUZGtvS1k2ZDJmenBIWFhxQnJvM3hpdjRJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTQxRS9FRjFGQUQxODk2NkUxMUVEQjBFQ0MwNjlDNEY5QUUwMi93VGRrb0tZNmQy ZnpwSFhYcUJybzN4aXY0STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA5Cccpfn2QlMULFsneun++GIavrzRtdWuHmlVZTM6cE3yzbDmZ+iB pIZgUFtAg1jUyKhYk9cZk5UfSGaNcZEpEltG/2EKWl+8gF7Sb08qV3O+4prjQBEf H94YlT7DkGYm+Wm/W/pJJOBmziPCQOGnOCt5plquBcDu5Wt6pTB8W1sgu7Nyxy6o QOEDui7rHOnNij3hG/ineOAANIw2xk/DFfa+fkL+xeeyTpHau80C0LswCF8P4FOF cJyW49UgFb0depFqKTy7BRqAsWlhTyWsKv2iR6sLamMN+U5yTj40mnGWVhuXGmMF +l6mSXQiNCIwJ3F3Ouak+kyzYCvdFV+8 -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:35 2025 by rpki-client