This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft File: s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft (raw, json) Hash identifier: sYGchqgqv2Heu4mOkc3VoTAThedSbleX+d6BmbRguUw= Subject key identifier: DD:9D:5F:8F:1C:37:9B:E3:07:AF:CA:BD:8B:06:EB:59:A1:F2:96:B1 Authority key identifier: B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8 Certificate issuer: /CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft Manifest number: 0194 Signing time: Tue 23 Dec 2025 02:31:16 +0000 Manifest this update: Tue 23 Dec 2025 02:31:15 +0000 Manifest next update: Tue 30 Dec 2025 02:31:15 +0000 Files and hashes: 1: s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl (hash: 1D7OVJyz8iYWyKxUIX3tzJoIqhwrS2UgtZK6cy3F3+w=) 2: EBB7A41AB4DA11EEBD650259C4F9AE02.roa (hash: S6QQQa5Sp7ukB1rfGQxAaqwrRf0T3shgxPjmjI4d6zQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A381A, serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8 Validity Not Before: Dec 23 02:31:15 2025 GMT Not After : Dec 30 02:31:15 2025 GMT Subject: CN=6949fef4-d157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6c:dc:9f:83:d6:7c:c8:04:99:e3:d7:af:49: 2d:69:2c:36:4d:48:23:6d:57:cc:2d:20:a3:cc:dd: 28:66:00:37:f9:c3:5c:27:cb:8c:cf:38:08:8c:98: f0:b2:c2:45:eb:94:c9:19:60:cc:fa:7c:61:e8:3d: d7:10:3f:67:e5:9d:45:8d:ba:6c:86:56:d6:bc:4a: 61:fd:bf:b1:79:5d:22:95:6a:cd:3c:90:d8:e0:27: 9e:57:7b:94:4e:34:d0:e9:39:ef:4b:d9:fb:68:ad: ac:a6:6a:e5:02:0a:ad:60:d8:ba:6f:a0:c0:6f:aa: 7d:83:fb:f9:fd:69:3f:fc:9f:1b:7c:c0:16:9a:95: bb:a6:ab:76:4c:31:e9:7d:7b:9f:be:de:7e:3c:f8: 99:d0:49:1a:b2:4b:0a:fc:f6:2d:5c:c6:90:be:8b: 7c:52:ee:58:08:0b:38:68:86:11:45:50:2a:48:bf: 6b:ea:35:30:4b:cb:fa:69:f6:1d:cf:77:f6:69:7a: b3:06:b9:f8:b7:5c:6c:59:55:81:41:b1:f6:d3:28: 83:3f:bc:1a:86:c9:7f:e2:88:97:f6:18:8c:b3:42: 03:4e:a8:5f:a3:62:e3:87:ca:3d:39:48:54:e0:ee: c9:8a:58:c3:f6:fc:eb:d7:da:3a:de:91:c4:86:60: b7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9D:5F:8F:1C:37:9B:E3:07:AF:CA:BD:8B:06:EB:59:A1:F2:96:B1 X509v3 Authority Key Identifier: keyid:B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:70:ff:91:77:fd:1f:56:45:01:71:84:97:8f:2c:e1:af:5e: c6:4a:dd:82:41:42:da:8d:96:7d:d0:4c:9c:a5:62:8a:63:83: 31:ff:38:7c:15:e9:96:57:8c:8c:e6:f4:49:b8:21:ab:db:c7: b5:1f:da:d2:17:32:05:8a:37:b0:1a:56:f8:1b:a8:f7:a7:32: 00:8b:41:3a:b5:d0:da:bc:b6:57:67:00:f4:31:3b:97:8f:c8: 62:bd:cb:68:8a:07:27:f4:88:b7:ed:b9:1c:c0:65:83:10:71: f4:70:e5:70:e6:cc:d3:77:70:9d:17:3f:56:b2:b1:d7:3c:cd: 72:1d:d2:d4:e0:f7:13:77:e6:89:70:b9:2b:44:7f:15:aa:03: 3c:3b:a5:bc:38:d4:48:46:21:42:d2:93:0b:a0:fe:66:97:af: 33:4b:df:dc:84:c8:61:df:c7:2c:46:83:a9:b7:27:29:54:5f: 1f:43:75:5a:d9:8d:79:e1:c9:ba:59:7d:d6:e9:2e:40:4a:1d: 4d:19:0d:b3:b7:49:96:35:81:72:a2:dc:e5:e9:6c:f2:33:b4: 95:fa:56:47:fe:3a:bc:26:00:3d:39:b2:b3:f3:e2:94:99:0f: ef:e1:67:5a:17:91:3f:d5:e5:49:f7:64:58:91:34:f2:65:1a: b7:08:fb:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM4MUExMTAvBgNVBAUTKEIzRUMxRkY2QUQ1NTJBQTE2RUUxMDE5NTY0QkFEOUY3 NjFGREI1RDgwHhcNMjUxMjIzMDIzMTE1WhcNMjUxMjMwMDIzMTE1WjAYMRYwFAYD VQQDDA02OTQ5ZmVmNC1kMTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWzcn4PWfMgEmePXr0ktaSw2TUgjbVfMLSCjzN0oZgA3+cNcJ8uMzzgIjJjw ssJF65TJGWDM+nxh6D3XED9n5Z1FjbpshlbWvEph/b+xeV0ilWrNPJDY4CeeV3uU TjTQ6TnvS9n7aK2spmrlAgqtYNi6b6DAb6p9g/v5/Wk//J8bfMAWmpW7pqt2TDHp fXufvt5+PPiZ0EkasksK/PYtXMaQvot8Uu5YCAs4aIYRRVAqSL9r6jUwS8v6afYd z3f2aXqzBrn4t1xsWVWBQbH20yiDP7wahsl/4oiX9hiMs0IDTqhfo2Ljh8o9OUhU 4O7JiljD9vzr19o63pHEhmC39wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2dX48c N5vjB6/KvYsG61mh8paxMB8GA1UdIwQYMBaAFLPsH/atVSqhbuEBlWS62fdh/bXY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzgxQS8yOEU4NkU0NDc5 RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktxRnU0UUdWWkxyWjkySDl0 ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Mtd2Y5cTFWS3FGdTRRR1ZaTHJaOTJIOXRkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzgxQS8yOEU4NkU0NDc5RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktx RnU0UUdWWkxyWjkySDl0ZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjcP+Rd/0fVkUBcYSXjyzhr17GSt2CQULajZZ90EycpWKKY4Mx/zh8 FemWV4yM5vRJuCGr28e1H9rSFzIFijewGlb4G6j3pzIAi0E6tdDavLZXZwD0MTuX j8hivctoigcn9Ii37bkcwGWDEHH0cOVw5szTd3CdFz9WsrHXPM1yHdLU4PcTd+aJ cLkrRH8VqgM8O6W8ONRIRiFC0pMLoP5ml68zS9/chMhh38csRoOptycpVF8fQ3Va 2Y154cm6WX3W6S5ASh1NGQ2zt0mWNYFyotzl6WzyM7SV+lZH/jq8JgA9ObKz8+KU mQ/v4WdaF5E/1eVJ92RYkTTyZRq3CPuv -----END CERTIFICATE-----Generated at Wed Dec 24 16:01:11 2025 by rpki-client