This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft File: waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json) Hash identifier: OZ9gIt4INc9aUt0HflfPVh4Jl57OpxVf3G2KTF88Toc= Subject key identifier: 37:4B:11:C7:80:83:CE:3A:78:3F:6C:9E:B4:A3:0D:7D:78:B7:23:15 Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Certificate serial: 05DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft Manifest number: 05D5 Signing time: Mon 22 Dec 2025 22:11:11 +0000 Manifest this update: Mon 22 Dec 2025 22:11:11 +0000 Manifest next update: Mon 29 Dec 2025 22:11:11 +0000 Files and hashes: 1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: uptI6KKJktcilXPQo3qRB0krIaAxSQ5cBofkiGHNMGY=) 2: 9C3424A08F7F11F09A0D9529C4F9AE02.roa (hash: cwF8COUkuSrij9NX2KXpkgFn2IJIbJrzIKS8a9AaFJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:11:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1499 (0x5db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Validity Not Before: Dec 22 22:11:11 2025 GMT Not After : Dec 29 22:11:11 2025 GMT Subject: CN=6949c1ff-f229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:99:b3:21:f1:5c:ea:7e:9b:bb:71:6d:ec:8e: c9:a3:31:6b:6b:9c:41:7e:f5:69:61:c7:d0:db:1a: 16:cb:12:7c:0e:19:ba:0f:a8:4d:70:0c:84:80:4b: 5f:6e:69:de:99:75:54:bf:27:fd:c4:c5:08:75:8c: 3e:93:cf:92:e0:6a:62:0d:4b:2b:c0:da:16:ae:32: e2:e1:a6:51:66:69:b9:73:57:28:26:f5:be:3a:4c: 24:ad:b9:9a:10:a5:c1:95:a5:af:cd:1d:f8:8e:3b: cf:52:33:4c:39:b6:54:f1:20:d1:d2:0f:63:06:1f: 07:16:50:ff:27:52:ad:71:f9:bb:8b:26:1c:de:de: b1:8b:7a:29:60:47:5a:67:8e:89:95:3d:4b:bc:d3: 6c:f8:85:0b:71:36:92:85:37:c5:cf:a7:0d:a3:9f: 77:20:c4:b2:8a:9e:a2:22:a4:f2:a1:96:47:eb:31: 11:d5:45:c0:43:56:6a:ca:2b:da:d6:06:31:f9:4d: 55:42:70:e4:b6:2e:15:05:2c:89:22:4d:92:1e:64: f9:f8:04:50:2e:93:d3:47:1a:49:c5:6c:81:37:06: 5e:ae:e8:d9:13:c8:75:04:c1:8c:ce:24:1b:d8:50: ff:9e:d8:29:47:6d:39:b4:6b:9b:7d:52:6e:ea:f9: 43:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4B:11:C7:80:83:CE:3A:78:3F:6C:9E:B4:A3:0D:7D:78:B7:23:15 X509v3 Authority Key Identifier: keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:73:47:53:0d:ef:e7:6e:f9:7d:98:3e:60:d1:ff:88:83:33: d7:20:6b:51:68:43:5b:51:0c:ff:ca:01:71:7e:cc:ad:e0:1d: 57:e8:e0:cf:a1:9c:c2:66:a9:9f:e2:9f:a7:a6:77:30:35:11: ea:e0:87:ec:5e:7d:5a:6e:21:9f:ce:65:a7:55:24:17:59:f4: 11:e2:ca:d3:87:35:8a:75:df:88:dd:bd:ea:47:f7:24:0f:9c: c8:90:23:f9:23:d4:21:84:df:a0:4d:81:92:d3:d9:cc:c7:ec: 1a:e0:5e:44:c4:c5:46:db:a2:6d:22:f6:19:7e:8f:43:6a:59: 27:08:b4:7d:48:5b:cd:db:d5:11:19:fe:b2:1b:fd:70:53:1b: 69:b5:80:31:d7:6c:ac:4e:60:8e:65:ed:9b:32:38:54:e9:e4: 12:c7:07:62:2f:7c:e1:9c:de:b1:29:28:07:26:01:3b:eb:43: c8:1f:4e:f9:31:c1:d2:c3:16:52:47:9d:c7:e6:b2:e4:ee:5e: 3c:16:d8:65:82:2c:a3:83:e7:a6:b4:85:c3:70:84:d2:b2:93: 16:dd:da:2b:67:06:25:de:74:2a:0a:84:1a:95:4c:85:74:1a: a0:24:85:30:d2:c6:99:06:d5:d1:e9:64:a1:44:a1:29:3a:e9: 8a:34:d8:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg3QUIxMTAvBgNVBAUTKEMxQTJDNzFGRDhBRDU4MjU4OUYwNDkwMkREQUY4Mzk4 ODVERkQzMzcwHhcNMjUxMjIyMjIxMTExWhcNMjUxMjI5MjIxMTExWjAYMRYwFAYD VQQDDA02OTQ5YzFmZi1mMjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJmzIfFc6n6bu3Ft7I7JozFra5xBfvVpYcfQ2xoWyxJ8Dhm6D6hNcAyEgEtf bmnemXVUvyf9xMUIdYw+k8+S4GpiDUsrwNoWrjLi4aZRZmm5c1coJvW+Okwkrbma EKXBlaWvzR34jjvPUjNMObZU8SDR0g9jBh8HFlD/J1Ktcfm7iyYc3t6xi3opYEda Z46JlT1LvNNs+IULcTaShTfFz6cNo593IMSyip6iIqTyoZZH6zER1UXAQ1Zqyiva 1gYx+U1VQnDkti4VBSyJIk2SHmT5+ARQLpPTRxpJxWyBNwZerujZE8h1BMGMziQb 2FD/ntgpR205tGubfVJu6vlDTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdLEceA g846eD9snrSjDX14tyMVMB8GA1UdIwQYMBaAFMGixx/YrVglifBJAt2vg5iF39M3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODdBQi9GMDk2RENDNEU0 NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdDV0o4RWtDM2EtRG1JWGYw emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhTEhIOWl0V0NXSjhFa0MzYS1EbUlYZjB6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODdBQi9GMDk2RENDNEU0NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdD V0o4RWtDM2EtRG1JWGYwemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnc0dTDe/nbvl9mD5g0f+IgzPXIGtRaENbUQz/ygFxfsyt4B1X6ODP oZzCZqmf4p+npncwNRHq4IfsXn1abiGfzmWnVSQXWfQR4srThzWKdd+I3b3qR/ck D5zIkCP5I9QhhN+gTYGS09nMx+wa4F5ExMVG26JtIvYZfo9DalknCLR9SFvN29UR Gf6yG/1wUxtptYAx12ysTmCOZe2bMjhU6eQSxwdiL3zhnN6xKSgHJgE760PIH075 McHSwxZSR53H5rLk7l48Fthlgiyjg+emtIXDcITSspMW3dorZwYl3nQqCoQalUyF dBqgJIUw0saZBtXR6WShRKEpOumKNNi2 -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:12 2025 by rpki-client