This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft File: WIXKbgzHteUyD6ckc-5zljP17CY.mft (raw, json) Hash identifier: 9h2uzll8wtfnsY2sAFItiX7VrLcksr8zV34SOphRuZU= Subject key identifier: A1:6A:1D:C1:CF:A9:68:FF:8C:55:0D:C3:F7:1E:CE:5A:44:D6:63:63 Authority key identifier: 58:85:CA:6E:0C:C7:B5:E5:32:0F:A7:24:73:EE:73:96:33:F5:EC:26 Certificate issuer: /CN=A91AB34A/serialNumber=5885CA6E0CC7B5E5320FA72473EE739633F5EC26 Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft Manifest number: 0229 Signing time: Sun 21 Dec 2025 01:17:47 +0000 Manifest this update: Sun 21 Dec 2025 01:17:46 +0000 Manifest next update: Sun 28 Dec 2025 01:17:46 +0000 Files and hashes: 1: WIXKbgzHteUyD6ckc-5zljP17CY.crl (hash: W/E1d2yHL2YtQisfF3AzszcNDJd5HfhCZVS7TglykgE=) 2: 9C43FA268A8A11ED9DF2425AC4F9AE02.roa (hash: XU2Kl+wDT9+IdgtwYqn/7pHHpGdYj1vHxZuNd0BPYVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.crl rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB34A, serialNumber=5885CA6E0CC7B5E5320FA72473EE739633F5EC26 Validity Not Before: Dec 21 01:17:46 2025 GMT Not After : Dec 28 01:17:46 2025 GMT Subject: CN=69474abb-9fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:00:9e:2a:f3:1e:6a:53:89:03:fc:20:1f:65: 48:b3:d6:40:b1:3f:0e:f1:5e:69:70:c3:9e:ba:24: 49:3c:7b:17:c4:ed:f1:76:a5:0f:9b:a9:8a:c0:61: a8:e7:20:2b:14:e0:4d:de:df:32:0e:9c:7e:b3:a1: a8:20:89:f9:2d:60:49:10:50:33:18:20:61:32:55: 95:8c:34:8f:5f:c9:7c:63:fb:d1:81:dd:cc:49:4f: 70:26:f4:13:57:ed:ea:a2:04:60:1d:eb:d6:50:47: 24:e4:9f:1b:59:8c:23:5c:b6:01:73:c5:8c:1b:1c: 64:1e:6e:2e:96:45:df:e7:0f:d8:b1:9e:a8:41:10: 27:6c:68:60:67:87:6a:83:0e:65:a7:66:6c:6f:2f: 90:a5:ad:0d:bf:81:b5:91:ff:29:31:fe:00:23:17: e3:c7:11:97:26:f6:6c:5b:b1:e3:b9:b0:45:73:bc: 83:a0:46:d7:f1:57:f8:6b:34:1f:28:38:e9:0f:4f: ba:12:1e:e1:63:a9:8e:22:1b:d4:e8:06:38:bd:3d: b9:b9:33:42:ab:1b:6b:b5:cc:85:ea:e7:7e:79:f4: 32:19:e3:94:b0:0e:83:f9:c5:39:c2:e9:c2:a6:e6: bc:4b:c0:88:30:eb:1d:be:fc:ca:ef:67:9c:5d:22: d5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6A:1D:C1:CF:A9:68:FF:8C:55:0D:C3:F7:1E:CE:5A:44:D6:63:63 X509v3 Authority Key Identifier: keyid:58:85:CA:6E:0C:C7:B5:E5:32:0F:A7:24:73:EE:73:96:33:F5:EC:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:c1:aa:22:5c:9d:98:ed:11:36:e3:cd:e8:d3:f1:a6:48:8a: 02:fb:20:58:b0:e9:bf:a3:c1:de:79:1e:29:b5:b0:be:96:d2: 59:9e:dd:e6:32:2e:a6:97:fc:49:ed:d0:bc:12:cc:d5:05:2c: 23:84:3c:f7:09:af:9d:dd:9b:c3:b9:69:54:ff:85:73:2b:36: 36:bd:58:c3:cd:d0:3f:69:2d:45:52:30:e1:c6:01:de:6c:32: d7:d0:97:c5:4a:bd:78:d8:2b:7b:c5:45:cb:f1:26:db:3c:8c: 86:3a:92:f6:8c:5a:fe:9c:db:52:41:35:30:3e:f4:7a:e5:e7: ee:01:53:28:81:9c:92:9b:d2:23:43:05:dd:ec:d6:1a:9d:6c: d9:77:a5:6a:14:94:29:c2:f1:00:f8:8d:b0:e7:12:ee:7d:b5: b8:36:c1:57:06:0c:72:13:d5:4f:85:4a:35:2e:dd:de:22:a8: 43:b7:4e:90:7e:cb:d4:c6:a9:2a:9a:26:92:2d:9e:38:3d:dc: af:bb:b0:f7:b9:a5:51:d3:3d:55:d1:ea:77:6f:e9:7d:71:06: 5b:b7:a6:f3:36:5a:5c:95:72:21:76:6f:ee:47:13:6b:19:38: 9c:ed:1f:c6:3f:47:89:78:21:f9:bc:94:88:db:99:97:49:92: 16:e4:da:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzNEExMTAvBgNVBAUTKDU4ODVDQTZFMENDN0I1RTUzMjBGQTcyNDczRUU3Mzk2 MzNGNUVDMjYwHhcNMjUxMjIxMDExNzQ2WhcNMjUxMjI4MDExNzQ2WjAYMRYwFAYD VQQDDA02OTQ3NGFiYi05ZmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgCeKvMealOJA/wgH2VIs9ZAsT8O8V5pcMOeuiRJPHsXxO3xdqUPm6mKwGGo 5yArFOBN3t8yDpx+s6GoIIn5LWBJEFAzGCBhMlWVjDSPX8l8Y/vRgd3MSU9wJvQT V+3qogRgHevWUEck5J8bWYwjXLYBc8WMGxxkHm4ulkXf5w/YsZ6oQRAnbGhgZ4dq gw5lp2Zsby+Qpa0Nv4G1kf8pMf4AIxfjxxGXJvZsW7HjubBFc7yDoEbX8Vf4azQf KDjpD0+6Eh7hY6mOIhvU6AY4vT25uTNCqxtrtcyF6ud+efQyGeOUsA6D+cU5wunC pua8S8CIMOsdvvzK72ecXSLVKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFqHcHP qWj/jFUNw/cezlpE1mNjMB8GA1UdIwQYMBaAFFiFym4Mx7XlMg+nJHPuc5Yz9ewm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM0QS84QTMwRjczNDhB ODYxMUVEOTExNkQ3M0ZDNEY5QUUwMi9XSVhLYmd6SHRlVXlENmNrYy01emxqUDE3 Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dJWEtiZ3pIdGVVeUQ2Y2tjLTV6bGpQMTdDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM0QS84QTMwRjczNDhBODYxMUVEOTExNkQ3M0ZDNEY5QUUwMi9XSVhLYmd6SHRl VXlENmNrYy01emxqUDE3Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIwaoiXJ2Y7RE2483o0/GmSIoC+yBYsOm/o8HeeR4ptbC+ltJZnt3m Mi6ml/xJ7dC8EszVBSwjhDz3Ca+d3ZvDuWlU/4VzKzY2vVjDzdA/aS1FUjDhxgHe bDLX0JfFSr142Ct7xUXL8SbbPIyGOpL2jFr+nNtSQTUwPvR65efuAVMogZySm9Ij QwXd7NYanWzZd6VqFJQpwvEA+I2w5xLufbW4NsFXBgxyE9VPhUo1Lt3eIqhDt06Q fsvUxqkqmiaSLZ44Pdyvu7D3uaVR0z1V0ep3b+l9cQZbt6bzNlpclXIhdm/uRxNr GTic7R/GP0eJeCH5vJSI25mXSZIW5NoL -----END CERTIFICATE-----Generated at Sun Dec 21 07:58:48 2025 by rpki-client