This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft File: WHRSDaeB94Db1xDULIQcE6etF1c.mft (raw, json) Hash identifier: oELrmqrRoKJTOTfjCQylGuqSIQwTK1rKsBbe4d9i+wQ= Subject key identifier: 8C:51:27:05:AD:3A:14:0F:0B:CB:E3:8D:E8:F8:50:92:68:D2:83:68 Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 Certificate issuer: /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft Manifest number: 020F Signing time: Mon 15 Dec 2025 01:51:11 +0000 Manifest this update: Mon 15 Dec 2025 01:51:10 +0000 Manifest next update: Mon 22 Dec 2025 01:51:10 +0000 Files and hashes: 1: WHRSDaeB94Db1xDULIQcE6etF1c.crl (hash: hU8zHnB1s/oy55WwQ2fkhaslMe5p53J+9658KYCvai4=) 2: B412DC700EC011EE8C18290AC4F9AE02.roa (hash: QaySh+U2ImR7fI4OfAXAG1QKvLn5LnVgI5Wmw5xhFUc=) 3: CF85B73C74F011F0847A5D0DC4F9AE02.roa (hash: ROJkHjEex+krTnEbfnPSXsQUMEVZuDVq8C6r5b58NiQ=) 4: 06CD7DF074F211F09D01EA15C4F9AE02.roa (hash: wlIu/nl9TYANb0F4m3+htDbTyhazmTRCofxCf5SqanI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 01:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Validity Not Before: Dec 15 01:51:10 2025 GMT Not After : Dec 22 01:51:10 2025 GMT Subject: CN=693f698f-c98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:18:38:ba:58:aa:25:72:9e:bb:91:f7:29:ac: 4d:12:03:e4:6f:c4:78:22:61:b1:19:fc:73:c4:f1: ba:fd:db:8c:66:c0:be:5a:46:16:2f:ed:53:97:c0: 65:2e:0a:f8:85:d3:e6:cb:29:ec:2c:eb:6d:29:26: 45:f1:f3:b3:03:68:3d:87:b8:68:59:2f:25:94:49: 64:7b:e5:d0:e6:4a:09:2f:1c:e5:2e:47:f7:d1:30: 3b:66:9e:b8:ee:f9:96:a2:03:37:24:10:d8:36:12: 95:1f:08:3c:59:44:3a:86:8d:c1:5d:ff:0d:60:fe: 81:f9:28:c6:dc:b5:de:2b:09:b7:c5:2c:49:b2:8d: 3d:8b:ef:34:17:a1:e2:d1:85:81:16:30:69:b0:8b: b9:9b:38:76:87:22:77:44:66:bd:fd:f7:d0:ba:63: 40:6b:45:04:4b:75:51:35:bb:eb:d1:43:ee:2c:a1: c7:5d:45:9d:62:b3:62:61:51:43:f6:d6:be:f9:ec: 7b:a8:66:fa:9c:25:53:fe:b5:15:8c:b1:76:56:04: 57:26:9b:a1:cc:78:a5:89:22:b1:04:a7:82:4b:a3: 2e:27:db:45:6c:e5:24:22:a3:54:17:20:b7:f8:34: 8e:98:56:55:02:c2:fb:f9:b2:72:a5:e1:fe:9a:2c: 97:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:51:27:05:AD:3A:14:0F:0B:CB:E3:8D:E8:F8:50:92:68:D2:83:68 X509v3 Authority Key Identifier: keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:cc:1d:dd:bc:ab:e7:69:71:d6:bd:d5:70:0c:38:01:07:d2: 2a:4a:2e:91:c3:94:bc:fc:51:5e:78:e7:5e:5f:a7:ff:ba:1a: fd:f3:4e:df:b2:1f:d0:19:e3:a6:32:5b:c8:8c:6d:48:dd:66: f6:03:f4:e5:da:13:f0:7b:1d:63:db:e4:23:59:be:df:11:98: 03:d5:bc:02:ac:a5:b6:1f:cc:72:b6:92:bf:dd:54:33:11:11: 82:f3:f3:d5:81:dc:4f:0a:5f:66:c8:c1:4d:13:23:22:4a:84: 4a:b3:13:91:72:e9:b8:46:4b:ef:4c:9f:bd:6c:a0:87:1e:fc: 1f:96:50:50:c1:2e:c9:88:d1:8b:83:b2:ef:c0:00:9f:99:4b: 32:e7:0a:8e:39:a7:ec:75:f3:c3:f5:f7:77:2e:c1:9d:e5:f9: 67:fb:b0:a5:d0:a5:aa:54:22:6d:c6:4f:dd:fb:7c:62:12:7f: 3b:70:f2:9c:88:a3:9d:ff:77:0b:19:ec:66:6d:57:d7:75:6e: 75:13:f5:c5:42:7c:1f:74:b7:78:d8:7a:14:ef:69:ce:a6:ed: 84:9f:55:c3:4d:2c:73:9a:5b:0c:3f:f0:d0:ce:d9:36:b7:56: 08:2e:48:43:2b:e7:28:c8:1d:89:4c:aa:52:f8:e6:69:ac:fc: ed:35:a7:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyQ0QxMTAvBgNVBAUTKDU4NzQ1MjBEQTc4MUY3ODBEQkQ3MTBENDJDODQxQzEz QTdBRDE3NTcwHhcNMjUxMjE1MDE1MTEwWhcNMjUxMjIyMDE1MTEwWjAYMRYwFAYD VQQDDA02OTNmNjk4Zi1jOThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAixg4uliqJXKeu5H3KaxNEgPkb8R4ImGxGfxzxPG6/duMZsC+WkYWL+1Tl8Bl Lgr4hdPmyynsLOttKSZF8fOzA2g9h7hoWS8llElke+XQ5koJLxzlLkf30TA7Zp64 7vmWogM3JBDYNhKVHwg8WUQ6ho3BXf8NYP6B+SjG3LXeKwm3xSxJso09i+80F6Hi 0YWBFjBpsIu5mzh2hyJ3RGa9/ffQumNAa0UES3VRNbvr0UPuLKHHXUWdYrNiYVFD 9ta++ex7qGb6nCVT/rUVjLF2VgRXJpuhzHiliSKxBKeCS6MuJ9tFbOUkIqNUFyC3 +DSOmFZVAsL7+bJypeH+miyX9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxRJwWt OhQPC8vjjej4UJJo0oNoMB8GA1UdIwQYMBaAFFh0Ug2ngfeA29cQ1CyEHBOnrRdX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJDRC80RkNCQUMwMEQ0 NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0RGIxeERVTElRY0U2ZXRG MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dIUlNEYWVCOTREYjF4RFVMSVFjRTZldEYxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJDRC80RkNCQUMwMEQ0NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0 RGIxeERVTElRY0U2ZXRGMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgzB3dvKvnaXHWvdVwDDgBB9IqSi6Rw5S8/FFeeOdeX6f/uhr9807f sh/QGeOmMlvIjG1I3Wb2A/Tl2hPwex1j2+QjWb7fEZgD1bwCrKW2H8xytpK/3VQz ERGC8/PVgdxPCl9myMFNEyMiSoRKsxORcum4RkvvTJ+9bKCHHvwfllBQwS7JiNGL g7LvwACfmUsy5wqOOafsdfPD9fd3LsGd5fln+7Cl0KWqVCJtxk/d+3xiEn87cPKc iKOd/3cLGexmbVfXdW51E/XFQnwfdLd42HoU72nOpu2En1XDTSxzmlsMP/DQztk2 t1YILkhDK+coyB2JTKpS+OZprPztNado -----END CERTIFICATE-----Generated at Tue Dec 16 07:27:29 2025 by rpki-client