This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft File: wsFz12JIhbwL1vwZPvvO6VQ_okM.mft (raw, json) Hash identifier: 95daK2iKyt6Ss8mPWrRv6VgrIQS5p5eE6SAd8n4vKb0= Subject key identifier: EA:4A:DA:15:52:2D:A3:63:73:BD:06:F2:F2:65:EF:68:24:64:14:2D Authority key identifier: C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43 Certificate issuer: /CN=A91C8DF1/serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft Manifest number: 25 Signing time: Tue 23 Dec 2025 06:33:03 +0000 Manifest this update: Tue 23 Dec 2025 06:33:03 +0000 Manifest next update: Tue 30 Dec 2025 06:33:03 +0000 Files and hashes: 1: wsFz12JIhbwL1vwZPvvO6VQ_okM.crl (hash: bVFVFJyKnBm7DHEcFj7ZNuHdkfG5L9s0pxzV2nWS2F0=) 2: BD37307CAAD011F0ACA9F95DC4F9AE02.roa (hash: EBR7I5Emy01zmCBxXGGOXl37lY5pYBdqwHQoDpK1N3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8DF1, serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243 Validity Not Before: Dec 23 06:33:03 2025 GMT Not After : Dec 30 06:33:03 2025 GMT Subject: CN=694a379f-a3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1d:a7:02:d1:dc:01:7b:05:e8:1f:e2:49:0e: db:6b:32:e3:c2:1b:3c:f6:d6:5c:44:8a:68:33:59: 40:a2:af:0d:f3:db:b8:c8:c2:1b:e6:00:ed:8b:2d: 4d:ef:d6:75:ee:76:0d:af:6b:60:d5:5f:b6:c7:db: 0f:bb:15:0f:3b:88:cd:b5:3a:ea:5e:61:87:de:25: 26:be:82:64:8e:59:94:d6:19:9a:67:8e:ef:6f:17: 07:c1:ff:b2:7c:44:0c:30:f9:93:84:1b:2e:e0:0f: c7:77:a7:9b:b0:d9:84:b9:eb:66:c6:85:03:45:8a: 47:bd:c0:1d:08:f0:68:d2:b3:44:2f:cd:90:4d:13: 1e:c8:e7:1a:ba:0b:e8:76:1a:4a:cd:65:f7:cd:e1: 53:47:a4:e2:a4:69:d6:f0:89:b9:d4:6e:a9:0c:d5: 0a:2a:8c:36:f8:d4:a4:72:71:8a:47:64:0f:98:d6: 37:bf:68:32:f5:3c:ca:72:7f:2b:51:b4:05:8e:e5: 55:4c:cb:62:27:f1:98:a3:76:0f:6d:0d:03:87:8e: cf:42:ab:fe:f1:c5:04:e7:15:d9:9c:cf:d1:71:a2: c1:e1:1e:29:31:04:f1:70:6f:91:76:89:85:70:87: e3:d5:3c:40:54:17:77:66:f8:67:24:e5:f8:da:cd: cf:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4A:DA:15:52:2D:A3:63:73:BD:06:F2:F2:65:EF:68:24:64:14:2D X509v3 Authority Key Identifier: keyid:C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:10:23:70:97:63:c8:fa:ba:75:cd:8d:77:13:15:c6:b5:7b: 18:17:12:73:29:83:b6:24:ad:88:99:93:15:5b:c5:77:f5:fe: 03:d9:c0:dc:55:3b:eb:0e:f8:f4:41:72:2e:9e:4f:43:f2:6e: e6:3a:a2:d1:55:f1:14:c7:5e:52:dd:c9:aa:d9:d9:47:d0:66: f8:ea:79:65:cf:12:43:78:20:65:71:e2:77:b2:1a:9b:fa:dc: d5:b7:bd:05:f8:97:df:bb:90:c1:b6:0c:1e:a6:f4:6d:2c:1b: 45:59:22:11:20:b4:c1:44:3d:92:8d:49:6b:78:a0:ae:5b:b5: 4b:fe:4d:9a:bf:85:b2:42:e6:0f:d9:94:e9:42:08:58:31:d9: e0:04:bd:a4:48:c5:63:09:39:5f:86:9c:f0:e1:fa:4e:1a:2a: 97:ff:da:a4:72:f0:70:be:b9:4d:7d:47:f2:81:e2:11:a1:a6: a5:c1:55:d2:97:ec:5f:5b:93:71:84:de:43:76:ac:71:9e:4e: 0f:3f:2b:2c:4a:d2:92:92:26:71:ce:1b:b5:76:3c:67:9d:c4: 34:3e:f4:2b:36:5e:99:36:e7:20:a8:57:60:19:0a:e3:b0:4f: f8:b1:7e:b4:99:f1:75:b0:22:a0:8c:2f:af:11:82:07:73:82: 95:25:6c:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OERGMTExMC8GA1UEBRMoQzJDMTczRDc2MjQ4ODVCQzBCRDZGQzE5M0VGQkNFRTk1 NDNGQTI0MzAeFw0yNTEyMjMwNjMzMDNaFw0yNTEyMzAwNjMzMDNaMBgxFjAUBgNV BAMMDTY5NGEzNzlmLWEzYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbHacC0dwBewXoH+JJDttrMuPCGzz21lxEimgzWUCirw3z27jIwhvmAO2LLU3v 1nXudg2va2DVX7bH2w+7FQ87iM21OupeYYfeJSa+gmSOWZTWGZpnju9vFwfB/7J8 RAww+ZOEGy7gD8d3p5uw2YS562bGhQNFike9wB0I8GjSs0QvzZBNEx7I5xq6C+h2 GkrNZffN4VNHpOKkadbwibnUbqkM1QoqjDb41KRycYpHZA+Y1je/aDL1PMpyfytR tAWO5VVMy2In8Zijdg9tDQOHjs9Cq/7xxQTnFdmcz9FxosHhHikxBPFwb5F2iYVw h+PVPEBUF3dm+Gck5fjazc8xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6kraFVIt o2NzvQby8mXvaCRkFC0wHwYDVR0jBBgwFoAUwsFz12JIhbwL1vwZPvvO6VQ/okMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4REYxL0U2MTdBRDkyQUFD RjExRjBCQjExRkI1QkM0RjlBRTAyL3dzRnoxMkpJaGJ3TDF2d1pQdnZPNlZRX29r TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd3NGejEySkloYndMMXZ3WlB2dk82VlFfb2tNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 REYxL0U2MTdBRDkyQUFDRjExRjBCQjExRkI1QkM0RjlBRTAyL3dzRnoxMkpJaGJ3 TDF2d1pQdnZPNlZRX29rTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADoQI3CXY8j6unXNjXcTFca1exgXEnMpg7YkrYiZkxVbxXf1/gPZwNxV O+sO+PRBci6eT0PybuY6otFV8RTHXlLdyarZ2UfQZvjqeWXPEkN4IGVx4neyGpv6 3NW3vQX4l9+7kMG2DB6m9G0sG0VZIhEgtMFEPZKNSWt4oK5btUv+TZq/hbJC5g/Z lOlCCFgx2eAEvaRIxWMJOV+GnPDh+k4aKpf/2qRy8HC+uU19R/KB4hGhpqXBVdKX 7F9bk3GE3kN2rHGeTg8/KyxK0pKSJnHOG7V2PGedxDQ+9Cs2Xpk25yCoV2AZCuOw T/ixfrSZ8XWwIqCML68RggdzgpUlbNg= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:52 2025 by rpki-client