This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft File: weInZRraO_vBh3GuyLYAJnI7YK0.mft (raw, json) Hash identifier: VQL07R3Wmq1f5KWMol6CpLd3v6V3dL1GGPrlqTlPU44= Subject key identifier: EF:24:1F:F5:11:1B:BD:EA:B5:23:87:F7:0B:81:19:24:A9:19:E0:4D Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD Certificate issuer: /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD Certificate serial: 2970 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft Manifest number: 293D Signing time: Thu 18 Dec 2025 15:32:28 +0000 Manifest this update: Thu 18 Dec 2025 15:32:27 +0000 Manifest next update: Thu 25 Dec 2025 15:32:27 +0000 Files and hashes: 1: weInZRraO_vBh3GuyLYAJnI7YK0.crl (hash: 0nccjNMmEzknyLRHJgDxrOGmWVHsrafhgXMBwQ2SO3g=) 2: 39932724578611EA8CC3B124C4F9AE02.roa (hash: 3ffKspDDCMwFhMU04xxlteFDU4SgN8Gby605uNp3lZA=) 3: C3876BD8589D11EC9CF19A41C4F9AE02.roa (hash: AzW4aIQu3oC/RB4Ph7Oxui4fN9NO75Dymw0HBe9vHgA=) 4: 3AB3F80E578611EA8CC3B124C4F9AE02.roa (hash: E9GpG8r2RS+wZVKx4VfWz8DtkWxY78qwYvbLbq0Wo/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10608 (0x2970) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD Validity Not Before: Dec 18 15:32:27 2025 GMT Not After : Dec 25 15:32:27 2025 GMT Subject: CN=69441e8c-64d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:21:a2:e5:04:5b:7a:bb:e4:4c:ef:d1:00:f4: 1b:5d:aa:4d:f6:49:47:b2:a1:e6:4e:04:10:93:e3: 61:54:21:68:3b:87:33:21:79:86:06:10:2f:f5:2d: f1:3f:e8:69:27:ad:12:3e:b6:05:7c:cb:6a:13:7a: 06:4f:24:cd:03:1b:b8:c9:f1:c7:38:29:96:ed:ff: 8d:07:f9:ac:59:f7:cc:55:f6:6e:ac:e2:fa:71:26: f1:3f:bc:54:73:00:bc:5b:d9:f9:72:79:4c:ce:99: 24:08:48:2d:6f:76:44:f5:bc:d3:e2:2f:ba:42:17: ea:4f:7b:78:a3:bd:6f:87:c3:72:76:17:52:13:91: 12:04:0a:c7:71:09:c6:4f:b8:45:19:9f:33:54:39: f9:44:5b:f6:dc:2c:95:96:46:fb:fa:97:f0:21:99: 99:a2:f6:f6:49:a8:6e:28:c3:79:d5:81:48:f8:c0: bc:0f:0a:da:af:bd:72:fb:57:16:f8:da:6a:7f:88: 56:28:5d:05:1b:39:1e:7c:22:14:25:f8:12:32:e8: 93:dd:50:ce:81:3e:97:c4:25:b1:25:5b:47:66:76: 43:9c:08:a0:31:e3:4c:49:e1:48:23:7c:b3:6a:6e: 4a:3f:83:3b:38:82:fe:9c:3e:ac:a7:b8:b7:89:66: 14:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:24:1F:F5:11:1B:BD:EA:B5:23:87:F7:0B:81:19:24:A9:19:E0:4D X509v3 Authority Key Identifier: keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:be:5f:34:7d:3d:c0:03:a7:eb:80:bc:a7:66:bc:8d:db:c3: 85:fd:bc:d1:70:fb:3a:c0:c7:81:d7:b3:40:6f:29:97:e8:c3: d7:d5:d0:23:0d:0e:8c:e3:fb:5d:58:67:21:72:11:eb:fc:e6: 64:44:10:da:a1:f5:e5:64:7a:28:47:e1:38:9c:2d:cb:a0:de: 6a:b1:6e:76:20:37:a3:58:e8:87:a9:10:97:c9:6d:3d:c5:45: c9:4d:aa:ff:81:97:a2:ff:32:c0:f6:5d:84:aa:f7:44:0c:4c: 17:6d:ca:6f:23:43:67:70:fa:d7:1f:45:21:c3:e9:62:0e:2a: 16:a8:1f:e6:f0:c7:57:ea:b9:25:5e:72:e7:fa:56:bc:78:42: 11:43:74:36:7d:b2:8b:21:4b:f3:e1:0f:7a:fd:e7:44:7f:18: 41:f4:6a:cf:c3:85:3c:c8:f3:a7:66:45:ef:5b:f0:a3:a9:0e: d8:43:62:59:11:36:b0:01:94:5f:b7:b4:0c:83:e0:c3:b3:21: 97:39:9a:6a:b5:29:62:17:96:e7:23:90:22:86:e0:95:f6:9e: d4:8b:57:26:9d:4e:f8:ad:4f:18:fc:6f:0e:e5:db:a7:84:fc: 70:1b:ec:6f:e0:00:13:59:1a:39:34:37:7b:c3:99:9d:94:d1: f6:e8:56:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3MDcxMTAvBgNVBAUTKEMxRTIyNzY1MUFEQTNCRkJDMTg3NzFBRUM4QjYwMDI2 NzIzQjYwQUQwHhcNMjUxMjE4MTUzMjI3WhcNMjUxMjI1MTUzMjI3WjAYMRYwFAYD VQQDDA02OTQ0MWU4Yy02NGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCGi5QRbervkTO/RAPQbXapN9klHsqHmTgQQk+NhVCFoO4czIXmGBhAv9S3x P+hpJ60SPrYFfMtqE3oGTyTNAxu4yfHHOCmW7f+NB/msWffMVfZurOL6cSbxP7xU cwC8W9n5cnlMzpkkCEgtb3ZE9bzT4i+6QhfqT3t4o71vh8NydhdSE5ESBArHcQnG T7hFGZ8zVDn5RFv23CyVlkb7+pfwIZmZovb2SahuKMN51YFI+MC8Dwrar71y+1cW +Npqf4hWKF0FGzkefCIUJfgSMuiT3VDOgT6XxCWxJVtHZnZDnAigMeNMSeFII3yz am5KP4M7OIL+nD6sp7i3iWYU/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8kH/UR G73qtSOH9wuBGSSpGeBNMB8GA1UdIwQYMBaAFMHiJ2Ua2jv7wYdxrsi2ACZyO2Ct MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjcwNy9CNEFDRTE2NDcw QjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9fdkJoM0d1eUxZQUpuSTdZ SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dlSW5aUnJhT192QmgzR3V5TFlBSm5JN1lLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjcwNy9CNEFDRTE2NDcwQjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9f dkJoM0d1eUxZQUpuSTdZSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhvl80fT3AA6frgLynZryN28OF/bzRcPs6wMeB17NAbymX6MPX1dAj DQ6M4/tdWGchchHr/OZkRBDaofXlZHooR+E4nC3LoN5qsW52IDejWOiHqRCXyW09 xUXJTar/gZei/zLA9l2EqvdEDEwXbcpvI0NncPrXH0Uhw+liDioWqB/m8MdX6rkl XnLn+la8eEIRQ3Q2fbKLIUvz4Q96/edEfxhB9GrPw4U8yPOnZkXvW/CjqQ7YQ2JZ ETawAZRft7QMg+DDsyGXOZpqtSliF5bnI5AihuCV9p7Ui1cmnU74rU8Y/G8O5dun hPxwG+xv4AATWRo5NDd7w5mdlNH26FbS -----END CERTIFICATE-----Generated at Sat Dec 20 13:14:52 2025 by rpki-client