This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft File: ifWWEQAwvcmzutds_QXDEkYXyVI.mft (raw, json) Hash identifier: jGiV3USREhESSNwf1PKQVYNEh9RvBu6l/nyMgMxhjXM= Subject key identifier: 33:91:4C:AE:84:F9:23:16:B5:2D:A4:CF:D1:F4:CD:0A:8B:C1:45:A8 Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52 Certificate issuer: /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952 Certificate serial: 0467 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft Manifest number: 0459 Signing time: Sat 20 Dec 2025 23:28:47 +0000 Manifest this update: Sat 20 Dec 2025 23:28:46 +0000 Manifest next update: Sat 27 Dec 2025 23:28:46 +0000 Files and hashes: 1: ifWWEQAwvcmzutds_QXDEkYXyVI.crl (hash: A3kIm7zqo6c3mKo2yK9c36NgP5rbAEAidEE4nGJdaK0=) 2: 969AE080A14211EC8C49D660C4F9AE02.roa (hash: b9iBKweDQpw3WvJOHZ5pnqPC35ef5TOK2GSHDPRSqes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1127 (0x467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA62, serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952 Validity Not Before: Dec 20 23:28:46 2025 GMT Not After : Dec 27 23:28:46 2025 GMT Subject: CN=6947312f-5ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d7:2f:81:f0:e1:1c:6c:b4:e1:15:c3:18:d9: 22:1e:88:77:35:02:91:b9:ed:fd:e5:cb:2e:d5:3a: a4:49:82:fc:23:26:74:85:5c:d3:5f:71:89:7f:a4: 70:a2:cc:47:63:a5:78:8d:53:b9:03:dd:8b:f2:be: 4d:d2:7f:51:f5:d1:01:54:f4:19:8e:dd:84:13:2a: 62:57:20:a3:22:eb:b0:1e:97:c1:b0:3b:62:97:e9: fb:d2:f7:94:da:f4:f7:53:c2:28:4b:a4:12:62:a9: 25:1f:86:a9:96:49:ae:28:59:7e:1d:4a:1a:a2:32: 24:0b:bd:ef:ea:71:7c:9e:69:cc:43:5e:85:ed:c3: a0:10:62:85:02:6b:d9:45:46:31:e8:d3:04:73:04: 25:7c:2c:f3:6b:43:8c:6c:1c:fe:72:68:82:bf:3b: d0:2a:15:d0:3d:31:65:77:d2:a4:46:76:41:d4:db: 56:49:ae:e6:19:47:70:9a:de:39:0f:44:51:a9:0e: 5d:9d:65:4a:cc:d2:3a:2d:dc:85:26:4f:2e:5d:e5: 12:7a:42:90:be:40:0e:4b:d0:09:6b:20:69:d2:b7: a8:d4:a0:8b:c4:0f:24:e5:43:9b:0a:47:8b:d1:92: 5d:5c:53:c5:a0:79:2c:14:6c:b4:27:18:6d:44:98: 95:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:91:4C:AE:84:F9:23:16:B5:2D:A4:CF:D1:F4:CD:0A:8B:C1:45:A8 X509v3 Authority Key Identifier: keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:d9:dd:d4:5e:89:68:f4:30:a8:06:c0:16:d0:20:d4:64:ac: ba:d2:66:f5:3b:f5:8b:17:cd:b1:19:f1:62:54:da:51:c2:3d: 28:e5:45:07:e4:58:3f:21:4a:42:e7:2c:6e:b4:4e:71:1e:46: f1:62:b4:d4:03:23:84:0b:1a:c3:33:10:1b:64:30:cc:7c:60: 7f:7f:8b:52:74:65:5f:93:4b:13:33:17:a7:1a:8f:b4:d6:45: d8:dd:c5:44:82:d9:e3:3f:5d:b2:88:64:cc:83:e2:56:22:23: b9:b2:00:9b:a6:03:42:cf:cf:b9:6a:9a:01:0f:6e:a7:7d:45: 99:a3:2b:0e:be:66:e7:a2:d1:ca:e4:8a:38:35:a2:b7:ff:e5: 2c:40:54:93:ca:b6:2e:43:42:a0:f8:a8:b9:44:31:63:ff:02: ec:d3:eb:30:45:61:0d:80:f2:d8:72:3e:53:8e:88:dc:dd:91: ad:6a:28:62:65:30:5e:0e:d8:cf:ea:3b:4b:15:d0:50:1e:07: 72:ec:58:15:7f:3a:60:c3:8f:62:4c:e2:57:6c:76:f0:aa:bc: 3b:b7:23:e9:45:cc:05:c8:46:ff:44:99:c7:ae:43:c5:12:96: 50:d1:98:0b:8a:d6:4c:a0:cd:ae:67:57:a7:f2:dc:95:14:c2: 6d:1d:72:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVBNjIxMTAvBgNVBAUTKDg5RjU5NjExMDAzMEJEQzlCM0JBRDc2Q0ZEMDVDMzEy NDYxN0M5NTIwHhcNMjUxMjIwMjMyODQ2WhcNMjUxMjI3MjMyODQ2WjAYMRYwFAYD VQQDDA02OTQ3MzEyZi01ZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnNcvgfDhHGy04RXDGNkiHoh3NQKRue395csu1TqkSYL8IyZ0hVzTX3GJf6Rw osxHY6V4jVO5A92L8r5N0n9R9dEBVPQZjt2EEypiVyCjIuuwHpfBsDtil+n70veU 2vT3U8IoS6QSYqklH4aplkmuKFl+HUoaojIkC73v6nF8nmnMQ16F7cOgEGKFAmvZ RUYx6NMEcwQlfCzza0OMbBz+cmiCvzvQKhXQPTFld9KkRnZB1NtWSa7mGUdwmt45 D0RRqQ5dnWVKzNI6LdyFJk8uXeUSekKQvkAOS9AJayBp0reo1KCLxA8k5UObCkeL 0ZJdXFPFoHksFGy0JxhtRJiVcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDORTK6E +SMWtS2kz9H0zQqLwUWoMB8GA1UdIwQYMBaAFIn1lhEAML3Js7rXbP0FwxJGF8lS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUE2Mi8xMTY4MjExQzgw NkMxMUVDOTJCNTFDNUFDNEY5QUUwMi9pZldXRVFBd3ZjbXp1dGRzX1FYREVrWVh5 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lmV1dFUUF3dmNtenV0ZHNfUVhERWtZWHlWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUE2Mi8xMTY4MjExQzgwNkMxMUVDOTJCNTFDNUFDNEY5QUUwMi9pZldXRVFBd3Zj bXp1dGRzX1FYREVrWVh5VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF2d3UXolo9DCoBsAW0CDUZKy60mb1O/WLF82xGfFiVNpRwj0o5UUH 5Fg/IUpC5yxutE5xHkbxYrTUAyOECxrDMxAbZDDMfGB/f4tSdGVfk0sTMxenGo+0 1kXY3cVEgtnjP12yiGTMg+JWIiO5sgCbpgNCz8+5apoBD26nfUWZoysOvmbnotHK 5Io4NaK3/+UsQFSTyrYuQ0Kg+Ki5RDFj/wLs0+swRWENgPLYcj5Tjojc3ZGtaihi ZTBeDtjP6jtLFdBQHgdy7FgVfzpgw49iTOJXbHbwqrw7tyPpRcwFyEb/RJnHrkPF EpZQ0ZgLitZMoM2uZ1en8tyVFMJtHXL8 -----END CERTIFICATE-----Generated at Sun Dec 21 15:59:17 2025 by rpki-client