This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft File: WYUGlV49GgWTCLSexvcnjZpeGrg.mft (raw, json) Hash identifier: z5IZz6Mos/uRtYOfX7/IdVJd5Uz+wsR10oG5vrm4jKg= Subject key identifier: 0B:84:AC:F9:30:43:A7:78:6C:A9:11:BA:76:68:91:CD:AC:9D:EC:4D Authority key identifier: 59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 Certificate issuer: /CN=A9124F2F/serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Certificate serial: 0694 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft Manifest number: 068A Signing time: Sun 28 Dec 2025 21:43:33 +0000 Manifest this update: Sun 28 Dec 2025 21:43:33 +0000 Manifest next update: Sun 04 Jan 2026 21:43:33 +0000 Files and hashes: 1: WYUGlV49GgWTCLSexvcnjZpeGrg.crl (hash: MZ9MJd0jmO1TDyf9lYZuLJxGmIPb9C1rpjXxCrM8ytw=) 2: 60A7536AC83311EC8981520CC4F9AE02.roa (hash: /cj0RGnam1KCeb071udMdtYeVjNS+MGC0Nq9zxgjO8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 21:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1684 (0x694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124F2F, serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Validity Not Before: Dec 28 21:43:33 2025 GMT Not After : Jan 4 21:43:33 2026 GMT Subject: CN=6951a485-4208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ff:8a:d0:fa:04:d4:36:18:58:1d:d2:1c:2f: ad:7a:c4:98:f7:4c:93:83:86:6e:cb:8e:aa:be:88: fb:03:a5:47:68:86:3c:a9:1e:00:80:8b:f7:c5:06: 2f:9f:78:8d:9e:a0:57:62:b1:e0:fc:4d:bb:d1:f3: e5:80:eb:ad:d1:67:d3:d7:ac:75:d2:de:f5:22:6b: 98:b4:64:08:8e:79:ce:cd:f2:22:67:60:f0:fa:2b: a5:f6:5e:ef:ce:c2:53:c5:35:e9:a3:d0:2d:e8:94: 3e:f0:b4:a1:9d:6f:d9:2f:c8:e1:01:58:63:d9:bb: b5:0d:a7:63:7d:6a:66:20:55:fd:71:d9:c3:e2:dd: 17:e3:9c:a5:3f:c8:bd:1a:a7:8e:82:4d:8a:45:eb: 5b:40:3c:6f:6a:d6:b0:cb:3f:63:14:b0:8b:68:b9: f9:c6:e2:97:d5:c1:88:89:dd:cc:62:f6:27:6f:6f: ee:64:8f:03:de:b5:79:be:1d:c0:40:1b:f0:a3:1f: 7c:0d:73:a1:49:d1:dd:c0:e0:17:94:8b:66:21:df: 2d:c7:1d:2b:cb:ca:11:b7:4d:3b:da:6a:68:10:9f: 35:2b:e8:3c:5e:34:02:86:e9:f0:1c:1a:ae:87:11: c2:ae:59:15:14:a1:61:49:e7:20:26:51:97:55:a5: 43:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:84:AC:F9:30:43:A7:78:6C:A9:11:BA:76:68:91:CD:AC:9D:EC:4D X509v3 Authority Key Identifier: keyid:59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:5e:98:d9:9b:21:2c:91:7b:12:e4:37:8b:26:4f:95:c1:68: c4:55:82:f4:91:4a:04:bd:ca:4e:d2:4d:e3:14:54:95:e1:c3: 11:d9:97:b5:d4:95:ac:0d:75:ad:ea:bd:07:76:6a:cb:e2:83: 95:0f:06:cd:db:a9:0f:c9:36:aa:18:97:9f:8f:2e:6c:a1:7c: 79:fc:a7:4b:25:0f:74:c9:1b:ab:e8:31:62:2f:99:86:96:c4: ab:24:bd:2d:a5:bc:66:b9:ac:03:b2:0a:fd:c0:b9:34:7d:ea: 04:f7:07:bf:d9:f4:e1:60:ac:eb:f9:8f:2a:f1:29:f8:4e:7a: 65:c0:d6:f6:16:85:43:46:e4:e8:75:b2:48:80:4f:2c:ad:01: 34:96:f4:fa:ae:22:4f:57:51:66:e1:60:a4:ab:64:52:1b:43: 15:df:60:08:9b:d9:ef:77:9e:ab:64:9d:96:4b:7a:f1:ba:b6: 36:f5:d1:ad:68:8e:3f:9f:fe:08:91:71:e9:5d:3f:f3:78:b2: 4f:bc:0d:26:48:e6:dd:1c:ee:90:8b:84:af:f4:ed:3e:48:c2: 88:6c:b0:d7:f5:a0:12:f3:36:08:78:1f:d5:4b:d8:b6:23:ca: 88:c2:dd:29:af:68:94:56:e0:56:37:62:0f:a0:62:1e:b9:48: de:68:2f:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRGMkYxMTAvBgNVBAUTKDU5ODUwNjk1NUUzRDFBMDU5MzA4QjQ5RUM2RjcyNzhE OUE1RTFBQjgwHhcNMjUxMjI4MjE0MzMzWhcNMjYwMTA0MjE0MzMzWjAYMRYwFAYD VQQDDA02OTUxYTQ4NS00MjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzP+K0PoE1DYYWB3SHC+tesSY90yTg4Zuy46qvoj7A6VHaIY8qR4AgIv3xQYv n3iNnqBXYrHg/E270fPlgOut0WfT16x10t71ImuYtGQIjnnOzfIiZ2Dw+iul9l7v zsJTxTXpo9At6JQ+8LShnW/ZL8jhAVhj2bu1DadjfWpmIFX9cdnD4t0X45ylP8i9 GqeOgk2KRetbQDxvatawyz9jFLCLaLn5xuKX1cGIid3MYvYnb2/uZI8D3rV5vh3A QBvwox98DXOhSdHdwOAXlItmId8txx0ry8oRt0072mpoEJ81K+g8XjQChunwHBqu hxHCrlkVFKFhSecgJlGXVaVD8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuErPkw Q6d4bKkRunZokc2snexNMB8GA1UdIwQYMBaAFFmFBpVePRoFkwi0nsb3J42aXhq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEYyRi8zRTRFRUQ5MjlF QzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdnV1RDTFNleHZjbmpacGVH cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZVUdsVjQ5R2dXVENMU2V4dmNualpwZUdyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEYyRi8zRTRFRUQ5MjlFQzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdn V1RDTFNleHZjbmpacGVHcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrXpjZmyEskXsS5DeLJk+VwWjEVYL0kUoEvcpO0k3jFFSV4cMR2Ze1 1JWsDXWt6r0HdmrL4oOVDwbN26kPyTaqGJefjy5soXx5/KdLJQ90yRur6DFiL5mG lsSrJL0tpbxmuawDsgr9wLk0feoE9we/2fThYKzr+Y8q8Sn4TnplwNb2FoVDRuTo dbJIgE8srQE0lvT6riJPV1Fm4WCkq2RSG0MV32AIm9nvd56rZJ2WS3rxurY29dGt aI4/n/4IkXHpXT/zeLJPvA0mSObdHO6Qi4Sv9O0+SMKIbLDX9aAS8zYIeB/VS9i2 I8qIwt0pr2iUVuBWN2IPoGIeuUjeaC+0 -----END CERTIFICATE-----Generated at Mon Dec 29 10:13:00 2025 by rpki-client