This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft File: wLnBGxsWDzIbiuxM_N3a2JX8R94.mft (raw, json) Hash identifier: sNhxT2Oh9P2cyMSwey/2AuQF6gMJigM+nGzi26MhvfE= Subject key identifier: 61:21:6C:B7:4D:6F:BB:6D:E2:99:65:A4:8C:DF:2B:77:12:43:D6:2C Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Certificate serial: 0EF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft Manifest number: 0ED4 Signing time: Sat 20 Dec 2025 17:21:02 +0000 Manifest this update: Sat 20 Dec 2025 17:21:02 +0000 Manifest next update: Sat 27 Dec 2025 17:21:02 +0000 Files and hashes: 1: wLnBGxsWDzIbiuxM_N3a2JX8R94.crl (hash: 0zBYJi+of5D+tWKe7umhJ85RfjCb/royW969dzTQgZs=) 2: 247099D084C611F09EBC052BC4F9AE02.roa (hash: LjL6siy8mS8KnL6NQqX66YEFFKmRPoJ1dR18D6pEQ04=) 3: E54A88DE595F11EFB2BAB431C4F9AE02.roa (hash: SEuSI2XPVxN+1pVxedn+P+yPZW6RvN2NRh14bu8L37Y=) 4: A2E6430C595F11EF8C3B3D31C4F9AE02.roa (hash: rsXfvz54a2T+jOGss3629AVS3vLaxkP1937oobR11UI=) 5: DC185D0CB0A111EE8C78834EC4F9AE02.roa (hash: m0l23vJryclykCD48Z3CE8U9M7wFbCoJly5IlJCZMlg=) 6: 2569C82ADC2311F08AE4CDD5626F56BC.roa (hash: cFmpqvcpbDQj9zHBaykzPYMMRfhObvnJUo0Dw8veR50=) 7: A2369FBA595F11EF8C3B3D31C4F9AE02.roa (hash: 1zS8XWzZTz7+tGBFQYN1Yj55+aHf93rbvK5YUu69PHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3828 (0xef4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Validity Not Before: Dec 20 17:21:02 2025 GMT Not After : Dec 27 17:21:02 2025 GMT Subject: CN=6946dafe-0ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2b:32:5b:19:f8:36:e5:3a:57:8e:bd:3b:da: 17:11:5d:db:7a:85:dc:eb:8f:a0:75:5f:0a:70:ee: 22:cf:a0:9b:ff:0e:5c:6a:90:6e:69:c5:c6:a4:1d: 8a:67:c2:18:2f:26:26:f2:63:42:d1:65:e2:e6:f1: fa:6a:41:8b:72:09:53:85:7d:67:25:12:56:96:46: c6:7f:29:f3:5e:1e:b4:90:50:39:4f:de:6f:6d:49: f3:08:35:77:c1:4e:bc:fb:1f:96:06:2a:40:1b:fb: 91:44:99:35:1a:f5:d3:3f:a4:45:3e:c9:63:7e:13: 98:4b:a9:78:a0:dd:cd:f9:78:05:1c:07:0e:9a:9c: e7:8e:7b:8c:0b:fc:29:ae:6f:41:10:e0:8e:3b:08: b1:88:18:09:93:e7:b3:69:86:6a:5a:7e:06:4e:b2: 35:d3:7b:e5:d7:d4:e8:73:fe:21:3f:68:4b:a8:4a: 98:1a:75:1f:98:cf:35:d3:3d:e2:73:2d:be:ce:e6: 3d:3d:fb:94:fe:07:aa:16:f3:87:78:ec:dc:c8:29: 15:7d:50:3a:d6:e1:87:2f:da:b5:a6:3c:81:bf:f8: 08:0e:b6:f5:a2:1a:64:3e:dd:5a:cc:3e:33:dc:24: 9d:84:7f:ca:8a:dc:09:cd:fa:04:eb:a4:05:3b:d5: af:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:21:6C:B7:4D:6F:BB:6D:E2:99:65:A4:8C:DF:2B:77:12:43:D6:2C X509v3 Authority Key Identifier: keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:f1:71:09:37:17:22:4c:38:6f:f3:7c:a8:65:6f:1c:c3:3e: 25:c6:19:61:3f:23:ab:5b:56:46:06:bf:51:f1:b9:76:83:0c: b8:be:e4:b3:4b:7c:5a:a6:05:02:3a:d5:75:3c:2f:28:9b:5e: aa:c5:8b:d5:62:19:f8:75:2e:10:56:3b:d5:db:9d:67:08:67: 68:48:6c:ec:06:06:38:d6:85:91:57:b7:96:c1:c6:44:a4:c4: 2a:c8:0d:48:fe:27:32:26:15:2e:8e:92:33:8c:66:0d:3d:7a: f9:74:f1:ba:89:a7:0d:7f:0e:dd:0a:15:40:76:bf:3f:71:53: f8:af:62:06:a1:d7:31:b6:f2:46:7f:c3:b7:1f:9e:0b:3f:d8: c4:54:91:38:c3:7a:49:a4:37:c9:34:f1:4e:bb:90:6a:a8:16: 0d:d3:c9:98:95:95:bc:56:24:bd:7e:c4:87:b1:4d:e9:8a:fc: 15:97:6b:09:83:29:c5:0b:dc:54:d8:e0:8d:e8:d1:cc:50:cf: da:a4:1c:ad:d1:68:f1:4c:d5:8b:91:db:6c:44:b1:d5:ca:90: 99:4b:77:1f:5e:59:bc:b9:3b:67:fb:1f:0e:ec:4d:3a:6f:15: 96:27:a9:32:2c:e5:18:62:2d:d0:c0:36:67:5c:65:11:67:6f: 13:51:9e:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5OEUxMTAvBgNVBAUTKEMwQjlDMTFCMUIxNjBGMzIxQjhBRUM0Q0ZDREREQUQ4 OTVGQzQ3REUwHhcNMjUxMjIwMTcyMTAyWhcNMjUxMjI3MTcyMTAyWjAYMRYwFAYD VQQDDA02OTQ2ZGFmZS0wZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzisyWxn4NuU6V469O9oXEV3beoXc64+gdV8KcO4iz6Cb/w5capBuacXGpB2K Z8IYLyYm8mNC0WXi5vH6akGLcglThX1nJRJWlkbGfynzXh60kFA5T95vbUnzCDV3 wU68+x+WBipAG/uRRJk1GvXTP6RFPsljfhOYS6l4oN3N+XgFHAcOmpznjnuMC/wp rm9BEOCOOwixiBgJk+ezaYZqWn4GTrI103vl19Toc/4hP2hLqEqYGnUfmM810z3i cy2+zuY9PfuU/geqFvOHeOzcyCkVfVA61uGHL9q1pjyBv/gIDrb1ohpkPt1azD4z 3CSdhH/KitwJzfoE66QFO9Wv1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEhbLdN b7tt4pllpIzfK3cSQ9YsMB8GA1UdIwQYMBaAFMC5wRsbFg8yG4rsTPzd2tiV/Efe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS9GMTlBN0M5NDlD MUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6SWJpdXhNX04zYTJKWDhS OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dMbkJHeHNXRHpJYml1eE1fTjNhMkpYOFI5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njk4RS9GMTlBN0M5NDlDMUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6 SWJpdXhNX04zYTJKWDhSOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB48XEJNxciTDhv83yoZW8cwz4lxhlhPyOrW1ZGBr9R8bl2gwy4vuSz S3xapgUCOtV1PC8om16qxYvVYhn4dS4QVjvV251nCGdoSGzsBgY41oWRV7eWwcZE pMQqyA1I/icyJhUujpIzjGYNPXr5dPG6iacNfw7dChVAdr8/cVP4r2IGodcxtvJG f8O3H54LP9jEVJE4w3pJpDfJNPFOu5BqqBYN08mYlZW8ViS9fsSHsU3pivwVl2sJ gynFC9xU2OCN6NHMUM/apByt0WjxTNWLkdtsRLHVypCZS3cfXlm8uTtn+x8O7E06 bxWWJ6kyLOUYYi3QwDZnXGURZ28TUZ6e -----END CERTIFICATE-----Generated at Sun Dec 21 02:48:26 2025 by rpki-client