This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft File: WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft (raw, json) Hash identifier: K8GFCZIqjmNsOfKEQIg6DdhRDMe8ohhHNAsETHmm7kE= Subject key identifier: FD:9C:E9:45:A2:52:19:79:45:B0:A7:95:E8:F1:C5:9B:F9:5A:66:2F Authority key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5 Certificate issuer: /CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5 Certificate serial: 0C37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft Manifest number: 0C00 Signing time: Thu 18 Dec 2025 18:36:05 +0000 Manifest this update: Thu 18 Dec 2025 18:36:05 +0000 Manifest next update: Thu 25 Dec 2025 18:36:05 +0000 Files and hashes: 1: WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl (hash: 4hazxy2koPiQWi/q7Jq7RWOnVWUAJd+QPPobGZDb5RA=) 2: 21A731506C9B11ED93A7513AC4F9AE02.roa (hash: 8dlna4OSSEor7RjmsLK1ACn3Ob2tSwzfuy2V+7m0V0I=) 3: 1495D7EE854B11EAACB2FE39C4F9AE02.roa (hash: 4kFdxqJRF+UtayrYr11Ti8tQHel/QxYA6eu1cTGYKjY=) 4: 140D52F2854B11EAACB2FE39C4F9AE02.roa (hash: lUd8khrscqt2/SuycXkak1zRZ1/D9J3OfZ7NRIMFXKQ=) 5: 474DC6748C2B11EA90152018C4F9AE02.roa (hash: S/XkCg/mwHSXROr2dfVl+A2MAUNuvm6ulkjfEMhHMjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3127 (0xc37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91274A4, serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5 Validity Not Before: Dec 18 18:36:05 2025 GMT Not After : Dec 25 18:36:05 2025 GMT Subject: CN=69444995-7791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:f7:04:65:be:91:3d:a3:bb:79:2d:d5:d8: ff:e6:cc:47:52:e9:66:38:e7:97:6c:ac:d7:8b:91: dc:09:8a:ec:24:86:d3:7b:c1:a7:99:e5:a3:67:b5: 62:a6:2e:a8:fc:9c:53:b4:d1:81:65:af:bc:3c:66: 84:8e:0d:68:6d:f3:5e:46:ae:e8:0c:72:d1:7c:f8: 0f:99:4a:2c:2c:81:c2:77:6e:42:43:72:28:6f:0e: a6:c0:ae:4a:82:f0:99:90:22:7b:bb:95:de:bb:bd: 09:95:ce:e5:b5:13:27:a2:da:73:f7:f0:94:11:35: 7f:6f:73:2e:2b:fb:0e:18:72:78:57:99:67:e1:f0: 97:0d:c4:ff:2a:b9:69:37:c2:cf:a3:9b:da:78:fd: 4d:7f:8e:ed:e9:37:7a:58:d1:0c:7e:8c:8b:d5:7a: 32:a5:4a:a1:3b:e9:39:be:ca:29:90:7d:84:5d:cf: 88:ab:f2:78:72:72:0d:c0:c3:fa:77:58:1d:92:7a: b1:1c:3b:99:21:f3:75:c0:ae:ae:69:7b:3a:37:0a: 55:21:c6:44:41:e7:8e:fa:86:90:00:a8:eb:b7:c3: da:71:c4:99:33:63:ab:d6:6b:71:c6:5f:2d:de:22: 12:2e:9f:80:4c:59:1e:a3:93:02:6f:08:0c:fc:30: e5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9C:E9:45:A2:52:19:79:45:B0:A7:95:E8:F1:C5:9B:F9:5A:66:2F X509v3 Authority Key Identifier: keyid:59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1d:1a:fc:bf:c3:ae:3e:97:5c:28:9d:e6:3e:32:b3:ca:97: 94:7f:43:6f:43:a0:99:0d:58:05:72:9a:87:be:a7:4d:8f:40: 84:2f:5c:96:59:db:9a:70:dc:a3:f8:87:f4:60:77:cf:d3:14: 9d:54:a3:34:b8:ba:59:71:f4:55:64:a7:57:a5:ff:4e:39:1b: 1d:82:2f:80:d8:45:0c:aa:1e:0d:62:27:53:d6:53:12:94:67: 52:ec:ec:c1:ca:98:47:27:83:28:f6:d3:0c:52:3d:89:3e:48: 8b:4a:3c:b0:32:00:18:76:0f:cf:21:43:fc:fc:29:08:a5:23: c2:f5:dc:4e:9a:a5:70:2c:49:57:4e:0a:72:e5:1d:2e:08:07: db:cc:c2:53:be:94:05:19:c7:c2:36:fb:43:f2:c4:d1:85:4e: a0:2b:ed:dc:9c:12:c9:59:22:a4:fe:26:9a:c6:dc:0d:2b:ab: 3f:6d:f9:d7:6e:54:38:75:33:25:66:7c:28:6d:9a:bd:65:fc: 68:68:4f:d9:11:7b:34:71:71:4d:9f:68:ef:93:c6:2d:46:26: 63:31:13:cd:b2:59:e4:91:96:ab:d9:88:b5:1d:68:a0:eb:74: 8a:5b:41:9f:5f:96:fc:1e:7b:5f:31:c6:51:15:c9:82:77:de: 25:c5:b2:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc0QTQxMTAvBgNVBAUTKDU5NTY2NUZGODVFNEU0NzczNzFGNzU0MUY3MjA5REMy NDRFNjBDQTUwHhcNMjUxMjE4MTgzNjA1WhcNMjUxMjI1MTgzNjA1WjAYMRYwFAYD VQQDDA02OTQ0NDk5NS03NzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYv3BGW+kT2ju3kt1dj/5sxHUulmOOeXbKzXi5HcCYrsJIbTe8GnmeWjZ7Vi pi6o/JxTtNGBZa+8PGaEjg1obfNeRq7oDHLRfPgPmUosLIHCd25CQ3Iobw6mwK5K gvCZkCJ7u5Xeu70Jlc7ltRMnotpz9/CUETV/b3MuK/sOGHJ4V5ln4fCXDcT/Krlp N8LPo5vaeP1Nf47t6Td6WNEMfoyL1XoypUqhO+k5vsopkH2EXc+Iq/J4cnINwMP6 d1gdknqxHDuZIfN1wK6uaXs6NwpVIcZEQeeO+oaQAKjrt8PaccSZM2Or1mtxxl8t 3iISLp+ATFkeo5MCbwgM/DDlCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2c6UWi Uhl5RbCnlejxxZv5WmYvMB8GA1UdIwQYMBaAFFlWZf+F5OR3Nx91QfcgncJE5gyl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzRBNC9EREJFNDIwQTMw RjAxMUVBOTg1OUFFNTNDNEY5QUUwMi9XVlpsXzRYazVIYzNIM1ZCOXlDZHdrVG1E S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dWWmxfNFhrNUhjM0gzVkI5eUNkd2tUbURLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzRBNC9EREJFNDIwQTMwRjAxMUVBOTg1OUFFNTNDNEY5QUUwMi9XVlpsXzRYazVI YzNIM1ZCOXlDZHdrVG1ES1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLHRr8v8OuPpdcKJ3mPjKzypeUf0NvQ6CZDVgFcpqHvqdNj0CEL1yW WduacNyj+If0YHfP0xSdVKM0uLpZcfRVZKdXpf9OORsdgi+A2EUMqh4NYidT1lMS lGdS7OzByphHJ4Mo9tMMUj2JPkiLSjywMgAYdg/PIUP8/CkIpSPC9dxOmqVwLElX Tgpy5R0uCAfbzMJTvpQFGcfCNvtD8sTRhU6gK+3cnBLJWSKk/iaaxtwNK6s/bfnX blQ4dTMlZnwobZq9ZfxoaE/ZEXs0cXFNn2jvk8YtRiZjMRPNslnkkZar2Yi1HWig 63SKW0GfX5b8HntfMcZRFcmCd94lxbIz -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:21 2025 by rpki-client