This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft File: WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft (raw, json) Hash identifier: aWIv2yUOTfsCq8jCvXdXej1ayLzN7a10ZI5QRxpE2XQ= Subject key identifier: 4D:E0:36:8C:D9:95:4C:C5:E4:34:2D:E1:A0:17:32:A4:5D:55:11:39 Authority key identifier: 58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B Certificate issuer: /CN=A912C72C/serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B Certificate serial: 0652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft Manifest number: 0635 Signing time: Sat 20 Dec 2025 22:06:31 +0000 Manifest this update: Sat 20 Dec 2025 22:06:31 +0000 Manifest next update: Sat 27 Dec 2025 22:06:31 +0000 Files and hashes: 1: WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl (hash: LWjXsDe6yju3N5OQJlj9Jsyex1bxTj2a1wTyi0uMHzk=) 2: C2BDF91086EE11EFB5A6B352C4F9AE02.roa (hash: wMI3ver8wVR/ZnAWos0yZDRDtV6JQS0+1dmbuEI8fSU=) 3: D84424F80BF411ECB17CCF3AC4F9AE02.roa (hash: RN/tY8/jreMHzrKeT7hTEH5IVcghi1onSKcweYAFj6c=) 4: 101150200BF211ECB242D930C4F9AE02.roa (hash: +tvA7I1UakY/Gwyqy53nYNP0btPXgiTIT/m3b6HXPJk=) 5: D756DF180BF411ECB17CCF3AC4F9AE02.roa (hash: QXOdMYntfx6iGCKjXYNL7yMJL+jqIjxIc+DsPG7SFk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C72C, serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B Validity Not Before: Dec 20 22:06:31 2025 GMT Not After : Dec 27 22:06:31 2025 GMT Subject: CN=69471de7-44fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5f:ac:2d:4f:64:f5:e3:3d:5d:df:b3:c6:e6: fb:4c:57:0e:50:5b:08:39:3b:2e:ee:46:ed:c2:ba: c8:21:ee:9a:cd:de:ac:05:12:f2:4c:6f:2e:b3:c8: 1d:08:bc:93:52:7d:be:45:f8:0b:58:eb:ff:d6:68: 5f:a2:1b:81:8d:74:ea:62:22:6d:83:1d:fc:66:69: d5:d9:61:16:1e:2c:68:85:36:c7:04:23:2a:7a:19: cc:83:37:7f:4e:28:40:77:b3:02:2d:f8:8f:76:4a: 6a:44:fb:42:6a:f3:27:c8:1e:53:d0:9f:5a:2f:2f: 20:85:bd:18:66:6e:d5:87:4c:f2:6c:18:33:b1:ab: 8b:46:2e:cf:ba:90:40:75:1b:c6:53:4e:41:41:61: a2:82:93:72:0d:c6:fe:a3:0d:eb:a3:12:46:9e:57: bf:e9:e1:2a:59:12:f6:d5:75:75:31:1b:af:82:2d: f8:e0:5c:2d:e4:12:83:b1:8e:e2:e2:43:98:23:cb: 48:70:f5:14:ac:bb:6f:5b:42:ee:26:06:3d:93:ad: d8:79:36:9f:e5:c1:6b:ca:e5:41:82:3a:c1:03:a8: 7f:36:4d:e4:41:7c:f9:ce:4c:3c:8b:27:17:cc:d4: 89:08:51:a9:b0:89:24:ac:47:50:16:1f:e1:8d:fa: c5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E0:36:8C:D9:95:4C:C5:E4:34:2D:E1:A0:17:32:A4:5D:55:11:39 X509v3 Authority Key Identifier: keyid:58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:0b:ee:33:d7:17:4c:da:43:54:87:b0:11:39:1c:6c:74:58: 58:64:e1:5a:f4:a0:df:f3:5b:6b:14:02:a0:6c:eb:1f:c3:9d: 26:a3:26:07:bb:2d:4f:86:f4:82:92:80:77:fb:b9:9b:6a:e8: ef:ac:58:75:1c:15:03:42:0f:70:00:9a:47:d3:c9:82:62:c0: 15:bd:90:9b:ef:bd:82:38:f4:0d:f0:fc:13:fd:7b:2b:9c:b4: cc:8b:a9:fe:85:9c:29:8a:b8:a9:b8:d1:2f:eb:71:c0:f0:17: 51:b3:22:48:dd:25:91:51:77:95:e5:2a:ae:a5:8a:ea:4c:58: 76:73:17:80:b2:3f:df:45:d2:83:55:54:b3:a6:83:da:23:66: e7:62:80:cc:8e:c0:62:0c:39:12:0c:88:4c:dd:ff:d5:dd:26: 3b:83:76:d0:c7:d7:67:38:40:a7:48:32:02:bf:ea:37:64:d7: 81:7e:e4:3e:12:9b:5b:51:aa:20:4d:b3:bb:41:af:71:76:97: 1f:db:d1:af:28:47:87:cb:95:fb:48:61:a9:5c:c4:f9:66:9e: c5:10:f9:70:72:85:ab:20:10:d0:d3:4f:a1:8e:43:d1:41:22: 72:ab:32:34:90:5b:fb:6c:5b:0a:08:87:13:06:10:f4:89:dd: bf:d5:97:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MkMxMTAvBgNVBAUTKDU4QjRERjhFNDc1N0NBRkRFNTQ2MkY0QTFBRjg3MEZF MjE0NERDNUIwHhcNMjUxMjIwMjIwNjMxWhcNMjUxMjI3MjIwNjMxWjAYMRYwFAYD VQQDDA02OTQ3MWRlNy00NGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7l+sLU9k9eM9Xd+zxub7TFcOUFsIOTsu7kbtwrrIIe6azd6sBRLyTG8us8gd CLyTUn2+RfgLWOv/1mhfohuBjXTqYiJtgx38ZmnV2WEWHixohTbHBCMqehnMgzd/ TihAd7MCLfiPdkpqRPtCavMnyB5T0J9aLy8ghb0YZm7Vh0zybBgzsauLRi7PupBA dRvGU05BQWGigpNyDcb+ow3roxJGnle/6eEqWRL21XV1MRuvgi344Fwt5BKDsY7i 4kOYI8tIcPUUrLtvW0LuJgY9k63YeTaf5cFryuVBgjrBA6h/Nk3kQXz5zkw8iycX zNSJCFGpsIkkrEdQFh/hjfrFaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3gNozZ lUzF5DQt4aAXMqRdVRE5MB8GA1UdIwQYMBaAFFi0345HV8r95UYvShr4cP4hRNxb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzcyQy84RUM2MTQwRUMz QUExMUVCODcwRUE5MUNDNEY5QUUwMi9XTFRmamtkWHl2M2xSaTlLR3Zod19pRkUz RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dMVGZqa2RYeXYzbFJpOUtHdmh3X2lGRTNGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzcyQy84RUM2MTQwRUMzQUExMUVCODcwRUE5MUNDNEY5QUUwMi9XTFRmamtkWHl2 M2xSaTlLR3Zod19pRkUzRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFC+4z1xdM2kNUh7ARORxsdFhYZOFa9KDf81trFAKgbOsfw50moyYH uy1PhvSCkoB3+7mbaujvrFh1HBUDQg9wAJpH08mCYsAVvZCb772COPQN8PwT/Xsr nLTMi6n+hZwpiripuNEv63HA8BdRsyJI3SWRUXeV5SqupYrqTFh2cxeAsj/fRdKD VVSzpoPaI2bnYoDMjsBiDDkSDIhM3f/V3SY7g3bQx9dnOECnSDICv+o3ZNeBfuQ+ EptbUaogTbO7Qa9xdpcf29GvKEeHy5X7SGGpXMT5Zp7FEPlwcoWrIBDQ00+hjkPR QSJyqzI0kFv7bFsKCIcTBhD0id2/1Zdb -----END CERTIFICATE-----Generated at Sun Dec 21 07:10:19 2025 by rpki-client