This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft File: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json) Hash identifier: NLHhhprY+3J+QAS5RRxtiFoezfGiRbBRSnSvq4HdEaw= Subject key identifier: 98:2F:29:E0:51:A5:B3:90:7B:C8:6D:2E:70:D2:9B:BE:38:01:B2:56 Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 Certificate issuer: /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft Manifest number: 017A Signing time: Fri 19 Dec 2025 02:56:42 +0000 Manifest this update: Fri 19 Dec 2025 02:56:42 +0000 Manifest next update: Fri 26 Dec 2025 02:56:42 +0000 Files and hashes: 1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: 7lZJksb1dysDlHWxvUhfNRHrASbXlZsz6kcICdF6doU=) 2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: r7m3CbmYBiJqaD0HNr0SYvdrD2KBG4gKkuGM3wdlcLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Validity Not Before: Dec 19 02:56:42 2025 GMT Not After : Dec 26 02:56:42 2025 GMT Subject: CN=6944beea-eeb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:36:f0:c0:63:6f:a6:6d:ee:52:98:25:aa:7c: 59:54:fb:64:b4:da:24:18:d3:01:0e:96:7c:d2:2d: 18:36:39:7a:db:de:64:79:13:b7:ab:76:45:40:70: 0c:6f:ac:18:b5:b7:d0:35:08:ff:e2:38:a0:ea:06: 80:d1:08:df:b6:7d:30:fd:cb:ec:29:7b:cd:de:4d: 11:3b:4b:85:dd:01:06:60:3a:d8:b7:88:b9:87:3c: 29:4f:73:b7:d0:f3:14:c5:50:1e:48:f9:fa:5e:27: 94:96:f7:2b:45:ff:6c:74:c5:53:dc:75:d4:e0:a4: 47:06:09:27:0f:05:8a:ca:f2:f1:b0:a9:3e:5c:46: 47:6c:81:b3:41:20:1c:7b:9a:ac:2a:bf:d5:57:2b: 42:1c:e0:a4:e7:54:b2:b9:86:26:3a:1a:25:9e:38: f5:ed:55:55:6f:83:f5:dc:e1:09:bb:66:d6:d4:4b: 52:4b:ec:41:c7:ce:24:51:8e:11:ed:eb:11:cd:eb: 93:34:49:21:b9:f9:77:0e:15:58:1b:b3:8a:ab:8a: 40:c4:84:21:f6:e6:70:cd:94:c2:36:74:e8:a3:ea: 69:23:7c:00:30:80:a8:8c:29:3f:b9:21:68:3d:c2: 58:62:25:44:45:53:f2:af:13:b7:0f:a5:5b:6e:df: c7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2F:29:E0:51:A5:B3:90:7B:C8:6D:2E:70:D2:9B:BE:38:01:B2:56 X509v3 Authority Key Identifier: keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:70:84:f0:19:3d:04:22:b3:30:ce:7e:17:75:4f:22:0b:60: b4:1d:23:5b:87:b9:6e:ea:ad:4b:4d:29:af:45:eb:07:8e:32: 45:c6:be:67:46:47:96:0a:25:2e:9a:ef:57:cc:d2:59:e2:65: dc:b9:6a:df:f9:2e:e0:a3:fb:9e:3d:31:04:9e:a8:f1:b7:4d: 61:b5:96:ac:f4:4f:a7:62:c9:3d:75:b2:22:0d:1b:c3:9a:84: b2:3e:fa:a6:59:2e:aa:77:88:ec:ff:ba:e0:8d:16:df:66:1a: 08:f8:f9:3b:f0:c2:2d:e2:0a:0e:02:45:97:72:e1:47:f1:5e: e6:e2:1a:65:b4:ff:1e:7f:f4:cc:d1:50:5b:e1:b2:73:21:de: 6b:da:1f:f9:bc:89:58:2f:29:42:2e:5d:26:2a:ad:6b:d2:fd: 0e:bb:8c:66:ba:65:5e:36:18:a2:15:5e:63:86:35:e1:fa:38: 3a:5a:5f:52:56:ae:fb:17:50:f6:38:99:16:11:07:20:c2:ad: d3:5e:ab:f3:a4:d6:ad:34:9b:06:63:66:69:2b:7d:6a:40:63: b1:f1:d3:d8:db:fa:fe:e4:96:9e:63:c5:59:da:fd:51:63:9c: c6:4c:5a:0b:73:6c:f2:7c:02:74:06:61:2d:b0:89:bd:4d:7c: a2:ae:15:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MzcxMTAvBgNVBAUTKEZCMDJFQ0Q2Qzc3ODlBMzk2QjUzQTQ4RkE5MjQzNjYw RTI1MkMxNDMwHhcNMjUxMjE5MDI1NjQyWhcNMjUxMjI2MDI1NjQyWjAYMRYwFAYD VQQDDA02OTQ0YmVlYS1lZWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDbwwGNvpm3uUpglqnxZVPtktNokGNMBDpZ80i0YNjl6295keRO3q3ZFQHAM b6wYtbfQNQj/4jig6gaA0Qjftn0w/cvsKXvN3k0RO0uF3QEGYDrYt4i5hzwpT3O3 0PMUxVAeSPn6XieUlvcrRf9sdMVT3HXU4KRHBgknDwWKyvLxsKk+XEZHbIGzQSAc e5qsKr/VVytCHOCk51SyuYYmOholnjj17VVVb4P13OEJu2bW1EtSS+xBx84kUY4R 7esRzeuTNEkhufl3DhVYG7OKq4pAxIQh9uZwzZTCNnToo+ppI3wAMICojCk/uSFo PcJYYiVERVPyrxO3D6Vbbt/HGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgvKeBR pbOQe8htLnDSm744AbJWMB8GA1UdIwQYMBaAFPsC7NbHeJo5a1Okj6kkNmDiUsFD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQzNy84MUY2NjlEQzk3 RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1qbHJVNlNQcVNRMllPSlN3 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13THMxc2Q0bWpsclU2U1BxU1EyWU9KU3dVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQzNy84MUY2NjlEQzk3RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1q bHJVNlNQcVNRMllPSlN3VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjcITwGT0EIrMwzn4XdU8iC2C0HSNbh7lu6q1LTSmvResHjjJFxr5n RkeWCiUumu9XzNJZ4mXcuWrf+S7go/uePTEEnqjxt01htZas9E+nYsk9dbIiDRvD moSyPvqmWS6qd4js/7rgjRbfZhoI+Pk78MIt4goOAkWXcuFH8V7m4hpltP8ef/TM 0VBb4bJzId5r2h/5vIlYLylCLl0mKq1r0v0Ou4xmumVeNhiiFV5jhjXh+jg6Wl9S Vq77F1D2OJkWEQcgwq3TXqvzpNatNJsGY2ZpK31qQGOx8dPY2/r+5JaeY8VZ2v1R Y5zGTFoLc2zyfAJ0BmEtsIm9TXyirhXe -----END CERTIFICATE-----Generated at Fri Dec 19 18:47:59 2025 by rpki-client