This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json) Hash identifier: jKByWmsCPkUugYpPnpDsRAgPNhMuDwGxzGkCwyVUSyE= Subject key identifier: F0:6D:A9:A7:98:7C:08:37:55:C7:A6:FB:2E:43:AF:B6:4B:E7:BF:DC Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0BCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft Manifest number: 0B87 Signing time: Thu 18 Dec 2025 18:50:35 +0000 Manifest this update: Thu 18 Dec 2025 18:50:34 +0000 Manifest next update: Thu 25 Dec 2025 18:50:34 +0000 Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: tWC3tR0OkZaqwKonqrc3Nbza5ajEdt0Io8WTHvwh94Y=) 2: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: lGL0VdzbPRk7U+2MSj/Z4BFvq55DtucvPe+Abmi+lZo=) 3: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: 7ysdJMJMSfwY+oJifcqCNWD3yAzN5pEUaePQMVaSij8=) 4: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: 2WI4sxtYmY5FbIMN92teU/BhJO18tsufNaqCJaxaAYc=) 5: A30B6882B3DE11F0B2D83330C4F9AE02.roa (hash: 1s0ebn+BQVw0yPfQmnoFsQomr8t/uDwXlJRNpXKjLCg=) 6: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: bv9UqKRpe2dK9awx88ukTzuBQtbCq2A6so4i83ApdUU=) 7: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: 59n+gu+EUda4F6OyRblddZCM/Oz6PZd0iuMKXNtGtAQ=) 8: 04231ECC326F11F0B0723439C4F9AE02.roa (hash: wpvZSX4Ai883Xdr1hC5KTmB0OUTHuAgLOOQUpAhUGNw=) 9: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: od3A6kHPsKQb/WA2j5c2wSIgSUJ4UzMllV3CZbEVjw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3020 (0xbcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Dec 18 18:50:34 2025 GMT Not After : Dec 25 18:50:34 2025 GMT Subject: CN=69444cfb-813e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:15:00:bd:5d:16:3c:b5:af:e3:17:11:d6: bf:df:cb:5c:20:bd:26:ec:4a:58:d6:a4:8c:af:d9: 5d:79:be:aa:f0:d7:f3:e4:4b:44:62:fb:9b:30:3e: 79:a0:bf:43:87:40:e8:3e:1e:74:bf:79:e9:40:88: c6:f4:b9:20:ec:ba:2f:5c:31:30:0d:cb:b8:2c:1b: 73:d1:ff:f2:03:77:76:9d:97:84:85:c1:e6:22:c0: d8:99:21:20:71:78:ca:9b:b2:a4:e6:9f:ad:64:86: c9:c2:3e:6b:b1:4d:b8:9d:92:3b:7b:f4:b5:5c:4b: 22:e8:a2:c5:6b:b6:5c:49:18:58:82:bb:bb:bb:51: fd:db:62:81:b9:0b:dd:33:e5:e6:2d:22:b2:5f:79: 83:85:b6:4d:1f:61:f5:0b:2f:ca:5b:4a:3a:30:87: 86:e0:5b:57:9c:ad:db:99:48:0f:f3:77:6b:2d:f1: ab:2e:5d:ee:e8:eb:7e:d7:36:ae:77:e4:84:3f:27: 38:09:d6:28:00:23:5b:e1:e3:08:64:d9:1d:c1:df: 09:8d:68:6d:8a:07:48:f8:c1:27:d2:aa:b3:63:68: bd:8a:85:48:51:3e:b9:c3:86:08:5e:6c:24:02:d0: 88:a1:0c:20:39:4f:6e:bc:18:74:90:8a:c0:71:58: 2e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6D:A9:A7:98:7C:08:37:55:C7:A6:FB:2E:43:AF:B6:4B:E7:BF:DC X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:ca:ee:12:10:ec:ca:c0:03:27:67:b4:a0:56:2e:65:09:ac: d8:23:c1:a9:17:e4:9e:07:d9:fb:1d:98:12:7d:53:6b:4c:d1: a3:6b:5a:f4:90:7c:55:d3:71:4c:bf:fb:2f:7c:15:88:97:48: 35:bc:a0:45:40:eb:9e:79:e7:ad:bd:9b:7f:58:b8:49:72:18: c3:aa:f1:1a:9a:86:4e:32:bd:36:99:3d:37:21:f5:02:f6:92: 98:0d:85:aa:7f:15:2f:d9:85:30:91:c6:9c:04:6b:d5:d8:ec: fd:dd:16:6c:41:9b:33:1c:ec:7a:1f:88:95:fb:d6:1e:7d:84: 8b:24:c9:4a:3a:0a:11:3f:86:4d:5a:89:85:83:e8:25:4e:b7: 22:49:a1:b8:05:c6:bc:50:1f:ec:d6:ae:f1:b0:54:dc:55:13: 2c:c8:d9:6c:82:c2:1c:46:df:11:d7:c4:0e:ae:0b:ad:5e:3d: 58:1d:09:65:4d:32:48:ca:bb:d7:9d:cd:b8:1f:d2:f0:25:c3: 2d:b3:1a:10:bd:f4:56:55:24:18:d2:82:89:23:ea:3f:d8:6a: d1:5a:2a:f2:1b:9d:e6:c1:5e:7e:1c:13:92:3e:51:04:8c:f0: 87:b9:b1:32:1d:aa:d6:db:96:ca:8f:c9:b7:ad:ec:4d:a0:8c: 0c:fe:7b:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjUxMjE4MTg1MDM0WhcNMjUxMjI1MTg1MDM0WjAYMRYwFAYD VQQDDA02OTQ0NGNmYi04MTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1IVAL1dFjy1r+MXEda/38tcIL0m7EpY1qSMr9ldeb6q8Nfz5EtEYvubMD55 oL9Dh0DoPh50v3npQIjG9Lkg7LovXDEwDcu4LBtz0f/yA3d2nZeEhcHmIsDYmSEg cXjKm7Kk5p+tZIbJwj5rsU24nZI7e/S1XEsi6KLFa7ZcSRhYgru7u1H922KBuQvd M+XmLSKyX3mDhbZNH2H1Cy/KW0o6MIeG4FtXnK3bmUgP83drLfGrLl3u6Ot+1zau d+SEPyc4CdYoACNb4eMIZNkdwd8JjWhtigdI+MEn0qqzY2i9ioVIUT65w4YIXmwk AtCIoQwgOU9uvBh0kIrAcVguCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBtqaeY fAg3Vcem+y5Dr7ZL57/cMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9BMzc0QTFCNjQ2NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5 MnlUMmlPYkMwYi1wUENZNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYyu4SEOzKwAMnZ7SgVi5lCazYI8GpF+SeB9n7HZgSfVNrTNGja1r0 kHxV03FMv/svfBWIl0g1vKBFQOueeeetvZt/WLhJchjDqvEamoZOMr02mT03IfUC 9pKYDYWqfxUv2YUwkcacBGvV2Oz93RZsQZszHOx6H4iV+9YefYSLJMlKOgoRP4ZN WomFg+glTrciSaG4Bca8UB/s1q7xsFTcVRMsyNlsgsIcRt8R18QOrgutXj1YHQll TTJIyrvXnc24H9LwJcMtsxoQvfRWVSQY0oKJI+o/2GrRWiryG53mwV5+HBOSPlEE jPCHubEyHarW25bKj8m3rexNoIwM/nsT -----END CERTIFICATE-----Generated at Sat Dec 20 12:16:58 2025 by rpki-client