This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft File: WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json) Hash identifier: 8TltRLJWeKFDH4LSZPgToFb2r7p+6aN3oWhXmXwR43k= Subject key identifier: E4:20:36:B0:50:8F:C8:3B:82:8E:76:13:25:AE:09:8D:BD:E3:5A:09 Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 Certificate issuer: /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549 Certificate serial: 34EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft Manifest number: 34EB Signing time: Thu 18 Dec 2025 14:51:07 +0000 Manifest this update: Thu 18 Dec 2025 14:51:07 +0000 Manifest next update: Thu 25 Dec 2025 14:51:07 +0000 Files and hashes: 1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: G4+LkssDK090y8yJPMg3T0H6wPTjGzzI7V6jovSM4yE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13547 (0x34eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308CE, serialNumber=599B05EF3C093922DE989BDC73993F46D6257549 Validity Not Before: Dec 18 14:51:07 2025 GMT Not After : Dec 25 14:51:07 2025 GMT Subject: CN=694414db-e12e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7e:61:45:85:66:8d:c9:87:5f:e2:1e:6b:1b: 09:b7:98:79:ed:3a:db:22:81:50:80:d8:17:f2:03: ad:13:03:84:0f:2a:78:23:8d:e5:26:fb:3c:1a:9d: 72:07:33:50:14:5c:24:1c:00:70:30:2c:f5:f1:62: f8:ce:67:3b:49:69:b9:5f:bb:c2:d3:d3:ea:65:b7: b6:87:e4:2c:68:8d:e9:72:0d:ee:eb:e5:1d:35:e4: 01:b8:58:3b:a4:3c:ed:33:57:a8:a2:71:3c:4d:a1: bd:ee:3d:00:64:c5:4e:2b:06:77:85:07:e5:72:b1: 82:45:de:2a:4c:1f:8c:97:e8:25:fe:cb:31:c0:de: c1:14:2b:fc:95:ad:16:c7:b2:57:0c:86:0a:ce:5d: 46:0b:e9:c0:bc:69:fe:9d:47:ea:fa:a3:fc:d8:ab: 1a:49:b1:27:c8:6f:8a:bd:cb:f4:1f:5b:b5:5d:53: 2e:28:71:2e:2e:74:52:3d:58:8a:5c:e2:e4:b4:cc: 07:ea:e8:44:6f:8a:6e:2f:51:6d:d7:23:91:78:c8: 42:7b:ec:a3:1e:45:d4:b5:22:33:a6:74:b8:6f:86: f6:e0:e6:c3:f7:97:db:87:09:df:92:99:9e:e5:4b: 79:12:84:0a:58:a9:2a:09:6a:d3:8c:2b:1f:24:1a: 6a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:20:36:B0:50:8F:C8:3B:82:8E:76:13:25:AE:09:8D:BD:E3:5A:09 X509v3 Authority Key Identifier: keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:88:52:cd:34:29:ec:54:48:5c:6d:07:96:09:08:2d:19:a1: dd:ad:b6:90:c6:ea:1c:1a:ab:24:03:f9:53:5d:a3:be:a7:24: f4:f0:b6:1f:46:fe:98:cb:1a:41:4a:23:de:e5:f1:c7:fc:b4: 37:05:c1:f4:06:70:ba:ee:b4:6f:0c:e1:c8:4f:4f:ca:49:39: eb:ab:76:55:69:a8:84:89:b3:f1:77:2c:c2:0e:34:9b:de:c8: e8:f6:4a:e7:ac:4c:02:f9:72:4c:3d:8f:e3:3f:22:fa:bd:90: 1a:d5:c1:6f:16:bf:de:18:eb:c2:94:7b:18:b6:69:e1:d1:88: 07:cb:af:66:7a:04:8a:4e:4a:c4:94:75:59:79:b1:d4:75:e3: 9b:79:59:c7:78:92:77:85:d0:88:76:d6:d9:13:88:96:98:a5: 57:8a:8a:03:c2:84:62:30:d4:22:56:bc:04:b9:f2:0b:d1:54: 64:d9:5f:5e:5e:36:7f:7d:e9:35:64:86:ba:62:f6:f4:af:93: 5b:3b:10:bf:ab:ad:fd:95:4f:de:24:f8:0b:05:2e:9b:26:23: 98:8a:18:a4:03:63:3d:a5:b8:76:90:51:2d:9a:f4:a0:d7:d8: 48:3b:c6:ef:8b:a0:f7:28:34:4c:16:e3:32:af:d0:c7:5f:e1: 54:de:bb:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4Q0UxMTAvBgNVBAUTKDU5OUIwNUVGM0MwOTM5MjJERTk4OUJEQzczOTkzRjQ2 RDYyNTc1NDkwHhcNMjUxMjE4MTQ1MTA3WhcNMjUxMjI1MTQ1MTA3WjAYMRYwFAYD VQQDDA02OTQ0MTRkYi1lMTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0X5hRYVmjcmHX+IeaxsJt5h57TrbIoFQgNgX8gOtEwOEDyp4I43lJvs8Gp1y BzNQFFwkHABwMCz18WL4zmc7SWm5X7vC09PqZbe2h+QsaI3pcg3u6+UdNeQBuFg7 pDztM1eoonE8TaG97j0AZMVOKwZ3hQflcrGCRd4qTB+Ml+gl/ssxwN7BFCv8la0W x7JXDIYKzl1GC+nAvGn+nUfq+qP82KsaSbEnyG+Kvcv0H1u1XVMuKHEuLnRSPViK XOLktMwH6uhEb4puL1Ft1yOReMhCe+yjHkXUtSIzpnS4b4b24ObD95fbhwnfkpme 5Ut5EoQKWKkqCWrTjCsfJBpq7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQgNrBQ j8g7go52EyWuCY2941oJMB8GA1UdIwQYMBaAFFmbBe88CTki3pib3HOZP0bWJXVJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhDRS8xODYwREZDNjFE OTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9TTGVtSnZjYzVrX1J0WWxk VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dac0Y3endKT1NMZW1KdmNjNWtfUnRZbGRVay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhDRS8xODYwREZDNjFEOTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9T TGVtSnZjYzVrX1J0WWxkVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFiFLNNCnsVEhcbQeWCQgtGaHdrbaQxuocGqskA/lTXaO+pyT08LYf Rv6YyxpBSiPe5fHH/LQ3BcH0BnC67rRvDOHIT0/KSTnrq3ZVaaiEibPxdyzCDjSb 3sjo9krnrEwC+XJMPY/jPyL6vZAa1cFvFr/eGOvClHsYtmnh0YgHy69megSKTkrE lHVZebHUdeObeVnHeJJ3hdCIdtbZE4iWmKVXiooDwoRiMNQiVrwEufIL0VRk2V9e XjZ/fek1ZIa6Yvb0r5NbOxC/q639lU/eJPgLBS6bJiOYihikA2M9pbh2kFEtmvSg 19hIO8bvi6D3KDRMFuMyr9DHX+FU3rtY -----END CERTIFICATE-----Generated at Sat Dec 20 00:53:56 2025 by rpki-client