This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft File: WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft (raw, json) Hash identifier: Yov0TaXtzcy/uR3NaYO6ZwFG/gm2Y3dS4TMa1xAaIh8= Subject key identifier: 93:73:B4:D7:DD:D0:98:99:28:C9:42:41:D9:AD:25:6D:19:AD:C2:70 Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7 Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7 Certificate serial: 13DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft Manifest number: 13B4 Signing time: Sat 20 Dec 2025 14:53:21 +0000 Manifest this update: Sat 20 Dec 2025 14:53:20 +0000 Manifest next update: Sat 27 Dec 2025 14:53:20 +0000 Files and hashes: 1: WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl (hash: wCpouKd6W9U1b2XvCirWyhFVYQWa95hQImBfE/yPZrY=) 2: 0D4D857E3B9211F0857DC432C4F9AE02.roa (hash: 0YA+4PX9JYpc8QBE3JHr5LKBbRzHe9X88/5AFsZZNig=) 3: E53A0A54450911EBBA450A64C4F9AE02.roa (hash: feexJekN/NDSkCAQIeZYtbVsbTI/ysDPGekXjAR1sEc=) 4: E1982A2EAD7511EA94C97127C4F9AE02.roa (hash: QcX+JJfibmJ10vB/1qukQZesFZiH8h11fVVY2pTUDR4=) 5: 46CE46B416BF11EBB31D5A6AC4F9AE02.roa (hash: iD2PRHlOwSrAIealn0fu1cXe6nvlmtIZjMf00fYOaTs=) 6: 069626A6ABC211EA9C9FC06EC4F9AE02.roa (hash: Ia9odNobe+dWh3uoJd1dENgZhirY+vgmKhJvqKgJrVw=) 7: 005D2F8E56B611EAA08F9B82C4F9AE02.roa (hash: 660m80xTZki8ylh8j+pM5SznA/z6+3ERhy9Sd6ExGUY=) 8: 994F0A88D86B11E9B8BFCE0AC4F9AE02.roa (hash: tdnI+KOdNhmgHG0EaIdZJbs7v8BfbY1qAdFe/ckIHKI=) 9: 5BE6FE3ED7A311EF9D214C13C4F9AE02.roa (hash: wgWYzuty+GM3VsiaayvTIFlkcVAcGiHHxoMLNBjrqzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5086 (0x13de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7 Validity Not Before: Dec 20 14:53:20 2025 GMT Not After : Dec 27 14:53:20 2025 GMT Subject: CN=6946b861-f654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:e0:f9:11:a8:7b:27:9e:93:f3:93:60:17: f8:61:fc:cb:9f:51:48:7c:16:8c:14:8d:78:29:93: 98:b4:ea:77:83:d1:7c:60:b4:a9:fe:bf:d8:32:e1: da:7e:c8:a7:85:2c:6d:3e:6e:0a:4e:a1:0c:a7:ff: 9b:3e:25:e5:c1:c8:6b:37:2c:cb:27:e8:5c:66:5d: 1d:64:36:af:a2:32:b6:08:c4:9b:98:3a:ba:d7:90: 47:2c:e0:82:5f:3c:d8:5d:17:e2:48:f2:eb:3d:87: 69:41:93:33:f4:9a:eb:f8:df:76:82:54:4f:7c:22: 03:be:4b:0e:41:a0:c5:39:7e:b4:f6:0d:98:fd:e5: 0e:5a:b0:16:ec:e9:1f:b9:16:6c:8b:d8:7d:00:c3: 00:60:59:e6:e6:cf:98:ed:ba:e0:12:52:a1:7b:36: 33:06:fb:93:fe:24:cf:a8:5a:92:0e:f8:01:80:c6: 21:e8:36:3b:16:ba:5b:4e:ce:0d:76:f4:5e:94:e2: 0a:c4:bc:15:3e:ed:f3:e7:40:55:5a:de:44:9c:57: 3e:b4:32:74:6c:c3:fc:8b:d9:63:0c:d0:77:a0:7d: 1b:4d:2f:16:30:11:2c:2a:78:43:cd:5f:85:eb:66: 7f:66:48:27:af:7e:d9:22:47:12:83:97:8f:ef:20: 5a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:73:B4:D7:DD:D0:98:99:28:C9:42:41:D9:AD:25:6D:19:AD:C2:70 X509v3 Authority Key Identifier: keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:47:71:25:2b:86:80:c2:5b:1d:fd:4d:b0:73:cf:ce:b9:5d: 3f:a1:79:9c:9e:98:81:72:fa:a5:31:79:a2:ee:53:36:22:f5: ca:72:3c:47:17:af:ac:8e:ff:35:b2:e7:1e:ee:80:93:27:63: ce:b3:49:67:fb:10:1b:4c:01:f8:51:c4:d3:39:1c:fb:65:8a: f9:70:4a:e5:61:37:c8:e3:e6:07:6a:fb:6e:27:9c:a6:a6:75: 21:b4:d1:60:1c:7d:81:f1:d3:92:62:97:73:83:ca:52:81:70: c6:43:c6:ea:9d:82:75:c5:7f:a2:d9:95:8d:56:d9:e4:50:0e: ef:f7:f2:8b:85:4f:f8:ef:cd:62:8d:fc:44:81:f1:b9:aa:49: 79:49:aa:b6:a4:d2:72:37:68:38:26:17:3b:55:b4:e1:d2:aa: a2:52:a0:af:4d:d5:f1:85:cc:2f:40:01:c8:56:be:a2:dd:1d: df:b1:37:dd:f5:13:74:6c:d3:5b:c6:51:9f:94:0a:77:4b:36: 47:20:7c:0d:f0:1b:cd:a0:96:0a:a4:72:20:91:a7:c3:66:4f: ae:b3:3f:5a:e7:8a:ab:57:38:ee:87:77:36:70:83:4a:e3:fd: 9c:f9:8f:3e:63:b2:93:83:83:e7:3f:cf:1c:d9:e3:87:62:ae: a7:db:35:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDU5MzE0NzAzMDkyODQ1RkNCRDBCRkJBRUVGODdEODNG QzY2RUQxRDcwHhcNMjUxMjIwMTQ1MzIwWhcNMjUxMjI3MTQ1MzIwWjAYMRYwFAYD VQQDDA02OTQ2Yjg2MS1mNjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3Lg+RGoeyeek/OTYBf4YfzLn1FIfBaMFI14KZOYtOp3g9F8YLSp/r/YMuHa fsinhSxtPm4KTqEMp/+bPiXlwchrNyzLJ+hcZl0dZDavojK2CMSbmDq615BHLOCC XzzYXRfiSPLrPYdpQZMz9Jrr+N92glRPfCIDvksOQaDFOX609g2Y/eUOWrAW7Okf uRZsi9h9AMMAYFnm5s+Y7brgElKhezYzBvuT/iTPqFqSDvgBgMYh6DY7FrpbTs4N dvRelOIKxLwVPu3z50BVWt5EnFc+tDJ0bMP8i9ljDNB3oH0bTS8WMBEsKnhDzV+F 62Z/Zkgnr37ZIkcSg5eP7yBaewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNztNfd 0JiZKMlCQdmtJW0ZrcJwMB8GA1UdIwQYMBaAFFkxRwMJKEX8vQv7ru+H2D/GbtHX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS80RUVDNUI3RUE2 QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1JmeTlDX3V1NzRmWVA4WnUw ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dURkhBd2tvUmZ5OUNfdXU3NGZZUDhadTBkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzgxQS80RUVDNUI3RUE2QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1Jm eTlDX3V1NzRmWVA4WnUwZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgR3ElK4aAwlsd/U2wc8/OuV0/oXmcnpiBcvqlMXmi7lM2IvXKcjxH F6+sjv81suce7oCTJ2POs0ln+xAbTAH4UcTTORz7ZYr5cErlYTfI4+YHavtuJ5ym pnUhtNFgHH2B8dOSYpdzg8pSgXDGQ8bqnYJ1xX+i2ZWNVtnkUA7v9/KLhU/4781i jfxEgfG5qkl5Saq2pNJyN2g4Jhc7VbTh0qqiUqCvTdXxhcwvQAHIVr6i3R3fsTfd 9RN0bNNbxlGflAp3SzZHIHwN8BvNoJYKpHIgkafDZk+usz9a54qrVzjuh3c2cINK 4/2c+Y8+Y7KTg4PnP88c2eOHYq6n2zV5 -----END CERTIFICATE-----Generated at Sun Dec 21 10:37:52 2025 by rpki-client