This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json) Hash identifier: arBS/GZNcMcQltsjOTVnVgs5YYK5uqC7vs2g0sCcqbA= Subject key identifier: 05:9A:0B:07:E6:2F:6E:51:05:FE:F9:5B:3D:DB:C3:56:00:00:30:87 Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0C9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft Manifest number: 0C76 Signing time: Thu 18 Dec 2025 18:15:44 +0000 Manifest this update: Thu 18 Dec 2025 18:15:44 +0000 Manifest next update: Thu 25 Dec 2025 18:15:44 +0000 Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: iEDBOcMjmPBTJZLzI4AZeKqg3Jrwc/icdsDIfp+MBYk=) 2: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: +57K4ut0qq2fKWCTFqpHNS42ff+KxP45CLdJafu2rsI=) 3: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: gf3Sdo19qyXM6SMAtIZiiG8nFm/lM81I+lk8U/mxJ0A=) 4: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: m3cQPwvPfynkpVZQ6ovTIwwV/a4OxHBn+kGRuN/3tCk=) 5: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: b4w7QgPcZzJXvh0ZqyON2NEy/TPDBAfSWtVCJWQUkJM=) 6: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: iJYPLuFQNCCH+UvB8S/XoN2BohnkZQZo7wuZ5vZn4KI=) 7: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: OT8lFgnYcC18UV02Y4GD3JZ3PmqRrvihPECOx7skEQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3226 (0xc9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: Dec 18 18:15:44 2025 GMT Not After : Dec 25 18:15:44 2025 GMT Subject: CN=694444d0-bf59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:49:62:15:ac:48:3e:82:af:76:71:1e:74:dd: e2:85:dd:bd:65:99:40:fc:6e:7b:a7:2e:f5:15:d4: 32:a2:c6:31:ed:f1:e2:7e:e5:84:eb:73:3b:f5:8c: e6:ad:1e:6f:05:6e:4a:06:ca:4b:cb:55:7f:c4:8d: 28:7f:1b:58:10:0a:e6:15:f1:00:99:29:49:b5:34: 86:91:e8:24:01:e9:66:77:85:0c:0e:89:fa:7c:cd: 50:42:f7:f2:40:a5:28:6a:56:3b:01:27:19:ca:ae: d6:0f:c0:ed:93:22:82:e4:66:69:34:12:82:d9:fc: bc:18:2e:2c:ac:13:58:85:b5:fa:ec:35:21:cd:93: b4:bc:3c:d2:30:ac:89:eb:f3:f1:7b:69:7d:7c:cb: 14:cd:46:a2:ea:de:f6:88:a5:f7:9d:de:bb:21:f3: fc:18:27:cb:2e:28:c2:d8:1f:ab:45:b2:26:07:03: da:2a:4d:84:c1:00:cf:0f:54:4b:62:e7:46:3c:4c: ec:9e:3d:59:1d:49:58:62:6f:ed:ec:26:d4:6f:27: 31:58:96:5f:87:17:86:f1:22:d9:ad:fe:83:37:e9: fc:96:37:18:74:fd:28:4e:c4:7b:49:4f:37:8d:f2: fd:c4:25:75:73:74:32:7f:c7:b7:a6:bd:cc:a0:36: a9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9A:0B:07:E6:2F:6E:51:05:FE:F9:5B:3D:DB:C3:56:00:00:30:87 X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:89:e3:fa:6a:08:33:8b:75:cd:97:96:f3:9d:98:df:fe:6e: 72:82:ba:e9:fa:03:aa:90:8c:8e:b8:33:b7:47:7e:df:d7:c9: e3:08:4c:fb:1a:01:d3:d7:00:de:4f:83:3c:7f:61:6a:76:b6: 25:e9:ee:a0:d3:ce:8f:27:0c:3c:84:1c:bb:93:d8:b8:04:97: 92:df:4f:eb:2a:19:6c:ab:e1:65:0a:5d:b2:80:ae:c3:ee:0e: 90:aa:4d:07:6b:4c:86:16:39:6b:89:bf:d9:6b:ee:ad:3e:de: 74:a0:94:ee:e5:d3:47:6d:da:32:3b:18:6c:11:9e:7a:42:cf: 42:44:dd:b8:92:13:88:90:39:d6:aa:cf:f6:da:f6:ae:35:af: d7:b1:48:10:23:8a:89:08:b6:7a:20:e4:11:3b:d6:33:88:94: 53:89:7b:e4:9b:44:f3:6a:9b:0a:07:10:1c:a5:2a:5f:b1:f0: 7e:2b:10:cc:32:97:d0:60:1e:64:76:ba:01:e2:13:a3:ef:96: 6f:70:5a:56:4a:45:a8:36:b3:0f:63:c3:e4:30:67:6d:04:c6: 31:c8:5e:12:7e:45:71:a8:0d:41:92:8c:11:ee:32:29:9e:7e: 08:3e:d3:bf:d1:a6:9a:66:66:56:cc:19:5f:97:b1:dc:e5:90: 19:d5:6f:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjUxMjE4MTgxNTQ0WhcNMjUxMjI1MTgxNTQ0WjAYMRYwFAYD VQQDDA02OTQ0NDRkMC1iZjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EliFaxIPoKvdnEedN3ihd29ZZlA/G57py71FdQyosYx7fHifuWE63M79Yzm rR5vBW5KBspLy1V/xI0ofxtYEArmFfEAmSlJtTSGkegkAelmd4UMDon6fM1QQvfy QKUoalY7AScZyq7WD8DtkyKC5GZpNBKC2fy8GC4srBNYhbX67DUhzZO0vDzSMKyJ 6/Pxe2l9fMsUzUai6t72iKX3nd67IfP8GCfLLijC2B+rRbImBwPaKk2EwQDPD1RL YudGPEzsnj1ZHUlYYm/t7CbUbycxWJZfhxeG8SLZrf6DN+n8ljcYdP0oTsR7SU83 jfL9xCV1c3Qyf8e3pr3MoDapnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWaCwfm L25RBf75Wz3bw1YAADCHMB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkZEQS82ODEyN0UyMDBGNEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJ RURmWFhsWlJwTTdEYjM3NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkieP6aggzi3XNl5bznZjf/m5ygrrp+gOqkIyOuDO3R37f18njCEz7 GgHT1wDeT4M8f2FqdrYl6e6g086PJww8hBy7k9i4BJeS30/rKhlsq+FlCl2ygK7D 7g6Qqk0Ha0yGFjlrib/Za+6tPt50oJTu5dNHbdoyOxhsEZ56Qs9CRN24khOIkDnW qs/22vauNa/XsUgQI4qJCLZ6IOQRO9YziJRTiXvkm0TzapsKBxAcpSpfsfB+KxDM MpfQYB5kdroB4hOj75ZvcFpWSkWoNrMPY8PkMGdtBMYxyF4SfkVxqA1BkowR7jIp nn4IPtO/0aaaZmZWzBlfl7Hc5ZAZ1W+a -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:02 2025 by rpki-client