This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json) Hash identifier: ltdfn/OykfXz6TpvpuftQGEUziGHpPfB9baoT+o6PP0= Subject key identifier: 53:3F:F0:6C:52:ED:23:F9:C6:62:FE:E2:CF:A2:C6:94:6B:78:38:77 Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0CA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft Manifest number: 0C7F Signing time: Wed 31 Dec 2025 18:16:18 +0000 Manifest this update: Wed 31 Dec 2025 18:16:17 +0000 Manifest next update: Wed 07 Jan 2026 18:16:17 +0000 Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: HtL4+b1Gw7eHxK2BHe2DT3aeZB9qwCf8XhTzMXCV6Ec=) 2: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: fFwMVuxrdNcUOGEK7BXfkhxwUrKLUY78eNJbuhc5yCk=) 3: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: nV5RuSWWwahR8LNmTlE6Aby+KcURAORfp9wcbm3K58Q=) 4: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: CiplbP69nLWhaIJnxbxQlD1qt7Ne1cRHDlbujv/TJdo=) 5: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: ev4dezOp21LFlNeRPbWfpWI+d+PTYEXRWluADsq/TJA=) 6: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: 4EwSxLAgNkYXSLR/Lk4qJ/TcOGIYcXW8f42noiaYfyU=) 7: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: WDeEnar/pIFGouutv4CLauMEkuTO/puMCmVPP1vIiEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 18:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3241 (0xca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: Dec 31 18:16:17 2025 GMT Not After : Jan 7 18:16:17 2026 GMT Subject: CN=69556872-1a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:2b:41:35:ba:b2:7b:b2:b8:ed:33:85:f3: ba:dc:15:6f:06:33:e8:0c:f9:0c:be:03:c6:3d:ac: b6:88:6a:16:24:56:50:f6:7d:fc:a1:8d:47:58:55: 26:f4:29:63:c3:d8:82:5c:4c:89:aa:31:7f:4c:b1: da:92:35:f8:c7:92:3c:52:7a:58:6b:0b:08:25:19: c4:ac:42:64:ca:af:4f:34:6a:74:3f:8c:b4:61:60: 4e:f3:1b:3c:b0:06:67:39:f1:97:a1:8c:7b:fb:99: 35:c7:c3:6f:b0:40:0b:93:27:d8:4a:e5:b4:78:b6: 17:94:ab:60:d0:76:7d:d4:b3:9d:1a:2b:69:29:61: 70:9c:eb:39:75:c5:80:c8:de:a9:31:73:62:06:dc: f1:94:82:08:25:c0:ca:81:9f:29:cc:b8:81:de:dc: 70:10:78:a9:d6:b2:45:5b:73:58:00:00:cd:87:37: 79:0e:47:2e:3a:65:46:12:85:b0:84:ff:d1:58:46: 72:7b:22:9f:66:6b:a9:cc:b8:e1:e6:e1:5a:95:ae: 5a:bc:4f:72:a5:d2:42:a4:85:fd:1c:04:6c:04:bd: 06:ce:f6:ac:8a:72:39:ab:2a:d3:1c:48:dc:75:11: 29:fa:ed:65:cf:e4:c0:6b:b3:11:4f:ab:9e:88:3c: ca:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3F:F0:6C:52:ED:23:F9:C6:62:FE:E2:CF:A2:C6:94:6B:78:38:77 X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:74:b4:86:4e:9b:8f:1e:ad:a2:2b:8d:f8:01:45:f8:f5:71: 06:62:a1:b0:17:7b:24:3c:55:ed:56:98:60:eb:db:07:96:d4: b2:2e:a5:b3:e0:4c:df:31:77:f9:20:59:32:97:73:a2:a0:22: 13:18:a2:df:89:d3:d3:fa:1a:c7:8e:00:25:a9:dd:76:0d:3f: a2:77:dc:30:5a:bf:f8:09:e7:ec:0a:c9:9d:32:9c:e2:83:11: 9c:73:bf:ab:64:45:ef:4a:80:7e:e5:a6:92:b3:46:a0:32:9a: 36:4f:b5:57:7a:a1:90:9b:a1:20:96:79:34:a9:67:0e:7e:5d: 6d:5a:48:70:cf:02:75:fb:a4:20:a4:a6:98:f8:d3:9e:92:1a: a1:a6:05:a4:03:ce:c0:ab:31:e9:ba:01:68:51:ed:2d:a5:5a: 77:2f:56:07:a7:e2:76:f3:59:53:db:a3:2e:5c:ad:78:94:e9: 7a:f8:4d:e9:bb:60:2c:fe:b6:17:5f:36:5f:c0:df:42:07:77: 30:5f:e1:e0:93:8b:b2:1d:dd:1b:49:09:05:79:25:eb:ad:cd: 45:79:34:31:10:4a:4a:84:d8:5d:e6:13:3e:16:2d:a8:04:c9: 3b:cb:d6:3a:43:cb:be:4e:14:52:e5:73:e3:fe:08:2b:f1:7b: 5e:ab:2f:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjUxMjMxMTgxNjE3WhcNMjYwMTA3MTgxNjE3WjAYMRYwFAYD VQQDDA02OTU1Njg3Mi0xYTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvworQTW6snuyuO0zhfO63BVvBjPoDPkMvgPGPay2iGoWJFZQ9n38oY1HWFUm 9Cljw9iCXEyJqjF/TLHakjX4x5I8UnpYawsIJRnErEJkyq9PNGp0P4y0YWBO8xs8 sAZnOfGXoYx7+5k1x8NvsEALkyfYSuW0eLYXlKtg0HZ91LOdGitpKWFwnOs5dcWA yN6pMXNiBtzxlIIIJcDKgZ8pzLiB3txwEHip1rJFW3NYAADNhzd5DkcuOmVGEoWw hP/RWEZyeyKfZmupzLjh5uFala5avE9ypdJCpIX9HARsBL0GzvasinI5qyrTHEjc dREp+u1lz+TAa7MRT6ueiDzKhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFM/8GxS 7SP5xmL+4s+ixpRreDh3MB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkZEQS82ODEyN0UyMDBGNEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJ RURmWFhsWlJwTTdEYjM3NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2dLSGTpuPHq2iK434AUX49XEGYqGwF3skPFXtVphg69sHltSyLqWz 4EzfMXf5IFkyl3OioCITGKLfidPT+hrHjgAlqd12DT+id9wwWr/4CefsCsmdMpzi gxGcc7+rZEXvSoB+5aaSs0agMpo2T7VXeqGQm6Eglnk0qWcOfl1tWkhwzwJ1+6Qg pKaY+NOekhqhpgWkA87AqzHpugFoUe0tpVp3L1YHp+J281lT26MuXK14lOl6+E3p u2As/rYXXzZfwN9CB3cwX+Hgk4uyHd0bSQkFeSXrrc1FeTQxEEpKhNhd5hM+Fi2o BMk7y9Y6Q8u+ThRS5XPj/ggr8Xteqy8g -----END CERTIFICATE-----Generated at Thu Jan 1 03:51:22 2026 by rpki-client