This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft File: WghDEGDly0pzQThDpsLwBL78Mr8.mft (raw, json) Hash identifier: xvXzSDAvp53Dvl4IVkCxdqtV/yWNMJ/a85ZQsE1eSVQ= Subject key identifier: 34:A9:87:81:7E:6B:B9:75:5F:3B:87:B2:6E:A9:23:EF:FB:45:F3:9D Authority key identifier: 5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF Certificate issuer: /CN=A9160DF1/serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Certificate serial: 0522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft Manifest number: 051D Signing time: Thu 18 Dec 2025 22:54:10 +0000 Manifest this update: Thu 18 Dec 2025 22:54:10 +0000 Manifest next update: Thu 25 Dec 2025 22:54:10 +0000 Files and hashes: 1: WghDEGDly0pzQThDpsLwBL78Mr8.crl (hash: sLEO5wM1f2UuGVw4We5bZDNv6795Uw7nZR+4zvYd/7s=) 2: 846935702CD911ECA528B744C4F9AE02.roa (hash: W1EZe814Szf15WwX2ObaPNFong/hjvqkU7/N1EMoShM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1314 (0x522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DF1, serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Validity Not Before: Dec 18 22:54:10 2025 GMT Not After : Dec 25 22:54:10 2025 GMT Subject: CN=69448612-0860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9c:30:2d:37:a0:f0:39:cb:0a:12:8a:56:cf: 68:59:bc:03:29:cf:47:46:52:26:11:60:d2:26:2a: 62:a9:2f:df:ec:cf:a1:1e:b9:0d:ee:a3:76:bf:13: 08:97:02:08:4d:b0:fe:e0:03:4e:90:5e:fc:ec:ad: d3:80:ee:11:eb:15:a0:57:3c:2f:74:cf:17:98:70: 9c:73:ed:98:07:4a:4c:01:08:a5:c6:bb:da:d9:43: 93:d5:f9:44:7f:2a:ee:ea:48:3a:24:b6:06:d9:03: d5:a0:17:ca:65:94:af:22:ee:9c:69:d1:01:12:74: 4f:f7:32:1b:69:56:e4:58:23:9d:b9:c0:a6:0b:b8: ad:e2:17:84:b3:94:0a:85:84:5a:c6:4c:ad:a5:d7: c9:93:c0:71:d8:eb:8e:b6:30:40:20:c4:73:29:a9: 7e:c2:b6:65:72:68:a5:6b:77:b4:a7:0d:1e:92:ff: 47:e3:4d:14:00:08:84:58:6e:5f:4f:9f:a8:56:32: d2:8b:9e:0b:d6:ba:11:ae:9d:2d:6b:b5:68:6c:0b: 20:e6:f4:d0:58:98:60:d7:64:db:31:81:e6:d3:1f: c1:ea:1f:66:92:c8:fc:5b:eb:1b:56:a3:98:ec:e0: 78:55:35:0c:c5:b8:5e:60:30:fb:8b:13:8d:29:05: 1b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A9:87:81:7E:6B:B9:75:5F:3B:87:B2:6E:A9:23:EF:FB:45:F3:9D X509v3 Authority Key Identifier: keyid:5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:3f:0a:02:af:48:4a:83:55:4e:ef:df:a8:3f:b2:48:5a:1f: 4e:ad:8c:9e:61:1f:9a:63:ae:9a:c7:70:1a:dc:37:d4:90:60: 35:4e:50:5e:31:d2:56:e7:fe:4e:41:ec:09:2b:50:a2:12:45: 2d:af:e3:56:c2:22:75:5a:c3:dc:48:c3:42:35:18:c4:c0:77: bc:27:00:c8:3f:6e:4c:a9:36:a9:15:2e:92:cd:13:0a:90:a6: 8b:95:24:52:7d:6d:22:3d:69:9c:8a:42:69:e0:a7:16:fa:09: 01:a5:d3:7f:3f:0d:40:69:34:11:63:e8:7b:d4:2e:50:86:b7: fe:56:7b:b3:f7:e7:69:58:d0:1e:35:54:c9:05:78:6d:84:27: 11:8f:58:b7:6f:c9:90:bc:65:ea:ca:82:5f:04:73:d0:43:57: 04:de:e7:f9:3a:7f:04:94:5c:c2:b5:5a:56:13:6d:ab:3f:9a: 89:e7:61:4e:46:8b:e6:d3:7f:91:30:9d:70:25:56:a0:7d:79: b4:21:c7:53:3c:4a:29:bb:62:87:a1:09:67:03:3b:b2:62:27: eb:4b:c8:3a:88:94:c4:cd:8e:af:f2:85:7d:d4:db:ce:55:37: 08:f7:d2:4b:c7:19:16:e4:07:24:d2:7a:ee:bc:b1:33:f9:ec: 42:7f:59:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBERjExMTAvBgNVBAUTKDVBMDg0MzEwNjBFNUNCNEE3MzQxMzg0M0E2QzJGMDA0 QkVGQzMyQkYwHhcNMjUxMjE4MjI1NDEwWhcNMjUxMjI1MjI1NDEwWjAYMRYwFAYD VQQDDA02OTQ0ODYxMi0wODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjpwwLTeg8DnLChKKVs9oWbwDKc9HRlImEWDSJipiqS/f7M+hHrkN7qN2vxMI lwIITbD+4ANOkF787K3TgO4R6xWgVzwvdM8XmHCcc+2YB0pMAQilxrva2UOT1flE fyru6kg6JLYG2QPVoBfKZZSvIu6cadEBEnRP9zIbaVbkWCOducCmC7it4heEs5QK hYRaxkytpdfJk8Bx2OuOtjBAIMRzKal+wrZlcmila3e0pw0ekv9H400UAAiEWG5f T5+oVjLSi54L1roRrp0ta7VobAsg5vTQWJhg12TbMYHm0x/B6h9mksj8W+sbVqOY 7OB4VTUMxbheYDD7ixONKQUblwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSph4F+ a7l1XzuHsm6pI+/7RfOdMB8GA1UdIwQYMBaAFFoIQxBg5ctKc0E4Q6bC8AS+/DK/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERGMS9FMzc5RDVBMDJD RDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkwcHpRVGhEcHNMd0JMNzhN cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnaERFR0RseTBwelFUaERwc0x3Qkw3OE1yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERGMS9FMzc5RDVBMDJDRDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkw cHpRVGhEcHNMd0JMNzhNcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAPwoCr0hKg1VO79+oP7JIWh9OrYyeYR+aY66ax3Aa3DfUkGA1TlBe MdJW5/5OQewJK1CiEkUtr+NWwiJ1WsPcSMNCNRjEwHe8JwDIP25MqTapFS6SzRMK kKaLlSRSfW0iPWmcikJp4KcW+gkBpdN/Pw1AaTQRY+h71C5Qhrf+Vnuz9+dpWNAe NVTJBXhthCcRj1i3b8mQvGXqyoJfBHPQQ1cE3uf5On8ElFzCtVpWE22rP5qJ52FO Rovm03+RMJ1wJVagfXm0IcdTPEopu2KHoQlnAzuyYifrS8g6iJTEzY6v8oV91NvO VTcI99JLxxkW5Ack0nruvLEz+exCf1l2 -----END CERTIFICATE-----Generated at Fri Dec 19 19:23:22 2025 by rpki-client