This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft File: Wr4zfmXAC-qEfODSWciH5P2zuSE.mft (raw, json) Hash identifier: THSk8YUfNzRk0/YHaIQtHzMKxrObQHXizD/KWzaUWtc= Subject key identifier: E8:27:D5:E2:77:82:5F:D5:57:26:D7:E8:3E:29:92:8B:61:63:CB:7A Authority key identifier: 5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21 Certificate issuer: /CN=A9173CDD/serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft Manifest number: 97 Signing time: Mon 29 Dec 2025 05:30:37 +0000 Manifest this update: Mon 29 Dec 2025 05:30:37 +0000 Manifest next update: Mon 05 Jan 2026 05:30:37 +0000 Files and hashes: 1: Wr4zfmXAC-qEfODSWciH5P2zuSE.crl (hash: xIOrshwBS5wbR7ORK5kV3I7fvCC++xNnaNAwXquOZxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 05:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CDD, serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921 Validity Not Before: Dec 29 05:30:37 2025 GMT Not After : Jan 5 05:30:37 2026 GMT Subject: CN=695211fd-78cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:66:44:f0:85:fb:23:7a:6e:bd:cd:bb:83: f5:06:df:1a:82:f7:75:c3:fd:84:5e:7a:2c:91:54: b8:30:31:12:6e:16:b3:45:31:2e:fd:34:88:74:19: a8:42:70:b4:80:27:c1:d0:06:b2:be:d7:84:c6:ae: 7e:8f:d7:37:16:20:ae:f2:2d:9c:a5:f6:5d:4f:41: 69:26:3c:06:30:e3:4a:c3:13:08:7a:28:93:09:16: c4:1a:3e:f3:98:7a:e3:b8:77:01:18:cd:9a:fd:35: 69:32:e1:fc:b3:52:a7:27:e6:8e:3b:67:6d:68:4c: a0:70:3a:ba:a4:d4:42:f8:22:75:2f:ed:6c:0c:62: 29:a5:a0:b6:af:ce:9e:58:12:25:41:72:9b:10:4d: ce:97:09:0f:ae:50:42:91:94:29:ec:35:b7:95:f8: d9:16:9c:d9:59:7b:54:84:d8:4b:d8:10:ae:f2:4b: 1d:18:b1:a2:30:ff:67:6e:04:4a:c2:68:be:65:2b: b7:8c:72:e6:de:47:0d:d5:24:10:26:49:a0:52:5f: 5b:24:4d:7d:78:21:2a:7a:a5:ce:f1:05:c9:7b:19: 49:59:0c:28:56:e2:fd:f3:b4:ca:41:b6:34:6c:11: 55:d8:2f:8e:8a:59:06:77:e2:f6:50:48:15:4d:0a: fe:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:27:D5:E2:77:82:5F:D5:57:26:D7:E8:3E:29:92:8B:61:63:CB:7A X509v3 Authority Key Identifier: keyid:5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:39:46:a2:02:48:85:6e:fe:18:0c:e4:6a:9b:e3:bc:45:b4: a2:60:59:41:be:fc:c8:0f:15:a2:16:90:ac:12:63:f9:b4:a1: 9f:b4:18:3a:9a:7f:46:76:72:f3:ae:49:7f:3d:f3:00:32:9c: 2f:50:6f:f7:79:93:a9:e1:db:11:fd:79:ae:04:4a:8e:d9:85: a4:34:01:5a:d9:49:c4:da:e4:ae:44:7a:6d:ed:ae:4b:e5:58: 51:80:50:ba:a6:f8:46:2b:dc:88:ff:2c:b9:53:b6:38:9e:fb: 94:8a:60:a9:4d:9f:0d:2e:27:68:dc:82:c8:83:6e:6f:c6:01: e5:49:64:d0:df:63:43:8a:df:df:be:8c:20:4a:37:cf:4c:e5: 0e:40:99:36:01:10:ef:ba:a6:86:85:28:6c:ca:6d:27:f2:6f: 52:01:54:ff:5b:a5:ed:92:69:8a:c5:91:fe:b0:57:71:6e:db: 99:b1:18:77:5d:4c:da:7c:b4:b1:8f:83:5d:0c:20:25:0e:f2: cf:13:6b:97:88:19:ed:ec:99:18:6a:cc:54:69:93:e0:1b:a4: 0d:2a:29:24:9d:ba:c1:e4:9f:33:60:8b:5f:0e:82:ba:85:cb: 78:da:44:4c:37:95:98:92:20:59:a0:b7:02:dd:0f:ef:15:9a: 27:a7:45:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDREQxMTAvBgNVBAUTKDVBQkUzMzdFNjVDMDBCRUE4NDdDRTBEMjU5Qzg4N0U0 RkRCM0I5MjEwHhcNMjUxMjI5MDUzMDM3WhcNMjYwMTA1MDUzMDM3WjAYMRYwFAYD VQQDDA02OTUyMTFmZC03OGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvklmRPCF+yN6br3Nu4P1Bt8agvd1w/2EXnoskVS4MDESbhazRTEu/TSIdBmo QnC0gCfB0AayvteExq5+j9c3FiCu8i2cpfZdT0FpJjwGMONKwxMIeiiTCRbEGj7z mHrjuHcBGM2a/TVpMuH8s1KnJ+aOO2dtaEygcDq6pNRC+CJ1L+1sDGIppaC2r86e WBIlQXKbEE3OlwkPrlBCkZQp7DW3lfjZFpzZWXtUhNhL2BCu8ksdGLGiMP9nbgRK wmi+ZSu3jHLm3kcN1SQQJkmgUl9bJE19eCEqeqXO8QXJexlJWQwoVuL987TKQbY0 bBFV2C+OilkGd+L2UEgVTQr+9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgn1eJ3 gl/VVybX6D4pkothY8t6MB8GA1UdIwQYMBaAFFq+M35lwAvqhHzg0lnIh+T9s7kh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NERC8zOUIxQjM2MkZE RDgxMUVGQjUyNUI2NzRDNEY5QUUwMi9XcjR6Zm1YQUMtcUVmT0RTV2NpSDVQMnp1 U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dyNHpmbVhBQy1xRWZPRFNXY2lINVAyenVTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NERC8zOUIxQjM2MkZERDgxMUVGQjUyNUI2NzRDNEY5QUUwMi9XcjR6Zm1YQUMt cUVmT0RTV2NpSDVQMnp1U0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4OUaiAkiFbv4YDORqm+O8RbSiYFlBvvzIDxWiFpCsEmP5tKGftBg6 mn9GdnLzrkl/PfMAMpwvUG/3eZOp4dsR/XmuBEqO2YWkNAFa2UnE2uSuRHpt7a5L 5VhRgFC6pvhGK9yI/yy5U7Y4nvuUimCpTZ8NLido3ILIg25vxgHlSWTQ32NDit/f vowgSjfPTOUOQJk2ARDvuqaGhShsym0n8m9SAVT/W6XtkmmKxZH+sFdxbtuZsRh3 XUzafLSxj4NdDCAlDvLPE2uXiBnt7JkYasxUaZPgG6QNKikknbrB5J8zYItfDoK6 hct42kRMN5WYkiBZoLcC3Q/vFZonp0XH -----END CERTIFICATE-----Generated at Tue Dec 30 10:51:40 2025 by rpki-client