This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft File: WothvFOjJNeitPQVPQd0bsKjNdI.mft (raw, json) Hash identifier: XoMddIR8Nrzbmokoz+KPpGe+kdIg/S8zlsQYRl9vTIk= Subject key identifier: EF:67:94:27:15:88:2F:A4:CC:3A:85:AD:86:39:4C:79:F9:C0:23:AC Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 Certificate issuer: /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft Manifest number: 0104 Signing time: Fri 19 Dec 2025 04:11:35 +0000 Manifest this update: Fri 19 Dec 2025 04:11:35 +0000 Manifest next update: Fri 26 Dec 2025 04:11:35 +0000 Files and hashes: 1: WothvFOjJNeitPQVPQd0bsKjNdI.crl (hash: VQHRAwS0gZx1I3gBPBXtmYebvv+i29YTJmJLgn3f37g=) 2: AE51756A556B11EFA5FB1569C4F9AE02.roa (hash: gEBFjX+SWG+/146/yxKK69X8BT9Y729yGD/qkGt7gqI=) 3: 014A2E90BC5C11EF9108934FC4F9AE02.roa (hash: NKdc00VsoBU3WzQbU4FkleLin/aT7rGH2qhEdrMQw6Y=) 4: AEDDE1EE556B11EFA5FB1569C4F9AE02.roa (hash: TBUipL2P8MSxeJdmyHkFFj4NWEi8Gft5hKbk6IWxws0=) 5: 02A3523ABC5C11EF9108934FC4F9AE02.roa (hash: YX0R72xh2Wv+PsOymTRXA/5mVC7q1Y9SjWtgUs9whWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D12, serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Validity Not Before: Dec 19 04:11:35 2025 GMT Not After : Dec 26 04:11:35 2025 GMT Subject: CN=6944d077-fadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fd:7e:80:49:2b:d9:5b:69:3c:6d:d0:1f:6b: 69:bb:e9:89:1b:08:46:7a:72:35:9b:57:4f:d5:ad: 32:f1:72:e7:f8:4e:15:b8:ed:24:f6:9d:e4:c6:da: 3f:bf:f2:7b:54:4a:9c:ed:9f:5d:0a:af:45:e4:33: 87:3d:0e:6f:44:08:f1:1f:13:61:12:1b:95:f4:41: 57:00:2a:43:33:ba:64:35:af:45:48:d2:90:27:b0: 4d:3a:7e:7f:9c:32:b4:e4:cf:eb:c3:06:c0:9b:eb: fb:7b:3f:7c:ac:43:54:1f:2a:ff:fa:dc:e2:bd:cf: 56:f8:f9:70:f6:9f:69:77:92:38:74:30:1b:f1:09: 41:b8:fc:a0:c9:07:6e:f4:ff:e9:38:bc:a3:18:43: 08:b9:a3:6d:d1:52:09:a1:72:2d:6b:15:f6:61:a4: f2:92:67:20:02:fa:13:fc:eb:d4:ba:a0:72:d5:d7: 69:f1:c3:cd:91:22:08:14:44:f6:2a:d3:b2:88:4a: f6:d9:b2:29:51:82:44:78:dd:a4:3b:d7:f0:69:3c: d9:cf:34:94:83:c3:ec:7d:11:94:4e:3c:18:4c:54: b1:a0:e0:1c:d2:fb:e1:43:5f:aa:8b:a8:46:db:ed: cc:88:74:c4:78:6d:e2:4c:c6:4f:16:81:2d:fe:6d: 8b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:67:94:27:15:88:2F:A4:CC:3A:85:AD:86:39:4C:79:F9:C0:23:AC X509v3 Authority Key Identifier: keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b7:a8:99:4f:da:1a:3c:ff:24:53:33:66:79:ba:d3:b1:9c: 18:b3:e5:9a:dd:86:7b:06:1a:21:64:f6:fb:73:d9:d5:6a:cd: e4:be:44:7e:65:cf:86:a8:9d:1e:7d:a9:1c:49:27:22:fe:ba: 10:3d:63:28:16:ba:25:dd:3f:9e:b0:a0:8e:04:5e:85:8c:ea: 72:95:00:2a:34:39:42:ef:c5:9e:8c:38:5c:cb:24:db:89:ac: 2f:44:0a:33:95:f0:49:43:f5:c5:62:4e:3a:2f:3e:16:b8:1c: 60:9c:0f:2c:cf:97:e1:0a:77:a6:3a:98:5b:14:06:a2:5f:8b: 84:ff:97:84:75:fa:bc:51:35:38:19:03:ff:5a:9c:0f:be:00: 93:37:4a:0a:23:a5:e4:54:de:a5:d6:da:d7:79:cc:38:c0:8e: b5:20:b4:6f:4c:29:1a:d9:bb:9e:19:ec:8e:31:90:85:ba:cd: 0c:93:11:b9:39:8f:dc:14:db:6a:54:71:b8:3c:b1:d4:24:cb: fa:f3:57:98:05:37:72:d9:2d:59:d8:89:c3:8d:4e:9a:cc:d2: 7a:b0:bb:91:02:48:3e:46:be:19:c6:45:35:ac:8b:18:30:d5: ce:25:fd:84:6f:ba:1f:99:03:f4:8d:09:34:79:de:53:9d:78: f6:a6:a9:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNEMTIxMTAvBgNVBAUTKDVBOEI2MUJDNTNBMzI0RDdBMkI0RjQxNTNEMDc3NDZF QzJBMzM1RDIwHhcNMjUxMjE5MDQxMTM1WhcNMjUxMjI2MDQxMTM1WjAYMRYwFAYD VQQDDA02OTQ0ZDA3Ny1mYWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2P1+gEkr2VtpPG3QH2tpu+mJGwhGenI1m1dP1a0y8XLn+E4VuO0k9p3kxto/ v/J7VEqc7Z9dCq9F5DOHPQ5vRAjxHxNhEhuV9EFXACpDM7pkNa9FSNKQJ7BNOn5/ nDK05M/rwwbAm+v7ez98rENUHyr/+tzivc9W+Plw9p9pd5I4dDAb8QlBuPygyQdu 9P/pOLyjGEMIuaNt0VIJoXItaxX2YaTykmcgAvoT/OvUuqBy1ddp8cPNkSIIFET2 KtOyiEr22bIpUYJEeN2kO9fwaTzZzzSUg8PsfRGUTjwYTFSxoOAc0vvhQ1+qi6hG 2+3MiHTEeG3iTMZPFoEt/m2LLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9nlCcV iC+kzDqFrYY5THn5wCOsMB8GA1UdIwQYMBaAFFqLYbxToyTXorT0FT0HdG7CozXS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0QxMi9BQjg5MzRGMjUy QzQxMUVGOERERkQ1M0ZDNEY5QUUwMi9Xb3RodkZPakpOZWl0UFFWUFFkMGJzS2pO ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dvdGh2Rk9qSk5laXRQUVZQUWQwYnNLak5kSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0QxMi9BQjg5MzRGMjUyQzQxMUVGOERERkQ1M0ZDNEY5QUUwMi9Xb3RodkZPakpO ZWl0UFFWUFFkMGJzS2pOZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlt6iZT9oaPP8kUzNmebrTsZwYs+Wa3YZ7BhohZPb7c9nVas3kvkR+ Zc+GqJ0efakcSSci/roQPWMoFrol3T+esKCOBF6FjOpylQAqNDlC78WejDhcyyTb iawvRAozlfBJQ/XFYk46Lz4WuBxgnA8sz5fhCnemOphbFAaiX4uE/5eEdfq8UTU4 GQP/WpwPvgCTN0oKI6XkVN6l1trXecw4wI61ILRvTCka2bueGeyOMZCFus0MkxG5 OY/cFNtqVHG4PLHUJMv681eYBTdy2S1Z2InDjU6azNJ6sLuRAkg+Rr4ZxkU1rIsY MNXOJf2Eb7ofmQP0jQk0ed5TnXj2pqlM -----END CERTIFICATE-----Generated at Sat Dec 20 13:15:03 2025 by rpki-client