This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft File: Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft (raw, json) Hash identifier: tKBUN3vcLsG67BaN1nsCg4RDf8ZhRJdIP8MtD8MkTp4= Subject key identifier: 43:72:D4:79:B1:53:2D:C8:13:3F:F6:E6:FC:F4:AE:DD:A2:65:1E:8E Authority key identifier: 5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68 Certificate issuer: /CN=A91806C2/serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568 Certificate serial: 03A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft Manifest number: 0398 Signing time: Mon 22 Dec 2025 23:46:06 +0000 Manifest this update: Mon 22 Dec 2025 23:46:05 +0000 Manifest next update: Mon 29 Dec 2025 23:46:05 +0000 Files and hashes: 1: Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl (hash: 2bh+RQ4euXMS8xksFEa0T/f+AOSDLRvZI2xaWUr+l48=) 2: 1C3679E8C4A211EC8FD6D313C4F9AE02.roa (hash: R45goBc9ltNNydJH/crrPm7jUsX2yEtOzi9r+yJorZM=) 3: 1CD62088C4A211EC8FD6D313C4F9AE02.roa (hash: KamW1zC+t0AxsWxUwBVMnEzMkI75A/xxojQk/vMnrhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 928 (0x3a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91806C2, serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568 Validity Not Before: Dec 22 23:46:05 2025 GMT Not After : Dec 29 23:46:05 2025 GMT Subject: CN=6949d83d-e731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:20:41:6b:64:2b:f4:67:bf:f5:ea:19:b0:e8: 0f:81:73:b1:09:0b:ea:64:0b:83:11:1f:d0:ec:49: 5a:fd:0b:86:bb:af:a1:50:f3:a6:3d:e4:26:06:2e: 87:2f:56:5f:b3:c3:8a:7c:9b:cf:fd:47:08:d0:cf: ab:c1:d7:af:e9:3c:6e:33:17:b8:dd:18:53:ab:8f: 03:80:1d:cf:61:21:a6:2c:c7:92:ef:ce:d1:16:bb: 96:96:b9:46:1f:10:12:7a:6d:31:77:fb:d3:89:39: a9:a9:13:92:a3:db:98:6d:c5:24:d9:82:9c:43:cf: fe:d6:82:34:10:85:ad:da:21:5a:3f:eb:36:cf:93: 78:26:98:bf:8a:a9:e0:11:13:99:86:7c:5b:d1:45: 68:4e:6a:e9:d8:a4:05:2b:09:39:2b:cc:09:5e:f7: ea:f2:33:14:ce:30:51:b2:c8:fb:86:48:51:da:29: bb:14:73:36:e2:01:ff:ad:c0:a1:f9:e0:92:17:9e: da:9a:f6:d1:cd:38:bc:77:9b:5f:19:aa:20:9e:af: 4b:8f:02:90:f0:5d:ac:ea:3a:9d:e2:fa:85:91:98: 28:d6:22:0d:ea:0f:13:78:78:88:fe:63:1b:60:a5: 46:47:0b:c0:ff:9c:2e:51:17:e7:db:71:c1:55:03: b9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:72:D4:79:B1:53:2D:C8:13:3F:F6:E6:FC:F4:AE:DD:A2:65:1E:8E X509v3 Authority Key Identifier: keyid:5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:76:a9:2a:e6:90:01:58:8a:5d:cd:45:3c:d8:88:78:f6:af: 66:cc:e1:dd:2b:7e:08:d9:9f:6a:fd:29:32:62:47:48:e9:29: 6c:ae:80:45:7c:9d:ae:a0:fc:65:a4:7c:db:4f:9a:20:84:81: eb:ae:1b:94:ba:29:0d:16:74:5b:a9:77:bd:24:ab:0c:3a:be: 82:ef:30:78:1b:dc:12:b1:5e:d7:9c:ad:bf:89:21:1d:ec:f1: a5:c6:d9:a9:a8:ce:d0:28:5f:d0:cf:d6:d0:d4:a3:86:23:62: c3:d2:55:14:48:b9:58:2e:61:79:ee:3b:00:51:e7:83:16:2d: 90:e2:e9:5f:cb:4e:60:02:b2:89:52:c8:80:48:44:d7:93:41: 87:99:c7:c0:99:a7:54:2d:ec:47:ec:c6:bc:e5:b1:85:c8:f6: f6:b3:06:45:45:6e:97:9c:a4:b5:b0:be:10:45:7c:ab:9d:38: 03:48:fd:fb:3c:e3:21:9f:2b:6a:1c:10:39:cc:bb:49:fc:90: 41:76:1c:ab:94:04:52:1e:7f:05:54:19:57:86:1e:f6:9a:a9: 20:f3:c9:6c:5d:30:a1:64:68:66:68:58:fa:5d:a1:5a:a1:2a: 4d:27:69:f4:7e:58:7a:1b:72:32:1b:5e:a1:35:47:8c:bc:4f: 48:cb:ec:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA2QzIxMTAvBgNVBAUTKDVCMEJCQzg0QjVDQkQxNUMzMEQ5MDE0MjcwNjUyOENG MTkwMTA1NjgwHhcNMjUxMjIyMjM0NjA1WhcNMjUxMjI5MjM0NjA1WjAYMRYwFAYD VQQDDA02OTQ5ZDgzZC1lNzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCBBa2Qr9Ge/9eoZsOgPgXOxCQvqZAuDER/Q7Ela/QuGu6+hUPOmPeQmBi6H L1Zfs8OKfJvP/UcI0M+rwdev6TxuMxe43RhTq48DgB3PYSGmLMeS787RFruWlrlG HxASem0xd/vTiTmpqROSo9uYbcUk2YKcQ8/+1oI0EIWt2iFaP+s2z5N4Jpi/iqng EROZhnxb0UVoTmrp2KQFKwk5K8wJXvfq8jMUzjBRssj7hkhR2im7FHM24gH/rcCh +eCSF57amvbRzTi8d5tfGaognq9LjwKQ8F2s6jqd4vqFkZgo1iIN6g8TeHiI/mMb YKVGRwvA/5wuURfn23HBVQO5NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENy1Hmx Uy3IEz/25vz0rt2iZR6OMB8GA1UdIwQYMBaAFFsLvIS1y9FcMNkBQnBlKM8ZAQVo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDZDMi8xNjI0RDFEOEM0 OUYxMUVDODMxQ0FGMEVDNEY5QUUwMi9Xd3U4aExYTDBWd3cyUUZDY0dVb3p4a0JC V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d3dThoTFhMMFZ3dzJRRkNjR1VvenhrQkJXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDZDMi8xNjI0RDFEOEM0OUYxMUVDODMxQ0FGMEVDNEY5QUUwMi9Xd3U4aExYTDBW d3cyUUZDY0dVb3p4a0JCV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAddqkq5pABWIpdzUU82Ih49q9mzOHdK34I2Z9q/SkyYkdI6SlsroBF fJ2uoPxlpHzbT5oghIHrrhuUuikNFnRbqXe9JKsMOr6C7zB4G9wSsV7XnK2/iSEd 7PGlxtmpqM7QKF/Qz9bQ1KOGI2LD0lUUSLlYLmF57jsAUeeDFi2Q4ulfy05gArKJ UsiASETXk0GHmcfAmadULexH7Ma85bGFyPb2swZFRW6XnKS1sL4QRXyrnTgDSP37 POMhnytqHBA5zLtJ/JBBdhyrlARSHn8FVBlXhh72mqkg88lsXTChZGhmaFj6XaFa oSpNJ2n0flh6G3IyG16hNUeMvE9Iy+wb -----END CERTIFICATE-----Generated at Wed Dec 24 21:48:13 2025 by rpki-client