This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft File: wDouaJYDIEoCs4vve5CDsQJ2JpE.mft (raw, json) Hash identifier: rCtBs0evwhl033FHtpuKeTeoZarFkmCm2+SdpXK1w3E= Subject key identifier: 51:CC:01:73:BD:0A:A3:7C:AE:02:1C:89:DA:8D:34:22:73:2E:1C:DF Authority key identifier: C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91 Certificate issuer: /CN=A919C7B8/serialNumber=C03A2E689603204A02B38BEF7B9083B102762691 Certificate serial: 0648 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft Manifest number: 0642 Signing time: Sat 20 Dec 2025 21:59:28 +0000 Manifest this update: Sat 20 Dec 2025 21:59:28 +0000 Manifest next update: Sat 27 Dec 2025 21:59:28 +0000 Files and hashes: 1: wDouaJYDIEoCs4vve5CDsQJ2JpE.crl (hash: HrAvpE4a6fxlYCtbF45fejbOC7sExLahsnmZJ9hOOpI=) 2: F8A90D48B7EA11EB91C5D25EC4F9AE02.roa (hash: 3oYf4D2aeCXu56f8mNAcOhJ4M4El8ji8s2gDvwvZjUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1608 (0x648) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7B8, serialNumber=C03A2E689603204A02B38BEF7B9083B102762691 Validity Not Before: Dec 20 21:59:28 2025 GMT Not After : Dec 27 21:59:28 2025 GMT Subject: CN=69471c40-02e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c9:46:0a:eb:e7:7c:2f:3d:3e:ec:e5:35:dd: 46:7f:d6:4f:93:13:b0:3f:f1:9e:eb:a4:c8:f7:41: fd:cc:26:b2:db:1b:8a:bd:d0:3d:72:09:90:51:83: 5c:f8:24:74:f0:5a:5a:d4:10:ea:e9:d8:c1:09:2e: fc:7e:f5:71:bd:04:2f:4c:33:f2:38:aa:42:38:e5: aa:47:c4:a4:7f:8b:32:c5:24:40:af:4e:80:df:da: e1:a7:d5:76:51:9a:b1:92:b1:68:f4:91:50:32:1d: 2f:a2:cb:d8:12:fc:a1:69:8f:b8:0c:32:3f:4b:19: 22:9f:ad:5e:f1:4f:3f:51:4d:bc:91:7f:44:28:d1: cc:36:6c:8f:6c:af:e2:ec:c4:80:d3:4d:5d:60:55: 46:58:4f:dc:77:ab:ab:84:a0:55:6d:0e:49:b7:a6: c5:1b:21:c5:d6:ee:7f:06:e6:b5:ce:df:4e:55:fa: 04:08:a6:21:ae:f0:04:1d:f2:a3:ed:c8:5f:0c:70: f1:c8:18:5e:75:7b:e0:10:b4:be:6b:4b:8a:28:92: d7:4a:f0:2c:e6:80:d1:03:08:97:0d:24:71:74:36: 6a:64:eb:aa:d2:98:20:55:aa:f5:2f:70:89:2f:50: 3e:71:8e:a1:55:b5:ee:76:1d:b8:ed:ae:28:ac:af: 75:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CC:01:73:BD:0A:A3:7C:AE:02:1C:89:DA:8D:34:22:73:2E:1C:DF X509v3 Authority Key Identifier: keyid:C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:5d:3b:dc:30:38:de:ae:8a:60:9a:49:f8:cc:65:6a:1c:ef: e3:36:63:48:77:49:47:65:fe:5b:7d:16:6e:ac:46:b3:f0:7b: 0c:73:96:5b:ef:3c:9d:0e:44:86:85:ca:d8:99:28:df:03:93: 87:24:c4:d2:14:6a:f9:e5:b2:c4:af:3f:19:e5:90:12:90:33: c4:43:54:91:e7:37:b1:0b:65:dd:af:95:cc:80:f3:11:b4:d7: 50:62:4f:13:64:32:be:9b:11:53:dd:78:42:2e:69:20:13:08: e4:12:20:2d:70:db:88:6c:e4:1f:33:88:12:b3:75:9c:63:92: 3b:a0:49:00:81:17:93:25:2f:2a:d5:b4:4b:ee:f2:4d:b6:78: c9:50:1c:47:0c:e9:8a:2e:c4:35:52:48:c7:65:a7:c8:14:9f: 07:07:5a:c6:19:d6:88:32:05:58:27:70:d1:31:3f:d3:e8:47: 2e:d7:a7:8a:94:49:5a:7f:89:0e:80:6c:e5:12:28:17:23:1f: 80:9a:07:3c:cf:19:c8:66:e5:89:f9:54:34:fc:36:70:77:95: b1:d7:87:96:9c:e9:5e:a2:fd:85:f5:e8:a1:f3:42:fc:87:60: 1c:4b:7e:a6:2a:2c:66:7a:7a:a8:f4:20:2d:87:49:37:9c:8f: 61:26:37:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3QjgxMTAvBgNVBAUTKEMwM0EyRTY4OTYwMzIwNEEwMkIzOEJFRjdCOTA4M0Ix MDI3NjI2OTEwHhcNMjUxMjIwMjE1OTI4WhcNMjUxMjI3MjE1OTI4WjAYMRYwFAYD VQQDDA02OTQ3MWM0MC0wMmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnslGCuvnfC89PuzlNd1Gf9ZPkxOwP/Ge66TI90H9zCay2xuKvdA9cgmQUYNc +CR08Fpa1BDq6djBCS78fvVxvQQvTDPyOKpCOOWqR8Skf4syxSRAr06A39rhp9V2 UZqxkrFo9JFQMh0vosvYEvyhaY+4DDI/Sxkin61e8U8/UU28kX9EKNHMNmyPbK/i 7MSA001dYFVGWE/cd6urhKBVbQ5Jt6bFGyHF1u5/Bua1zt9OVfoECKYhrvAEHfKj 7chfDHDxyBhedXvgELS+a0uKKJLXSvAs5oDRAwiXDSRxdDZqZOuq0pggVar1L3CJ L1A+cY6hVbXudh247a4orK911QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHMAXO9 CqN8rgIcidqNNCJzLhzfMB8GA1UdIwQYMBaAFMA6LmiWAyBKArOL73uQg7ECdiaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdCOC9DODdEQTBBNEI3 RTgxMUVCQTU0REMxNUJDNEY5QUUwMi93RG91YUpZRElFb0NzNHZ2ZTVDRHNRSjJK cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dEb3VhSllESUVvQ3M0dnZlNUNEc1FKMkpwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzdCOC9DODdEQTBBNEI3RTgxMUVCQTU0REMxNUJDNEY5QUUwMi93RG91YUpZRElF b0NzNHZ2ZTVDRHNRSjJKcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUXTvcMDjeropgmkn4zGVqHO/jNmNId0lHZf5bfRZurEaz8HsMc5Zb 7zydDkSGhcrYmSjfA5OHJMTSFGr55bLErz8Z5ZASkDPEQ1SR5zexC2Xdr5XMgPMR tNdQYk8TZDK+mxFT3XhCLmkgEwjkEiAtcNuIbOQfM4gSs3WcY5I7oEkAgReTJS8q 1bRL7vJNtnjJUBxHDOmKLsQ1UkjHZafIFJ8HB1rGGdaIMgVYJ3DRMT/T6Ecu16eK lElaf4kOgGzlEigXIx+Amgc8zxnIZuWJ+VQ0/DZwd5Wx14eWnOleov2F9eih80L8 h2AcS36mKixmenqo9CAth0k3nI9hJjdC -----END CERTIFICATE-----Generated at Sun Dec 21 09:03:14 2025 by rpki-client