This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft File: s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft (raw, json) Hash identifier: cQzm081tLTCdqqcNpA64S5v8oI/umaqvxJnhzmDLOew= Subject key identifier: EC:E2:B1:33:D9:B5:D7:2B:A1:BC:69:A7:50:AF:0D:4F:3F:21:6A:F1 Authority key identifier: B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8 Certificate issuer: /CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft Manifest number: 0192 Signing time: Fri 19 Dec 2025 02:42:37 +0000 Manifest this update: Fri 19 Dec 2025 02:42:37 +0000 Manifest next update: Fri 26 Dec 2025 02:42:37 +0000 Files and hashes: 1: s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl (hash: aTkuWA2jl6z5a8tI4ghZg9VIaS0gqKitE1Q7D7VjOe0=) 2: EBB7A41AB4DA11EEBD650259C4F9AE02.roa (hash: S6QQQa5Sp7ukB1rfGQxAaqwrRf0T3shgxPjmjI4d6zQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A381A, serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8 Validity Not Before: Dec 19 02:42:37 2025 GMT Not After : Dec 26 02:42:37 2025 GMT Subject: CN=6944bb9d-45f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:45:83:cf:aa:c1:28:19:20:4c:69:60:fb:f6: 6b:75:16:d1:ea:cb:4d:c1:15:30:36:e4:1b:26:c6: 70:25:b0:8a:84:59:df:ed:ec:f4:5d:f6:24:70:57: f6:24:1d:48:cc:cb:3b:a1:29:eb:40:1e:34:7d:c4: ab:a2:a1:f7:46:0c:b8:bf:64:5b:e6:3a:a6:89:6e: 9e:2d:97:83:a4:b9:1c:7f:e7:40:58:c6:93:a8:d0: a2:74:34:a6:3d:15:e5:2b:3f:ba:4c:2e:0d:64:dd: ef:81:04:ab:91:fb:7f:5a:34:f0:33:8d:50:51:ff: fe:b7:a4:87:61:4f:73:9b:4e:04:88:f9:f9:f9:8b: 3f:76:e7:d8:57:3d:34:f1:c8:31:1a:d1:89:d3:da: 7d:32:68:8c:26:b0:07:15:79:3a:d2:dc:d4:49:27: 90:2f:88:bc:46:2e:f2:54:a2:69:d9:53:1b:4e:cb: 7a:af:9e:44:78:15:a2:60:e5:f2:d2:a8:b2:8b:1c: 81:1b:f4:3f:0d:f3:64:97:96:49:1d:47:8f:01:af: 13:b7:98:97:bc:cd:b8:52:d5:fd:30:ee:3a:99:f8: 9e:65:2a:32:fc:37:34:f7:3c:14:91:18:9c:bf:60: f1:21:80:b9:9e:24:6d:fd:e4:df:37:46:1d:c7:db: 52:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E2:B1:33:D9:B5:D7:2B:A1:BC:69:A7:50:AF:0D:4F:3F:21:6A:F1 X509v3 Authority Key Identifier: keyid:B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:1a:ab:d0:38:74:77:86:f5:9c:a0:57:f5:2f:02:5c:f6:84: 18:1d:39:1c:4f:9e:67:34:49:5f:d0:77:f3:c2:d7:97:b0:80: a9:6f:3f:25:52:1e:64:36:41:80:f9:06:06:f1:8f:9c:91:be: 74:b3:68:df:08:10:b1:66:18:cf:4b:f0:c7:18:fb:5f:52:c5: e3:2e:a9:2c:23:1a:a6:27:4f:86:16:f9:56:4f:52:42:27:6c: 54:56:16:19:89:fd:9e:58:be:06:6d:f1:30:6c:9c:47:46:2f: bf:2a:7b:a2:c2:b6:f3:e6:f4:2f:83:68:0d:de:02:da:c3:de: 7a:67:96:76:b0:a4:73:84:b9:a2:36:33:98:8b:98:45:35:ec: 02:86:f7:97:80:c8:a0:c3:73:e7:84:95:1b:9d:22:2d:78:27: c7:67:ea:ec:27:69:1d:14:7f:c8:d8:80:03:7f:4b:86:ba:87: e9:cf:4f:33:f0:c4:de:6a:73:b7:50:32:f9:3a:4c:81:a3:64: cd:d7:4c:5e:8e:8e:e1:9a:84:66:25:f1:b3:82:f2:38:24:d9: 9e:52:86:a5:8d:99:06:53:8f:f8:7a:71:82:26:35:3d:a5:f4: 34:42:b4:02:a3:a7:d1:64:6a:fb:71:9f:29:66:a7:c6:ec:78: dc:0e:45:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM4MUExMTAvBgNVBAUTKEIzRUMxRkY2QUQ1NTJBQTE2RUUxMDE5NTY0QkFEOUY3 NjFGREI1RDgwHhcNMjUxMjE5MDI0MjM3WhcNMjUxMjI2MDI0MjM3WjAYMRYwFAYD VQQDDA02OTQ0YmI5ZC00NWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkWDz6rBKBkgTGlg+/ZrdRbR6stNwRUwNuQbJsZwJbCKhFnf7ez0XfYkcFf2 JB1IzMs7oSnrQB40fcSroqH3Rgy4v2Rb5jqmiW6eLZeDpLkcf+dAWMaTqNCidDSm PRXlKz+6TC4NZN3vgQSrkft/WjTwM41QUf/+t6SHYU9zm04EiPn5+Ys/dufYVz00 8cgxGtGJ09p9MmiMJrAHFXk60tzUSSeQL4i8Ri7yVKJp2VMbTst6r55EeBWiYOXy 0qiyixyBG/Q/DfNkl5ZJHUePAa8Tt5iXvM24UtX9MO46mfieZSoy/Dc09zwUkRic v2DxIYC5niRt/eTfN0Ydx9tSJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzisTPZ tdcrobxpp1CvDU8/IWrxMB8GA1UdIwQYMBaAFLPsH/atVSqhbuEBlWS62fdh/bXY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzgxQS8yOEU4NkU0NDc5 RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktxRnU0UUdWWkxyWjkySDl0 ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Mtd2Y5cTFWS3FGdTRRR1ZaTHJaOTJIOXRkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzgxQS8yOEU4NkU0NDc5RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktx RnU0UUdWWkxyWjkySDl0ZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfGqvQOHR3hvWcoFf1LwJc9oQYHTkcT55nNElf0HfzwteXsICpbz8l Uh5kNkGA+QYG8Y+ckb50s2jfCBCxZhjPS/DHGPtfUsXjLqksIxqmJ0+GFvlWT1JC J2xUVhYZif2eWL4GbfEwbJxHRi+/Knuiwrbz5vQvg2gN3gLaw956Z5Z2sKRzhLmi NjOYi5hFNewChveXgMigw3PnhJUbnSIteCfHZ+rsJ2kdFH/I2IADf0uGuofpz08z 8MTeanO3UDL5OkyBo2TN10xejo7hmoRmJfGzgvI4JNmeUoaljZkGU4/4enGCJjU9 pfQ0QrQCo6fRZGr7cZ8pZqfG7HjcDkVk -----END CERTIFICATE-----Generated at Fri Dec 19 23:57:57 2025 by rpki-client