This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft File: WIXKbgzHteUyD6ckc-5zljP17CY.mft (raw, json) Hash identifier: CKVHnaQB5QWTPI7x5AHGkhQkIuH+s639UIlaaBIvDrE= Subject key identifier: B8:5A:4A:B6:80:11:CE:8B:0E:70:FB:B8:4A:8E:EE:CC:19:0B:EE:A3 Authority key identifier: 58:85:CA:6E:0C:C7:B5:E5:32:0F:A7:24:73:EE:73:96:33:F5:EC:26 Certificate issuer: /CN=A91AB34A/serialNumber=5885CA6E0CC7B5E5320FA72473EE739633F5EC26 Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft Manifest number: 0228 Signing time: Fri 19 Dec 2025 01:16:49 +0000 Manifest this update: Fri 19 Dec 2025 01:16:49 +0000 Manifest next update: Fri 26 Dec 2025 01:16:49 +0000 Files and hashes: 1: WIXKbgzHteUyD6ckc-5zljP17CY.crl (hash: ZPiwQehBtK4JcSG4acI2eCyLvoAl7erR7Q6vxLrzuU4=) 2: 9C43FA268A8A11ED9DF2425AC4F9AE02.roa (hash: XU2Kl+wDT9+IdgtwYqn/7pHHpGdYj1vHxZuNd0BPYVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.crl rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB34A, serialNumber=5885CA6E0CC7B5E5320FA72473EE739633F5EC26 Validity Not Before: Dec 19 01:16:49 2025 GMT Not After : Dec 26 01:16:49 2025 GMT Subject: CN=6944a781-297b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7f:ed:69:9c:8e:bf:c6:46:94:bc:b6:02:3d: 45:5c:50:da:3a:18:7d:07:3b:ae:28:86:7f:69:fe: ca:46:1a:fe:65:a7:0a:8a:fa:6e:d8:bf:02:45:98: dd:3f:66:bf:34:a5:a9:60:2a:ab:3f:fc:b7:c9:e8: 4b:08:a6:99:76:e0:1f:9d:c3:57:6f:8f:2f:23:30: 85:e9:86:7f:96:a7:a3:d0:34:87:6c:a8:94:24:e1: ce:31:c7:da:0b:0d:4d:02:02:62:e8:12:6f:d0:8e: 6f:fc:97:6c:2a:98:60:84:a2:32:bf:6d:84:bf:2a: 3e:ac:e8:db:07:c9:8d:d0:1f:d7:71:0b:d4:c4:da: bc:17:be:9a:a0:fa:1a:7c:71:c3:71:94:46:8a:0f: a4:07:c0:d6:e3:0b:09:e6:86:19:46:3a:5f:20:7e: fe:ab:b5:e6:8d:3f:f9:66:47:bc:3a:1b:60:9d:d0: 1a:8a:fc:21:cf:75:73:56:e2:68:ca:3c:8f:e9:50: 54:21:72:fa:92:f8:f8:f0:88:72:0d:10:d1:a7:88: db:31:35:e2:93:2b:bc:1a:d2:d3:8f:be:ca:da:43: 1c:75:ca:51:3e:4a:37:c9:46:3b:3f:87:ca:47:0f: 06:b2:f8:f8:08:f5:d2:4f:88:9c:c1:b4:e9:fb:a2: 71:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5A:4A:B6:80:11:CE:8B:0E:70:FB:B8:4A:8E:EE:CC:19:0B:EE:A3 X509v3 Authority Key Identifier: keyid:58:85:CA:6E:0C:C7:B5:E5:32:0F:A7:24:73:EE:73:96:33:F5:EC:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:fa:05:1b:f3:14:5c:0c:5f:bd:04:bf:b5:0f:f2:65:38:89: 23:2f:c8:98:6a:f8:d4:25:20:ce:12:a5:b1:44:29:4d:3a:e6: 09:8c:47:03:77:20:7b:49:5c:d1:32:d3:44:08:8b:c8:36:72: 4f:6c:18:29:35:a3:a6:a6:b6:65:fd:11:8f:e4:01:8c:6d:0e: 5a:6c:a3:a3:b9:78:f8:14:c8:80:f3:62:17:39:9e:d8:49:5e: 74:99:34:f3:47:bf:fe:ba:78:61:ac:f7:f5:cd:37:9e:38:c9: 84:61:70:20:90:48:98:09:19:88:27:17:6c:8d:27:19:85:99: 22:10:cb:cc:d3:08:ea:98:6f:df:cf:66:e8:c5:7b:67:41:87: 1c:e8:f7:e3:8b:48:62:a5:a7:7a:0d:dd:57:5a:7b:7c:02:dd: dd:f7:7f:85:7d:c4:e7:8d:04:56:71:4e:84:bd:a9:8a:3d:ce: b8:76:0f:f4:27:a5:3d:d2:cb:f9:37:02:7e:e4:e0:59:98:66: c9:6a:e7:96:15:dd:9a:04:c5:2e:b5:3f:bc:19:79:1f:1f:18: 75:39:c9:0c:88:ff:ee:ce:4b:87:79:3b:5f:8f:fc:f5:65:51: 9b:ec:fd:b0:25:78:dc:35:50:27:f3:f8:04:6c:fa:26:30:71: 79:1e:27:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzNEExMTAvBgNVBAUTKDU4ODVDQTZFMENDN0I1RTUzMjBGQTcyNDczRUU3Mzk2 MzNGNUVDMjYwHhcNMjUxMjE5MDExNjQ5WhcNMjUxMjI2MDExNjQ5WjAYMRYwFAYD VQQDDA02OTQ0YTc4MS0yOTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA83/taZyOv8ZGlLy2Aj1FXFDaOhh9BzuuKIZ/af7KRhr+ZacKivpu2L8CRZjd P2a/NKWpYCqrP/y3yehLCKaZduAfncNXb48vIzCF6YZ/lqej0DSHbKiUJOHOMcfa Cw1NAgJi6BJv0I5v/JdsKphghKIyv22Evyo+rOjbB8mN0B/XcQvUxNq8F76aoPoa fHHDcZRGig+kB8DW4wsJ5oYZRjpfIH7+q7XmjT/5Zke8OhtgndAaivwhz3VzVuJo yjyP6VBUIXL6kvj48IhyDRDRp4jbMTXikyu8GtLTj77K2kMcdcpRPko3yUY7P4fK Rw8Gsvj4CPXST4icwbTp+6JxFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhaSraA Ec6LDnD7uEqO7swZC+6jMB8GA1UdIwQYMBaAFFiFym4Mx7XlMg+nJHPuc5Yz9ewm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM0QS84QTMwRjczNDhB ODYxMUVEOTExNkQ3M0ZDNEY5QUUwMi9XSVhLYmd6SHRlVXlENmNrYy01emxqUDE3 Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dJWEtiZ3pIdGVVeUQ2Y2tjLTV6bGpQMTdDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM0QS84QTMwRjczNDhBODYxMUVEOTExNkQ3M0ZDNEY5QUUwMi9XSVhLYmd6SHRl VXlENmNrYy01emxqUDE3Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG+gUb8xRcDF+9BL+1D/JlOIkjL8iYavjUJSDOEqWxRClNOuYJjEcD dyB7SVzRMtNECIvINnJPbBgpNaOmprZl/RGP5AGMbQ5abKOjuXj4FMiA82IXOZ7Y SV50mTTzR7/+unhhrPf1zTeeOMmEYXAgkEiYCRmIJxdsjScZhZkiEMvM0wjqmG/f z2boxXtnQYcc6Pfji0hipad6Dd1XWnt8At3d93+FfcTnjQRWcU6EvamKPc64dg/0 J6U90sv5NwJ+5OBZmGbJaueWFd2aBMUutT+8GXkfHxh1OckMiP/uzkuHeTtfj/z1 ZVGb7P2wJXjcNVAn8/gEbPomMHF5HicD -----END CERTIFICATE-----Generated at Fri Dec 19 17:44:47 2025 by rpki-client