This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft File: wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft (raw, json) Hash identifier: 9oLS4SbUlvdBGeM9l5zKBnwGb8A1YAa7zBlWtblebOk= Subject key identifier: 93:58:EB:BC:BD:48:EC:7E:4F:BB:DF:0A:46:78:E9:F8:6E:1B:14:9F Authority key identifier: C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 Certificate issuer: /CN=A91DD1F9/serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft Manifest number: 010C Signing time: Wed 31 Dec 2025 04:03:33 +0000 Manifest this update: Wed 31 Dec 2025 04:03:32 +0000 Manifest next update: Wed 07 Jan 2026 04:03:32 +0000 Files and hashes: 1: wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl (hash: UbBDumE7dgDCJ0VoZSUuAtkOVgAJQClBXHbDaxFlQrI=) 2: 36CFD1EE4AD011EF9B941D17C4F9AE02.roa (hash: R4BuH0z4o97i8tZeyVvIgqOfDLo2IBdC5O5u6V1sdyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 04:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1F9, serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Validity Not Before: Dec 31 04:03:32 2025 GMT Not After : Jan 7 04:03:32 2026 GMT Subject: CN=6954a094-a135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:fd:00:74:1a:82:2a:a9:c5:fc:05:29:05: 0f:94:18:fc:e9:d3:fa:96:c9:3c:a6:8f:05:07:97: b6:63:16:98:0f:89:15:da:21:69:22:be:70:f5:34: 8c:5c:71:75:47:31:32:a9:f5:03:21:5e:0e:fa:6b: b5:fd:ea:1e:05:3c:85:0c:c2:6d:75:92:80:b6:9f: 17:06:29:98:8b:04:24:2d:db:80:4b:90:cf:07:a5: bc:12:39:4e:fa:0c:f8:74:4f:05:ab:f6:62:58:57: 99:b0:a3:31:3d:e8:90:a7:d7:63:96:0c:ac:27:ad: de:d0:da:c2:a9:21:d5:48:53:11:a6:aa:a8:76:a4: 66:ec:7c:e7:b0:74:2a:9c:f4:c9:33:6b:71:d8:f2: b4:1a:48:94:1f:d1:67:cb:79:e5:89:33:cc:a5:0f: ba:37:14:96:60:84:41:6e:01:64:4b:b0:d1:17:5b: 60:53:69:00:c6:79:9b:c7:4c:82:7f:4a:3a:21:b0: 8b:d6:f2:54:5a:57:33:bf:76:ea:a2:de:d5:fc:58: 04:b5:2f:c7:48:5d:05:27:59:49:69:fa:ec:23:54: d8:2c:62:43:97:47:aa:82:44:cc:09:2a:df:6c:3d: d7:31:1e:fe:c5:92:0c:4d:09:d0:e8:24:69:f1:df: 6c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:58:EB:BC:BD:48:EC:7E:4F:BB:DF:0A:46:78:E9:F8:6E:1B:14:9F X509v3 Authority Key Identifier: keyid:C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:67:44:dc:53:e8:e9:65:17:20:96:7d:97:11:9b:f2:62:7c: 6f:e2:ab:f5:0c:59:20:40:24:6f:5c:05:21:04:34:33:e9:ef: 2d:9e:ab:e1:84:b4:cf:e5:f4:83:0c:24:8b:60:a9:c8:89:0f: a5:85:3b:4b:fd:bd:29:e6:e5:4d:c6:a6:25:b5:c5:ec:b2:b8: 1c:1a:a2:4f:42:b2:d8:ab:e8:61:82:41:e8:d5:04:4d:5f:35: 94:a0:54:44:da:13:3a:bc:50:83:41:4b:64:b7:05:e9:ca:f4: bc:b3:46:f9:ac:90:de:54:e8:9c:21:2f:cc:38:d1:93:0a:f5: e3:9a:06:f6:02:75:68:7d:7d:1c:e3:d7:50:5f:84:a7:d7:66: f5:48:9f:5d:00:91:67:26:f7:55:fd:a5:3c:b0:62:77:d5:87: b8:3b:76:89:7a:24:71:ed:a2:1c:1e:c6:59:72:7c:39:83:26: 02:ce:a2:57:b6:13:0b:48:94:1b:b0:5f:22:d2:50:a9:37:e1: 43:51:18:a5:17:a2:37:6b:de:c7:eb:b3:2c:25:92:c3:30:8c: 6c:e6:26:ac:48:45:be:b0:e8:43:80:c9:32:93:c2:47:e2:bd: 5c:e8:9e:f6:58:d7:b6:c7:dd:7c:3d:42:73:9d:73:bf:69:a1: ef:9a:3b:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxRjkxMTAvBgNVBAUTKEMyN0FFMUQxNjQ3MjlGNDNEOUUwRkE2NEJFNTFEMEI2 QUUwOUVCOTkwHhcNMjUxMjMxMDQwMzMyWhcNMjYwMTA3MDQwMzMyWjAYMRYwFAYD VQQDDA02OTU0YTA5NC1hMTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9L9AHQagiqpxfwFKQUPlBj86dP6lsk8po8FB5e2YxaYD4kV2iFpIr5w9TSM XHF1RzEyqfUDIV4O+mu1/eoeBTyFDMJtdZKAtp8XBimYiwQkLduAS5DPB6W8EjlO +gz4dE8Fq/ZiWFeZsKMxPeiQp9djlgysJ63e0NrCqSHVSFMRpqqodqRm7HznsHQq nPTJM2tx2PK0GkiUH9Fny3nliTPMpQ+6NxSWYIRBbgFkS7DRF1tgU2kAxnmbx0yC f0o6IbCL1vJUWlczv3bqot7V/FgEtS/HSF0FJ1lJafrsI1TYLGJDl0eqgkTMCSrf bD3XMR7+xZIMTQnQ6CRp8d9s1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNY67y9 SOx+T7vfCkZ46fhuGxSfMB8GA1UdIwQYMBaAFMJ64dFkcp9D2eD6ZL5R0LauCeuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDFGOS80MDJFRDI3MjRB Q0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4wUFo0UHBrdmxIUXRxNEo2 NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ducmgwV1J5bjBQWjRQcGt2bEhRdHE0SjY1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDFGOS80MDJFRDI3MjRBQ0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4w UFo0UHBrdmxIUXRxNEo2NWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALZ0TcU+jpZRcgln2XEZvyYnxv4qv1DFkgQCRvXAUhBDQz6e8tnqvh hLTP5fSDDCSLYKnIiQ+lhTtL/b0p5uVNxqYltcXssrgcGqJPQrLYq+hhgkHo1QRN XzWUoFRE2hM6vFCDQUtktwXpyvS8s0b5rJDeVOicIS/MONGTCvXjmgb2AnVofX0c 49dQX4Sn12b1SJ9dAJFnJvdV/aU8sGJ31Ye4O3aJeiRx7aIcHsZZcnw5gyYCzqJX thMLSJQbsF8i0lCpN+FDURilF6I3a97H67MsJZLDMIxs5iasSEW+sOhDgMkyk8JH 4r1c6J72WNe2x918PUJznXO/aaHvmjv9 -----END CERTIFICATE-----Generated at Wed Dec 31 10:28:10 2025 by rpki-client