This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft File: WKDd0CVVyDdIbVVDUYbcxXahKD4.mft (raw, json) Hash identifier: M+SVxMJVUZFVD+Jfg0SPq7U6dmKelG3a6VI2lyN8YjU= Subject key identifier: D9:F2:EA:97:75:56:E9:21:3F:CF:26:68:DA:72:38:51:20:DB:34:A8 Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft Manifest number: 022B Signing time: Sun 21 Dec 2025 01:22:26 +0000 Manifest this update: Sun 21 Dec 2025 01:22:25 +0000 Manifest next update: Sun 28 Dec 2025 01:22:25 +0000 Files and hashes: 1: WKDd0CVVyDdIbVVDUYbcxXahKD4.crl (hash: pkNlMJQZxAtUEEINkejGmOgCdxFkcdcaK9J1WXBaHnU=) 2: 58A53DF483EB11F083FC5148C4F9AE02.roa (hash: gHzhXWPrMjpB1xHZWRltAYhKlgAf5L30L7o2Q9t3Hyc=) 3: 8C48B22C47E711EE91530D28C4F9AE02.roa (hash: oOyEu7HdLHeRDgmI/hlcMUg6eiIlRVxLKBMf9ShkBXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Validity Not Before: Dec 21 01:22:25 2025 GMT Not After : Dec 28 01:22:25 2025 GMT Subject: CN=69474bd2-f8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:39:ba:64:10:b5:88:ab:e9:b0:86:11:d5:7a: 97:b6:5c:b4:2d:12:25:66:4a:fa:e3:60:ae:1a:e1: d8:47:d2:36:42:fd:ba:e5:0c:25:ef:da:fe:61:be: c8:d0:00:ce:67:19:8d:41:70:b8:83:95:8a:ed:69: 12:db:04:0a:d1:0a:51:5a:36:09:06:68:47:56:fc: 98:7f:67:b2:bd:13:20:5c:2d:ef:f5:2e:26:3a:8e: f8:ea:bb:4b:b0:00:98:a0:34:12:a5:d0:c9:ce:8b: 5b:2c:2a:49:8b:f6:66:83:5a:80:7a:e5:64:f4:3a: b6:6e:3a:11:4d:3c:03:4c:28:05:db:ca:56:b2:22: ac:8f:d8:0c:55:45:c5:c6:17:60:5c:e6:3a:46:d1: 1b:d3:a4:fe:63:9a:7e:5f:c3:79:69:05:ca:1c:12: fb:ac:c9:a2:ce:5e:81:46:f0:22:7b:c0:b1:84:b4: 82:b6:95:b7:fb:e9:86:18:fb:73:97:7d:c7:66:67: 68:75:7b:77:1f:33:21:d0:10:d8:a6:b5:3b:7c:2a: 37:ab:dd:ea:ca:88:17:e1:3a:fc:ae:62:3d:80:4d: 96:9c:e6:e4:75:9a:04:11:81:24:31:9c:5b:c1:66: de:68:a0:3b:d1:2f:68:7d:73:81:c7:9c:8f:35:8e: e8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F2:EA:97:75:56:E9:21:3F:CF:26:68:DA:72:38:51:20:DB:34:A8 X509v3 Authority Key Identifier: keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:29:c6:4c:51:b4:9f:a9:35:41:a8:d3:6f:4a:3b:48:27:9d: 2d:40:a3:98:5f:4b:c0:18:24:90:d4:8d:7b:a0:ac:f0:70:b9: c8:e0:0c:6b:86:fc:52:6a:23:59:f3:f0:07:bf:e8:b8:b4:b8: 05:ae:21:90:34:45:a8:41:5e:14:dc:17:b9:17:c0:9e:5e:9b: 73:4f:d8:14:1e:91:59:9c:79:25:a4:78:7a:d8:b6:5b:3e:e8: 66:5f:bb:22:9e:58:20:3a:4d:7e:1c:73:e4:e7:45:3e:8e:89: 1e:b4:c7:7d:b0:14:23:d8:18:c9:a1:82:65:f8:ca:9a:fa:ea: c0:1a:ae:91:85:66:f1:20:03:d6:51:b7:d0:7f:d7:a5:17:74: 29:89:1c:4e:06:22:4d:dc:86:e5:3d:44:7d:bd:ba:12:71:aa: 10:45:24:dd:b7:f4:a0:e0:8d:9b:73:fc:bd:f5:0f:10:21:2a: 49:b3:8e:1d:5d:b0:4e:ad:8a:f6:d4:5d:17:f8:2b:9f:98:e3: b6:6b:21:c7:6a:02:81:a3:2b:7f:7a:ea:28:bd:f0:73:88:5d: c4:13:a9:4d:6f:3c:be:82:73:4d:50:2f:4b:f8:b9:0f:62:23: 2e:f7:0d:1e:de:9d:41:e9:06:a9:cf:bc:4b:e7:3a:41:e0:8a: 30:90:c3:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRDMzAxMTAvBgNVBAUTKDU4QTBEREQwMjU1NUM4Mzc0ODZENTU0MzUxODZEQ0M1 NzZBMTI4M0UwHhcNMjUxMjIxMDEyMjI1WhcNMjUxMjI4MDEyMjI1WjAYMRYwFAYD VQQDDA02OTQ3NGJkMi1mOGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Tm6ZBC1iKvpsIYR1XqXtly0LRIlZkr642CuGuHYR9I2Qv265Qwl79r+Yb7I 0ADOZxmNQXC4g5WK7WkS2wQK0QpRWjYJBmhHVvyYf2eyvRMgXC3v9S4mOo746rtL sACYoDQSpdDJzotbLCpJi/Zmg1qAeuVk9Dq2bjoRTTwDTCgF28pWsiKsj9gMVUXF xhdgXOY6RtEb06T+Y5p+X8N5aQXKHBL7rMmizl6BRvAie8CxhLSCtpW3++mGGPtz l33HZmdodXt3HzMh0BDYprU7fCo3q93qyogX4Tr8rmI9gE2WnObkdZoEEYEkMZxb wWbeaKA70S9ofXOBx5yPNY7oKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNny6pd1 VukhP88maNpyOFEg2zSoMB8GA1UdIwQYMBaAFFig3dAlVcg3SG1VQ1GG3MV2oSg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEMzMC8wRjFGN0NFODk2 NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlEZEliVlZEVVliY3hYYWhL RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLRGQwQ1ZWeURkSWJWVkRVWWJjeFhhaEtENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEMzMC8wRjFGN0NFODk2NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlE ZEliVlZEVVliY3hYYWhLRDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkKcZMUbSfqTVBqNNvSjtIJ50tQKOYX0vAGCSQ1I17oKzwcLnI4Axr hvxSaiNZ8/AHv+i4tLgFriGQNEWoQV4U3Be5F8CeXptzT9gUHpFZnHklpHh62LZb PuhmX7sinlggOk1+HHPk50U+joketMd9sBQj2BjJoYJl+Mqa+urAGq6RhWbxIAPW UbfQf9elF3QpiRxOBiJN3IblPUR9vboScaoQRSTdt/Sg4I2bc/y99Q8QISpJs44d XbBOrYr21F0X+CufmOO2ayHHagKBoyt/euoovfBziF3EE6lNbzy+gnNNUC9L+LkP YiMu9w0e3p1B6Qapz7xL5zpB4IowkMMt -----END CERTIFICATE-----Generated at Sun Dec 21 04:43:07 2025 by rpki-client