This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
File: wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft (raw, json)
Hash identifier: eda6un3NuRS1PX4ur8lUNxqbp/hGaXDHp0bZSFjy+wY=
Subject key identifier: 7B:37:CC:3F:98:E1:8E:AD:64:AE:77:5F:D1:5C:28:F1:B9:9A:F9:5D
Authority key identifier: C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4
Certificate issuer: /CN=A9111D36/serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
Certificate serial: 022A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
Manifest number: 0224
Signing time: Fri 05 Dec 2025 00:29:24 +0000
Manifest this update: Fri 05 Dec 2025 00:29:23 +0000
Manifest next update: Fri 12 Dec 2025 00:29:23 +0000
Files and hashes: 1: wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl (hash: 7IXlSeGrxa1Zy/FF1HI/InQ+e+mt8Tgp91h+Nd8tfPw=)
2: 949A543291B011EDA9CB747CC4F9AE02.roa (hash: IXWkWs++k8QNiBEV5gRLUUd6hmjdG0gw9M6G9nB2OC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl
rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111D36, serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
Validity
Not Before: Dec 5 00:29:23 2025 GMT
Not After : Dec 12 00:29:23 2025 GMT
Subject: CN=69322764-600a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:de:93:ee:d1:aa:e4:d1:3c:ec:03:4a:be:be:
cc:d7:61:38:f6:96:30:28:08:af:46:f1:99:30:d8:
a3:d3:7a:5d:b3:51:b0:5a:c4:27:f3:9a:e3:71:7b:
2d:7b:7d:70:50:79:91:ec:23:56:ca:47:d7:77:a5:
d0:9a:6a:80:06:98:5c:9a:8f:46:9c:d7:3c:8e:2a:
dd:cf:4f:5b:b2:19:02:a0:fb:45:0a:28:20:94:b9:
e5:af:66:03:70:6f:91:f1:b1:e3:bc:7f:ac:b9:e9:
86:dd:4c:06:46:d0:71:c8:68:9e:4f:1c:0a:37:48:
24:22:74:68:a7:cb:22:fa:c8:fb:52:f9:6a:f6:74:
ca:fd:49:bd:15:92:a7:de:1a:54:d8:10:d1:0c:9b:
c1:05:3f:c7:87:ad:64:89:0b:d2:f3:7a:39:1b:59:
ae:ba:9f:a1:70:09:b7:59:b6:1c:2a:69:6c:37:cc:
d5:a0:fe:61:7b:11:57:19:29:85:30:47:1a:cf:90:
ef:50:5a:2b:5c:9c:10:08:85:6f:30:63:74:7a:57:
37:42:21:dd:96:fe:49:73:41:ba:aa:fc:cf:68:24:
2a:65:70:fa:6c:d9:a2:dc:33:f8:dc:45:85:0d:dc:
a2:70:07:79:74:c5:43:a9:11:af:91:a7:24:3d:59:
9f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:37:CC:3F:98:E1:8E:AD:64:AE:77:5F:D1:5C:28:F1:B9:9A:F9:5D
X509v3 Authority Key Identifier:
keyid:C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:96:e8:ab:80:8f:29:a5:18:a5:5e:9b:71:40:b3:b9:c7:be:
89:99:5e:e6:85:9b:28:f7:e9:55:ae:67:4d:5c:c5:22:1e:c7:
aa:3c:1b:6b:24:ef:90:53:53:e8:e8:64:ab:5e:4c:74:0c:d6:
99:6e:b0:81:46:75:5d:f6:cc:2e:a8:a9:9b:0c:31:96:dc:b9:
c4:6f:7c:23:6b:11:be:0d:dc:0f:8a:0c:e9:59:97:81:75:d5:
e5:b9:5d:5b:99:47:12:e6:76:97:d3:21:84:b0:ba:ab:1d:53:
ce:e7:23:e5:fd:49:75:40:66:b5:ec:bf:a4:70:f6:6b:45:94:
f3:29:5f:0a:b6:d9:39:77:c0:d1:17:a6:42:60:57:c7:7f:35:
63:23:3b:dd:1e:41:17:8a:04:c3:19:d7:0b:19:06:31:93:b7:
e4:59:78:52:3b:99:3c:db:43:95:76:c7:67:6e:77:e9:3a:5e:
11:25:01:11:8d:ca:cb:75:07:2c:2b:87:aa:4a:d5:b4:5a:1f:
7a:38:ff:aa:a0:3d:ba:5f:65:f7:a3:12:8d:2f:ed:cc:bf:92:
6c:00:fd:6f:3a:09:aa:14:55:d2:05:c2:66:43:01:1b:71:74:
a5:e7:ef:fc:39:65:73:66:bb:2e:33:48:4f:5b:4f:bd:70:ad:
42:16:88:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFEMzYxMTAvBgNVBAUTKEMwQUVGNjI1QUY5RDUwNEFFODQ3RjY5MjNEQTg5MTA2
OUM5MDAzRjQwHhcNMjUxMjA1MDAyOTIzWhcNMjUxMjEyMDAyOTIzWjAYMRYwFAYD
VQQDEw02OTMyMjc2NC02MDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA196T7tGq5NE87ANKvr7M12E49pYwKAivRvGZMNij03pds1GwWsQn85rjcXst
e31wUHmR7CNWykfXd6XQmmqABphcmo9GnNc8jirdz09bshkCoPtFCigglLnlr2YD
cG+R8bHjvH+suemG3UwGRtBxyGieTxwKN0gkInRop8si+sj7Uvlq9nTK/Um9FZKn
3hpU2BDRDJvBBT/Hh61kiQvS83o5G1muup+hcAm3WbYcKmlsN8zVoP5hexFXGSmF
MEcaz5DvUForXJwQCIVvMGN0elc3QiHdlv5Jc0G6qvzPaCQqZXD6bNmi3DP43EWF
DdyicAd5dMVDqRGvkackPVmfoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHs3zD+Y
4Y6tZK53X9FcKPG5mvldMB8GA1UdIwQYMBaAFMCu9iWvnVBK6Ef2kj2okQackAP0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUQzNi9GQzEzQTNFNDkx
QUExMUVEODBDMTdBNUVDNEY5QUUwMi93SzcySmEtZFVFcm9SX2FTUGFpUkJweVFB
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dLNzJKYS1kVUVyb1JfYVNQYWlSQnB5UUFfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MUQzNi9GQzEzQTNFNDkxQUExMUVEODBDMTdBNUVDNEY5QUUwMi93SzcySmEtZFVF
cm9SX2FTUGFpUkJweVFBX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUluirgI8ppRilXptxQLO5x76JmV7mhZso9+lVrmdNXMUiHseqPBtr
JO+QU1Po6GSrXkx0DNaZbrCBRnVd9swuqKmbDDGW3LnEb3wjaxG+DdwPigzpWZeB
ddXluV1bmUcS5naX0yGEsLqrHVPO5yPl/Ul1QGa17L+kcPZrRZTzKV8Kttk5d8DR
F6ZCYFfHfzVjIzvdHkEXigTDGdcLGQYxk7fkWXhSO5k820OVdsdnbnfpOl4RJQER
jcrLdQcsK4eqStW0Wh96OP+qoD26X2X3oxKNL+3Mv5JsAP1vOgmqFFXSBcJmQwEb
cXSl5+/8OWVzZrsuM0hPW0+9cK1CFoge
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:10:38 2025 by rpki-client