This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
File: wm9G_ZlSs686fXFd4b86YeJceYo.mft (raw, json)
Hash identifier: kbkoPBNmUJI3y9BWwVbrSARgvbnsU/zGEn/1+9Gg8v0=
Subject key identifier: F5:03:41:B8:E8:F4:6D:38:4A:62:B2:2C:78:64:8D:4E:74:8B:8D:98
Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A
Certificate issuer: /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
Manifest number: 0118
Signing time: Fri 05 Dec 2025 02:59:49 +0000
Manifest this update: Fri 05 Dec 2025 02:59:49 +0000
Manifest next update: Fri 12 Dec 2025 02:59:49 +0000
Files and hashes: 1: wm9G_ZlSs686fXFd4b86YeJceYo.crl (hash: 2D3n1LKVOQNaoXu2IiRnm9UU7zDfr/Wtiiyxb9f6LVY=)
2: 39032028BB8211F0ACBBE862C4F9AE02.roa (hash: GaLLwV5AtE+d32/hOzBxSXpg7cSHrokuqZVF2wvFzkM=)
3: D2F65B3E2D3C11F089979B7CC4F9AE02.roa (hash: 6J9kztjsMZWsG1YwYpd9mAhESyWByZnQbhLzb1Wj+fo=)
4: BD956DA243A811F0B2160F4CC4F9AE02.roa (hash: DPMo9JSOcY0Ad4D94vkT1qT0OK/brrqmASVUw6EiS9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl
rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117CE3, serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
Validity
Not Before: Dec 5 02:59:49 2025 GMT
Not After : Dec 12 02:59:49 2025 GMT
Subject: CN=69324aa5-497a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:59:02:da:51:26:7e:11:d8:99:18:d2:70:
4b:6c:6d:00:b8:0e:c8:90:1b:eb:76:31:3e:55:86:
00:0e:7d:61:0d:d2:8e:26:9d:60:57:58:9a:79:18:
26:38:53:40:73:5e:bd:1d:1b:1b:1b:4f:98:3e:f0:
c2:7e:42:bf:13:d4:bd:e6:78:28:ac:03:fb:e8:65:
fc:3c:a5:47:8c:46:6b:2b:05:c3:6a:72:7e:14:ab:
7f:7e:00:b4:89:0c:4f:f7:74:5d:30:2d:93:dc:af:
d5:de:55:fd:d4:d7:79:7c:67:57:88:a4:90:6d:ab:
60:f9:0d:0a:7f:9b:fe:b2:9f:9f:c2:6c:59:c5:d8:
96:b1:79:12:8b:af:8f:3b:0a:d5:a0:d5:d9:c4:41:
58:c4:5e:7f:2d:61:92:f7:ca:37:6e:20:a6:93:20:
cd:cf:7f:d7:6e:95:77:99:a8:2d:76:75:c7:24:22:
2e:85:a1:8b:e9:ed:89:99:35:12:d9:29:be:5e:c8:
88:d1:d6:f7:b9:e5:fe:ce:e0:57:aa:d5:6a:0b:46:
f8:de:7b:76:b0:55:79:1f:e0:bf:61:71:ae:3e:7e:
48:e0:77:4c:92:9e:b6:66:e7:39:6e:f5:83:d1:99:
74:23:17:e0:c4:78:1b:dd:fe:80:24:8c:09:b8:83:
f8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:03:41:B8:E8:F4:6D:38:4A:62:B2:2C:78:64:8D:4E:74:8B:8D:98
X509v3 Authority Key Identifier:
keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:04:19:9c:1a:1b:af:bd:8a:43:ec:f1:9b:3b:24:5c:8d:9e:
42:ec:90:c1:b3:13:78:e6:f7:ce:2d:e1:df:8c:1a:6e:3e:62:
94:bb:0b:37:7f:41:55:f9:be:10:00:80:c4:9b:a6:f3:89:d3:
60:f7:87:a4:17:a4:13:e6:47:b5:ed:f3:e6:ba:8a:47:66:0c:
5b:71:f3:4c:0a:3c:d1:dc:40:d4:2e:a6:34:c6:6f:64:ae:96:
e1:3f:72:84:c7:99:27:bb:b4:b8:04:9b:f5:aa:d2:f1:c1:a4:
c6:6d:c3:48:fe:ce:54:1a:e6:d9:67:37:16:b2:67:22:0e:be:
18:93:96:e9:0f:1b:00:35:08:2c:31:95:21:ab:85:1a:84:b9:
35:94:e0:c5:da:3c:04:e1:43:46:63:9a:34:33:66:73:c4:d4:
81:90:49:53:fb:6a:f5:c7:b2:c2:93:c5:22:15:de:e9:52:2d:
f0:e4:91:e3:c8:5b:eb:15:2a:93:4c:ab:64:bd:de:4a:d3:46:
63:e7:7f:b6:15:8f:a2:d0:0e:67:bf:4a:a0:b1:61:06:d3:3e:
c0:97:5d:b9:78:10:39:05:bd:9e:61:aa:a3:91:e2:5f:d8:c6:
72:32:a4:78:33:c9:82:de:ec:97:44:2c:e3:46:a4:dc:04:4e:
f8:4f:c1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:13:54 2025 by rpki-client