This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
File: WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft (raw, json)
Hash identifier: RwwW/NlAbZr/MSaxQxX0WzvzwnnBhj2UoX0DAWMFc5k=
Subject key identifier: D9:7C:75:E1:D5:0B:0D:59:4B:D1:A9:54:B0:6C:11:78:23:24:F2:61
Authority key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5
Certificate issuer: /CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
Certificate serial: 0C31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
Manifest number: 0BFA
Signing time: Sat 06 Dec 2025 18:13:27 +0000
Manifest this update: Sat 06 Dec 2025 18:13:26 +0000
Manifest next update: Sat 13 Dec 2025 18:13:26 +0000
Files and hashes: 1: WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl (hash: xf7gJTt+05sFiYwzsQu0jitGxcrGSdmjhk+A4c9rD8A=)
2: 140D52F2854B11EAACB2FE39C4F9AE02.roa (hash: lUd8khrscqt2/SuycXkak1zRZ1/D9J3OfZ7NRIMFXKQ=)
3: 1495D7EE854B11EAACB2FE39C4F9AE02.roa (hash: 4kFdxqJRF+UtayrYr11Ti8tQHel/QxYA6eu1cTGYKjY=)
4: 21A731506C9B11ED93A7513AC4F9AE02.roa (hash: 8dlna4OSSEor7RjmsLK1ACn3Ob2tSwzfuy2V+7m0V0I=)
5: 474DC6748C2B11EA90152018C4F9AE02.roa (hash: S/XkCg/mwHSXROr2dfVl+A2MAUNuvm6ulkjfEMhHMjg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl
rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3121 (0xc31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91274A4, serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
Validity
Not Before: Dec 6 18:13:26 2025 GMT
Not After : Dec 13 18:13:26 2025 GMT
Subject: CN=69347247-ff45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fc:6a:32:0c:d0:16:c1:d0:0e:ba:52:be:c4:
26:12:be:b6:64:29:d1:d0:fe:e2:d0:8a:aa:9c:59:
dc:09:4b:a2:33:79:a7:ea:c0:b0:f9:1b:c6:9b:63:
24:c0:41:2f:9a:29:d0:80:4c:1d:87:c8:bb:d1:74:
2a:37:a5:c7:8e:77:ed:fe:4c:68:47:77:0a:41:0e:
72:da:2f:48:69:85:1c:58:21:25:a1:55:58:72:3b:
f8:8e:71:f6:9b:6c:61:a0:32:be:7c:86:ea:23:22:
a3:ad:1a:bc:01:20:91:c5:b0:8a:91:3c:35:58:ba:
d2:8a:a9:c8:65:a3:42:ab:05:93:f7:ab:1d:31:99:
b7:a0:59:c1:c7:9c:bf:bb:6e:26:90:6d:e8:e2:98:
86:95:c0:b4:01:a7:5d:99:0c:d2:04:c8:46:86:4e:
ec:3a:4e:8c:3c:6f:5c:55:b9:fa:9f:e8:49:8f:8d:
a4:7d:2b:7e:40:de:ef:04:de:80:44:da:f7:86:75:
00:24:4f:b2:a7:7a:50:81:a2:3c:ee:39:06:12:33:
70:62:f9:30:7c:9f:5d:60:6b:eb:c6:17:21:70:de:
89:e4:cf:99:63:5b:25:b5:24:65:69:f4:e1:e1:ea:
1d:16:d9:94:0e:e3:25:b9:bd:18:fa:d5:01:c7:89:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7C:75:E1:D5:0B:0D:59:4B:D1:A9:54:B0:6C:11:78:23:24:F2:61
X509v3 Authority Key Identifier:
keyid:59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:9f:56:bc:0f:0b:61:cd:26:bc:e3:92:da:27:7f:39:6a:95:
86:8b:72:eb:2f:2b:7b:94:3a:c9:07:4b:f2:d5:27:5d:1b:df:
1e:3c:c8:41:7a:33:6a:43:05:10:b3:41:c0:3e:a5:20:f7:27:
ce:bd:30:bb:d9:ea:29:39:57:18:dd:32:df:0d:4c:90:71:f9:
c2:78:c2:ea:f2:93:78:60:83:0e:6f:5c:85:85:1f:23:b1:43:
40:d2:2b:ae:db:71:c6:5a:33:33:27:4c:17:d9:ab:08:db:c9:
a1:a6:83:df:23:98:9f:98:31:50:7b:8a:1c:94:70:21:ea:c9:
5b:7d:bc:37:5b:eb:c8:d2:3d:ef:c9:3c:32:ed:8f:4c:86:75:
a9:9c:86:d0:d1:21:be:2c:ae:23:d7:89:0c:20:36:2a:4d:86:
4f:28:e0:cd:48:eb:c2:55:a2:18:00:7f:fa:49:ed:c7:e6:84:
10:d9:7e:00:5b:1c:e5:50:fe:56:92:99:71:6e:99:ea:f7:e3:
10:4d:e2:84:52:2a:4e:97:a2:ef:10:24:9e:aa:48:e4:65:f2:
df:9a:42:0b:8b:e0:c3:b7:ca:df:71:a8:9b:72:c2:bb:63:d6:
6b:1a:18:82:ca:37:e3:39:b4:fe:69:f2:a4:a0:d6:5a:56:48:
07:6e:68:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc0QTQxMTAvBgNVBAUTKDU5NTY2NUZGODVFNEU0NzczNzFGNzU0MUY3MjA5REMy
NDRFNjBDQTUwHhcNMjUxMjA2MTgxMzI2WhcNMjUxMjEzMTgxMzI2WjAYMRYwFAYD
VQQDEw02OTM0NzI0Ny1mZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5vxqMgzQFsHQDrpSvsQmEr62ZCnR0P7i0IqqnFncCUuiM3mn6sCw+RvGm2Mk
wEEvminQgEwdh8i70XQqN6XHjnft/kxoR3cKQQ5y2i9IaYUcWCEloVVYcjv4jnH2
m2xhoDK+fIbqIyKjrRq8ASCRxbCKkTw1WLrSiqnIZaNCqwWT96sdMZm3oFnBx5y/
u24mkG3o4piGlcC0AaddmQzSBMhGhk7sOk6MPG9cVbn6n+hJj42kfSt+QN7vBN6A
RNr3hnUAJE+yp3pQgaI87jkGEjNwYvkwfJ9dYGvrxhchcN6J5M+ZY1sltSRlafTh
4eodFtmUDuMlub0Y+tUBx4ltxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNl8deHV
Cw1ZS9GpVLBsEXgjJPJhMB8GA1UdIwQYMBaAFFlWZf+F5OR3Nx91QfcgncJE5gyl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzRBNC9EREJFNDIwQTMw
RjAxMUVBOTg1OUFFNTNDNEY5QUUwMi9XVlpsXzRYazVIYzNIM1ZCOXlDZHdrVG1E
S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dWWmxfNFhrNUhjM0gzVkI5eUNkd2tUbURLVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzRBNC9EREJFNDIwQTMwRjAxMUVBOTg1OUFFNTNDNEY5QUUwMi9XVlpsXzRYazVI
YzNIM1ZCOXlDZHdrVG1ES1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFn1a8DwthzSa845LaJ385apWGi3LrLyt7lDrJB0vy1SddG98ePMhB
ejNqQwUQs0HAPqUg9yfOvTC72eopOVcY3TLfDUyQcfnCeMLq8pN4YIMOb1yFhR8j
sUNA0iuu23HGWjMzJ0wX2asI28mhpoPfI5ifmDFQe4oclHAh6slbfbw3W+vI0j3v
yTwy7Y9MhnWpnIbQ0SG+LK4j14kMIDYqTYZPKODNSOvCVaIYAH/6Se3H5oQQ2X4A
WxzlUP5Wkplxbpnq9+MQTeKEUipOl6LvECSeqkjkZfLfmkILi+DDt8rfcaibcsK7
Y9ZrGhiCyjfjObT+afKkoNZaVkgHbmgD
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:44:57 2025 by rpki-client