This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
File: WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft (raw, json)
Hash identifier: x+4Frw2XBHMkroT6nTpYpmAjgTSGlAs1vCCy3YgBztg=
Subject key identifier: 86:49:33:40:9A:56:7A:9F:20:80:F1:1A:38:32:DC:D1:1F:9C:FD:32
Authority key identifier: 59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76
Certificate issuer: /CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876
Certificate serial: 021C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
Manifest number: 0219
Signing time: Sun 07 Dec 2025 00:44:35 +0000
Manifest this update: Sun 07 Dec 2025 00:44:35 +0000
Manifest next update: Sun 14 Dec 2025 00:44:35 +0000
Files and hashes: 1: WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl (hash: qQQiDlqLwUFYJVWrYy8BdFHgkzHX3a/0MOjCVryZ0lA=)
2: 8FA08DC29C8511EDB3506E5AC4F9AE02.roa (hash: Op5FiTtFCqiSuAmQrIrvzBwaHPhkdRDyeJuZKNddGfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl
rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275A6, serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876
Validity
Not Before: Dec 7 00:44:35 2025 GMT
Not After : Dec 14 00:44:35 2025 GMT
Subject: CN=6934cdf3-98df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:c3:4c:db:e2:fb:28:fc:35:91:e1:67:4d:
55:7a:61:c2:1e:ba:87:60:61:63:c6:b8:d5:3f:2b:
32:84:22:20:3c:6c:75:bc:d4:29:97:46:d8:52:d6:
3c:1f:e6:a7:64:3b:e8:6d:dd:44:29:7e:7a:2e:87:
59:04:9a:7d:f4:50:82:8d:cf:3e:a1:30:04:95:04:
2d:49:99:d5:f1:f5:fd:97:c8:5e:74:f7:f9:51:31:
ef:e6:d5:e8:70:d5:86:7a:79:8a:d0:40:07:e0:93:
00:4c:ba:c6:cb:33:0d:ce:4b:63:49:2d:81:fa:2c:
54:7b:9b:59:87:05:67:04:50:40:a9:e8:7d:38:09:
5d:97:b9:cc:0b:4b:36:6c:67:bc:a7:b5:7f:e9:9d:
1a:87:1d:45:49:7d:9f:64:a0:4f:9a:56:0c:f3:95:
d3:5a:82:cf:1d:4c:7f:d2:3d:57:89:9b:b3:56:cf:
97:d9:ec:da:26:c8:4a:a6:f3:da:cd:aa:92:73:c9:
f1:9c:74:d9:d5:2c:a8:44:68:c0:52:13:b1:76:aa:
02:a8:55:12:76:79:01:a2:8d:7c:e0:55:f0:ad:c8:
c6:39:74:e7:8d:2a:f3:35:ce:2c:4a:38:a0:f2:98:
aa:c5:75:1a:84:35:68:58:1c:9b:fe:dc:7c:da:6b:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:49:33:40:9A:56:7A:9F:20:80:F1:1A:38:32:DC:D1:1F:9C:FD:32
X509v3 Authority Key Identifier:
keyid:59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:93:d9:fd:14:ad:f7:62:79:a4:aa:d3:66:93:95:73:e3:7a:
ae:98:17:30:17:15:58:17:5c:05:12:60:24:82:72:16:58:2b:
f3:ea:e5:d8:b1:e4:f5:67:37:12:dd:da:b8:23:fd:51:dd:b5:
fc:ee:28:88:7b:95:bb:d6:fa:57:35:0c:81:ec:11:73:f5:7e:
56:89:84:0b:b8:a7:44:ff:55:e4:fd:bb:7f:d4:6c:70:e5:ec:
6b:a4:a7:56:5b:d6:a8:73:7f:45:68:bd:80:af:03:db:06:1f:
6d:da:72:a2:a8:d3:e8:1d:37:8d:d7:cd:53:50:95:eb:56:ac:
53:26:a2:55:97:cf:e2:c1:8b:8e:2e:ce:a4:e3:b9:5f:5a:a3:
5e:af:28:1e:0f:8c:3c:0f:02:24:2b:34:52:0c:45:65:cc:a1:
6e:ae:77:4a:63:c2:c6:1c:1f:dc:f2:e7:c7:6a:d8:2a:0a:6f:
25:d8:77:89:68:b7:bf:fa:45:54:8a:70:48:79:d2:82:f1:64:
d9:d1:72:29:97:9e:95:71:22:ae:a8:0a:26:f7:88:ff:7f:85:
2e:40:ad:80:56:b7:b0:66:5d:57:a3:a4:29:8f:e2:a6:28:1e:
e5:11:6f:2b:b1:4f:5e:65:dc:22:15:1f:5e:4d:90:3b:05:7f:
1b:53:11:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:48:05 2025 by rpki-client