This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
File: WF3cT9n54xQAXzcZj9HiLmgknes.mft (raw, json)
Hash identifier: dvq5fNafKfvTjZzCOdIUPPX10Sd6bgOWDtKDq7T2lJw=
Subject key identifier: C2:8E:67:A4:41:B1:7F:D4:41:FC:04:03:8E:8C:BC:1C:CE:D6:99:A8
Authority key identifier: 58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB
Certificate issuer: /CN=A912871A/serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
Certificate serial: 04BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
Manifest number: 04B6
Signing time: Thu 04 Dec 2025 22:26:07 +0000
Manifest this update: Thu 04 Dec 2025 22:26:07 +0000
Manifest next update: Thu 11 Dec 2025 22:26:07 +0000
Files and hashes: 1: WF3cT9n54xQAXzcZj9HiLmgknes.crl (hash: n6+TZLzfTLgRBGBlpuMOLYXI6CvH5prvE3B1/UGMJW4=)
2: 5431D022524211ECA52D990FC4F9AE02.roa (hash: ngVDpB9EeVUj1wtwuXlGNZD63XjFCao61CO9K4ARPTk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl
rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1211 (0x4bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912871A, serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
Validity
Not Before: Dec 4 22:26:07 2025 GMT
Not After : Dec 11 22:26:07 2025 GMT
Subject: CN=69320a7f-fb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:38:e6:c3:1d:be:e8:9e:3c:6c:8a:83:5e:
7d:4f:08:23:98:02:7e:87:19:9d:ba:80:c7:07:11:
6c:46:be:d6:91:8c:df:61:4c:e9:f5:84:ac:40:e9:
b8:57:0e:5e:82:df:4c:7e:0b:f6:bb:9c:9a:be:6c:
8f:fa:49:d5:2c:58:eb:fd:d2:2d:1b:d9:0c:96:7f:
36:92:7f:05:e1:3b:bc:6c:99:05:ec:2e:ad:ce:ac:
89:0b:db:66:57:9f:52:02:cb:1e:cf:de:0b:66:8e:
11:6d:cc:40:5a:8f:ad:53:6b:cf:9e:ec:69:58:ef:
17:f7:c8:8c:96:6e:d2:45:4e:b3:d4:cc:74:2f:7a:
52:49:e9:07:8f:1e:98:da:7d:d9:55:ba:1f:8b:17:
09:3d:53:23:67:70:4c:61:81:34:c9:3e:8a:5b:bd:
10:19:6f:53:8a:70:67:ef:78:af:49:c0:5f:ef:e8:
37:ef:97:d8:ea:b1:29:12:0c:97:74:4b:d4:49:b2:
d7:0e:b8:ff:ad:4f:98:4f:9a:6b:9b:80:1b:fa:26:
c5:e4:42:ff:52:74:28:16:00:77:58:c2:c0:d9:51:
5b:e3:56:3d:9d:42:38:d1:49:9d:a0:a3:67:fc:d4:
05:dd:f5:0c:ac:76:73:2e:00:ec:cf:f9:2a:7f:49:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8E:67:A4:41:B1:7F:D4:41:FC:04:03:8E:8C:BC:1C:CE:D6:99:A8
X509v3 Authority Key Identifier:
keyid:58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:f1:69:0f:65:05:58:8a:42:7f:85:95:e0:9e:85:94:71:7e:
fc:01:3c:c5:4b:02:ca:55:61:17:97:2e:69:cd:87:07:1a:dc:
fd:5e:09:c6:65:8e:53:e5:3b:0c:7e:90:88:7e:b9:29:06:64:
38:24:f1:72:33:c3:ce:bd:3c:1f:c5:a0:52:4d:5b:b0:6a:62:
25:a3:10:ff:ac:f0:0c:25:4c:42:da:f0:7a:9a:e0:4e:54:85:
98:c2:90:35:cd:7f:ff:02:06:8c:7b:1c:9e:5b:6c:44:bb:55:
ec:f0:54:1c:2f:e4:ed:52:02:75:51:f8:8e:64:f5:7b:e3:fd:
07:f8:bd:bc:56:a3:47:c1:a0:9d:42:35:a6:dc:06:4d:fe:ea:
7e:01:2e:59:4d:17:12:75:40:df:23:1e:4b:ee:11:61:50:31:
52:b3:90:88:d1:c9:ab:6a:c0:59:d8:0a:9d:a8:8d:0c:d0:2e:
f9:8c:5e:82:1c:1a:4a:49:a4:02:bb:65:59:ef:5e:f3:c1:e5:
50:36:1c:33:74:31:2b:9b:89:ca:a0:2b:d8:bb:c0:e8:8c:67:
1e:0d:d9:d4:f7:66:2e:fd:9a:ae:ab:d5:63:be:c8:08:9c:00:
1b:8b:a7:04:cf:7f:a2:e1:1e:8a:a8:6f:7b:d7:d4:44:26:6f:
b9:64:e1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:07:20 2025 by rpki-client