This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
File: WfIhqdcBRydJAka2joLCl2fHDTg.mft (raw, json)
Hash identifier: SmTW1H6GMi1w9IITCbYT0bJ2zBkslHM4CjWzrpVit3o=
Subject key identifier: C5:F9:E8:78:00:62:AF:41:65:16:1D:92:81:27:18:E5:77:59:74:2A
Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38
Certificate issuer: /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38
Certificate serial: 033F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
Manifest number: 033A
Signing time: Sun 25 Jan 2026 00:12:08 +0000
Manifest this update: Sun 25 Jan 2026 00:12:08 +0000
Manifest next update: Sun 01 Feb 2026 00:12:08 +0000
Files and hashes: 1: WfIhqdcBRydJAka2joLCl2fHDTg.crl (hash: It0LCnj0maOMqXQCAD12Ie06U9OEUz3cCCYn+uPEkoI=)
2: A033FFB4F7F511ECADEAB528C4F9AE02.roa (hash: S2C+VMQaXNDpZ4wrKaK1oLzxt+RZ0aWeTadlNJ8ZR5Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl
rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 831 (0x33f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CE21, serialNumber=59F221A9D7014727490246B68E82C29767C70D38
Validity
Not Before: Jan 25 00:12:08 2026 GMT
Not After : Feb 1 00:12:08 2026 GMT
Subject: CN=69755fd8-fe76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:80:7e:ff:44:9a:25:fd:00:5a:62:50:97:63:
3b:5c:5e:65:9a:d6:48:a3:ae:ef:69:28:22:d4:69:
eb:0d:22:a6:9e:c0:bb:53:25:cb:5a:07:41:bc:ac:
37:ec:30:84:41:7f:64:82:91:a8:07:31:90:50:10:
b0:26:f9:66:10:ef:14:93:48:b6:2b:1f:d7:12:2b:
78:5d:db:2d:3f:1e:a7:80:df:59:d8:b6:78:36:ad:
67:94:3d:52:de:aa:21:6f:1f:d2:ee:2a:cc:f7:7a:
18:e7:11:b4:5f:a2:64:3f:02:54:4d:5d:5e:38:12:
0c:8e:bc:9d:13:97:94:01:33:64:7d:b7:71:6e:b1:
6a:3b:9c:2e:ad:4a:e1:b1:9f:0a:61:57:5e:9a:fc:
a4:4f:cf:66:34:15:ab:8d:96:fb:e9:78:b7:6f:b2:
31:e1:52:14:75:23:0d:9e:3b:ab:a4:b3:9d:47:9e:
62:e8:66:53:da:cf:86:32:1e:76:d9:57:c6:b5:fb:
74:65:75:75:f6:8f:c8:66:9e:9c:b1:48:a2:ec:19:
38:76:0c:13:39:d6:2b:05:42:e4:c1:2d:4a:04:9f:
20:2d:54:1c:9c:b4:b0:3a:26:f2:60:75:a7:83:17:
5f:ca:99:41:48:f5:da:35:64:d0:17:15:aa:85:2a:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F9:E8:78:00:62:AF:41:65:16:1D:92:81:27:18:E5:77:59:74:2A
X509v3 Authority Key Identifier:
keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:90:7d:af:91:49:aa:d1:5f:9c:44:1c:c8:0f:c4:80:4f:d5:
dd:5b:00:51:7f:8a:77:c4:9b:eb:6b:c0:82:fd:f3:23:f8:f0:
a8:e4:e1:5e:10:7b:28:99:d0:aa:37:ef:88:a0:d1:68:64:c2:
10:ce:b3:64:17:60:5b:b0:0d:2a:de:06:54:1e:60:59:65:c3:
71:0b:25:94:95:e1:ea:b8:60:b1:5d:bd:fa:e7:ee:76:0b:f4:
b6:06:6e:e3:78:30:4e:3e:2f:8f:c1:32:cc:12:0f:13:e2:4c:
af:7f:b1:f4:b0:f6:53:66:f7:82:b6:ef:20:a2:7a:f9:08:f4:
53:78:47:b0:47:c6:33:6a:19:eb:c6:07:c9:80:fc:a5:56:1d:
e3:d9:55:6a:e5:47:3a:73:95:2a:91:9d:1e:83:72:42:63:92:
3c:fe:12:fd:a0:e5:61:68:b3:29:80:29:ae:c4:ca:02:a9:6f:
f5:13:2e:55:26:43:74:b6:c2:90:1b:8d:11:ea:22:35:3c:20:
88:2d:64:78:87:62:25:4d:e1:57:ed:8e:f8:79:33:cf:32:aa:
d7:b7:ea:8d:5f:0a:4f:09:94:18:82:77:76:7d:f6:8d:0b:a5:
9e:1f:ba:65:10:8b:11:ef:17:5c:cb:f4:c7:05:a6:42:ea:d7:
6f:9a:39:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:22:58 2026 by rpki-client