This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json)
Hash identifier: f/rjMHawKZ23Oan+yeINRnJZPUWB1EmoU/vBc+NmR+c=
Subject key identifier: 47:16:77:0A:99:B7:D3:E9:52:4E:05:C4:DC:2D:8D:B3:E4:8D:AD:87
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial: 0BDF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
Manifest number: 0B9A
Signing time: Sat 24 Jan 2026 18:41:12 +0000
Manifest this update: Sat 24 Jan 2026 18:41:12 +0000
Manifest next update: Sat 31 Jan 2026 18:41:12 +0000
Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: XTbtF86Wl+IJCGxeon5jXCa6KukP3AH1brpLRkwWxVM=)
2: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: 59n+gu+EUda4F6OyRblddZCM/Oz6PZd0iuMKXNtGtAQ=)
3: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: 2WI4sxtYmY5FbIMN92teU/BhJO18tsufNaqCJaxaAYc=)
4: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: od3A6kHPsKQb/WA2j5c2wSIgSUJ4UzMllV3CZbEVjw8=)
5: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: lGL0VdzbPRk7U+2MSj/Z4BFvq55DtucvPe+Abmi+lZo=)
6: A30B6882B3DE11F0B2D83330C4F9AE02.roa (hash: 1s0ebn+BQVw0yPfQmnoFsQomr8t/uDwXlJRNpXKjLCg=)
7: 04231ECC326F11F0B0723439C4F9AE02.roa (hash: wpvZSX4Ai883Xdr1hC5KTmB0OUTHuAgLOOQUpAhUGNw=)
8: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: bv9UqKRpe2dK9awx88ukTzuBQtbCq2A6so4i83ApdUU=)
9: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: 7ysdJMJMSfwY+oJifcqCNWD3yAzN5pEUaePQMVaSij8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:41:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3039 (0xbdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Validity
Not Before: Jan 24 18:41:12 2026 GMT
Not After : Jan 31 18:41:12 2026 GMT
Subject: CN=69751248-4880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e8:a4:7f:f6:a2:b3:d6:f4:1e:e8:e8:ce:3a:
6d:46:94:a3:4b:a2:62:8f:4c:a4:34:92:5e:61:c9:
d3:1d:7d:d4:3f:98:c1:d1:a7:00:74:d2:e3:71:a0:
68:2c:6d:4b:25:46:3b:56:5b:49:ea:d3:28:ea:35:
7c:14:2d:3e:ca:44:18:ea:d3:be:35:3c:da:d5:94:
b6:42:a7:95:8d:fe:ba:f3:13:ca:04:89:9b:59:75:
e8:b6:eb:9f:eb:b4:3b:e7:15:f2:f5:ee:6d:01:31:
52:50:d7:25:ff:9b:2a:7a:94:cc:a5:19:24:ff:73:
74:8d:4a:03:3d:14:87:7a:9e:be:83:5a:e9:51:21:
cb:83:44:1e:04:8d:93:fa:9b:2d:a1:a9:59:09:3b:
a3:13:17:ae:68:0e:9f:d3:c1:a5:72:eb:21:be:45:
82:84:c0:3d:4f:84:95:33:0e:48:40:09:20:ba:ba:
df:59:22:62:68:d9:5f:42:76:37:b5:0b:09:2b:8e:
a2:11:48:d7:48:5e:26:33:e1:bb:d0:d8:45:4b:4c:
7e:75:00:4b:43:48:ad:ed:77:4a:38:2b:a2:fa:4a:
80:54:2a:c3:7e:75:91:00:89:e5:78:b1:5a:b1:4c:
86:2b:8e:6f:fc:14:ab:0b:da:64:c4:5b:f6:9d:0c:
06:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:16:77:0A:99:B7:D3:E9:52:4E:05:C4:DC:2D:8D:B3:E4:8D:AD:87
X509v3 Authority Key Identifier:
keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:91:6c:15:e9:0d:de:06:b6:6c:ca:a6:a1:1e:2d:64:ed:49:
6d:04:b9:a2:13:48:f5:fc:a9:86:20:6f:4f:11:05:df:dc:26:
ca:e6:0d:f2:68:4a:75:fa:a8:93:c6:7d:e7:59:1c:bb:69:80:
2d:f4:9b:bb:8a:8e:05:2f:1d:ef:25:a6:56:1c:8c:b0:74:c5:
28:ee:84:16:4c:0f:54:89:02:62:22:d5:a1:42:d4:9d:a3:fa:
69:a0:a0:b6:11:b9:69:f0:88:de:13:8e:37:19:5f:d3:e4:c6:
c9:68:85:38:be:9c:e0:ff:85:b6:f4:ab:21:b4:9a:7d:fe:08:
59:24:e8:a0:03:06:19:41:a5:8a:bf:fb:1f:4a:70:94:35:66:
d6:67:68:ef:eb:b0:ea:75:da:09:4e:80:47:8a:cf:dc:fd:30:
56:b9:f3:f1:c9:73:d8:03:5e:ca:f7:0b:c8:93:5d:e0:2e:62:
9c:71:aa:1c:35:30:5e:39:f0:7f:92:23:27:fb:90:97:8b:9e:
e8:74:18:6a:49:f6:a1:96:e9:c8:d4:dd:9c:d5:c0:ea:11:e1:
a8:ab:6c:94:7d:25:76:fb:84:2e:3e:5d:15:b3:6a:28:a5:26:
66:42:5a:90:e3:27:c6:74:79:26:fa:7f:94:cc:50:92:63:f0:
09:e5:81:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:24:09 2026 by rpki-client