This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
File: WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json)
Hash identifier: 6uT6r5DtxiKqJHn6bxObfDPN+HyiasXg4ft+bzE/Wuc=
Subject key identifier: 29:AE:B6:F2:98:B7:C1:07:83:FB:AD:79:D0:99:14:AE:25:20:AC:FD
Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49
Certificate issuer: /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
Certificate serial: 34FE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
Manifest number: 34FE
Signing time: Sat 24 Jan 2026 14:49:28 +0000
Manifest this update: Sat 24 Jan 2026 14:49:28 +0000
Manifest next update: Sat 31 Jan 2026 14:49:28 +0000
Files and hashes: 1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: ylagp+WPAHbo/v+5y95byZPn7K9XkKeyJZu3vYOh2SQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl
rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13566 (0x34fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91308CE, serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
Validity
Not Before: Jan 24 14:49:28 2026 GMT
Not After : Jan 31 14:49:28 2026 GMT
Subject: CN=6974dbf8-967e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f6:af:9a:4f:58:ef:89:ab:47:fb:a8:98:74:
18:e6:5b:f5:48:ad:69:24:3f:a2:94:9d:5c:7a:5e:
df:22:39:72:aa:63:0f:64:04:69:dc:b1:63:f3:6b:
cc:18:f2:6a:71:71:3c:b7:77:6a:2c:32:ba:0f:c8:
61:fb:64:46:81:57:30:9c:5d:d3:bc:25:66:11:c2:
01:0d:bb:73:37:12:2f:41:c8:0f:95:02:65:a9:60:
c1:66:23:dc:b2:af:da:a0:fa:45:e3:92:22:8e:43:
23:49:82:3f:9d:35:69:51:e9:e6:8d:68:e5:02:c5:
04:16:14:55:64:5f:ed:47:55:89:7d:f3:39:b1:b3:
34:5a:dc:b1:59:45:e8:ea:c8:f2:0a:28:39:6f:b1:
27:4b:b2:53:c3:83:40:b8:74:86:f2:1f:d0:fc:0d:
f5:67:6f:94:85:79:d2:49:c3:e0:83:5d:68:ee:2a:
bd:8d:23:fe:3a:47:c0:22:c3:2b:d1:29:6b:7b:44:
50:9c:2f:cb:cd:68:e0:05:bf:65:7d:f0:6d:b2:9b:
17:05:2b:5f:bc:2c:9d:ef:84:35:1f:4e:5f:fa:e0:
01:1e:0d:f3:af:39:a0:8e:b9:74:4e:c5:af:26:39:
35:f8:65:f0:67:ab:66:d1:c9:c2:26:1e:40:c9:7e:
c8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AE:B6:F2:98:B7:C1:07:83:FB:AD:79:D0:99:14:AE:25:20:AC:FD
X509v3 Authority Key Identifier:
keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:10:72:f9:ea:e9:1f:1f:29:a0:a3:2b:50:d9:cd:33:21:c5:
f1:85:f7:ca:9b:19:69:2c:39:71:d0:39:aa:f7:cf:8f:52:58:
9c:4e:37:c8:54:fc:c3:c5:4b:e4:53:9b:79:0f:19:69:80:50:
1a:74:09:5f:3f:00:7f:b5:38:d2:59:6e:c3:e0:a0:1e:30:ed:
d9:4b:cd:f4:02:d4:2c:02:cf:b7:a2:14:59:4d:e0:35:f5:9c:
67:54:f9:67:59:c8:6e:2e:99:a7:24:90:b3:a2:18:87:47:4b:
3f:19:3b:14:27:ae:38:5a:da:f1:df:17:f5:d8:92:9c:c7:c2:
65:a1:a9:4a:1d:1a:44:8d:aa:56:c1:91:a8:6e:2a:c7:3c:1f:
4d:d2:31:14:e3:22:27:a1:a5:42:ca:7f:48:cd:cc:dd:1e:9c:
3e:9d:06:65:a2:88:42:e2:01:a4:8f:e5:d0:eb:46:89:f8:51:
af:53:da:4c:0f:1c:a9:3f:9b:7a:49:4f:8d:9e:49:30:44:1c:
2e:ba:70:bb:2d:50:29:4c:96:13:b1:a8:6c:81:92:d3:fe:99:
a9:1c:b6:d8:00:5e:bf:55:1f:3f:a9:eb:8d:7f:88:d1:b5:63:
2e:16:87:4b:0d:2c:98:f4:89:59:7d:97:7e:f9:41:07:c7:c2:
60:6a:44:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:00 2026 by rpki-client