This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
File: W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft (raw, json)
Hash identifier: Fs9Ytn7D9bkoCv088EteQRmslF2AJed9QIljzhU/e9s=
Subject key identifier: A7:98:03:73:4A:C7:12:EE:39:1C:81:B8:5D:09:89:93:C7:09:7A:71
Authority key identifier: 5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB
Certificate issuer: /CN=A9131C4B/serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
Manifest number: 29
Signing time: Fri 05 Dec 2025 05:29:31 +0000
Manifest this update: Fri 05 Dec 2025 05:29:30 +0000
Manifest next update: Fri 12 Dec 2025 05:29:30 +0000
Files and hashes: 1: W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl (hash: 07A5yLlrFIX0SC+OF0MjD8/3HWCnbICrxTGPYKqw1vU=)
2: D65EFE0A91F711F087341C45C4F9AE02.roa (hash: kAhTjUWVZV9wMTU00Q644BmyUxt0di+mCyDgFqmBb/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl
rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131C4B, serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB
Validity
Not Before: Dec 5 05:29:30 2025 GMT
Not After : Dec 12 05:29:30 2025 GMT
Subject: CN=69326dba-4925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:e1:5c:53:8e:c0:90:80:98:3c:e6:bf:e1:
ba:de:a0:f1:fa:01:55:5f:a9:21:9c:21:de:49:84:
a2:7b:cc:a9:4a:96:61:ce:e5:5f:75:a0:7a:dd:0b:
e5:ee:27:89:56:d0:5e:ee:e4:b2:2b:48:6d:c8:be:
6a:d1:5a:ee:5f:8e:72:c0:47:5b:04:3c:cf:e2:a6:
a5:6b:4a:51:2b:c2:86:ef:e1:81:63:cb:f5:42:02:
55:8f:5c:55:41:fc:00:51:e7:95:8e:a1:29:49:e2:
41:59:2c:a4:80:af:1c:33:90:0d:ac:c4:01:0a:c9:
16:d3:2b:27:3f:61:fa:86:7f:04:1e:82:27:bd:ea:
53:bd:71:f9:20:42:f3:28:76:a6:2f:8f:0b:98:29:
0e:16:91:e5:e7:3a:3c:20:8c:56:25:f2:36:3f:96:
0d:22:dd:41:d2:76:98:2e:d7:54:f6:17:05:3e:bc:
a2:9b:c4:fa:8d:6f:10:40:d1:ae:de:0e:1e:e6:1e:
8b:be:9e:d1:fb:50:b1:4d:89:fe:37:10:ea:3f:88:
7e:fd:d4:f0:f4:62:b2:3c:16:41:9d:cc:34:02:79:
ba:3d:74:a8:09:37:74:8a:47:26:bd:41:d9:32:1b:
d0:24:13:c0:95:37:39:03:8e:e1:ff:b7:3f:93:b1:
1b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:98:03:73:4A:C7:12:EE:39:1C:81:B8:5D:09:89:93:C7:09:7A:71
X509v3 Authority Key Identifier:
keyid:5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:08:ec:7d:bb:72:dc:44:f4:bd:a0:7a:15:8d:a7:56:7a:f8:
5d:fe:3d:d0:e4:33:54:93:79:7a:55:50:b3:bd:6b:25:73:93:
2f:82:26:17:a2:82:a0:18:f9:c7:b1:af:83:3a:11:4d:be:f9:
c9:52:5d:2b:71:61:92:fc:55:b2:c2:be:14:66:b4:6b:be:23:
dd:c6:e7:0c:5e:0a:87:b6:eb:00:55:40:ba:31:9d:7b:ab:3a:
bb:38:2d:0f:9c:69:2d:ad:eb:b0:6c:4d:ff:26:2f:12:46:3a:
12:be:09:e6:07:3a:8b:bc:25:53:6a:76:8b:c1:f7:60:d4:41:
6a:30:7c:45:e0:23:9b:d7:d1:0f:6f:9f:a1:00:21:be:71:f7:
4e:e6:ac:d4:e0:a2:bc:fc:33:dd:e5:c3:00:64:c4:03:ae:bb:
ac:d3:83:ad:72:db:69:be:6f:ca:46:b8:5b:17:45:a1:8a:6a:
26:d9:9b:d0:6e:2e:7d:17:1d:70:15:71:01:28:29:52:96:19:
86:87:87:cd:65:fa:70:c9:2f:0c:b0:60:6f:5c:54:da:2d:03:
e3:a4:77:1a:34:3c:9e:25:8f:04:39:4b:9a:a0:ca:35:7b:88:
e6:2e:c8:b3:6f:ba:af:c9:86:5b:24:90:38:27:1f:ba:a7:06:
bb:aa:17:8c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MUM0QjExMC8GA1UEBRMoNUJGMDAwMTQ3MzRBRDFCNTY1QjEwODZEMTJGRkNBQjU5
MENDQjhCQjAeFw0yNTEyMDUwNTI5MzBaFw0yNTEyMTIwNTI5MzBaMBgxFjAUBgNV
BAMTDTY5MzI2ZGJhLTQ5MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1z+FcU47AkICYPOa/4breoPH6AVVfqSGcId5JhKJ7zKlKlmHO5V91oHrdC+Xu
J4lW0F7u5LIrSG3IvmrRWu5fjnLAR1sEPM/ipqVrSlErwobv4YFjy/VCAlWPXFVB
/ABR55WOoSlJ4kFZLKSArxwzkA2sxAEKyRbTKyc/YfqGfwQegie96lO9cfkgQvMo
dqYvjwuYKQ4WkeXnOjwgjFYl8jY/lg0i3UHSdpgu11T2FwU+vKKbxPqNbxBA0a7e
Dh7mHou+ntH7ULFNif43EOo/iH791PD0YrI8FkGdzDQCebo9dKgJN3SKRya9Qdky
G9AkE8CVNzkDjuH/tz+TsRtbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp5gDc0rH
Eu45HIG4XQmJk8cJenEwHwYDVR0jBBgwFoAUW/AAFHNK0bVlsQhtEv/KtZDMuLsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQzRCLzE0MDA2NjJBOTFG
NTExRjA4ODM0RUIxQUM0RjlBRTAyL1dfQUFGSE5LMGJWbHNRaHRFdl9LdFpETXVM
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvV19BQUZITkswYlZsc1FodEV2X0t0WkRNdUxzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx
QzRCLzE0MDA2NjJBOTFGNTExRjA4ODM0RUIxQUM0RjlBRTAyL1dfQUFGSE5LMGJW
bHNRaHRFdl9LdFpETXVMcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJQI7H27ctxE9L2gehWNp1Z6+F3+PdDkM1STeXpVULO9ayVzky+CJhei
gqAY+cexr4M6EU2++clSXStxYZL8VbLCvhRmtGu+I93G5wxeCoe26wBVQLoxnXur
Ors4LQ+caS2t67BsTf8mLxJGOhK+CeYHOou8JVNqdovB92DUQWowfEXgI5vX0Q9v
n6EAIb5x907mrNTgorz8M93lwwBkxAOuu6zTg61y22m+b8pGuFsXRaGKaibZm9Bu
Ln0XHXAVcQEoKVKWGYaHh81l+nDJLwywYG9cVNotA+Okdxo0PJ4ljwQ5S5qgyjV7
iOYuyLNvuq/JhlskkDgnH7qnBruqF4w=
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:59:12 2025 by rpki-client