This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
File: wcRvxKcZaeWFBKc01JBKe9L_BUM.mft (raw, json)
Hash identifier: jUHsgWc/Leo3YmjoIt9ZGs3wka0SBD77/ySLAqEUoKI=
Subject key identifier: A1:BF:AC:D0:88:B8:56:1B:4D:B6:28:51:77:1E:35:F2:3C:35:1C:A6
Authority key identifier: C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
Certificate issuer: /CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Certificate serial: 266F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
Manifest number: 265C
Signing time: Thu 04 Dec 2025 15:30:10 +0000
Manifest this update: Thu 04 Dec 2025 15:30:10 +0000
Manifest next update: Thu 11 Dec 2025 15:30:09 +0000
Files and hashes: 1: wcRvxKcZaeWFBKc01JBKe9L_BUM.crl (hash: byVOFJVaLteYju9YTleTTVR973kRdaxWCKaceKpo7pc=)
2: ACDC884E1C1511EF93C5F728C4F9AE02.roa (hash: pXwAyW9Hy/DMGmTjqX3G4l47uqWRP7c4rJmBKT94M2A=)
3: 665C2DFC1C1511EFB1AF8F28C4F9AE02.roa (hash: lIonHfcn1CuwQW3kN+S33JwTNW1MriZKXW51TfBozU4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 15:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9839 (0x266f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E32A, serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Validity
Not Before: Dec 4 15:30:10 2025 GMT
Not After : Dec 11 15:30:09 2025 GMT
Subject: CN=6931a902-f410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:75:9b:2b:ef:24:1b:f3:04:17:16:30:94:39:
61:74:e9:fd:e4:b8:7d:20:08:68:40:ff:f5:fd:5b:
e9:52:96:8f:2a:dc:cb:e5:f5:43:96:02:cd:9c:66:
24:6c:86:89:08:be:26:f4:50:ce:99:b9:94:95:90:
60:5b:bc:63:26:ff:3d:a1:6a:89:06:ef:47:6e:71:
16:d1:1b:59:c6:0f:e2:ff:f6:7e:47:ba:e1:4b:07:
f5:e3:d7:64:ba:8d:6d:13:46:96:4a:04:a1:0c:ef:
91:81:80:83:9a:5d:36:ca:d3:3a:f4:7b:6b:39:3e:
59:e7:27:8f:5f:4c:01:a3:a4:6e:14:99:60:15:0d:
0e:c8:43:72:cc:f5:71:14:65:58:ed:0e:85:de:d9:
62:0a:53:19:87:17:92:8e:25:79:b8:a7:e8:fe:e7:
6d:34:40:e1:7f:90:2d:3f:58:d1:e6:29:c5:3b:df:
44:cb:ce:da:e2:2b:fc:ba:3a:8e:67:a9:f9:fc:9c:
ff:0b:65:5a:c0:7c:3d:c3:50:a0:d3:f2:13:ad:4f:
00:cb:cf:74:ee:3f:11:e9:99:ce:3e:9d:96:12:e0:
fb:6b:d2:49:8e:68:35:ce:96:5c:cb:a5:41:20:a6:
21:43:76:93:cc:32:72:8e:89:2d:4e:11:2f:b6:ea:
e0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BF:AC:D0:88:B8:56:1B:4D:B6:28:51:77:1E:35:F2:3C:35:1C:A6
X509v3 Authority Key Identifier:
keyid:C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:0c:b5:c1:35:0e:19:99:7e:2a:80:b6:21:84:a0:8e:aa:19:
b2:70:bc:3c:4f:9d:c8:25:7c:9f:18:89:23:c1:65:46:69:95:
ef:5c:ed:16:69:72:0e:d3:42:07:d8:e2:15:6a:9d:b9:d2:69:
b4:40:ee:f7:f7:ea:47:8f:cc:67:17:6f:8f:75:4e:74:03:a2:
a5:5d:c0:53:e9:a0:1b:30:6c:e9:71:f2:a1:33:68:3c:22:61:
32:e6:43:64:c5:f7:05:e8:1d:d6:23:2d:46:0d:b1:64:4f:60:
de:d2:7f:9e:9e:fc:c3:21:ac:df:e7:56:6d:ea:5d:da:55:64:
c2:84:e8:49:b9:48:3c:97:c1:0b:16:c6:12:b5:c7:2d:6a:4c:
b5:58:e7:ea:74:63:95:48:ad:58:09:d7:db:a8:6c:1a:e4:1f:
08:45:b5:ad:67:05:f4:54:91:ca:13:21:d4:43:a4:e7:99:fa:
e5:d5:43:56:5e:b7:c6:c6:a1:dc:81:d7:2a:a8:fe:aa:3f:01:
fd:30:13:d1:13:3d:aa:43:17:f8:14:6f:52:11:9f:e7:c5:75:
b4:bc:85:7f:db:d4:b7:3c:6b:8f:10:ce:52:08:b7:cd:71:3e:
1a:d1:7e:5d:a6:f8:60:26:0e:1d:fa:d9:c9:ed:0f:a7:36:d0:
c2:6b:76:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0UzMkExMTAvBgNVBAUTKEMxQzQ2RkM0QTcxOTY5RTU4NTA0QTczNEQ0OTA0QTdC
RDJGRjA1NDMwHhcNMjUxMjA0MTUzMDEwWhcNMjUxMjExMTUzMDA5WjAYMRYwFAYD
VQQDEw02OTMxYTkwMi1mNDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1XWbK+8kG/MEFxYwlDlhdOn95Lh9IAhoQP/1/VvpUpaPKtzL5fVDlgLNnGYk
bIaJCL4m9FDOmbmUlZBgW7xjJv89oWqJBu9HbnEW0RtZxg/i//Z+R7rhSwf149dk
uo1tE0aWSgShDO+RgYCDml02ytM69HtrOT5Z5yePX0wBo6RuFJlgFQ0OyENyzPVx
FGVY7Q6F3tliClMZhxeSjiV5uKfo/udtNEDhf5AtP1jR5inFO99Ey87a4iv8ujqO
Z6n5/Jz/C2VawHw9w1Cg0/ITrU8Ay8907j8R6ZnOPp2WEuD7a9JJjmg1zpZcy6VB
IKYhQ3aTzDJyjoktThEvturg7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKG/rNCI
uFYbTbYoUXceNfI8NRymMB8GA1UdIwQYMBaAFMHEb8SnGWnlhQSnNNSQSnvS/wVD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTMyQS8xQjRGOUY5NkZB
RDMxMUU0OTZDNkU4MENDNEY5QUUwMi93Y1J2eEtjWmFlV0ZCS2MwMUpCS2U5TF9C
VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3djUnZ4S2NaYWVXRkJLYzAxSkJLZTlMX0JVTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RTMyQS8xQjRGOUY5NkZBRDMxMUU0OTZDNkU4MENDNEY5QUUwMi93Y1J2eEtjWmFl
V0ZCS2MwMUpCS2U5TF9CVU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCoDLXBNQ4ZmX4qgLYhhKCOqhmycLw8T53IJXyfGIkjwWVGaZXvXO0W
aXIO00IH2OIVap250mm0QO739+pHj8xnF2+PdU50A6KlXcBT6aAbMGzpcfKhM2g8
ImEy5kNkxfcF6B3WIy1GDbFkT2De0n+envzDIazf51Zt6l3aVWTChOhJuUg8l8EL
FsYStcctaky1WOfqdGOVSK1YCdfbqGwa5B8IRbWtZwX0VJHKEyHUQ6Tnmfrl1UNW
XrfGxqHcgdcqqP6qPwH9MBPREz2qQxf4FG9SEZ/nxXW0vIV/29S3PGuPEM5SCLfN
cT4a0X5dpvhgJg4d+tnJ7Q+nNtDCa3Y0
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:21:21 2025 by rpki-client