This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
File: wj38Jpc5QY-leSH40pBboWdC_E0.mft (raw, json)
Hash identifier: 2jnJxAHiQJ8+IdqStupe9t2lJ2yya3jfwaqlVtm+DBU=
Subject key identifier: 69:8C:D3:32:6F:33:1B:4F:05:93:FF:54:AD:99:4A:6C:02:1C:51:6B
Authority key identifier: C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D
Certificate issuer: /CN=A913F3A2/serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
Manifest number: DA
Signing time: Sun 25 Jan 2026 04:51:06 +0000
Manifest this update: Sun 25 Jan 2026 04:51:05 +0000
Manifest next update: Sun 01 Feb 2026 04:51:05 +0000
Files and hashes: 1: wj38Jpc5QY-leSH40pBboWdC_E0.crl (hash: rnIFXkjSRJJMWKDJvmrNLls05gFXSN/Dp6bSoRNtl/o=)
2: 0136C13EAE4C11EFACFD730EC4F9AE02.roa (hash: Mzg80jeYIG3P35Y+O3KXXg2nXRf/rxFmyz1OLT1QE60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl
rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F3A2, serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D
Validity
Not Before: Jan 25 04:51:05 2026 GMT
Not After : Feb 1 04:51:05 2026 GMT
Subject: CN=6975a13a-00f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:d0:ed:04:0b:57:49:38:2b:f1:b7:af:59:
07:1c:3b:40:95:85:53:8b:ce:31:3e:e7:fa:47:5f:
c6:c8:ed:95:64:71:fd:bf:fd:a5:18:6a:52:f3:40:
15:42:33:0c:18:53:f0:90:ff:7f:52:6e:a1:50:d1:
3b:39:14:91:05:a0:cb:c4:24:86:0c:25:ed:a3:5a:
ce:7b:cd:07:ca:da:a8:4f:7e:97:e8:c1:c8:32:98:
10:aa:30:3a:18:91:a0:6e:69:8c:96:cb:32:63:8c:
1e:d6:43:fc:f3:ee:2f:e2:d8:df:ad:37:b3:d5:84:
8f:36:bb:20:20:19:74:78:b3:05:43:af:46:8b:c6:
7c:2d:41:9a:4f:16:db:d6:03:77:20:ea:e3:72:a1:
91:7a:6a:42:7a:81:e9:77:04:d8:ba:dc:d9:e1:dd:
f8:f9:7b:d5:1e:b0:10:44:d2:85:d8:c5:1c:17:c2:
c8:74:4b:b3:14:b0:c1:43:8a:63:4f:19:bb:ac:e1:
d1:4c:ba:5b:47:b4:17:e0:a9:fd:f4:b0:cf:cc:56:
20:e2:78:e6:f4:eb:4f:b6:db:ed:fc:99:9c:ee:30:
da:f7:67:ec:4c:3d:7b:d6:9d:0a:cc:a6:51:b0:6e:
6e:72:5a:8b:94:48:c4:6d:2e:20:ab:d4:86:ec:e5:
20:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8C:D3:32:6F:33:1B:4F:05:93:FF:54:AD:99:4A:6C:02:1C:51:6B
X509v3 Authority Key Identifier:
keyid:C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:20:81:14:95:23:f5:70:90:22:18:b3:e6:ae:d5:b6:26:04:
f6:be:bb:0a:60:67:f8:1f:42:3a:76:ef:20:17:c0:24:26:7d:
ae:d2:5f:97:13:33:20:15:d7:a3:fc:c6:a1:7e:cc:59:f5:02:
ac:40:da:29:e0:43:52:28:2e:d7:9a:0c:45:6a:2a:ed:5e:30:
32:67:df:d9:c6:02:04:c5:91:c8:1d:7d:f9:aa:e7:f8:e2:57:
fa:7b:a2:b0:c0:05:29:ce:d0:b6:50:27:e0:e1:08:ac:31:5b:
b0:ef:2b:26:06:37:2d:42:9a:43:7c:85:22:99:37:70:df:3d:
52:2a:8e:a4:28:24:3b:66:7b:73:d6:ea:dc:b7:5d:14:e3:c2:
f0:56:db:c0:2f:1f:80:87:3d:0d:02:dd:53:67:97:e1:1e:07:
eb:01:ff:ca:0f:ee:96:d9:4d:2f:0d:0c:9e:9f:19:72:e2:26:
4d:30:d5:9b:11:45:19:96:fc:e5:d2:76:62:60:96:ad:64:35:
e5:3d:e1:3d:a0:59:c3:3b:cf:00:2d:af:46:ee:e7:34:11:07:
dc:2e:6b:8a:0e:59:9e:d8:7f:0e:4b:2c:20:ea:32:df:67:e1:
e6:73:9b:1e:83:b1:70:be:a9:2e:7a:5c:44:af:9c:c1:86:a5:
7f:a0:2a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:33:40 2026 by rpki-client