This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
File: WdGXNa3cboCAl6x3G0a7N1vCMOg.mft (raw, json)
Hash identifier: n5S6CN08bWbOgr+MnV4bOFaSOi6949Ub3RbTrfFgjFY=
Subject key identifier: 37:7D:87:CC:BF:E8:EF:0D:CE:2A:60:85:AF:4C:ED:98:22:9C:4B:CD
Authority key identifier: 59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8
Certificate issuer: /CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8
Certificate serial: 0330
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
Manifest number: 0488
Signing time: Thu 04 Dec 2025 23:27:14 +0000
Manifest this update: Thu 04 Dec 2025 23:27:14 +0000
Manifest next update: Thu 11 Dec 2025 23:27:14 +0000
Files and hashes: 1: WdGXNa3cboCAl6x3G0a7N1vCMOg.crl (hash: bv6Ygs/miApBYtg4hnM1Ol0KRn0+Px3pRXOB9ot6Ge4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl
rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 816 (0x330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91422D7, serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8
Validity
Not Before: Dec 4 23:27:14 2025 GMT
Not After : Dec 11 23:27:14 2025 GMT
Subject: CN=693218d2-8610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:29:01:fd:da:02:bb:f2:c4:08:65:50:50:c7:
d9:9b:2d:ee:7b:2d:a5:53:4b:20:af:6c:26:95:8e:
08:17:7f:33:e2:23:f7:5e:b6:26:86:cd:4d:e3:24:
96:0e:0b:68:15:f3:7b:17:8e:25:d4:d1:d8:0a:02:
47:50:ad:53:e5:fe:53:27:b3:49:04:70:b2:7d:9d:
b9:8b:a4:d2:41:e4:4a:d2:68:5d:ad:bb:af:c3:da:
ff:04:2e:db:90:4a:86:12:8c:9b:d3:e9:45:82:ce:
67:e3:48:63:87:ba:ef:53:a8:2a:8d:b7:58:58:7c:
46:27:5e:2f:49:a5:2a:7e:e1:c9:ab:f5:31:d0:ea:
f8:bd:a5:cd:3d:31:64:4c:02:79:52:52:4d:a6:18:
19:43:b7:be:b7:2a:d9:eb:db:ee:c9:0f:f5:8b:7f:
f4:58:34:af:69:0c:c2:9b:6f:95:99:2b:8e:e8:dc:
75:b3:be:10:d0:9b:e1:0f:6d:b2:90:47:0c:a9:d2:
ab:dc:34:a0:26:45:bd:91:40:a1:6b:aa:ee:82:26:
1e:ae:0d:98:5f:b8:ab:67:95:76:04:cf:99:e9:a8:
cb:dd:ff:3d:ff:24:b2:76:ca:02:9e:69:64:12:c3:
c0:7b:6a:e5:ad:ba:21:f7:ba:ef:17:a7:bf:2e:fe:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7D:87:CC:BF:E8:EF:0D:CE:2A:60:85:AF:4C:ED:98:22:9C:4B:CD
X509v3 Authority Key Identifier:
keyid:59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:96:4e:8c:a0:81:61:82:b1:1a:6d:31:c7:c3:8e:b3:be:32:
63:1d:39:b0:d5:1b:ae:c4:05:c1:fa:a9:9d:5d:04:78:5c:09:
bd:88:50:78:27:56:c5:ea:da:8e:fa:9c:a8:b4:1d:c9:42:18:
c8:c8:04:a4:1a:59:c7:be:c0:ed:ac:7a:77:82:9f:56:cf:c1:
3b:84:bb:4a:76:0f:de:04:c7:68:3f:35:d4:5d:ed:78:07:d9:
51:c6:67:a8:37:a7:df:0d:a4:79:ee:77:6d:36:5f:47:74:48:
ca:a8:46:a6:69:f2:9f:cd:b2:db:6c:fb:cd:df:e4:dc:ea:7f:
7b:4d:2b:51:5f:ed:fa:c1:b7:a7:ef:d2:ad:42:c8:5e:6a:f9:
cc:60:c4:1f:96:44:93:4c:7d:e5:50:ad:88:5d:43:b2:28:53:
9f:45:44:11:ed:1a:4d:10:38:6d:7f:85:4e:ce:c5:13:3d:24:
17:72:6e:56:29:e9:65:ad:44:7d:51:eb:64:cb:19:8b:70:79:
24:1f:75:1b:f4:49:5f:0b:a4:ec:f3:04:fb:4b:ca:be:39:7c:
68:e0:b7:aa:88:bb:c2:cf:b3:70:d0:5e:1a:50:76:f7:0b:b8:
a4:93:ad:b5:a0:bc:f4:07:e1:3b:09:f4:79:44:14:cc:a7:15:
76:99:d8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:57:53 2025 by rpki-client