This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
File: wj3utHnnD2DvynyIRiuVudwiydA.mft (raw, json)
Hash identifier: LMXsmdAaNU8qQ8t8ohp01Iw7cF8vkFhVEYopOCBH7cU=
Subject key identifier: AD:BF:E9:83:5D:96:3F:64:05:38:28:5F:69:37:53:77:3D:4A:F0:5B
Authority key identifier: C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
Certificate issuer: /CN=A9142A22/serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
Manifest number: 4A
Signing time: Fri 05 Dec 2025 05:13:47 +0000
Manifest this update: Fri 05 Dec 2025 05:13:47 +0000
Manifest next update: Fri 12 Dec 2025 05:13:47 +0000
Files and hashes: 1: wj3utHnnD2DvynyIRiuVudwiydA.crl (hash: xMt1Fr/fpxQU1kAkGCERbPu4pwnJ75DoAVcCIf5V2yU=)
2: 9EE7FBDA678511F0999A252DC4F9AE02.roa (hash: MAMH/RfGTdfLAKhMj8K5M9K9RZlTteEx+MyB1nmAYi8=)
3: 9F685E60678511F0999A252DC4F9AE02.roa (hash: rtz7OxIwFTXkSQ5WNIzBL1Yz4MuSuCsv4csZ+s+4QFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A22, serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Validity
Not Before: Dec 5 05:13:47 2025 GMT
Not After : Dec 12 05:13:47 2025 GMT
Subject: CN=69326a0b-8d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2b:57:f4:a5:7a:90:79:7e:d4:a8:c9:f5:b0:
a8:96:54:1e:5f:6f:47:c5:01:65:d0:f8:a1:11:d2:
6e:30:c7:b4:e2:aa:66:f3:9c:ee:59:04:ba:6a:39:
46:99:23:fb:3d:2c:a6:4e:0c:37:eb:a4:fb:c8:39:
49:d7:56:e7:71:43:15:69:46:de:b5:6e:fb:b6:43:
cc:75:a8:a4:ff:1d:27:4f:2a:cb:b3:c8:3f:50:b4:
7f:4c:91:7b:60:4b:c3:85:1d:87:15:13:47:44:d9:
dd:43:8a:18:a9:79:80:2e:b4:25:29:55:cd:c9:bb:
37:10:bc:6b:e9:da:bb:2c:9f:11:ae:36:c0:95:fb:
9b:b1:5a:61:4b:3f:f6:1a:cb:8e:70:79:7f:6c:8d:
b6:a1:d1:ca:f3:b5:c8:f4:0c:0a:55:17:7f:60:e8:
fa:a9:9c:ad:61:2c:ac:fa:0e:d3:72:d8:9f:d8:c2:
50:7f:21:ea:33:92:72:2b:ca:ab:82:df:9d:98:62:
5f:43:ce:19:e7:3c:82:e8:2b:b1:3d:d3:5f:24:b3:
3a:c8:94:ab:0f:0d:60:80:da:f8:14:b6:c5:94:21:
e3:9f:81:90:0a:bf:d9:c8:ee:73:9b:94:fd:7a:46:
d9:f5:33:9e:0e:85:fb:24:0b:0c:6d:04:e6:ff:f7:
28:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BF:E9:83:5D:96:3F:64:05:38:28:5F:69:37:53:77:3D:4A:F0:5B
X509v3 Authority Key Identifier:
keyid:C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:ff:d5:98:b8:52:b5:bf:16:7a:2f:45:ee:46:f4:8b:dd:63:
f1:14:85:9d:0a:f7:bd:4a:6c:ad:28:a6:39:50:ee:43:7f:f2:
9f:32:7e:bc:a6:95:78:36:ac:c1:e5:91:b5:b9:de:6e:d9:2f:
95:27:55:e5:2c:87:7f:2b:ed:49:5a:61:e9:fc:57:31:7d:58:
17:c6:85:4a:18:ff:73:d1:3b:02:bb:33:3d:bf:08:4f:95:0e:
01:35:dd:0e:37:6b:de:4e:0d:7a:68:a3:64:5c:73:e3:7e:89:
31:32:40:9c:fd:ba:ec:8a:b1:a0:43:7c:37:f6:93:e4:4f:c9:
6b:9d:76:a8:ba:bf:46:fd:d0:6c:8f:9e:b5:45:d3:3f:4a:9f:
76:51:c1:ec:4b:a2:73:70:9b:ef:99:b0:a4:10:28:62:4c:11:
3d:0e:5c:e2:4a:b5:10:c4:6e:e5:9e:a1:f0:df:af:9c:78:90:
63:9f:14:ff:eb:87:1c:7e:ea:e5:40:d4:b3:8d:ca:e3:d3:05:
ac:01:d9:64:54:7e:37:f2:c4:7f:a0:f1:0a:b1:4f:25:27:9a:
17:07:4e:42:e7:55:ef:1a:f9:ef:3a:b7:75:75:8b:f5:a6:70:
6a:ab:f1:11:59:76:f6:8a:70:9e:c4:ac:80:e3:13:1e:18:b1:
e4:12:91:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:05:21 2025 by rpki-client