This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
File: wfLqVt--Dy-St0HdaM9WcRWzspI.mft (raw, json)
Hash identifier: Pb9t/WHFF/q13gkY54KsOe02JTDsjUqk4w4LwIW1j+w=
Subject key identifier: 6B:27:A9:53:0A:E9:D2:81:06:4B:9C:4B:F0:33:5F:19:1E:17:B9:F0
Authority key identifier: C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92
Certificate issuer: /CN=A9147150/serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
Certificate serial: 47
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
Manifest number: 46
Signing time: Fri 05 Dec 2025 05:14:48 +0000
Manifest this update: Fri 05 Dec 2025 05:14:47 +0000
Manifest next update: Fri 12 Dec 2025 05:14:47 +0000
Files and hashes: 1: wfLqVt--Dy-St0HdaM9WcRWzspI.crl (hash: +xsoqeoSgQcm1TwjTrt7c5qPNsx4SKqE7p7L7vkxXlQ=)
2: EB6E0EE8677811F08B1EA154C4F9AE02.roa (hash: 6eI2hX7+cNDQwr/0gzxm2cvx/HHunNUlrFOX9WFLw2E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl
rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:14:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147150, serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
Validity
Not Before: Dec 5 05:14:47 2025 GMT
Not After : Dec 12 05:14:47 2025 GMT
Subject: CN=69326a48-a92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:8f:1f:17:95:7b:de:b6:31:0b:89:a2:41:
f6:4e:0e:41:e5:95:bc:47:3a:68:d7:7f:f2:e3:aa:
50:b2:46:a9:98:8b:4e:f4:50:a9:83:f3:52:31:7a:
a2:31:e6:3b:88:84:ee:fc:50:df:32:fd:28:8d:e2:
d3:f2:00:91:f8:1d:04:9c:10:37:ad:a3:c6:ad:24:
5d:c8:dd:22:83:f3:36:cc:e7:7a:f7:a4:5d:e6:ea:
3b:df:9e:3d:0e:55:44:fd:7b:19:cc:d3:a7:3b:d9:
e4:5f:c1:8d:e2:88:cf:b1:36:7f:12:c6:b4:f2:1f:
2e:07:df:4c:69:5b:df:69:d9:f1:3e:54:40:ab:0c:
e0:fc:6b:5d:87:5f:06:3b:e5:ec:ef:87:ab:e7:af:
af:26:99:86:c1:e0:c1:87:6a:8d:a0:64:06:f7:08:
9f:50:ce:14:1b:7a:13:ff:39:94:19:08:ec:be:7b:
11:4a:18:ee:e2:96:b4:5c:84:3f:d3:c3:e4:b4:5a:
f1:22:4c:2c:17:f8:49:24:79:5d:b9:56:9c:b2:a8:
c6:ae:a9:fb:96:ac:f9:fe:08:f9:16:e8:d4:d4:ca:
b1:96:af:f5:7c:a0:3b:25:46:51:52:d3:6f:4c:cd:
63:da:81:72:91:a6:e2:e9:44:b7:48:2d:6f:7b:bc:
db:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:27:A9:53:0A:E9:D2:81:06:4B:9C:4B:F0:33:5F:19:1E:17:B9:F0
X509v3 Authority Key Identifier:
keyid:C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:3b:2d:06:64:01:fd:0c:39:f2:90:4c:67:52:5b:5f:68:7f:
9b:d9:6f:33:53:bc:43:a3:46:e8:50:0e:69:d0:f8:6c:be:8a:
a5:96:85:19:15:37:46:7d:84:da:86:e8:ca:45:d9:ad:84:b5:
b6:21:5a:2b:6d:08:fc:f9:51:d3:d9:30:53:24:a4:44:6d:89:
3a:e8:be:89:2d:d5:7e:12:08:78:3d:85:a8:3c:3c:0b:2d:a9:
c7:e9:bd:a5:f5:ce:ee:de:95:0c:71:2d:6e:88:a7:30:87:89:
10:83:b4:cd:4d:ac:25:e6:e7:56:f1:60:1a:96:ff:e0:19:cd:
d1:f7:bf:05:24:8d:11:bd:2b:87:cc:66:3d:fc:45:34:15:a2:
cd:52:f3:ca:bd:17:62:01:fc:6e:c0:96:ba:e6:61:8b:42:12:
d6:55:c4:e6:b9:f4:38:02:78:5f:48:b8:7c:f3:99:3e:9c:0e:
be:ce:be:d9:41:91:cc:58:87:b1:01:aa:10:ce:8c:97:3d:b6:
03:9f:3f:6d:f1:2d:09:43:18:c4:0c:90:f0:08:75:42:49:fd:
9b:5a:3b:a9:df:be:95:78:ed:34:94:12:1e:d4:25:84:eb:7d:
92:fa:a8:32:6e:85:f3:40:3e:43:29:3f:e7:35:14:e9:de:e6:
02:86:53:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:01 2025 by rpki-client