This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
File: wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json)
Hash identifier: WRtLJ6arM81L2DIKCC32kpMKW0QwOODjiy+URflEM08=
Subject key identifier: B8:2A:E3:F2:65:84:F7:50:CC:56:6E:40:3D:29:EF:08:F2:92:90:9B
Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Certificate serial: 17F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
Manifest number: 17BB
Signing time: Sat 06 Dec 2025 16:11:11 +0000
Manifest this update: Sat 06 Dec 2025 16:11:10 +0000
Manifest next update: Sat 13 Dec 2025 16:11:10 +0000
Files and hashes: 1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: NC3X/Wa8OboVcmrhB5B70F0KOzttS338WaIyyWcR+GE=)
2: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: 9d6Qbuo6UefvoJTh1k6X27CExDhv7B/9JIB8aF5IHy0=)
3: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: yGKvF3UBsgJ6VKreN5e6xc+PrZFaa4A/B9g4uCEjRgk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6130 (0x17f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Validity
Not Before: Dec 6 16:11:10 2025 GMT
Not After : Dec 13 16:11:10 2025 GMT
Subject: CN=6934559e-6f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:18:ab:44:39:51:d0:fa:1c:f7:f1:b5:91:c6:
dc:84:44:65:bd:f8:95:1d:af:94:80:a2:a1:c5:25:
80:d3:73:15:80:59:dd:30:0d:3d:39:25:17:d2:22:
9d:bb:19:03:d2:c1:a8:62:03:db:57:a2:0b:6b:e4:
af:95:ca:4d:b8:68:49:52:0e:d0:cb:a6:f1:25:4d:
71:82:f8:b8:4f:16:3e:68:b7:80:7c:9f:e4:43:bb:
d3:e2:7b:e8:b7:1b:77:ef:a9:b4:14:24:57:ac:f7:
a4:a4:b8:84:a1:a7:56:cf:bb:22:47:3a:47:db:7e:
44:c3:86:e7:9e:41:a5:e8:9b:bd:a6:8d:82:b7:83:
bf:21:98:ee:42:40:02:5a:c5:37:06:fe:5c:a8:90:
e2:0f:f0:6a:65:dc:02:e4:15:da:4d:a4:1a:a1:d8:
c6:61:7b:06:17:7c:d2:e1:fa:62:c8:07:cf:68:33:
26:b9:2f:08:98:20:2a:fc:96:02:1c:0b:6b:fc:89:
2d:bf:58:9d:5e:11:b3:da:c5:c5:0e:69:c0:a5:da:
5d:e6:08:8e:66:96:2c:05:d4:1b:96:8d:18:5a:b7:
0c:68:9d:7c:55:1f:52:f5:6d:a9:c1:7d:5c:d4:fb:
65:34:83:63:f3:ec:c6:66:b2:20:e6:de:ed:e4:45:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2A:E3:F2:65:84:F7:50:CC:56:6E:40:3D:29:EF:08:F2:92:90:9B
X509v3 Authority Key Identifier:
keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:7d:4d:2d:80:75:cb:f5:f9:b2:55:48:4f:dc:a1:95:b8:ee:
cf:c4:14:2f:56:0c:d7:ee:ca:21:75:3f:e0:a8:5a:29:09:ca:
eb:1d:23:dd:09:0b:5c:43:81:e2:eb:f8:f4:27:a8:87:16:bf:
2a:4a:a9:69:36:cb:e8:9c:d7:ce:81:2e:05:de:51:ba:d7:f8:
23:06:7e:94:d0:b1:f5:c6:4a:f4:b1:90:84:f5:af:2f:7d:57:
95:14:d1:15:e4:e2:b1:e6:6d:c9:7d:aa:93:ba:0f:9e:4f:7b:
55:3c:54:51:c0:f1:e1:f5:c0:8d:de:03:84:87:df:b4:d7:ff:
8f:07:e6:40:23:9c:ba:2e:fa:af:64:d9:98:65:f6:e9:ff:9b:
4a:a4:47:62:b2:6d:8b:fd:47:90:71:04:46:81:75:86:29:e6:
d2:fc:f6:ca:6f:56:9a:49:72:56:27:28:9b:8d:19:3d:ef:18:
9b:f9:b2:f6:3c:bd:17:9c:8e:e9:9c:16:8f:eb:99:84:46:49:
5a:36:8f:5b:6e:77:e6:fb:d5:ab:31:3a:7a:94:9e:cc:c9:7d:
50:e8:5d:56:15:ec:40:81:e4:5d:d1:89:8a:cb:c0:7c:4f:4b:
a0:59:2e:50:a1:d4:f6:5b:77:9e:44:d9:1a:dc:f7:16:a3:ce:
83:8c:45:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:31:50 2025 by rpki-client