This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
File: WAFITP9u_F0ACyYp-RFr4jXErDY.mft (raw, json)
Hash identifier: 049XcbTW/buzmyHR/ZVa613BkgZduC/JIoyFLLfKCD8=
Subject key identifier: E8:F0:75:E6:FC:C1:EC:94:6E:AF:B9:06:DA:74:66:C2:7D:07:AC:93
Authority key identifier: 58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36
Certificate issuer: /CN=A914C531/serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
Manifest number: 0101
Signing time: Fri 05 Dec 2025 03:17:30 +0000
Manifest this update: Fri 05 Dec 2025 03:17:30 +0000
Manifest next update: Fri 12 Dec 2025 03:17:30 +0000
Files and hashes: 1: WAFITP9u_F0ACyYp-RFr4jXErDY.crl (hash: Irv9ZczhMNFtFY0EGHnP8/n+PVYvULJd4EedJYLAPY4=)
2: 5DC91E6E6E4611F09D8F426CC4F9AE02.roa (hash: y8hgCCBPI84qrp5W1tiqF8+NbZgro3HnrgturfTW64A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl
rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:17:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C531, serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36
Validity
Not Before: Dec 5 03:17:30 2025 GMT
Not After : Dec 12 03:17:30 2025 GMT
Subject: CN=69324eca-7ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:71:3c:06:33:a9:98:61:af:9f:b8:d9:07:58:
4e:85:ce:6d:c5:c2:c8:87:bc:ee:eb:3f:81:92:e3:
c1:44:8d:5d:d0:dc:b9:9f:ac:e5:7d:58:d6:3f:19:
8b:1e:36:35:9c:96:40:1c:9b:e3:6a:8a:6f:df:2e:
60:56:58:78:ac:dd:43:cf:1e:7c:14:5c:51:66:32:
f4:05:20:6d:57:7a:98:70:6c:eb:2d:4f:49:41:24:
f4:8f:33:d8:bc:0d:e7:26:01:dd:8a:41:26:25:9b:
4f:b9:b4:41:cd:f5:9e:92:15:50:ce:41:78:b1:7d:
53:a3:9e:88:35:02:2a:db:a6:c2:93:b4:5b:8a:76:
f9:f4:e4:95:32:d6:1c:c0:ea:26:b2:91:44:4d:52:
02:29:66:43:0d:73:ef:10:9f:5b:fe:8e:55:9f:62:
21:6d:9a:8e:ec:e0:15:00:f5:45:67:84:70:d1:30:
15:47:79:48:3d:e3:a4:8a:42:69:c6:6a:33:b5:3d:
43:a1:36:72:db:5a:22:77:50:7c:d6:e2:6e:ff:a8:
6c:f1:07:c4:d0:cf:3e:07:18:fc:db:d8:9d:2b:3a:
d7:4d:3e:f3:a0:44:66:4e:81:d4:55:73:79:5a:48:
cb:1d:b2:25:dd:72:f2:da:d2:a5:31:2c:81:0f:52:
98:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F0:75:E6:FC:C1:EC:94:6E:AF:B9:06:DA:74:66:C2:7D:07:AC:93
X509v3 Authority Key Identifier:
keyid:58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:02:79:6c:b8:50:a7:35:39:15:48:85:2d:cf:19:84:31:d9:
27:81:21:08:7d:f4:dd:e1:cb:5e:0e:d0:82:b1:0e:02:0a:3a:
c3:7f:c9:ac:7f:ba:48:af:3c:3b:59:8f:8a:e3:39:b4:16:96:
dc:6a:c8:42:a3:b4:77:0b:a7:60:35:6c:45:96:ff:b7:02:56:
5c:93:aa:b9:04:1b:03:ea:ae:12:85:7d:8d:bc:cc:86:c2:40:
54:7b:11:ee:c8:a0:19:3b:96:d3:2a:8e:d1:cf:4c:9f:8f:ad:
9a:ba:f0:e9:b5:50:90:64:bf:10:82:fb:ea:d2:89:e3:5e:9e:
96:bc:90:51:79:6f:79:f1:cc:4c:f0:81:eb:50:1f:9c:4d:6e:
d3:f5:70:1c:51:91:9a:50:eb:64:72:06:cc:a3:d2:55:1e:e8:
41:84:19:19:4c:64:53:7c:84:a9:c6:ea:8b:6e:5b:b9:86:b7:
ab:5b:31:77:0d:c9:ab:04:bb:31:6e:a8:a3:20:85:05:20:5b:
e3:64:a6:4a:99:8f:8f:b5:3c:b4:7e:33:3b:60:b5:ca:85:55:
65:5a:39:37:29:36:2e:37:cd:ce:a8:cc:c0:aa:b1:28:40:cf:
f8:dd:94:67:40:8c:3f:a0:64:fc:98:5a:9a:01:a0:58:e2:8c:
05:da:97:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:45 2025 by rpki-client