This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
File: W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json)
Hash identifier: iigHbBaQFolm1arrEqI4rj2TOfaq67PW4RawzcfswlI=
Subject key identifier: 15:40:0D:FD:13:12:36:65:E0:97:81:4C:DA:2C:FC:86:E3:95:49:80
Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
Certificate issuer: /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Certificate serial: 0389
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
Manifest number: 037F
Signing time: Thu 04 Dec 2025 23:15:19 +0000
Manifest this update: Thu 04 Dec 2025 23:15:19 +0000
Manifest next update: Thu 11 Dec 2025 23:15:19 +0000
Files and hashes: 1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: pQmTrNCSqVe/isGGrIkj11w4vflTNOrCa1IwfsBG0CM=)
2: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: gHbb1DedGEVNYDe8gPkrOnV+opTyWHpDa3aEA0RGNJI=)
3: 41789B66CC1611EC80603209C4F9AE02.roa (hash: ERhWo0W4P0/i1i0Btr7k8IVeQA2SJMiw/31p7bzmBlQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:15:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 905 (0x389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Validity
Not Before: Dec 4 23:15:19 2025 GMT
Not After : Dec 11 23:15:19 2025 GMT
Subject: CN=69321607-8c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:d2:d0:c6:41:48:04:32:8d:79:a5:9b:e2:
1a:08:90:89:07:30:1f:25:45:f5:db:01:2d:b7:db:
f1:4d:7c:33:0e:5a:21:bb:93:39:35:5b:15:fa:90:
38:10:52:68:ec:d0:81:60:fb:7b:c2:a5:10:d3:19:
fe:2a:59:3b:84:5e:65:c6:5b:8e:06:b1:50:e2:a3:
28:fa:24:24:20:6b:ca:2f:62:03:2e:17:29:67:a5:
72:8b:ab:0f:1d:72:3d:1e:87:fe:f4:33:33:64:22:
8c:b9:92:5a:4b:db:94:c9:50:61:5f:bc:83:5a:9b:
7f:62:fb:c0:7f:83:56:c8:14:45:4e:22:ad:6d:9e:
a6:74:d5:e2:21:4b:a5:99:7f:6d:35:1a:19:17:ed:
0d:67:09:5e:cb:20:27:79:e7:3a:15:e0:c5:82:c0:
71:79:ea:ff:2e:c1:1e:b9:4d:4d:a3:04:dc:af:94:
69:2d:c7:91:29:ad:ca:47:a6:63:82:5b:4c:9f:05:
ed:75:3a:23:fb:5b:09:46:6c:13:d7:dd:52:66:0a:
c8:bb:4e:0c:30:0f:d6:e1:fb:6a:78:d0:74:4e:e2:
d5:35:bb:e3:75:ae:3b:1c:cf:ed:c4:40:f0:39:29:
cf:0d:fa:4f:1c:c4:d3:cb:3d:91:d6:20:82:b7:59:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:40:0D:FD:13:12:36:65:E0:97:81:4C:DA:2C:FC:86:E3:95:49:80
X509v3 Authority Key Identifier:
keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7e:5c:d2:e1:f4:39:36:24:7b:f4:69:45:7a:99:74:90:b5:
7b:9e:fb:c4:d1:ef:c1:13:53:0c:4d:9c:80:ec:d9:5b:40:27:
1b:75:a8:9e:c7:67:d9:21:60:21:87:22:9d:fc:72:50:e5:e9:
56:3c:b7:42:47:7b:5d:9c:04:d5:07:6c:79:37:89:54:66:48:
8a:23:e3:c1:5d:d5:d5:d6:b9:61:02:5f:6b:7f:01:ff:2d:a8:
49:ee:93:38:bd:d6:87:f7:ad:f0:7f:77:2b:d5:b1:d6:6d:a1:
84:33:06:99:14:2e:c4:ea:09:06:ec:23:ae:22:7b:e5:01:66:
fb:cb:04:00:63:a2:07:2a:49:99:ba:ad:64:fb:4a:5e:47:84:
ed:dc:2c:8b:0d:9e:c8:95:54:4a:d4:a7:e8:2e:98:e2:ad:b8:
f4:c7:a6:a2:cc:a7:cb:5c:0f:ce:53:5b:13:2b:1f:4a:01:f8:
1e:89:04:1c:b8:e6:fd:14:50:cb:ff:10:f8:b2:c0:77:89:5e:
db:8a:dc:0b:1d:22:60:7b:30:d1:bd:e8:d6:ef:35:66:1f:7c:
cc:cd:19:55:fe:d6:12:b5:38:e8:1f:25:94:10:d1:de:2a:d7:
1c:02:78:46:dc:1c:5c:fb:45:fb:23:d9:e2:d8:31:d8:22:1e:
8d:7c:d1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:56:07 2025 by rpki-client