This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft
File: WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft (raw, json)
Hash identifier: vIxaaeVcK/coTHamvYmqjQ2qftUnhDQ55sQIAOZLBMk=
Subject key identifier: 2A:3C:07:6E:08:3A:3D:BA:5C:B5:EA:07:F3:45:65:49:16:B7:FA:AA
Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2
Certificate issuer: /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft
Manifest number: D5
Signing time: Sun 25 Jan 2026 04:58:26 +0000
Manifest this update: Sun 25 Jan 2026 04:58:26 +0000
Manifest next update: Sun 01 Feb 2026 04:58:26 +0000
Files and hashes: 1: WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl (hash: zeCLTOWdLz7panOVP+idJgu+POdOyfEzO8X2243MCb4=)
2: 46C0C4E0770311F09B9D387BC4F9AE02.roa (hash: OeFUJInFH4cNkqvMFV8k9Dy5HiypZ14/pThp2DVW2AA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl
rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:58:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C909, serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2
Validity
Not Before: Jan 25 04:58:26 2026 GMT
Not After : Feb 1 04:58:26 2026 GMT
Subject: CN=6975a2f2-13c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:f2:be:a8:27:46:e5:0b:37:0d:ee:ee:86:
da:e8:87:57:8d:66:9c:fc:c4:f0:3f:ba:05:6d:8a:
8e:4d:53:25:65:db:60:09:ca:84:1e:1d:4e:be:d2:
3e:d4:a7:3d:0e:87:16:86:7b:84:cc:02:3d:75:ed:
c7:a6:3c:8a:97:9f:ee:be:dc:05:79:12:5d:42:1a:
06:40:83:41:83:75:83:8d:40:7d:91:20:fa:f7:40:
00:6f:d2:67:a4:2b:7e:16:30:c2:f4:97:db:e2:ae:
f3:d1:f4:c6:af:2f:53:b3:4d:fc:14:97:fb:1c:45:
e3:66:ce:58:e2:59:7c:ac:9f:0f:fe:df:e0:fd:c3:
f6:50:96:ca:63:78:26:c5:80:29:77:92:24:8b:6b:
ce:61:e0:65:b4:3c:8f:30:7a:c5:49:13:ff:97:47:
3b:df:c9:c1:a8:9e:c2:9a:15:59:71:09:a1:ab:80:
5b:03:1e:88:6c:45:5c:2f:5e:93:a9:ac:02:01:5e:
de:d5:ae:13:c2:94:df:50:e7:3d:8a:1a:a4:48:e0:
36:11:e0:03:d9:6c:3c:b1:fb:51:c1:1b:12:53:bf:
56:4b:38:c4:67:ed:1e:c7:b9:ee:55:52:3c:23:fb:
eb:f5:39:1c:eb:fa:85:f2:04:ef:f3:2b:bd:f4:d4:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3C:07:6E:08:3A:3D:BA:5C:B5:EA:07:F3:45:65:49:16:B7:FA:AA
X509v3 Authority Key Identifier:
keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:e6:d0:c2:cc:2f:ea:3e:bf:38:d8:43:97:f4:44:c4:7f:b6:
9e:4b:18:a2:0d:4f:f9:3b:39:90:05:b3:c5:b1:ef:fb:58:92:
9f:fa:ca:a9:7e:43:13:44:0c:c5:64:ea:c0:41:3c:15:e2:0f:
4f:54:8f:55:e7:ea:67:cd:e6:b5:e3:2e:44:ef:bf:61:40:76:
39:b4:1e:1e:f0:16:2f:aa:1a:59:8e:91:ed:cb:99:0a:4b:df:
0e:99:58:e4:3f:25:0c:09:ea:08:ef:67:3a:bc:d9:ed:a4:37:
a5:f1:1d:84:76:31:9d:8e:c8:fb:61:7d:6c:56:a8:f3:3a:ac:
d0:24:7d:ab:b1:ab:89:e4:58:a0:ea:ff:04:49:69:3f:00:24:
75:06:e5:f8:9d:ba:91:73:7c:62:82:fe:4e:6f:e0:d0:d8:f4:
57:1b:01:14:e2:95:0b:02:fb:a0:b4:20:57:65:a5:0a:ff:7c:
a6:d4:7a:9c:f1:35:7d:8b:02:c1:04:bd:8d:38:e0:0b:ea:b6:
4e:51:fb:ad:fd:07:18:77:3d:9c:af:d6:1e:34:1d:dc:dd:a4:
cc:a2:23:87:fd:9d:0f:03:3f:1a:24:7e:46:43:c0:16:d5:5a:
35:a1:68:6c:91:96:92:06:02:c9:b4:67:c3:cd:16:d9:a6:3f:
1e:9f:46:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:41:56 2026 by rpki-client