This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft
File: wkxRvbArcTbA8lrxlbNwN5l7F-g.mft (raw, json)
Hash identifier: r4aHy8H6nf5hY0J7KbITLFekWHXe8oivUCbHz5glRTU=
Subject key identifier: 96:AE:3D:F1:E9:BC:CB:42:D5:5C:15:C6:86:1B:70:1F:C3:2A:65:EC
Authority key identifier: C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8
Certificate issuer: /CN=A91816BD/serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8
Certificate serial: 0FF5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft
Manifest number: 0FE3
Signing time: Sat 06 Dec 2025 16:58:26 +0000
Manifest this update: Sat 06 Dec 2025 16:58:26 +0000
Manifest next update: Sat 13 Dec 2025 16:58:26 +0000
Files and hashes: 1: wkxRvbArcTbA8lrxlbNwN5l7F-g.crl (hash: NdXS7nmot+wnOqbU/lLgO20bVWLYntwC+/2edqs3jCM=)
2: D3378C20171D11EAAA15E818C4F9AE02.roa (hash: brx75mAIZcLmrMrMmInTA2Jwy5WbjMuVgkiLF5aIeqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl
rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4085 (0xff5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91816BD, serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8
Validity
Not Before: Dec 6 16:58:26 2025 GMT
Not After : Dec 13 16:58:26 2025 GMT
Subject: CN=693460b2-04c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0e:43:dd:37:04:8f:5a:21:0c:32:ca:58:14:
21:3f:f5:7a:f4:f5:3b:99:bd:7a:82:c8:39:d7:86:
f8:69:f9:dd:9d:df:17:de:a9:17:a1:47:6e:b8:5b:
c2:ba:11:c3:9c:92:b7:be:25:58:46:db:db:1b:9e:
4b:7e:5a:c5:2b:d3:fb:df:30:23:bd:04:95:d9:81:
b1:20:da:d9:38:04:e7:e7:bd:a6:70:64:15:02:d7:
ec:7a:18:05:d2:6c:e9:74:d8:4b:07:e1:91:a0:bb:
d8:87:a0:3f:18:4f:a9:2f:d9:f3:2c:7b:8b:3a:f2:
d2:af:aa:3a:d6:50:7b:e2:3c:d1:4d:1f:e2:f0:95:
c2:b9:bf:29:23:c1:6b:b9:f0:08:8e:02:4b:a6:94:
ba:48:46:01:eb:b4:5b:d1:60:cb:c7:ad:34:d6:a5:
26:14:67:32:43:5b:89:9f:28:d0:ba:77:1f:b5:61:
e6:48:d6:cb:c5:48:11:71:88:a7:09:9c:93:de:53:
53:40:7b:f2:bb:d7:27:15:34:16:e7:bb:59:c2:2d:
8c:fa:0a:fb:25:a4:9c:54:91:d4:9a:84:11:4f:05:
b7:3e:39:bc:bc:bf:da:20:9e:ec:e7:65:1e:9f:15:
09:9d:73:3a:22:45:ec:68:09:98:52:1b:d4:bf:c0:
3a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AE:3D:F1:E9:BC:CB:42:D5:5C:15:C6:86:1B:70:1F:C3:2A:65:EC
X509v3 Authority Key Identifier:
keyid:C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:79:4c:69:c3:92:f1:e9:70:3a:91:8c:6f:40:92:da:1f:09:
e0:4a:80:e0:5f:30:38:4d:12:e5:45:88:49:83:c7:4c:a5:92:
c1:ae:21:2d:e0:21:f0:2a:c0:b6:5a:5b:2a:f4:ce:9b:89:33:
9c:76:a3:98:7c:8f:15:be:8e:a5:1f:3d:68:92:a8:7a:fa:24:
d0:d1:9b:55:75:dd:0c:ae:0a:9c:fa:41:24:ea:f6:0a:b6:81:
e8:a1:38:89:14:ce:3e:2a:3d:36:9f:49:7a:61:5f:24:d6:1d:
3f:dc:e8:76:43:45:45:5b:bd:cc:66:cf:25:4f:9c:04:9e:7d:
01:81:c8:83:2a:ca:20:b2:cf:02:f2:8e:ea:0f:8f:78:e6:0b:
5e:5f:4d:1b:3a:6b:43:4e:7e:87:a2:87:7f:27:8c:5a:83:71:
ce:53:1b:3b:cc:31:61:2d:5a:56:94:ed:6b:7d:af:27:fd:fc:
4e:9d:de:53:06:c7:1e:36:0d:46:d7:34:ba:20:a4:a4:92:d3:
68:9a:1a:83:e7:5d:4a:fa:cc:af:a7:d6:e9:0d:71:e1:b8:99:
77:de:7b:c2:8a:7f:ea:de:c0:f9:f2:09:8e:5f:fe:19:33:8c:
70:8d:b2:7f:c2:82:3c:66:19:08:b5:78:15:c4:09:30:77:1c:
8c:96:e0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:42:14 2025 by rpki-client