This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.mft
File: wuH3Z0PV73o0ajcy6vkNrVgod90.mft (raw, json)
Hash identifier: nKC7GJbXNAeHcflYQ8YGc53F4y1az+o5R/w7EqVoqPI=
Subject key identifier: AF:D1:D4:E8:51:71:42:22:C6:7F:1B:22:FA:9D:66:AF:BF:A6:80:B5
Authority key identifier: C2:E1:F7:67:43:D5:EF:7A:34:6A:37:32:EA:F9:0D:AD:58:28:77:DD
Certificate issuer: /CN=A91843C6/serialNumber=C2E1F76743D5EF7A346A3732EAF90DAD582877DD
Certificate serial: 0238
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.mft
Manifest number: 0232
Signing time: Fri 05 Dec 2025 00:21:20 +0000
Manifest this update: Fri 05 Dec 2025 00:21:19 +0000
Manifest next update: Fri 12 Dec 2025 00:21:19 +0000
Files and hashes: 1: wuH3Z0PV73o0ajcy6vkNrVgod90.crl (hash: OZRjK53wXJxuk8A/edXpJqO54yx+9YpbexJGVzL+sXg=)
2: 679A3A06D1F211ED8C598E75C4F9AE02.roa (hash: r5ZmLzUZTXiDfxiYIu9oDsZMlDkmnmjH0O8U1OebWxE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.crl
rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91843C6, serialNumber=C2E1F76743D5EF7A346A3732EAF90DAD582877DD
Validity
Not Before: Dec 5 00:21:19 2025 GMT
Not After : Dec 12 00:21:19 2025 GMT
Subject: CN=69322580-cee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:4f:7c:af:79:7f:11:28:ea:7c:83:bb:9b:
0f:ec:54:c2:4a:9c:0a:18:2f:11:64:9a:b8:3b:23:
32:65:da:02:ce:94:a8:31:f0:7e:53:15:a8:c1:c2:
2b:65:8a:f3:9e:19:ea:e4:9c:5c:28:22:d7:ae:35:
2c:bf:f5:60:1f:48:87:d2:0e:f3:4a:0e:b5:a9:bb:
8b:be:a2:65:6a:4d:c3:23:1a:d2:8e:a9:d7:31:d2:
45:98:6f:62:9a:f2:b0:59:fe:46:51:1e:6f:f1:3e:
32:45:64:eb:96:89:4e:bc:04:29:cf:3d:08:a9:f3:
c7:3f:5b:77:28:ac:01:9f:ed:84:a7:5d:ca:3f:53:
0e:ca:ce:09:da:9d:fa:43:ff:cc:f0:54:09:8f:99:
97:65:c1:a7:66:aa:17:f9:bb:a8:cf:5c:3a:04:c7:
44:5b:35:88:c8:34:b7:4c:b8:c8:c8:21:2b:b0:0a:
87:08:86:7a:fb:a0:9f:2a:9a:ff:af:74:09:66:06:
bc:86:60:95:99:cc:7a:38:fd:c0:d8:a1:55:fc:f3:
7c:95:8e:a1:54:b5:1b:f8:c0:8f:f9:26:b0:a5:37:
0b:5f:75:f6:72:73:0e:8e:29:86:2a:6b:82:c0:fb:
17:4a:3a:e7:8b:23:f8:5b:0d:16:b3:47:b2:e1:25:
4b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D1:D4:E8:51:71:42:22:C6:7F:1B:22:FA:9D:66:AF:BF:A6:80:B5
X509v3 Authority Key Identifier:
keyid:C2:E1:F7:67:43:D5:EF:7A:34:6A:37:32:EA:F9:0D:AD:58:28:77:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b5:78:b8:e6:c3:40:06:e3:8f:56:ca:03:16:3c:8c:fb:0e:
cd:35:e0:3e:47:59:83:19:2f:64:c1:da:99:22:b3:56:95:2a:
48:0b:db:b8:9e:88:3f:b2:72:e4:da:0e:19:cb:ca:ab:cd:c4:
62:60:50:71:7e:96:86:a1:3d:fe:51:40:d2:3a:dd:e3:83:8d:
6b:a7:5c:54:01:76:a3:8f:e4:e1:a6:d6:5a:13:97:3c:63:66:
9a:6a:c0:d2:cf:b7:14:dd:70:7c:11:7e:63:28:b7:c2:22:7e:
b5:61:e3:ed:fa:7a:d4:24:d9:a0:36:63:d8:a5:5f:b2:c4:60:
ce:21:5d:96:a8:e8:e9:49:d9:2c:ef:7e:5c:cd:77:8d:44:29:
fd:f5:64:ad:56:6c:93:62:24:92:fc:54:0d:a4:cb:4d:3e:48:
aa:35:6c:ab:85:40:e3:85:1a:37:3b:59:40:d9:57:ca:e8:27:
08:65:b8:05:9b:8c:c9:2b:e4:65:66:8e:dc:c3:57:1b:37:ac:
ae:b9:51:cb:43:54:72:0e:df:4d:2b:ff:f6:f6:f0:71:9f:a9:
ed:c9:95:6b:d7:04:62:52:b8:6c:5c:55:cf:62:28:86:b3:e8:
e2:fb:0e:77:12:d7:96:8e:cb:4d:4b:fa:b3:03:3a:fb:c4:8f:
03:50:54:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:00:21 2025 by rpki-client