This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft
File: WbbWzXMF8t7sK45hPF2PSUJeADk.mft (raw, json)
Hash identifier: 7YpLks/LDDwnzzV0rlvK1z+CJRM2NMPlbNXfnRWv9Tw=
Subject key identifier: 94:AA:6E:F4:42:7E:F1:CC:C6:17:B9:2B:1E:2E:C1:A3:C6:3F:DA:B3
Authority key identifier: 59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39
Certificate issuer: /CN=A9185FD0/serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039
Certificate serial: 01F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft
Manifest number: 01EC
Signing time: Sun 25 Jan 2026 01:54:36 +0000
Manifest this update: Sun 25 Jan 2026 01:54:36 +0000
Manifest next update: Sun 01 Feb 2026 01:54:36 +0000
Files and hashes: 1: WbbWzXMF8t7sK45hPF2PSUJeADk.crl (hash: IyR8/D1Z2Q2bnrR0hxqV6uJKKOJD9zV4gjwxta3QYLo=)
2: 9E5F4D0060E111EEBD81AD43C4F9AE02.roa (hash: LvsVsArM6WgAwVg4l/iixUJeke5f36Ab2xwAtLEZPnA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl
rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185FD0, serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039
Validity
Not Before: Jan 25 01:54:36 2026 GMT
Not After : Feb 1 01:54:36 2026 GMT
Subject: CN=697577dc-4676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:d5:15:a0:cd:c2:d1:ef:2c:2f:46:c8:cd:
1c:96:31:da:66:64:0b:28:74:60:d2:55:e2:c5:57:
67:16:59:46:ca:39:9a:6e:80:11:ea:b9:a0:b2:0d:
79:3f:fa:ae:54:8e:15:34:28:64:64:ec:7f:ad:49:
6a:77:c2:25:90:3a:b0:83:59:54:23:1e:55:28:c3:
90:51:3d:b1:7a:10:7c:34:d8:04:83:8d:9d:79:74:
7b:60:ee:3d:10:b4:27:b3:54:d4:83:31:d7:9d:13:
b1:ae:05:76:57:54:cf:46:d0:fd:70:30:e2:6b:c0:
ec:f4:c2:ff:23:68:b9:09:ac:d5:f5:af:66:df:25:
97:0f:64:65:d9:72:34:6b:be:cc:9c:5e:50:68:46:
ac:3f:1a:4f:5a:7f:e1:3b:f5:d6:3e:2d:5f:5e:e5:
44:82:27:08:8f:7f:94:5c:dd:33:07:57:a8:71:ea:
97:10:b1:ef:93:d4:8a:79:75:aa:2f:ff:bc:ee:e3:
69:fc:0c:69:fc:ae:55:b2:2b:59:3e:80:e2:da:bd:
68:da:61:e3:ef:50:e6:1b:eb:44:ee:39:e4:c7:f5:
c1:fa:d7:71:2f:48:7f:d1:d0:68:b3:d0:3d:e1:cf:
1b:dd:ba:0a:09:00:08:f0:d7:8b:e4:06:e7:1c:0b:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AA:6E:F4:42:7E:F1:CC:C6:17:B9:2B:1E:2E:C1:A3:C6:3F:DA:B3
X509v3 Authority Key Identifier:
keyid:59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:34:0a:7f:ee:cf:06:d1:81:8b:5d:59:06:88:0d:40:82:47:
16:c7:63:33:02:b3:e3:56:e5:a0:4e:0f:d4:bd:97:d6:da:6c:
df:b3:78:68:d7:14:e5:36:a6:90:59:e0:10:c9:60:51:e4:6b:
69:4f:e2:f8:a6:8a:a4:b9:88:31:94:5a:e4:1d:8e:d8:b2:da:
ba:23:6c:d6:4e:d8:d4:a8:04:6e:08:9a:19:11:11:29:53:4b:
2a:bc:89:cc:28:d7:2f:e9:03:fd:f3:dd:7a:24:a0:f6:39:ac:
1d:82:25:f8:24:8e:01:fe:b9:f2:14:7b:a4:a8:04:ff:a9:d0:
59:25:50:ea:c2:e4:82:5a:12:3d:33:b8:69:bd:06:13:02:b4:
30:87:45:78:c9:3b:10:e2:c5:62:ff:7e:3e:e4:07:33:2a:02:
76:63:eb:0f:c4:e8:01:1d:1d:c1:4a:1a:42:14:f2:7a:8d:99:
a4:2b:af:85:f2:f1:18:97:92:8b:bb:3f:ea:62:99:96:f8:ee:
c4:f5:1e:d7:22:63:b2:23:1f:b0:20:78:ff:84:22:e6:59:81:
1b:92:2d:27:75:cc:b5:bc:09:59:29:c8:69:2e:db:d9:d1:94:
dc:e4:2f:b5:cb:db:3b:e9:04:84:d0:66:80:fe:b3:f4:4f:e6:
12:10:06:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:31:47 2026 by rpki-client