This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft
File: wOMbX0XP5SusXO243MahoyL0cF0.mft (raw, json)
Hash identifier: Yp6CBS42ENZlIloQYke/VTeA0H3yu3yefxWMmK7dMKo=
Subject key identifier: 5F:4A:CC:3C:6D:DC:74:5B:D7:C6:E5:40:1B:25:0C:C8:01:BD:60:CA
Authority key identifier: C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D
Certificate issuer: /CN=A9196F7C/serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft
Manifest number: 0146
Signing time: Fri 05 Dec 2025 02:38:55 +0000
Manifest this update: Fri 05 Dec 2025 02:38:54 +0000
Manifest next update: Fri 12 Dec 2025 02:38:54 +0000
Files and hashes: 1: wOMbX0XP5SusXO243MahoyL0cF0.crl (hash: aPfW7MgFVga2qkTaZtnz2zR7uJT9bGm/44QguK1G7wU=)
2: E37CCF70718911EFA0C30257C4F9AE02.roa (hash: /gAZLPIK5N+oUjrTM1zm3bFOQvpgh0r/tqZUpI/jzmU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl
rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196F7C, serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D
Validity
Not Before: Dec 5 02:38:54 2025 GMT
Not After : Dec 12 02:38:54 2025 GMT
Subject: CN=693245be-be02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a4:76:83:bf:b7:46:68:b0:06:86:09:e7:44:
3b:b7:c6:9b:a3:03:00:8a:8e:e1:cb:64:f1:83:5b:
e0:55:90:a8:05:a5:6d:fc:ce:28:4a:63:7f:51:3e:
7f:37:d9:e6:7c:c1:9b:a5:9d:96:db:a3:c8:cd:f9:
51:b1:57:df:f0:6b:6a:e3:5f:33:4b:61:49:35:09:
4f:ca:17:b8:46:96:04:5f:c8:ac:18:e7:cb:c8:80:
45:3f:11:dd:3b:fb:2e:9b:cb:6b:48:86:06:c1:3d:
c8:30:d3:e1:df:c7:db:22:8e:7e:c9:dc:b2:cc:7a:
54:1f:2f:5d:96:6d:e3:ec:33:df:69:fb:72:61:29:
28:b0:ec:e5:c9:aa:a1:21:6f:70:c5:9c:55:8f:31:
f9:76:89:ea:71:c4:dd:8a:1d:cb:25:6c:a8:56:0b:
6f:94:17:45:cf:9d:12:b9:5a:a5:94:b8:cb:b9:5c:
64:f5:b4:c7:b4:ec:6e:22:e4:cf:ab:8e:e4:3b:f5:
48:dd:a3:ee:20:bc:13:87:ab:a9:2e:90:76:e0:b0:
97:dc:b2:8b:3d:da:d7:84:7e:e5:1d:b9:37:91:7d:
07:28:dd:d4:9d:af:ac:41:7a:99:de:c2:9e:0e:6d:
3e:d7:71:d4:ac:8f:36:42:0f:cd:63:24:87:f7:1d:
96:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4A:CC:3C:6D:DC:74:5B:D7:C6:E5:40:1B:25:0C:C8:01:BD:60:CA
X509v3 Authority Key Identifier:
keyid:C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2f:e5:d5:b8:33:b8:dd:42:32:1c:95:85:ec:28:8a:c9:1c:
0c:15:77:23:18:95:21:48:c8:d5:33:ab:d1:aa:d8:47:7e:c7:
52:93:dd:55:fa:06:86:b7:0e:e8:33:0f:e5:0d:9c:6f:ea:05:
1f:ba:46:8a:90:d6:f3:6c:45:ca:1d:e9:30:bc:bf:c8:b5:8b:
d8:cf:37:46:85:a9:d5:bf:9d:02:01:e2:47:93:ed:3c:06:64:
23:3c:47:05:c9:68:d7:49:f2:d0:94:df:81:ef:bf:24:a6:f7:
23:12:5f:e4:b0:97:82:3f:01:8c:24:6e:85:dd:2a:f4:89:ed:
5d:98:f5:d8:dc:31:de:04:06:97:32:b0:d7:14:63:de:b7:0b:
27:8c:50:03:3a:1e:72:10:32:3d:4b:ba:d4:b3:82:99:36:24:
99:ae:61:de:20:af:90:5e:e5:b7:4c:40:0f:2f:07:db:d4:38:
d8:f4:29:f2:01:18:17:1a:1a:24:b7:a3:07:aa:f0:92:f4:89:
a6:a9:ad:fa:4e:74:73:cd:02:28:a9:a0:ee:08:5a:5e:d0:cd:
8d:4d:0a:7f:95:9a:20:76:5f:38:8e:4f:4e:9d:54:cc:b5:cf:
ff:65:df:19:f6:72:f6:0e:cc:8e:99:4e:a5:3f:14:98:ba:dd:
b0:8c:d4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:03:51 2025 by rpki-client