This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
File: WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft (raw, json)
Hash identifier: N4J5BMJEWl7be0L0kgt+bzSdHn49tn1n9ZI+DuMN13c=
Subject key identifier: 94:8D:F0:EB:8F:63:52:20:33:79:C8:CE:1D:1F:77:3A:23:08:31:F8
Authority key identifier: 58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C
Certificate issuer: /CN=A919D1FE/serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
Manifest number: 05
Signing time: Fri 05 Dec 2025 05:57:08 +0000
Manifest this update: Fri 05 Dec 2025 05:57:08 +0000
Manifest next update: Fri 12 Dec 2025 05:57:08 +0000
Files and hashes: 1: WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl (hash: o2wFZbMHhrkt8dS82gBvACIxVVrBfrttMtRCFpc3Pdk=)
2: 84797D8ACF8D11F09FB4175EC4F9AE02.roa (hash: peAS/ngmPwYZnb97WFQxinsPTC6bCf5NaFTKHcSyPQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl
rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:57:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D1FE, serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C
Validity
Not Before: Dec 5 05:57:08 2025 GMT
Not After : Dec 12 05:57:08 2025 GMT
Subject: CN=69327434-e0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:10:da:e3:66:e0:32:52:8d:e8:b9:ac:28:
98:cf:aa:07:0d:f3:6a:d8:ff:8e:67:ee:1e:2a:4b:
69:44:41:a5:8f:08:c4:be:9c:fd:16:35:64:c2:9a:
a0:54:b4:1f:77:ef:fa:1e:0c:f9:0b:44:bc:87:a5:
7c:a7:82:31:99:b7:a8:ec:7f:2d:20:75:37:1d:c1:
d0:9e:58:00:a3:4a:df:de:87:80:fd:3a:93:ac:b1:
3a:f1:61:b8:a9:e3:96:a4:de:7f:5e:4f:64:ae:ad:
d6:82:30:c9:68:d8:53:2a:8c:a3:88:88:20:73:3a:
26:14:32:80:d9:52:4f:d8:03:c0:13:a5:39:5f:e7:
89:58:7c:ed:d1:c3:14:e9:6b:65:1c:27:f5:f5:40:
0a:d3:0f:a6:25:f0:54:86:1f:9c:ff:47:3a:82:41:
3a:51:d0:78:ff:6f:4e:ae:19:c8:df:13:2b:16:c2:
ad:e0:27:03:88:32:98:b3:e9:68:00:2f:ac:ee:d4:
1f:0b:0f:3f:1c:de:d6:23:32:04:00:47:19:99:2a:
28:2b:37:83:16:54:24:8f:60:8e:7a:06:81:2d:fd:
8c:7e:0e:ce:09:cf:22:29:b0:c3:c7:40:78:d9:65:
01:8f:62:52:01:18:3d:5a:6b:42:cd:23:c3:46:b9:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8D:F0:EB:8F:63:52:20:33:79:C8:CE:1D:1F:77:3A:23:08:31:F8
X509v3 Authority Key Identifier:
keyid:58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0e:95:b4:bf:4e:87:d2:97:a7:ea:07:eb:d2:9c:06:03:1e:
b6:95:c0:21:9c:c9:4d:62:c4:e7:03:c2:78:1d:c4:42:50:6b:
69:a8:f9:fd:f5:1c:7a:45:a0:02:3a:95:55:fb:4c:e9:8f:c9:
2c:27:95:9b:f4:a5:e7:4d:e0:28:e8:32:5a:50:9b:db:4b:08:
87:74:ec:ff:ad:df:1d:d2:4f:09:cb:a6:df:31:3d:24:10:ab:
9f:64:61:24:47:99:66:cd:87:5f:15:91:6b:5a:6c:43:ae:5b:
40:2a:cb:8e:26:b1:dd:c3:9c:94:54:3d:fc:4c:57:48:08:50:
d7:42:16:64:a5:cd:3f:eb:4a:c1:d4:dd:3a:77:64:bf:79:db:
2b:92:19:59:63:3c:16:90:f6:87:5d:cc:37:f2:30:52:cd:12:
58:8b:91:ec:07:06:89:e3:5b:38:72:88:8c:38:e8:45:50:f5:
81:a7:b9:8b:06:71:34:44:9d:9f:13:77:f6:e4:b0:b4:5c:35:
9c:f4:3d:30:16:1b:69:c9:39:95:51:d5:63:45:72:23:08:42:
b8:b2:b1:2d:2d:0b:d1:5a:4f:58:a8:56:1c:0c:ea:da:1f:8b:
2d:a2:2f:e5:70:6f:ee:7e:17:fa:e1:d9:4d:aa:b3:a2:6e:90:
49:2a:66:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:22:54 2025 by rpki-client