This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
File: wG_wBd4dXvE7qPDCYOljA0paIso.mft (raw, json)
Hash identifier: zHQ2Yuf4lMIuQ2C7AqiNqnLFzxUnB5jU6oHe+aYejaA=
Subject key identifier: 6B:B7:0B:F9:01:27:DF:E3:0C:95:19:2F:DB:FB:E2:3B:CC:FF:A8:46
Authority key identifier: C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA
Certificate issuer: /CN=A91A0C5F/serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
Manifest number: 01FA
Signing time: Wed 17 Dec 2025 01:58:27 +0000
Manifest this update: Wed 17 Dec 2025 01:58:27 +0000
Manifest next update: Wed 24 Dec 2025 01:58:27 +0000
Files and hashes: 1: wG_wBd4dXvE7qPDCYOljA0paIso.crl (hash: eijhMml71R/atySMvNTJWFWKoTJIByX+u8EA/RIxkWY=)
2: 0D53ED80D2BA11ED8E06CC13C4F9AE02.roa (hash: 8W11lhJNXDI/B18v0915hoFQti7BAopL/ni44iL17Lo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl
rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 01:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0C5F, serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA
Validity
Not Before: Dec 17 01:58:27 2025 GMT
Not After : Dec 24 01:58:27 2025 GMT
Subject: CN=69420e43-2f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:1a:49:0a:46:9d:8b:0f:b0:d0:d3:b9:b1:
4a:ba:46:4f:a4:ea:59:81:a0:7c:52:78:4e:9e:27:
88:a7:67:a9:15:ce:07:6c:e6:70:8d:4b:7f:c8:8b:
5c:12:f9:12:de:77:52:9a:51:cf:67:f2:51:80:07:
49:f5:39:d7:99:18:8e:fa:73:6d:84:5f:cc:1f:13:
5c:01:c3:df:4d:91:68:c0:1f:74:ce:ea:5f:51:ee:
43:a6:69:c7:9d:62:fc:37:4c:b9:ad:05:17:0a:52:
dd:82:7e:6c:2b:6a:3e:2a:df:0c:17:14:1c:8f:c2:
dd:69:f3:dc:9c:13:da:95:b2:fc:61:91:17:93:e6:
e2:89:a8:ea:61:50:87:72:b6:be:8e:82:82:e9:1a:
74:dd:7d:50:fe:fe:3a:ff:5d:bf:11:d8:f2:a0:f9:
2e:20:00:78:c9:89:ac:74:d9:59:95:74:80:ba:a7:
ca:1d:f2:92:cb:39:ae:f2:1b:ed:a3:ad:b2:1e:cf:
96:10:0a:6e:69:87:c8:24:ba:a6:a5:ae:37:63:15:
36:5d:e0:34:91:34:ab:87:77:00:20:ea:69:da:d4:
37:44:f4:0f:a1:63:e1:9c:9a:e2:4b:d8:3b:8f:03:
99:f5:b4:94:44:8e:43:3b:3a:9f:d7:c6:b4:13:06:
67:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B7:0B:F9:01:27:DF:E3:0C:95:19:2F:DB:FB:E2:3B:CC:FF:A8:46
X509v3 Authority Key Identifier:
keyid:C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:bd:da:c2:d6:41:1f:5f:95:e4:bf:8d:95:98:6f:b2:d3:12:
c3:7c:14:25:d2:6d:bc:2e:60:bb:f0:87:0e:17:8f:74:48:7f:
47:36:bf:b9:f8:1c:f1:c8:83:4d:a5:74:71:17:25:da:55:a3:
b6:b3:d8:02:b8:4c:7f:1b:84:6d:0a:e2:23:9e:9e:61:82:ae:
b7:ee:93:ba:a2:9e:6f:05:3b:36:b5:81:82:e3:e9:69:17:5f:
05:4d:50:db:d0:91:07:f9:12:d9:60:5d:98:e1:30:b1:72:17:
7e:92:0f:09:ad:49:2c:72:a1:d2:b9:42:32:93:1d:35:d8:7e:
62:0f:40:8d:8f:6f:d3:58:94:d3:8d:ab:97:58:9b:5d:b3:3c:
4c:01:09:ee:63:29:85:22:1d:79:d4:fa:7d:e5:71:cb:df:7c:
4f:3e:04:3f:56:b7:d0:01:3c:36:d9:58:80:64:19:d6:6d:ae:
8f:28:19:95:a1:4e:8d:3e:d9:da:cf:3c:c6:1b:3c:d5:95:23:
5e:34:7e:0e:c7:37:29:01:19:29:f2:ff:53:43:ab:bb:2f:c1:
0f:8d:58:c9:90:1c:f8:a2:5d:4a:d9:04:d7:f5:b4:4e:61:30:
aa:2b:2b:a9:af:b9:56:e9:3b:be:e8:c3:64:75:a0:68:08:67:
81:03:2c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 21:59:25 2025 by rpki-client