This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
File: WdWIElpxZphzjR0enm2KaNdAmyc.mft (raw, json)
Hash identifier: 45EAzmlUQyTHZ7TEsRgMwzrixD/QcGE1K/qZwADh3Ao=
Subject key identifier: 44:86:24:00:EA:AF:23:DF:0F:66:6A:F7:A0:B6:73:F0:46:B0:C9:BC
Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
Certificate issuer: /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Certificate serial: 01EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
Manifest number: 01D5
Signing time: Fri 05 Dec 2025 01:20:14 +0000
Manifest this update: Fri 05 Dec 2025 01:20:13 +0000
Manifest next update: Fri 12 Dec 2025 01:20:13 +0000
Files and hashes: 1: WdWIElpxZphzjR0enm2KaNdAmyc.crl (hash: /rTV9wtUa/CW2yjlY4JzKuLN23Pl1S9g/XZpoHZLgZs=)
2: 6A9F1EFECC1211EEAA175022C4F9AE02.roa (hash: FaE6XXkxjwj2xUfh7JuSDMTkitv7rRXPaw2a3g64mao=)
3: 74444F50490E11EFA7EAAA70C4F9AE02.roa (hash: kcHTFnzLikXn0NjPuVY7G48i03xbByG7UkZ4K1tljPg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:20:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A27AB, serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Validity
Not Before: Dec 5 01:20:13 2025 GMT
Not After : Dec 12 01:20:13 2025 GMT
Subject: CN=6932334e-4be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:bd:de:9e:15:71:6e:9d:be:9e:4f:42:7a:
82:6c:81:61:32:12:18:05:30:fa:d7:1e:a5:63:01:
06:fa:ef:ff:a5:e1:69:32:61:17:17:6e:62:5f:3b:
80:69:c6:9b:3a:59:cf:db:70:ea:64:39:b5:8d:7c:
69:79:21:ce:44:68:85:f3:7d:a8:dc:a5:41:3d:60:
9b:21:31:83:26:30:f7:c1:b5:96:c3:ad:a0:53:67:
5e:db:9a:45:ce:69:71:ce:70:23:b5:82:13:38:7b:
86:3e:f7:10:45:5f:c7:e5:89:d1:6a:68:8a:5b:20:
9d:f3:41:f9:cc:7b:c0:48:dc:c4:97:4b:9f:0b:81:
18:38:f8:a5:5a:3e:4b:0c:c2:25:a2:fa:23:c5:d7:
19:47:f0:c8:e5:72:69:a1:d6:5b:09:97:a3:02:7c:
47:56:c7:e7:ff:ad:f7:88:f2:58:85:99:41:82:47:
fd:46:cb:98:d3:6e:02:d8:0d:90:1e:28:ac:0c:38:
a0:8d:d2:1e:bb:83:4c:48:78:22:28:85:85:ad:d7:
56:4e:70:ce:38:94:83:35:8e:3d:81:79:4d:2e:ac:
6b:a8:50:42:4a:7f:73:57:34:37:60:7e:a3:e3:e5:
a6:ef:58:59:3c:4f:ac:8f:96:95:25:cd:26:92:d9:
33:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:86:24:00:EA:AF:23:DF:0F:66:6A:F7:A0:B6:73:F0:46:B0:C9:BC
X509v3 Authority Key Identifier:
keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:3c:b0:e8:db:df:8a:91:bd:9f:22:39:2a:e0:18:4b:d5:47:
d1:27:cf:50:b7:cf:f7:73:9b:3d:44:cc:db:ba:6b:9b:38:be:
57:8e:d8:cf:20:eb:70:5e:2e:5a:ae:93:f2:ad:8e:40:c2:dc:
cc:3d:e9:7e:fe:a5:90:3f:a7:71:c4:83:c9:09:8b:7e:d6:89:
c1:58:15:19:8c:59:cf:37:18:ac:2f:92:86:da:ad:a1:3f:3e:
56:ae:ff:63:9a:21:9a:e6:3e:d1:93:da:8d:d6:3d:b2:2b:6d:
5d:b1:03:cb:ca:89:bf:aa:b1:0b:1b:07:d4:a3:77:88:9e:7b:
41:fd:b9:85:25:b4:25:9c:d2:9e:c0:1d:f7:d4:17:92:75:44:
5d:62:14:f9:42:dd:50:1f:8d:2f:93:29:84:a7:22:8b:28:96:
aa:d1:50:2b:25:09:c7:40:c0:cd:c1:bd:d5:19:3e:65:7f:4b:
06:27:3e:ad:44:18:54:4c:2c:0e:5d:3d:ee:64:98:c7:3b:ab:
b1:d3:5d:88:76:bd:4d:ce:e4:55:a1:8e:d5:26:5d:b4:33:5e:
96:d5:9f:d9:1c:71:e8:9f:d8:f7:2a:46:74:76:a4:b1:03:28:
1c:fd:0f:eb:75:76:19:b3:aa:bb:68:1f:c2:1b:4e:52:c3:47:
0f:de:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:21:00 2025 by rpki-client