This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
File: s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft (raw, json)
Hash identifier: qp4Q3YdBECl6R4ePkfddeFAwO2xyggsY1RQRE71vfrw=
Subject key identifier: 2B:7E:BE:52:1B:23:0F:5C:96:B2:DF:10:A3:26:A0:51:D8:4E:44:3E
Authority key identifier: B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8
Certificate issuer: /CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
Manifest number: 018B
Signing time: Fri 05 Dec 2025 01:48:58 +0000
Manifest this update: Fri 05 Dec 2025 01:48:57 +0000
Manifest next update: Fri 12 Dec 2025 01:48:57 +0000
Files and hashes: 1: s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl (hash: iJELSoSZ3qbrykVRj014cgswTsp+VdlavZ9Xzcvtrrk=)
2: EBB7A41AB4DA11EEBD650259C4F9AE02.roa (hash: S6QQQa5Sp7ukB1rfGQxAaqwrRf0T3shgxPjmjI4d6zQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl
rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A381A, serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
Validity
Not Before: Dec 5 01:48:57 2025 GMT
Not After : Dec 12 01:48:57 2025 GMT
Subject: CN=69323a0a-236c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:77:4a:7e:66:b1:37:75:1a:3f:c1:c3:8d:f7:
bf:02:c1:5b:bb:1f:bd:09:9b:79:99:b6:4c:3e:ff:
ec:fe:33:4c:eb:62:6f:5c:27:3a:7c:08:e2:26:ed:
06:4e:8a:1c:ae:2e:25:ea:71:5e:ef:3c:7d:14:b2:
1a:de:78:0c:01:db:4a:e1:d4:7a:db:b8:39:e0:9a:
35:ce:6f:86:ad:1b:56:9d:49:58:b9:b2:8b:3d:5c:
f5:a7:c8:aa:13:19:82:b3:5a:8a:41:ae:05:14:de:
7b:fc:4b:87:43:ea:7f:6b:96:d8:e4:7f:8a:f3:11:
a1:1e:a2:6b:7b:db:f9:6f:5a:32:14:05:75:7f:30:
f8:67:58:7a:31:5b:b1:a4:b9:03:a9:66:79:e8:03:
22:2f:1d:c9:a1:8a:1a:b4:0e:2a:32:17:fe:58:c1:
72:88:2c:a7:02:22:2f:f4:07:39:d7:0b:70:c6:3c:
d3:f9:07:0b:84:b7:41:2a:b9:a4:75:da:de:d4:db:
57:4b:1a:8d:e7:e1:39:03:f8:0e:a4:f4:38:16:9a:
a4:25:1a:7e:19:00:b4:8b:c0:93:4a:98:9e:6a:22:
7d:fb:07:1a:80:93:25:59:c7:ce:60:c3:08:e4:85:
c7:f3:99:1e:d2:22:5e:63:59:bb:78:1a:34:66:90:
8a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7E:BE:52:1B:23:0F:5C:96:B2:DF:10:A3:26:A0:51:D8:4E:44:3E
X509v3 Authority Key Identifier:
keyid:B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:a5:38:59:19:24:9b:b3:9c:14:d4:e4:a7:aa:99:df:cf:d9:
29:56:9c:ce:d8:ef:50:8f:50:66:a2:ef:93:80:ef:ed:28:13:
9d:3f:f9:be:5d:59:72:23:e6:31:a3:f0:f0:c6:ca:2f:49:ad:
09:ea:10:76:64:d9:a5:44:f7:5f:59:4d:56:c4:44:a0:cf:4f:
1e:b0:cc:bf:2f:89:93:71:39:00:27:8a:01:f0:c2:24:31:e6:
18:31:2f:24:91:29:47:b8:be:37:7f:a7:13:60:84:58:ab:df:
3d:7e:b2:f2:dc:87:40:bf:77:6c:0c:99:04:a2:8c:03:c5:9e:
66:f7:35:c4:e2:f3:b7:69:f6:2a:0f:ac:9c:fe:6c:8f:7b:10:
6c:a2:d0:90:92:43:14:24:d0:49:0b:95:c3:37:7b:9d:24:dd:
3a:eb:16:e0:13:86:8b:ab:eb:f6:46:ef:32:a2:51:8f:c0:ef:
51:5a:fe:8a:55:7e:f8:76:c2:1e:68:a0:e3:51:fa:a3:c6:be:
cf:0b:47:37:ef:dd:c2:d1:ac:63:55:df:93:fc:78:af:bf:d3:
f5:bf:26:71:21:6c:9c:ea:dd:6d:73:15:36:39:c6:71:19:fe:
6a:d2:67:27:86:42:8c:8a:fe:01:91:86:a8:16:ea:c4:91:91:
91:47:91:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:34:19 2025 by rpki-client