This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
File: Wr7NjqrTfqV665OfLAsUKXSEH4o.mft (raw, json)
Hash identifier: qEA1/1IHRPpOIcKVKm8zGqfS413geEnmO+UavM54RT8=
Subject key identifier: E2:A2:96:87:5C:62:C5:12:A5:B1:88:1E:41:B1:36:07:7B:3D:27:F1
Authority key identifier: 5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
Certificate issuer: /CN=A91A5A82/serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
Manifest number: 82
Signing time: Fri 05 Dec 2025 04:37:04 +0000
Manifest this update: Fri 05 Dec 2025 04:37:04 +0000
Manifest next update: Fri 12 Dec 2025 04:37:04 +0000
Files and hashes: 1: Wr7NjqrTfqV665OfLAsUKXSEH4o.crl (hash: Spntz47oE7olIA8vXGie9FlltscOoAincl1loqlWMxs=)
2: D0B32912090911F0A5348F26C4F9AE02.roa (hash: uW1VF7Kvr3qqb0xY8fd0nDeotf3CK4ccwfdt9+YehUk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl
rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5A82, serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
Validity
Not Before: Dec 5 04:37:04 2025 GMT
Not After : Dec 12 04:37:04 2025 GMT
Subject: CN=69326170-1a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:e2:ba:2c:b7:33:db:4e:93:6c:b6:21:3c:
78:92:cc:97:f9:5b:b4:d2:dd:59:33:21:20:7d:03:
10:c8:80:a5:ee:3e:34:40:d0:12:8b:4c:2f:84:3e:
8d:8a:16:79:61:f2:ab:ed:1e:fd:d8:ce:86:6c:cd:
40:a1:8a:3e:1c:e4:f0:6d:17:b6:98:5e:1b:f4:6d:
68:a9:c2:45:6c:37:0b:f5:6a:38:73:5b:21:93:e4:
7e:46:94:41:09:4e:42:cd:ad:85:41:24:3c:8c:d7:
87:3c:76:82:66:e8:b5:41:88:5c:3e:28:34:e3:c0:
06:b4:b5:5d:be:e6:ba:9e:13:d5:07:ce:1a:26:48:
6d:90:66:9b:65:ee:1b:0b:fc:66:08:7f:03:18:73:
ba:8b:df:17:f1:0b:08:9a:56:38:28:91:91:ec:1f:
e6:34:fe:33:b9:06:62:a8:58:94:31:7b:e2:ac:1c:
6a:af:90:9e:e5:78:18:62:61:a8:3d:69:a6:d2:b3:
18:dc:4f:50:58:c4:11:95:5a:51:cb:9d:ce:40:00:
e8:24:97:dd:5e:c5:c4:3d:15:c1:1a:ff:b0:d2:bb:
ea:85:73:b3:8e:5d:bb:1b:5b:33:b9:3b:ca:37:da:
31:f0:13:14:59:18:3e:45:ae:96:43:4a:20:d0:23:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A2:96:87:5C:62:C5:12:A5:B1:88:1E:41:B1:36:07:7B:3D:27:F1
X509v3 Authority Key Identifier:
keyid:5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:98:f4:aa:15:4d:01:e2:19:78:e0:36:f7:bf:b1:22:c6:3a:
c9:d7:27:35:58:9c:3a:17:90:89:19:ab:4d:c2:b5:4f:a7:84:
0b:72:32:71:24:8f:6b:d2:54:2f:d2:ec:5e:56:83:89:94:f5:
03:5d:6b:1b:89:c5:50:df:fc:b5:f2:97:4f:78:e4:7a:d9:e2:
e0:c2:12:0d:f0:23:aa:25:ae:40:81:18:4a:e4:7e:58:eb:6b:
e4:b9:73:36:72:e9:cd:4f:4e:25:73:18:c2:93:f6:96:02:5e:
84:41:55:4f:f0:69:2a:54:13:2c:9c:e3:1e:71:9e:13:41:d3:
b9:d6:93:07:75:e3:13:00:19:5e:d7:66:23:35:16:dc:23:fe:
42:5b:37:2a:60:a9:40:ce:ed:d9:91:9b:ca:bc:ab:40:23:df:
32:99:d0:d0:ce:be:c1:61:5d:83:16:1e:50:95:c5:fe:5d:21:
8e:23:d8:14:6d:89:00:5a:b7:99:dc:b3:4e:b5:18:39:f8:fb:
28:23:e0:99:ba:92:59:06:db:78:61:56:31:c7:65:96:c1:0e:
32:18:0b:f4:43:ba:1a:2e:62:e9:d2:5b:cb:fc:62:53:d4:5a:
d4:6d:1b:8e:dc:10:c5:52:d2:f0:00:bd:fa:48:23:5d:ec:6a:
7d:5c:5e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:34 2025 by rpki-client