This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
File: WKmVh9VjjYaIwliQx4QfMlG0ltc.mft (raw, json)
Hash identifier: uJsMP18hL/zL/P9VfaS4+0ZBGYMQ55KsgrnrwOCl4aU=
Subject key identifier: 80:99:C2:13:C9:8C:D2:07:B0:B1:FF:0C:DF:5C:63:FB:84:B5:2A:38
Authority key identifier: 58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7
Certificate issuer: /CN=A91AB740/serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
Certificate serial: 0739
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
Manifest number: 2D17
Signing time: Sat 24 Jan 2026 15:32:39 +0000
Manifest this update: Sat 24 Jan 2026 15:32:39 +0000
Manifest next update: Sat 31 Jan 2026 15:32:39 +0000
Files and hashes: 1: WKmVh9VjjYaIwliQx4QfMlG0ltc.crl (hash: /s9CvtRbwownfK+uIXpuDrxPG1TF+InAmRSYD+TFXZM=)
2: 182057F63ACE11EC8987F871C4F9AE02.roa (hash: yv4yXxdZSOzS3VJoLoyhG//bnrtF6VAnh10WOZtqxtY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl
rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1849 (0x739)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB740, serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
Validity
Not Before: Jan 24 15:32:39 2026 GMT
Not After : Jan 31 15:32:39 2026 GMT
Subject: CN=6974e617-ab0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:fa:9e:15:95:f8:0c:7b:e7:20:57:f9:38:
2b:2d:21:3e:4b:46:6a:6e:56:1f:0a:47:a9:fe:97:
b6:12:cf:3b:1d:56:27:13:24:9e:f6:31:56:38:de:
3a:a3:6b:b8:1e:da:c6:47:0c:59:ca:37:b3:8a:d3:
08:59:d6:5f:7e:de:16:1c:e7:2b:72:fe:74:d7:09:
86:2b:17:09:af:14:e4:ea:5a:5e:b8:0a:9d:16:f5:
0d:2a:db:31:2d:8b:fa:e8:a1:25:14:b8:4d:98:34:
fc:66:ef:c0:08:38:12:89:ca:e0:e3:4f:16:e2:6f:
d8:a4:56:5f:a8:41:20:3d:17:03:40:94:f5:14:77:
b6:b0:6c:a6:93:e2:bc:82:3b:e4:d3:34:3c:8c:78:
84:88:40:cb:85:9a:70:c2:9a:1c:7c:6d:c5:79:a9:
4e:24:51:79:d9:cc:ba:00:39:0f:6d:be:da:ff:7a:
5d:32:67:20:3f:28:45:a8:24:0a:70:aa:32:3a:6b:
20:3c:6f:67:6a:70:90:4c:b8:e6:c6:97:4e:fa:cf:
49:61:78:e7:9e:0c:0c:f2:69:5d:3e:78:e6:d0:5d:
af:65:fe:13:bf:5b:fa:38:90:3b:1a:8d:06:08:f9:
ba:9c:79:64:87:42:4f:96:81:f3:02:a4:71:7d:53:
b7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:99:C2:13:C9:8C:D2:07:B0:B1:FF:0C:DF:5C:63:FB:84:B5:2A:38
X509v3 Authority Key Identifier:
keyid:58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9d:b0:58:d5:5f:62:a1:85:33:d3:3b:a6:30:d1:f0:f7:e8:
64:66:61:ed:19:a7:c6:ef:da:05:98:41:1b:bd:25:bd:38:28:
63:82:89:ea:31:c6:bf:96:47:a4:b2:0a:88:c0:59:b9:c4:43:
c1:f1:44:bd:71:d6:51:ae:ee:b1:0f:ff:bb:cb:16:ac:46:88:
f1:47:c9:39:48:82:97:56:92:16:4b:9c:dd:74:45:a2:3a:26:
1d:c4:dd:1e:89:66:25:8d:c1:77:dd:ba:23:ac:4b:84:da:c5:
a3:29:df:96:a0:72:8f:24:75:1f:70:48:fe:5b:b1:a9:17:c3:
9d:0d:d6:8f:63:db:18:4c:05:b3:9a:72:ce:1d:ba:dd:6c:15:
a3:3f:35:9a:b2:fe:43:19:d8:ae:0d:e4:ff:13:d9:a4:61:ef:
b0:76:54:68:c1:c4:c7:9a:81:d0:54:2a:2a:38:4c:43:54:ff:
c3:56:06:71:2e:aa:bf:5a:f5:76:47:01:35:05:90:7d:5b:9c:
5b:51:0f:4e:55:a8:6c:49:6a:49:04:50:96:1b:13:6a:9b:cd:
5e:28:9f:2e:71:df:5a:64:10:53:2c:0d:8e:d9:f7:61:db:18:
3e:b0:63:78:03:a4:56:cd:84:8b:f0:bf:8e:9b:3d:85:04:73:
56:b0:c2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:18:41 2026 by rpki-client