This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
File: wSlv-tNPKfBODvrV2SRMAqfYfY0.mft (raw, json)
Hash identifier: MCJSfRDMpCq7SSZ8e7hJace4oF0xLBJKS9WT0GUvc2s=
Subject key identifier: E3:4E:B6:41:67:77:85:1D:E7:EB:F8:09:69:63:EC:30:5D:E7:3A:2C
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial: 3542
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
Manifest number: 351B
Signing time: Thu 04 Dec 2025 14:33:51 +0000
Manifest this update: Thu 04 Dec 2025 14:33:51 +0000
Manifest next update: Thu 11 Dec 2025 14:33:51 +0000
Files and hashes: 1: wSlv-tNPKfBODvrV2SRMAqfYfY0.crl (hash: Y6JVndpZrTbKyVYEIHFHw6+hS9GGprUOYONwALmpsbw=)
2: 93215346C57811EA8440684AC4F9AE02.roa (hash: Neo4y3dgUaZAb3jweRA+243JDhV+YXScU7c0GteH4uM=)
3: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (hash: LAm5srYmYBa9WShMZPaiIeFdpoZdlrFsrxnvM6yFi7M=)
4: 0000FD82284811EFADB77468C4F9AE02.roa (hash: W9xZ05fzRaVk7lWJKjvq0VcXRDKzdp+VZJErV4rbXxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 14:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13634 (0x3542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Validity
Not Before: Dec 4 14:33:51 2025 GMT
Not After : Dec 11 14:33:51 2025 GMT
Subject: CN=69319bcf-e416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:be:10:fc:0c:fe:1b:47:7d:aa:a6:04:0a:
57:68:45:06:67:82:b1:30:7f:3f:9e:c5:28:7f:9c:
05:18:5c:c1:3b:21:a6:ff:56:ba:97:ae:ad:52:99:
a7:ae:51:db:47:69:99:88:68:09:71:f1:45:90:55:
a5:7f:ea:f6:f6:3a:6b:b2:ac:3b:fc:c9:ab:42:80:
46:80:e9:41:1b:b5:9f:39:34:a5:12:81:9d:76:b7:
bf:61:2b:ee:c2:ff:ab:b9:f1:8c:a2:85:40:0c:b5:
87:2e:2e:51:08:95:d7:ee:96:f0:54:c3:37:37:41:
9d:da:2f:68:0b:4b:f9:f1:e9:22:8c:56:13:1d:32:
02:cc:bc:13:2e:0b:8e:90:c7:24:39:e9:1e:12:68:
ad:1d:02:80:4c:45:a2:bc:2b:33:56:4a:ad:2d:8e:
a7:a3:26:83:43:b3:46:11:bc:9c:3a:9f:0a:20:f2:
d1:10:32:40:22:20:6e:b3:d5:45:95:dc:e8:09:56:
70:74:54:a2:8e:72:bd:db:79:42:1a:a2:c2:4e:f3:
ea:b7:98:0f:0c:dc:b4:7b:36:db:76:00:bd:ae:0f:
38:95:21:8c:49:42:2d:98:3a:47:3e:e7:9b:c7:5a:
47:da:d2:bc:ef:62:c1:23:45:a2:30:97:0a:88:c3:
5c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4E:B6:41:67:77:85:1D:E7:EB:F8:09:69:63:EC:30:5D:E7:3A:2C
X509v3 Authority Key Identifier:
keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:72:b0:25:e2:03:a6:82:26:23:18:13:d6:40:fc:1d:21:55:
01:3c:44:41:95:79:55:65:89:37:94:fc:29:91:3e:7b:1e:1a:
a1:61:f4:d7:38:d5:7f:00:b2:8d:d2:ac:f0:0f:a2:18:83:b2:
85:e4:e0:7f:9f:0b:ed:0a:f0:18:12:29:94:be:1b:b1:71:7d:
50:c9:d2:b2:50:72:43:21:ba:e2:00:23:fa:45:4d:9a:5b:0d:
d4:1d:fe:fd:f9:a3:c5:83:b4:8c:cd:75:1b:61:b5:4b:5e:47:
30:b7:f7:90:9e:87:7f:e0:ec:2b:d6:e2:b4:6a:cd:4a:23:aa:
50:bd:d7:64:46:7f:5b:ed:e6:1d:91:d7:c1:16:db:c1:3b:bf:
7f:0e:fe:77:4b:70:2e:4e:16:7a:ef:68:77:9a:73:f5:69:83:
5d:1a:6e:64:58:46:4e:9f:46:92:ed:75:24:bc:99:9f:a9:ca:
fe:34:d5:36:a8:c1:fb:52:8f:ed:e7:b3:b6:a4:b2:e1:f5:f2:
46:fc:5d:1f:ba:ea:b9:bc:86:1f:0d:d9:31:1d:dd:ab:8a:67:
17:fb:53:a1:c6:04:25:8f:30:9c:69:d8:16:45:88:1e:49:56:
19:b5:74:3e:65:c3:b1:65:ba:1f:96:3c:d2:57:9f:e4:e9:58:
ee:ae:38:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:32:22 2025 by rpki-client