This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
File: w9zZWnJK1uO5h0xuTWs5684ULNQ.mft (raw, json)
Hash identifier: Xh2HWKvFbtiTcApEkCVij/KqTLFoNiAoNzv4JxMzqrE=
Subject key identifier: 85:17:E1:26:9E:9B:0A:50:6C:9E:05:3E:34:4D:29:6B:C9:C3:58:CD
Authority key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4
Certificate issuer: /CN=A91AFB9A/serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
Manifest number: 5C
Signing time: Fri 05 Dec 2025 04:59:55 +0000
Manifest this update: Fri 05 Dec 2025 04:59:54 +0000
Manifest next update: Fri 12 Dec 2025 04:59:54 +0000
Files and hashes: 1: w9zZWnJK1uO5h0xuTWs5684ULNQ.crl (hash: eOskDnnRgnoTlyFtyuU6on5vDdnAl2UIOHQpGeCVfsU=)
2: CE3975C845C811F0A78A100DC4F9AE02.roa (hash: 9HTGfO2piDDwEKXCj1vvDxbp+9cC4HfErZG/HpULbg8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl
rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4
Validity
Not Before: Dec 5 04:59:54 2025 GMT
Not After : Dec 12 04:59:54 2025 GMT
Subject: CN=693266ca-b888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:6e:f0:5e:f4:d6:94:c8:aa:07:7c:61:a4:
b0:46:8e:5b:7f:ed:76:ee:ea:28:81:70:d6:f2:41:
f8:48:ed:1a:ce:37:b1:2d:37:f9:ae:e5:79:96:bd:
b8:4c:18:50:5a:00:17:42:bf:33:7f:37:79:6d:39:
2f:f9:ab:82:cf:42:2b:f8:a8:0b:4e:55:44:6f:ad:
a2:8d:65:0b:bd:e5:25:7c:9e:b2:a7:db:af:e3:06:
0f:58:b2:8c:a1:8e:ca:34:a4:ee:44:6e:fa:6d:62:
f2:b9:1e:63:60:31:53:82:be:96:e5:f3:e9:e4:a5:
ae:fd:2d:29:69:ea:99:0f:1b:47:dc:da:6e:db:a2:
8a:08:a1:d2:19:27:59:a7:99:8a:11:c3:74:de:d3:
70:1a:d3:fd:e8:8a:57:cf:66:84:1e:6f:d9:49:31:
f7:96:fd:9e:98:9c:d1:63:48:dc:ae:62:e0:f7:a5:
b1:61:15:a2:71:c9:56:d9:b4:d1:70:bb:30:10:19:
d3:2f:b5:67:2e:28:24:20:df:ec:a7:cc:a9:10:a4:
70:68:aa:60:11:c0:86:58:87:fb:9f:a2:fa:63:f8:
73:ef:f2:77:ef:44:be:94:c8:c3:12:20:23:51:6d:
ec:72:d9:cc:4f:61:a0:e8:27:56:52:00:d5:c3:79:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:17:E1:26:9E:9B:0A:50:6C:9E:05:3E:34:4D:29:6B:C9:C3:58:CD
X509v3 Authority Key Identifier:
keyid:C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:d9:65:75:5e:6e:95:f6:6f:19:69:db:a6:dc:6e:eb:9a:49:
3e:a3:67:bb:07:0e:01:8a:fe:e0:bb:92:33:c9:46:8f:46:fe:
36:15:32:75:63:a4:1b:2a:02:03:12:26:99:0f:0c:f4:95:b8:
43:79:9e:87:f5:bc:44:5e:d7:26:a6:e3:95:31:ca:b4:c6:5c:
01:32:d3:26:1a:52:99:be:68:47:a6:bb:2c:a4:31:93:77:24:
57:d0:86:f9:a3:f8:77:2e:2a:87:c5:cc:de:58:41:cf:33:52:
13:47:9c:f0:62:de:2b:ab:c3:0d:5c:23:d5:f0:48:09:97:3e:
07:51:26:94:38:57:53:d5:ef:dc:7a:81:4b:7f:c5:1f:fc:0e:
ea:8a:f6:e4:14:c2:84:60:06:3c:88:f1:8f:bb:da:d5:29:7c:
94:6f:81:97:37:cb:c4:31:ae:a0:a2:23:49:c2:e0:3d:8b:a9:
1a:f4:05:9d:dd:57:0d:a6:74:e2:3a:04:ce:35:c6:fc:3c:c3:
ce:97:e4:01:09:ad:bb:48:ac:54:01:66:d4:f6:1c:77:1f:fc:
06:3f:5b:b7:ee:79:96:66:b9:23:90:86:a3:d1:e9:5f:db:be:
c9:96:d0:15:63:29:92:9e:e2:07:22:37:77:f7:c5:9f:29:fd:
b8:00:d3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:08:31 2025 by rpki-client