This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
File: wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft (raw, json)
Hash identifier: Y7fmAaRgqnmtc8CLWhkfC1xIZiCzZIq5Xr4hPIk7OZI=
Subject key identifier: A3:2C:EB:31:2A:65:2A:BC:79:73:B6:1F:0B:24:50:2E:F5:4B:20:C6
Authority key identifier: C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B
Certificate issuer: /CN=A91B0B65/serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B
Certificate serial: 118C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
Manifest number: 1177
Signing time: Sat 06 Dec 2025 16:44:56 +0000
Manifest this update: Sat 06 Dec 2025 16:44:55 +0000
Manifest next update: Sat 13 Dec 2025 16:44:55 +0000
Files and hashes: 1: wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl (hash: 1S5MgcYuwNiklAENNHV2RwmE5EXw1EBWVQTOboq+TXk=)
2: CA7A6F1A157C11E9BB547B7AC4F9AE02.roa (hash: 6AfnF5nLJAE3w4JLaTI+K2fojs88gAENM8OolAaJRQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl
rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4492 (0x118c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0B65, serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B
Validity
Not Before: Dec 6 16:44:55 2025 GMT
Not After : Dec 13 16:44:55 2025 GMT
Subject: CN=69345d87-bc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:e9:57:1e:ee:1d:0a:0c:76:59:c8:89:f0:
5b:6a:27:00:85:48:36:d7:50:d9:71:fc:9b:94:05:
a4:d2:52:9f:a8:33:e3:a4:3f:0d:6b:7c:a0:0f:9b:
43:7d:9c:66:95:5a:ad:d6:e5:be:71:b9:99:0b:ec:
e7:21:2f:79:9a:ef:bf:7a:17:44:71:6d:10:42:e7:
87:39:20:02:c2:34:4f:25:0d:cc:7b:a7:21:f5:a6:
c7:fa:cd:7c:1d:1a:c4:a7:81:ed:83:1c:ea:f8:b8:
94:e9:cd:f3:c2:88:95:25:76:db:71:ed:fd:be:5d:
df:f2:bf:18:58:69:c2:6a:41:1e:a8:04:57:44:68:
fb:26:fd:24:cb:d9:db:49:3a:9b:45:7d:45:a2:7f:
34:ca:e7:00:29:54:99:34:c1:f8:e8:f4:15:8a:73:
6f:ac:0f:48:9f:25:a3:86:99:cc:ee:92:5e:b2:bf:
6a:93:85:4b:ca:0c:24:92:09:5a:f5:a3:5e:03:a5:
42:6d:de:fb:56:89:51:45:bd:7b:9d:b8:08:6e:44:
91:4b:8c:c1:51:f9:38:d3:65:33:77:19:6c:e7:c8:
d7:c5:60:54:e4:98:25:1e:2a:f4:dc:9e:0e:0d:9b:
fd:35:12:aa:dc:28:4d:88:53:06:0b:24:89:fe:2e:
26:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2C:EB:31:2A:65:2A:BC:79:73:B6:1F:0B:24:50:2E:F5:4B:20:C6
X509v3 Authority Key Identifier:
keyid:C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:2f:19:2f:8d:b0:89:39:d4:14:2d:eb:f4:ae:58:82:11:06:
db:d0:73:7c:12:17:fd:99:3e:77:c1:02:3f:f0:dc:f4:ca:72:
a7:db:34:22:bb:0c:aa:f8:92:b0:03:97:e2:f0:54:e1:92:b0:
1a:70:9b:da:b1:e6:66:9c:8d:6f:48:2d:77:37:f4:ac:83:00:
af:90:d5:fd:6b:e4:96:e2:98:00:8e:99:2a:29:70:30:29:59:
1d:c1:83:e6:06:60:43:16:6b:7e:4a:19:ab:b1:ab:55:f9:c8:
4d:29:f4:b2:d3:dd:ba:05:8c:fd:03:d8:8c:18:20:f3:14:da:
9e:fb:ac:be:12:fb:09:e8:16:71:b4:67:59:02:76:2b:fd:22:
c1:03:9f:74:c0:7c:fd:24:bc:cc:08:1f:f6:60:c4:3e:60:6e:
b7:c8:06:f2:01:45:b0:fe:d9:0b:fc:72:65:dc:19:2a:a1:9f:
c5:57:e0:b7:14:bd:e8:fe:6c:38:61:3c:8e:e3:ef:eb:28:eb:
e3:da:24:d3:44:21:78:73:d4:cd:ec:7b:27:72:d4:15:0e:8d:
1d:e6:47:ff:29:83:bc:ff:50:e2:96:61:c1:52:e3:b9:6d:75:
1c:a8:94:7b:8b:19:9a:0a:b2:7e:d3:33:ef:39:e7:ca:ae:d0:
5e:47:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:01:54 2025 by rpki-client