This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
File: wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft (raw, json)
Hash identifier: MTtH2NEe2JCuM497UparsIkHFlqpIr5om8+h0jJkL+s=
Subject key identifier: CE:94:E6:ED:AB:8F:07:94:3D:FC:61:F4:18:41:C3:35:33:50:FE:70
Authority key identifier: C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4
Certificate issuer: /CN=A91B7292/serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
Manifest number: 0157
Signing time: Wed 17 Dec 2025 03:41:55 +0000
Manifest this update: Wed 17 Dec 2025 03:41:55 +0000
Manifest next update: Wed 24 Dec 2025 03:41:55 +0000
Files and hashes: 1: wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl (hash: 4sn3+8U6Dm+AIoXcJCEVo4sRaPV9qEoJFk7A8XKst5Y=)
2: 998461D4D14E11EEBD6E0D11C4F9AE02.roa (hash: Bq4ocVFZ0iosWtq4rhIKfW0siZZeuAW1JI1o4Hun97U=)
3: 870862B2222011EFACCDE81BC4F9AE02.roa (hash: iFM1hRRsTitvTXymeae3/v3L/18Q6Ng8NLFYYC8Eutc=)
4: F007DD9AD14B11EEAB2B5281C4F9AE02.roa (hash: UNEOMs5fqV8hRkNMf6LQuM3qbd10KwZHOmN1Q6Mt1Y8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl
rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 03:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7292, serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
Validity
Not Before: Dec 17 03:41:55 2025 GMT
Not After : Dec 24 03:41:55 2025 GMT
Subject: CN=69422683-475d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:1c:ac:5e:d0:bb:01:74:e6:7d:c4:95:09:
48:f3:a0:1a:7c:b1:8e:4a:43:df:d4:d3:e5:f5:4d:
14:bb:72:85:b3:71:ba:2f:b2:78:78:92:c6:42:98:
ac:40:21:07:0f:37:c7:83:0f:da:39:ca:27:61:26:
81:54:a3:c2:b7:75:0d:9d:3e:7b:e1:3d:cd:66:c0:
98:51:9d:99:1e:d2:3b:3a:fe:2b:a9:b4:f4:f6:9c:
c1:a8:47:5b:bc:15:4a:79:6c:b5:a8:27:d1:5d:9c:
b0:9a:8e:83:7a:26:38:f3:43:70:ef:71:5f:f5:cd:
38:f4:a2:ee:a5:2e:5d:cd:e3:c6:39:83:bf:ce:70:
25:ad:ae:c2:1e:e4:e0:74:e9:b2:e7:64:5e:75:10:
d6:87:ac:59:82:6b:95:1d:f0:f0:cc:21:d4:fa:b9:
5f:8d:46:5b:e1:c7:6a:f4:f8:1a:13:5e:d8:71:75:
30:1a:a1:05:40:46:db:e7:80:76:c7:94:a8:a5:c5:
27:02:2f:0a:2b:5f:b9:13:68:a5:b7:08:27:78:6c:
2d:d2:41:b7:77:bd:b0:fe:ad:ae:dd:38:b4:ed:7c:
0c:0e:ce:f3:e6:6d:c1:68:b2:b5:d3:10:d7:a4:43:
d4:72:7a:4d:ea:1b:97:c5:9f:8e:a6:16:a8:81:7b:
aa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:94:E6:ED:AB:8F:07:94:3D:FC:61:F4:18:41:C3:35:33:50:FE:70
X509v3 Authority Key Identifier:
keyid:C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:ad:d3:09:ec:54:d7:b1:74:57:bb:5c:47:9c:94:a4:33:93:
29:07:e9:5c:5c:55:46:a0:01:6c:bc:e5:f8:99:9f:48:13:22:
ce:26:26:a1:d0:b3:a7:cc:f9:ce:bc:52:d2:20:29:39:ee:1c:
ad:6c:39:8a:af:1b:d0:7c:be:9e:ad:d4:f7:6c:3b:63:15:fe:
1c:ff:32:53:0c:09:c1:23:a9:cb:2d:5e:50:d8:56:56:35:9c:
33:70:d9:ac:ba:05:c0:11:25:6c:07:3c:b8:34:64:a1:62:8a:
3c:a8:4f:29:af:89:b7:eb:04:b5:b2:f7:08:48:7a:41:da:79:
9b:48:1c:9c:2a:ac:81:68:d7:5c:46:ec:42:a2:39:1d:ef:7a:
03:a9:60:c5:3e:b2:d8:f9:c2:bf:5f:54:b8:fa:65:1e:1c:26:
2c:dc:93:42:20:f7:47:a4:31:ed:eb:f9:aa:a7:1b:72:d5:32:
46:a2:27:01:28:dd:38:d4:5c:14:c5:9a:2e:ec:bd:0e:1b:22:
8c:05:c0:9b:37:e1:86:28:ed:8c:9d:f0:47:70:43:e8:d8:9c:
4d:f4:12:fb:4c:78:96:31:1d:e7:7d:eb:da:c2:c5:99:a7:66:
4a:75:e7:1b:1b:e3:29:3d:c7:48:32:62:32:45:01:cc:8a:3e:
06:33:34:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 19:07:24 2025 by rpki-client