This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
File: atWLLDI-9A_AiUCxRgfQhpXOhpg.mft (raw, json)
Hash identifier: t6VrRY6UGjMbCG6ogoobsyZJsJb7SsJcn20cB+ASRvQ=
Subject key identifier: 07:6A:2C:D7:A1:21:C2:3C:D6:1E:FA:58:64:89:6F:FD:C4:3F:6A:6F
Authority key identifier: 6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98
Certificate issuer: /CN=A91BB6B3/serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
Certificate serial: 0691
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
Manifest number: 0688
Signing time: Thu 04 Dec 2025 21:16:19 +0000
Manifest this update: Thu 04 Dec 2025 21:16:18 +0000
Manifest next update: Thu 11 Dec 2025 21:16:18 +0000
Files and hashes: 1: atWLLDI-9A_AiUCxRgfQhpXOhpg.crl (hash: HAlbyEhTuvmKrQ3wzVv/M/hO3UHCfvNky0Fxpoeo95w=)
2: 4EBEF63CBED211F0A23A3C71C4F9AE02.roa (hash: WO/EIWRjdEjhUPuRF9/TCMPL9SX7Jf/Io1mf/3wdhzs=)
3: 72EFCE38BED111F0AC36966FC4F9AE02.roa (hash: H93v1IARKP3cIH0YmmBVxZq9iLj+1rjPRrlJRnkPlz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl
rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1681 (0x691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB6B3, serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
Validity
Not Before: Dec 4 21:16:18 2025 GMT
Not After : Dec 11 21:16:18 2025 GMT
Subject: CN=6931fa23-f945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:94:e6:7c:7a:f2:68:7b:df:3a:0d:f1:c2:66:
49:f6:92:5b:b0:48:37:c9:e2:6a:44:5d:bf:97:f0:
00:a3:a8:d3:2f:d3:ee:33:39:27:d7:cf:42:b8:72:
30:fa:16:02:4d:ef:6d:43:f8:83:b6:b8:3f:8c:06:
49:75:b6:5b:ad:6c:47:64:b0:ba:b3:e8:8b:7b:14:
9c:c2:0f:a4:b1:49:7d:88:17:ae:02:ed:82:6f:c2:
c3:b8:ff:f7:cf:3c:48:de:9a:d6:28:f8:d5:97:2c:
b9:81:d7:fe:6f:84:1b:2d:f2:cf:cf:db:6d:ff:d5:
34:93:57:3b:a9:0d:c3:49:31:87:62:cb:d6:1d:2e:
50:e8:38:2b:cd:4c:4d:b0:37:43:39:d4:43:87:02:
d0:df:b8:83:94:9d:59:78:26:4d:8f:08:99:84:ee:
79:52:9d:ee:16:be:cf:ec:90:a6:44:a2:3b:a8:fb:
70:ef:1e:9b:27:88:a4:a7:af:4e:da:5e:a6:3a:fc:
c7:74:01:7f:e6:59:11:29:c8:d3:05:ef:69:07:b0:
cd:c3:71:10:35:11:05:f6:24:cc:d3:d8:f0:88:3e:
11:d9:31:40:ea:d5:53:70:af:0b:4d:18:a3:b1:b8:
a1:7f:cc:2b:ae:f3:15:49:80:e4:9a:f2:e8:69:f0:
10:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6A:2C:D7:A1:21:C2:3C:D6:1E:FA:58:64:89:6F:FD:C4:3F:6A:6F
X509v3 Authority Key Identifier:
keyid:6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:6a:f0:0f:0e:c0:df:e4:3b:7b:39:ee:4c:bf:cd:a4:d0:4a:
8f:c4:b8:75:91:d9:61:34:7e:59:3b:05:2f:5a:5b:d7:d4:c6:
d9:96:b8:9a:fb:0d:5c:b5:cc:08:03:16:b2:34:80:3f:64:78:
0f:e3:cc:fd:76:b0:b3:38:ec:e6:03:a0:46:f3:e1:42:ae:d3:
8e:0f:6a:1d:58:30:11:72:0e:ab:8d:d6:c1:e7:b0:d6:ec:f9:
0c:8b:d8:c6:08:6f:82:d2:15:cd:ee:40:c9:0a:8c:84:d8:83:
cb:0f:2d:4d:ac:18:2d:d5:8b:04:f5:f9:d5:c5:b3:9d:7f:b6:
85:e8:d8:e9:88:91:54:7b:2b:4d:db:77:6b:18:de:07:00:55:
ed:05:6e:c7:4f:32:96:69:3a:97:3d:6f:a9:75:d7:6f:82:34:
51:5a:7f:99:9f:ff:1d:28:1e:eb:db:ab:86:19:2c:cf:63:70:
d0:51:22:04:1d:04:2f:2a:27:fe:8f:6b:32:a5:71:cc:fb:49:
68:45:95:b4:5b:7b:86:5e:2e:67:dc:fa:b2:dc:34:cd:99:dd:
29:fe:5c:27:06:bd:dc:06:a0:f0:83:e7:d6:f4:a0:5f:cb:e7:
8d:ea:35:4a:c8:00:cb:64:0b:34:7b:2b:b8:6a:fc:2b:55:4b:
5e:f4:ae:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:37:23 2025 by rpki-client