This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft
File: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft (raw, json)
Hash identifier: OHhlorG5fVZxIW6KgfAm/YLUcbgCEHs97qsKAosGnfg=
Subject key identifier: BF:97:60:4A:35:F4:94:89:65:10:34:1E:E1:CE:08:C7:06:54:87:2B
Authority key identifier: 5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4
Certificate issuer: /CN=A91C62D3/serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4
Certificate serial: 0B64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft
Manifest number: 0B5A
Signing time: Thu 04 Dec 2025 18:32:26 +0000
Manifest this update: Thu 04 Dec 2025 18:32:26 +0000
Manifest next update: Thu 11 Dec 2025 18:32:26 +0000
Files and hashes: 1: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl (hash: 3vH5aBITzdlZDJ7O/l27sbmx00EXhRsYI2boWfhgvWg=)
2: 47BBB5E4465311EA85CB607EC4F9AE02.roa (hash: Mg9FSloatKIT5DeKmuz+Qvjhu8F3q0aOXlO1sHBkA98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl
rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 18:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2916 (0xb64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C62D3, serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4
Validity
Not Before: Dec 4 18:32:26 2025 GMT
Not After : Dec 11 18:32:26 2025 GMT
Subject: CN=6931d3ba-c16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:89:fa:45:00:ae:ac:40:6e:b5:ff:94:8a:
c5:8f:1a:16:e8:85:2a:26:09:b2:1f:04:83:d1:58:
a4:b4:83:9d:ef:c8:18:03:5c:6f:84:6b:f0:33:9d:
4b:9e:84:4f:c4:2a:6e:82:45:53:2f:83:88:9a:aa:
9e:bc:12:b8:9b:01:f4:82:72:64:95:e3:53:35:c5:
97:2b:a3:52:ca:ef:67:27:93:ea:3d:69:5c:34:2b:
34:8b:33:07:7f:e3:ee:be:26:75:33:f1:45:67:ea:
d3:0d:b6:56:e5:f6:8d:8a:68:72:24:2c:e3:16:f7:
9e:e8:cc:1d:6e:2a:5d:af:38:de:59:96:76:88:77:
5c:ca:eb:5f:d1:f9:79:eb:b8:5a:12:0c:99:8d:50:
e8:c4:90:84:2c:eb:4d:0f:b0:de:0f:2e:df:f9:38:
11:40:02:1a:86:5d:de:07:cb:e4:25:80:bc:46:eb:
0f:17:a9:d8:fc:77:77:4a:cc:28:3d:81:85:36:5f:
99:bb:2a:97:de:67:23:25:7a:ad:07:c3:70:66:be:
ed:67:ab:eb:e8:28:33:04:73:08:14:a2:c0:5a:67:
20:06:ef:d4:89:56:b1:f6:cf:99:df:83:9e:8f:15:
10:8f:5c:2b:62:2d:7d:e9:e6:be:48:f2:3d:15:36:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:97:60:4A:35:F4:94:89:65:10:34:1E:E1:CE:08:C7:06:54:87:2B
X509v3 Authority Key Identifier:
keyid:5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:69:ee:a5:08:3e:b3:88:7e:a1:0e:06:10:fe:25:5b:b5:35:
35:ee:8b:6e:14:f9:24:36:2e:99:ee:cf:2a:fc:77:d1:64:97:
61:91:4f:83:b9:29:c6:d4:ae:d2:16:f6:27:b5:dd:9a:10:2d:
1d:36:27:15:94:58:4b:fd:2d:3d:41:7d:55:00:e8:9d:b0:a2:
b9:40:9b:d0:90:73:ea:78:42:81:26:06:73:da:6c:cc:dc:21:
73:58:09:dd:4a:5e:7e:4a:c9:6e:55:b3:32:86:49:6c:6f:1a:
93:b8:eb:6a:e1:2e:46:82:2f:fa:1f:e7:a8:19:df:a7:a4:01:
bb:2b:8e:32:ad:98:4d:33:59:ad:f9:84:29:a3:5b:48:b6:f6:
f8:ea:88:55:f2:07:d0:93:0e:cc:46:1c:e3:0b:0a:c6:ae:ab:
9d:cf:e8:27:33:9d:80:ef:b4:85:7a:97:08:c0:19:ec:20:09:
8d:9d:00:bd:2b:95:50:c2:5e:d4:bb:73:ee:c8:33:1a:18:67:
87:2b:b7:4f:54:9f:72:8f:22:c4:13:67:e4:ce:44:e7:c2:0b:
69:a2:4a:2c:42:71:0b:03:62:06:00:10:22:a6:dd:7f:fd:c7:
40:07:d6:75:10:2e:c0:ab:d5:db:ae:e0:bd:93:cf:30:19:1f:
31:06:c0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:13:37 2025 by rpki-client