This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft
File: wQgOZhsN-mIOsJqrLerWA0uCjrw.mft (raw, json)
Hash identifier: ZgXQfGuPzyczRa5yxHLtiJYY8kf1GW6jco83Z+nymis=
Subject key identifier: F1:9D:F9:B1:C9:3B:60:0C:89:0C:92:7F:9C:03:F8:18:D9:8B:E6:58
Authority key identifier: C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC
Certificate issuer: /CN=A91DB0C1/serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC
Certificate serial: 194B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft
Manifest number: 1942
Signing time: Thu 04 Dec 2025 16:07:54 +0000
Manifest this update: Thu 04 Dec 2025 16:07:53 +0000
Manifest next update: Thu 11 Dec 2025 16:07:53 +0000
Files and hashes: 1: wQgOZhsN-mIOsJqrLerWA0uCjrw.crl (hash: sngA9hvQm6dWA0rv0odcfYxyiw8VpNdxgCbvmWxcQTg=)
2: 35D9F1BE8A7C11E79774186BC4F9AE02.roa (hash: yM+bb0tbw3lI4O8r0K9h632lO1j6QVkb8a+ZzJmYzqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl
rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 16:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6475 (0x194b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB0C1, serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC
Validity
Not Before: Dec 4 16:07:53 2025 GMT
Not After : Dec 11 16:07:53 2025 GMT
Subject: CN=6931b1da-39cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:23:6d:b0:15:9d:e8:0b:f0:ee:63:00:29:f3:
9d:47:a4:3d:6e:6f:b8:d5:00:18:66:a1:76:4d:30:
67:8d:7b:cc:10:ea:7a:15:2f:7a:d2:c8:34:10:c2:
ae:f5:6a:d7:5b:b8:45:7d:09:d8:76:40:63:9a:f3:
93:0f:3a:34:75:42:33:51:ba:3c:7b:40:1d:a4:12:
d7:d3:45:f5:c7:11:ac:c1:ca:fb:b2:68:2b:3a:4e:
97:c8:89:75:07:36:5d:71:49:43:67:37:ad:6c:83:
7b:11:6c:af:d7:19:6e:67:c6:c0:15:4d:3f:7f:88:
6e:a0:8c:67:ce:4b:b3:89:9a:27:c2:38:44:2d:e1:
af:2c:85:00:db:e4:a2:71:1f:18:40:2e:a9:ce:3f:
c2:08:ea:44:86:21:bf:48:dc:e1:a0:d7:b1:3f:66:
d8:b3:80:da:5c:38:c6:8f:84:e8:95:dd:b6:d0:d5:
6f:5f:7b:db:86:5e:a9:af:fe:ff:15:97:09:ef:af:
39:39:05:7f:b2:de:9f:80:59:3b:5a:da:45:2e:d7:
c5:b5:59:c9:8c:80:db:34:50:fe:91:a1:2a:28:2f:
0f:fa:ba:b0:79:61:7d:dc:d9:23:be:72:57:8d:aa:
06:d6:04:b2:c4:9f:88:09:6d:d7:77:17:dc:06:5c:
b2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9D:F9:B1:C9:3B:60:0C:89:0C:92:7F:9C:03:F8:18:D9:8B:E6:58
X509v3 Authority Key Identifier:
keyid:C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:30:6f:d8:a4:57:72:28:5f:3c:a5:76:80:40:75:84:5e:4d:
ac:c3:50:96:4c:d9:ec:ca:fd:fc:8e:76:e6:06:9b:3f:f6:3e:
eb:d5:91:35:1f:8b:b1:50:d4:ae:89:54:90:8b:02:05:94:db:
15:79:c9:e7:fd:7d:52:02:d4:cc:41:ad:ca:77:e9:da:59:ed:
ab:7a:6a:87:9e:79:57:bd:25:9e:5a:91:55:48:53:e1:8a:3d:
21:83:35:dd:28:23:2e:30:96:5b:c0:3e:c1:ab:e4:ba:ac:2b:
86:93:9a:bc:98:78:87:a5:9e:43:5e:5e:8b:a3:4e:f0:26:aa:
97:de:12:6e:8e:2a:52:e5:a3:b8:97:d3:80:c4:3b:cf:a6:98:
02:91:97:c5:4e:4c:32:2c:f2:3a:82:6f:ea:2f:aa:fe:95:e3:
30:c1:e6:52:06:3f:1f:10:51:d1:21:eb:7b:b9:c1:cc:ba:8f:
2b:18:a3:aa:bf:25:3c:34:6a:eb:aa:29:49:72:3e:39:68:56:
a8:cc:c2:2e:3a:2b:78:51:10:c8:54:6d:f6:f4:13:2d:26:d8:
93:f7:47:68:1d:f5:74:81:b9:e1:cb:08:6c:25:8d:21:18:5f:
60:65:46:fd:3b:fd:af:98:c6:d8:78:45:30:38:d2:ed:cf:18:
c5:58:ad:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:28:27 2025 by rpki-client