This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
File: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft (raw, json)
Hash identifier: ALmMA7sRHueaaknxu0NlVrhIWgBqAN/F1IDyfbVxSKw=
Subject key identifier: 78:60:5F:7A:F5:94:41:5A:7C:49:02:7A:73:0E:BA:8F:CF:77:25:94
Authority key identifier: C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD
Certificate issuer: /CN=A91E2176/serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD
Certificate serial: 08C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
Manifest number: 08C3
Signing time: Sat 06 Dec 2025 19:36:43 +0000
Manifest this update: Sat 06 Dec 2025 19:36:42 +0000
Manifest next update: Sat 13 Dec 2025 19:36:42 +0000
Files and hashes: 1: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl (hash: tnudszaXgB3HwK5bGDEwnOaDjpOiWoSUN0O0Os/+enw=)
2: 4A9F953EE29611EF8E06890AC4F9AE02.roa (hash: 5xxVenqDrTtB+LAX8MyCpAEyaZJVl5DXQjRG3qyTajU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl
rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2248 (0x8c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2176, serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD
Validity
Not Before: Dec 6 19:36:42 2025 GMT
Not After : Dec 13 19:36:42 2025 GMT
Subject: CN=693485cb-701c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:a2:79:64:d6:2a:9e:20:ba:31:43:4c:9f:
70:68:0b:79:3b:ad:1e:70:cb:63:ef:08:d6:d2:33:
f0:f6:a6:03:e8:90:7f:b5:e3:e2:f8:aa:64:9a:91:
77:79:2a:59:0c:e8:66:f3:e7:a1:a9:6f:45:84:95:
a7:4e:d2:aa:f3:68:39:d0:c5:bb:63:2f:75:ce:53:
86:30:0f:62:b2:5a:02:3f:fb:e7:8d:8a:a7:bb:53:
5f:97:dc:a0:05:9f:8d:8b:ad:41:c0:48:ed:fb:5f:
42:b7:7a:5d:75:60:4c:22:80:d1:f2:09:d9:39:87:
a1:57:7b:8b:dd:22:75:f4:cd:79:45:5e:fe:23:7a:
ff:b2:f7:0c:7d:ab:81:9a:63:ab:e7:a7:d9:57:ba:
55:08:ef:50:40:dd:13:d1:ed:1a:71:b6:75:2f:de:
7f:c1:1e:71:d1:fb:14:8e:1a:90:af:90:ef:ee:a7:
80:03:c8:48:b1:ce:8c:7d:b4:ed:d4:c6:f8:51:ac:
d7:07:c6:8c:7b:29:22:d4:a2:07:fd:43:b3:eb:bc:
f4:85:ef:02:bf:b1:f3:3a:36:4b:6c:2f:17:9d:c5:
1e:ad:e0:98:69:72:62:6a:b3:55:d1:61:18:7f:5c:
b3:e5:12:26:e4:4b:29:94:3f:97:46:74:37:1a:ad:
4d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:60:5F:7A:F5:94:41:5A:7C:49:02:7A:73:0E:BA:8F:CF:77:25:94
X509v3 Authority Key Identifier:
keyid:C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:9d:21:14:12:85:3a:ec:17:04:da:67:3d:f9:fc:82:79:5a:
d3:2e:49:ad:91:1b:fb:69:b3:3f:41:5d:88:5f:fc:e3:48:16:
2b:df:60:b0:6c:ef:46:ce:1c:34:fb:15:7b:ee:f2:93:74:60:
c3:73:85:60:e6:52:61:33:d4:e7:6d:f2:19:81:72:2f:1b:ca:
01:7f:f1:8a:9c:f9:6a:4d:b0:ab:b0:3a:18:4a:3e:d5:e1:c7:
9d:fd:7b:c1:78:62:df:b7:b6:42:66:dd:2c:c6:7f:f3:cc:c7:
3f:e1:33:f9:c5:dc:61:86:ea:11:99:2f:e6:f8:bf:30:c6:ea:
34:e9:89:ab:3e:6c:a0:50:26:bf:54:da:97:9d:bf:e6:b0:8b:
e3:17:48:dc:14:0d:f2:42:3b:0b:5f:b7:f3:7c:41:a9:3c:2e:
d4:9c:02:45:f6:82:0a:c0:3e:f0:65:76:c4:7b:b4:d8:94:91:
e2:fc:33:26:d2:91:3e:1b:20:df:c7:a9:8e:09:64:16:51:80:
3d:50:2b:05:13:93:36:a7:90:03:af:1b:f5:4c:d0:80:7f:b8:
9e:3a:fc:d3:e3:60:bf:85:15:df:63:ab:04:7f:2b:b5:85:85:
b3:55:22:2f:a1:08:64:15:3c:ce:c8:b9:12:07:d0:13:c0:87:
e7:83:d4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:49:49 2025 by rpki-client