This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft
File: -W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft (raw, json)
Hash identifier: QmGvals+P0AEHyG8aRjo/xgvBatuFXQuOgI1ave/58c=
Subject key identifier: AD:C3:72:5D:55:11:06:69:AD:18:90:4D:71:E4:74:B4:56:93:88:72
Authority key identifier: F9:6F:AE:28:8A:64:30:AD:CC:F9:5E:0E:A8:9F:08:5B:B6:E8:29:D4
Certificate issuer: /CN=A91E5490/serialNumber=F96FAE288A6430ADCCF95E0EA89F085BB6E829D4
Certificate serial: 0563
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft
Manifest number: 0558
Signing time: Thu 04 Dec 2025 22:01:47 +0000
Manifest this update: Thu 04 Dec 2025 22:01:46 +0000
Manifest next update: Thu 11 Dec 2025 22:01:46 +0000
Files and hashes: 1: -W-uKIpkMK3M-V4OqJ8IW7boKdQ.crl (hash: WXc3+EJpxi+1g8bXrd4JzS82NcH7mFbweRlSPEnk+cQ=)
2: 8608449A356511EC9715F015C4F9AE02.roa (hash: 4gKis+++tXEeHG38EwpejzSM+kE6A6gIMsrjZpkNJeo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.crl
rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1379 (0x563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5490, serialNumber=F96FAE288A6430ADCCF95E0EA89F085BB6E829D4
Validity
Not Before: Dec 4 22:01:46 2025 GMT
Not After : Dec 11 22:01:46 2025 GMT
Subject: CN=693204ca-ef2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e8:34:5d:24:d5:55:33:36:32:fd:71:ea:0e:
38:de:9d:0d:d3:9b:e5:ca:80:92:00:cb:b1:ab:61:
9e:44:ad:d3:f4:97:3e:0d:66:81:66:0f:1a:10:73:
03:af:fc:7c:5f:2d:0a:f1:dd:8a:a8:7a:11:54:23:
1c:2b:79:43:9e:e0:cf:c5:c0:5c:c2:9f:73:37:d2:
7a:38:17:a3:33:b2:07:9b:91:fa:0e:05:9e:11:8e:
ea:d6:b2:01:d1:e3:51:66:59:7f:f7:73:7a:23:75:
94:6e:2c:84:6d:fc:ad:d0:5f:d6:08:e2:00:2f:a8:
e6:ee:a4:38:b9:ef:9c:c4:9e:2b:1c:fa:a2:4d:06:
b8:d9:db:4f:9f:bc:02:4f:76:78:74:05:88:d6:aa:
c0:e8:9c:d7:79:0e:db:a4:97:b4:8b:12:42:c5:f2:
1e:4f:df:91:c2:64:56:37:cf:3b:4b:c0:3e:ba:e8:
66:90:ab:66:8b:b0:96:ff:71:21:f9:91:fc:c4:bf:
ab:96:11:94:b7:e2:c6:47:65:e7:b5:11:d4:73:a8:
98:0a:a3:76:b9:24:29:ad:c0:a7:e9:35:27:82:93:
08:53:9d:71:46:e4:56:e7:60:64:ff:85:56:43:bd:
32:93:be:96:9e:5f:3b:8f:e9:05:cc:29:e2:39:8f:
67:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C3:72:5D:55:11:06:69:AD:18:90:4D:71:E4:74:B4:56:93:88:72
X509v3 Authority Key Identifier:
keyid:F9:6F:AE:28:8A:64:30:AD:CC:F9:5E:0E:A8:9F:08:5B:B6:E8:29:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:64:8d:a4:17:bd:f2:b0:6b:ed:69:37:9b:8e:9f:ce:61:17:
1b:ef:1e:76:8e:42:93:e3:bf:e5:84:48:d5:e8:53:88:6c:e7:
bc:49:6d:07:21:2d:68:b5:d0:2b:ff:e3:e7:99:06:87:b5:5d:
c5:97:10:26:60:e8:60:c7:10:7f:b1:a0:bf:0f:0d:76:90:16:
c7:b0:78:3d:b7:06:cc:09:6d:a9:6e:ae:c5:c8:6f:28:e4:17:
9c:32:8e:6e:bb:70:85:05:6b:cc:82:f0:04:0b:64:01:14:6e:
3b:dd:3a:4f:42:68:0f:a6:21:97:83:cb:8c:75:bb:ff:f6:9b:
84:a1:b0:63:de:32:b1:6d:7e:25:a2:c9:ff:af:df:a2:16:fb:
87:89:99:6b:74:2f:0b:f0:3f:1d:24:19:25:22:43:b1:bb:67:
c1:56:62:b6:89:22:3b:4a:91:75:b0:d0:30:43:54:9d:7d:72:
dc:f5:7d:05:df:1d:41:e6:fe:2c:87:3d:e1:f1:09:02:0d:fd:
c1:c4:55:ef:6a:91:6c:72:2d:eb:c6:5e:0f:54:77:fa:1e:67:
f9:53:7a:a3:98:34:f6:da:3b:f9:3b:ba:41:bc:67:db:7c:46:
b0:6d:af:3f:cd:ab:03:8e:8c:65:9d:4c:1b:a2:66:e3:71:8d:
4c:b6:c1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:33:48 2025 by rpki-client