This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json)
Hash identifier: srtFmfaGEDPv4qP4u6SjwCQTWxSVtiNOfZiMXlqnDF8=
Subject key identifier: FD:77:5C:AF:84:B6:24:40:E0:03:0A:00:37:94:13:85:77:D3:A4:F9
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial: 08BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
Manifest number: 08AE
Signing time: Sat 06 Dec 2025 19:39:31 +0000
Manifest this update: Sat 06 Dec 2025 19:39:31 +0000
Manifest next update: Sat 13 Dec 2025 19:39:31 +0000
Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: igrAZfj03ZCIndtaPsNUvKvni5N7pyhPAvIUkJ5eWMs=)
2: 097FE948B5D411F0B0C6A940C4F9AE02.roa (hash: KP2R1m2iHAsNa4Z3YCVwK/8wK6Mg0zZi0OmDMYURiVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2235 (0x8bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Validity
Not Before: Dec 6 19:39:31 2025 GMT
Not After : Dec 13 19:39:31 2025 GMT
Subject: CN=69348673-ac89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:1c:2d:e4:52:da:98:1e:ac:3e:a9:16:1c:
56:d8:e1:66:fa:27:a4:19:08:c4:ee:f9:0d:5b:4d:
71:5b:1d:d3:3f:88:03:b6:a8:ba:c9:90:c8:2c:33:
30:cd:9b:8a:ed:8b:bd:ae:f6:9a:99:6a:77:15:1c:
0d:e9:f8:55:91:54:ed:79:df:c0:d9:a2:2c:b3:a6:
bc:39:de:87:48:e9:a1:12:4f:aa:6a:40:43:f5:c9:
bf:4c:b7:fb:40:d3:14:f5:b0:9e:53:b2:4c:b3:31:
80:39:12:86:50:eb:95:41:89:85:fa:99:50:07:5f:
5d:0d:eb:24:42:06:02:ec:e2:4a:61:e1:76:b8:17:
fa:bb:18:d3:a3:a2:73:7a:d0:03:4d:61:36:55:a4:
cf:ea:ed:24:fb:86:e4:bb:3d:6f:f4:6a:2e:c6:b2:
5a:c2:52:af:11:cf:27:23:db:f4:9b:29:c5:70:b8:
a2:3d:13:00:d5:3a:cc:8d:fb:61:d3:e7:0b:b6:8c:
58:9e:98:36:da:1f:1a:2c:d6:80:3a:05:bd:b5:09:
48:fe:2e:5a:d5:27:50:6f:37:7a:38:c4:41:0c:28:
ee:f8:ff:e8:5b:1d:56:c6:ec:0d:3b:b1:96:88:70:
18:fa:b1:cf:8d:f1:d4:03:9a:8f:33:4d:19:8f:26:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:77:5C:AF:84:B6:24:40:E0:03:0A:00:37:94:13:85:77:D3:A4:F9
X509v3 Authority Key Identifier:
keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:cf:08:ef:77:6f:70:e5:47:1b:b1:6a:33:42:49:7e:4f:c8:
de:f3:39:87:e7:f4:70:4a:d3:d8:27:fd:fc:23:b4:58:88:1f:
08:9c:c3:20:f2:f0:ef:c7:5c:2d:bf:89:1e:f5:8b:2b:48:b4:
0b:90:ef:3d:be:39:f9:b4:63:ab:8a:64:8c:69:ce:0e:7d:45:
b2:ba:f4:1b:9e:cb:51:e6:95:66:40:86:a0:af:fe:c1:4b:37:
2f:25:89:54:0d:f7:08:40:44:fe:74:27:a0:b7:43:0f:a0:f5:
d4:cb:45:80:58:e7:6f:37:95:7e:fe:83:6f:1f:19:e1:d6:82:
71:21:07:6f:ff:cc:a8:73:e2:44:ee:fc:5e:d5:b0:68:1a:4b:
62:72:aa:59:f5:d4:95:ca:6c:5b:9f:6f:e1:24:80:8d:45:87:
ce:17:8e:dc:0f:49:42:4b:22:a1:70:b4:d8:d7:8d:cc:49:d5:
d4:f6:05:4d:43:09:ef:a1:c2:cf:a4:93:76:aa:09:96:0f:41:
e1:0b:b4:48:6a:b2:a4:b0:98:71:f3:f1:52:57:15:04:c7:3f:
3e:b4:94:1c:23:ec:62:54:3a:0b:06:30:50:00:68:fb:dc:34:
c8:19:a5:b6:44:b2:47:86:6c:1a:4e:fb:f6:d8:20:fd:5e:67:
f4:17:36:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:05:47 2025 by rpki-client