This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File: WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier: HQcBzrCxg6G13ZrN7VvYRhEpHvP3Tu4FnlrkTxEVXHY=
Subject key identifier: 6F:FC:55:25:CD:96:BA:90:20:19:28:22:3B:83:EF:40:85:E6:6A:1B
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3677
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number: 3585
Signing time: Sat 06 Dec 2025 14:43:17 +0000
Manifest this update: Sat 06 Dec 2025 14:43:17 +0000
Manifest next update: Sat 13 Dec 2025 14:43:17 +0000
Files and hashes: 1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: FuY0AL+Veffdz5+fR26Jsq3FR+qpqco888FOdj9KNVo=)
2: 61352DFCC46F11F0848EF936C4F9AE02.roa (hash: rzFGoJ54qGibQHLbmWB2hMncJkQRjlW4zZk27bctTrE=)
3: 92B41AACB17B11F0A5D78E54C4F9AE02.roa (hash: bdFFvc6eNQU1+yjsu6zdGpd9HjnTWxx0y+6B+LSnliU=)
4: EFF618B85C7311EF9CC47281C4F9AE02.roa (hash: lIANGK6Kn2MugRFq01BJgGhUwBHYhGPRL+AhDQBA5Do=)
5: AC8A67CA100311F085EE3D29C4F9AE02.roa (hash: T/rcx/oBePx/fFY5liuYl1FWNJgd5CikRWxOV60Eb+s=)
6: 493BCC24BC6911EFBA2E5C78C4F9AE02.roa (hash: ED0l+M3XW8yfiIKv/qBb5H5Y5anJhlkDWFxpGJ+C/jc=)
7: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: 7Y+BMS/66rPoGcFQGfUmmEmIY/lvqgpMP8T/jWrEFog=)
8: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: JW9VEUpPQX6Yip1p8OuIfJey2xwoc83kLB7ewV443Q0=)
9: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: pHntxFpGcz85fh4g8wJJV0K9ZMyE2AlZpDPCheVdfGE=)
10: 5C5998765AD611EFA2E29C7BC4F9AE02.roa (hash: I3gilpNI/WjtxsTD/w6Z3Y+IRfSXnYHa5irJjXL586Y=)
11: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: ZGq5JFpnBl6F/9RJYSzWIqvoJrxf/ut9GoB7c3G4b0w=)
12: F1120B125C7311EF9CC47281C4F9AE02.roa (hash: lWRvTuPg6LzSZBPd+6lJM0jAzSYZ9gW7/FAk9bnrczc=)
13: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: pC+fVhWZhAlHI54GzrYegWShgGirXMUII/btkAhefI4=)
14: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: vkdEUpa0uX2LdRNKslgCoqxAxrazYilRXx4dGIkC7ss=)
15: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: tm6lZWT2jSaQ2mTovYZkiilxmKWiSUYMcY5Ywr80DlM=)
16: EF706AC45C7311EF9CC47281C4F9AE02.roa (hash: KFqiJvZSOQ4AGYSeiVNs4qK0DY9PSIDgrHR+mxW9KOs=)
17: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: tZHLP6nM/PTOaw/rmeUMVa1wU4QqlWqKu6p2vcEjWm8=)
18: F097E10C5C7311EF9CC47281C4F9AE02.roa (hash: 7CjS9ffPyOrzJz1ZAktWX3KaOjOKC/5jGyfAIJ4BJyo=)
19: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (hash: LT9r+sRto5ZOYudi5sFYiwbtxYl/cY+w1R+R7OKpEeI=)
20: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (hash: P6z1l/i5fCMa+njXzS/IVZH5AnBAQ64cA+kn7DDOLo0=)
21: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: SGgawQJ8e+bc7GkpKZMh+cEtFBap2rFAVcln1BmNOkI=)
22: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: bo4+lqzgHx9mwwzNsiPnPqvLCTaS+zSdlr02VCrtbuY=)
23: 6201F1DEC46F11F08682F936C4F9AE02.roa (hash: FY0t2N10iRK+Zr0ip8svKKHBrZSNX6MAybdSYEAFs30=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13943 (0x3677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Dec 6 14:43:17 2025 GMT
Not After : Dec 13 14:43:17 2025 GMT
Subject: CN=69344105-ffa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:97:8e:e9:b1:ba:88:80:70:a8:8b:18:a8:b7:
30:2e:2a:6c:3d:a0:71:96:3d:aa:4b:85:cd:8d:79:
9e:00:01:5b:45:74:c7:1e:24:5e:01:a3:55:b8:31:
9d:06:e2:4d:71:c5:59:8e:9c:48:05:97:76:26:d1:
fe:a9:5f:f0:ed:9d:97:23:b3:f4:dc:99:a0:8e:58:
a3:e0:16:b6:fa:60:72:03:21:4b:2c:6b:a1:c4:84:
d0:de:9d:53:dd:02:e0:b6:5d:98:41:f4:70:36:8d:
74:0d:3f:e0:5b:9f:84:e2:07:d8:6c:35:84:c8:1d:
3e:69:6e:cb:bb:cb:3e:53:0f:d9:28:02:7f:c2:04:
42:1f:9f:10:c3:8b:60:14:88:2a:fb:6e:1b:84:95:
5b:5c:48:0e:ea:80:fb:b7:f9:6b:75:13:4a:41:d4:
4e:90:ce:3b:26:7a:b3:05:6f:90:92:c1:b9:e2:f9:
f0:4b:80:f3:17:ae:63:74:55:81:52:49:5b:a2:94:
cb:b1:e3:62:d9:8c:f6:3a:ed:ae:dd:0d:34:46:b1:
15:ba:90:a3:c3:cb:12:83:8a:38:30:ef:07:c3:a7:
18:b8:14:06:e2:a5:2d:f9:e4:b0:9a:17:1c:6a:fa:
a6:61:47:e8:cb:11:a4:1b:74:e9:3d:f3:57:c8:71:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FC:55:25:CD:96:BA:90:20:19:28:22:3B:83:EF:40:85:E6:6A:1B
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:86:83:3b:b2:16:34:db:bd:6d:b0:9d:1f:02:60:38:2f:e7:
e0:5e:51:99:d3:ce:03:0d:de:57:e9:98:8c:92:42:c8:09:57:
8d:d4:70:4d:bc:49:12:6d:68:52:cf:d2:65:20:e1:53:2d:ef:
02:93:48:0b:a1:08:b7:0b:31:a7:fe:a2:c7:dd:3a:10:68:94:
29:7f:87:11:90:67:c6:fb:e4:6e:85:7e:30:be:ea:22:b5:ac:
b3:24:83:2b:6a:3d:40:87:fa:11:07:4f:f3:68:6b:45:82:fc:
39:f7:2a:22:b0:47:15:dd:ab:1c:66:dc:77:f0:a8:9f:50:99:
07:d6:94:9f:c5:26:f1:ce:7a:b2:f9:54:12:01:24:c3:ad:b4:
6b:18:fa:62:0c:97:8d:c3:a3:c8:d9:2e:46:ca:65:45:86:82:
5f:71:ca:3b:32:25:8c:cb:1a:38:8a:bb:89:54:8c:fa:44:36:
0f:f6:6f:74:ad:ba:68:13:47:e8:a0:f5:97:3d:23:3f:37:70:
08:aa:4f:60:cd:cf:b3:fe:e6:bb:03:36:c2:bd:cb:85:84:71:
b1:9a:f7:e0:05:2e:60:1e:8f:e7:d2:bc:6a:62:c0:aa:dc:de:
8f:f7:cf:1b:dd:73:55:6d:c9:5f:1d:93:63:fe:a5:8c:26:07:
e2:15:fd:07
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0
OTExRjFGNEYwHhcNMjUxMjA2MTQ0MzE3WhcNMjUxMjEzMTQ0MzE3WjAYMRYwFAYD
VQQDEw02OTM0NDEwNS1mZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+JeO6bG6iIBwqIsYqLcwLipsPaBxlj2qS4XNjXmeAAFbRXTHHiReAaNVuDGd
BuJNccVZjpxIBZd2JtH+qV/w7Z2XI7P03Jmgjlij4Ba2+mByAyFLLGuhxITQ3p1T
3QLgtl2YQfRwNo10DT/gW5+E4gfYbDWEyB0+aW7Lu8s+Uw/ZKAJ/wgRCH58Qw4tg
FIgq+24bhJVbXEgO6oD7t/lrdRNKQdROkM47JnqzBW+QksG54vnwS4DzF65jdFWB
UklbopTLseNi2Yz2Ou2u3Q00RrEVupCjw8sSg4o4MO8Hw6cYuBQG4qUt+eSwmhcc
avqmYUfoyxGkG3TpPfNXyHG5CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/8VSXN
lrqQIBkoIjuD70CF5mobMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE
OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEM5MC8yRDFCRUJFNDFEOTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1
RnVrSjBuY1VHNlJKRWZIMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCohoM7shY0271tsJ0fAmA4L+fgXlGZ084DDd5X6ZiMkkLICVeN1HBN
vEkSbWhSz9JlIOFTLe8Ck0gLoQi3CzGn/qLH3ToQaJQpf4cRkGfG++RuhX4wvuoi
tayzJIMraj1Ah/oRB0/zaGtFgvw59yoisEcV3ascZtx38KifUJkH1pSfxSbxznqy
+VQSASTDrbRrGPpiDJeNw6PI2S5GymVFhoJfcco7MiWMyxo4iruJVIz6RDYP9m90
rbpoE0fooPWXPSM/N3AIqk9gzc+z/ua7AzbCvcuFhHGxmvfgBS5gHo/n0rxqYsCq
3N6P988b3XNVbclfHZNj/qWMJgfiFf0H
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:04:39 2025 by rpki-client