This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
File: -wGX2AKmYYboQL1i6I7kDtlelSk.mft (raw, json)
Hash identifier: N6GhVUHz/LJ0C+QRJrDtyZKm2q5ezANbrRLL1rE514k=
Subject key identifier: 03:D4:EB:19:9A:B3:78:02:4A:20:3D:22:40:7D:D9:A0:31:56:40:6A
Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29
Certificate issuer: /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
Certificate serial: 0213
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
Manifest number: 0206
Signing time: Thu 25 Dec 2025 01:34:02 +0000
Manifest this update: Thu 25 Dec 2025 01:34:02 +0000
Manifest next update: Thu 01 Jan 2026 01:34:02 +0000
Files and hashes: 1: -wGX2AKmYYboQL1i6I7kDtlelSk.crl (hash: irKm7WuBvaHMjkRHrcde9iUYkeQgkgiIcZO5c7yl0F8=)
2: 60377A8C695311EEB599BD23C4F9AE02.roa (hash: QINk3E1nw1E0SQ1IAaOysVdywjs2/haOG/J5DYDItzc=)
3: 359322B2D1E711EDB90DBF27C4F9AE02.roa (hash: AD9qVo/dM6pGPhLPe3MxIhjrlZM+iJ6Ior0TsYh1fCs=)
4: 8FF4E2E2EFAE11EDBD96F26BC4F9AE02.roa (hash: ftIkLDDMGwCQRtXIOQIkbcVqJAF5OWBHQPg/Mtm9NhM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl
rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 01:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531 (0x213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
Validity
Not Before: Dec 25 01:34:02 2025 GMT
Not After : Jan 1 01:34:02 2026 GMT
Subject: CN=694c948a-c7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:96:93:88:5d:2c:b8:f4:3e:03:4c:64:1d:
51:7c:b9:da:d2:0a:13:7f:b2:01:7d:30:37:42:5c:
68:d3:16:96:df:84:29:e7:8f:d5:c0:78:54:3d:91:
2a:8f:88:66:d0:c5:2d:b9:94:6c:f0:2c:36:4d:70:
10:a6:ff:6b:b9:3a:b2:54:86:5a:06:80:c1:8b:30:
57:b6:b3:dc:34:69:4a:55:52:cd:7c:0e:44:45:54:
94:a7:65:46:be:35:b3:4d:f3:d3:0b:a8:f5:c5:9f:
3b:96:ed:70:32:10:b0:c1:b1:56:fa:ad:38:f5:8d:
b1:02:d1:65:83:e6:0c:b8:4d:ec:fa:79:66:48:32:
cd:72:60:7f:c1:08:a8:5a:d1:7c:b7:b2:6e:0c:76:
20:08:02:af:81:03:f5:45:6f:ac:e4:45:d0:54:26:
42:4c:1a:1a:36:26:e0:4b:73:4a:12:75:04:a6:a9:
21:f9:0f:13:20:19:75:24:b2:18:ee:8e:f9:37:5f:
a9:c7:e9:e0:a0:23:9a:8e:4a:dc:aa:a9:d0:2f:7e:
c6:54:c8:ac:d3:61:6a:0b:c5:ed:78:e6:6e:3d:b6:
59:26:6a:6e:f7:b9:b3:fe:52:ff:b9:6e:7c:e4:3c:
0a:b8:f9:dc:b5:73:ee:42:97:b8:6e:eb:3d:e6:a2:
7d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D4:EB:19:9A:B3:78:02:4A:20:3D:22:40:7D:D9:A0:31:56:40:6A
X509v3 Authority Key Identifier:
keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:29:86:7d:1e:aa:6b:97:35:9a:6d:d7:ee:19:76:3f:f1:a5:
bc:5a:94:b4:cd:f4:23:4e:93:ed:47:e5:4e:e8:10:68:4b:f4:
7c:ae:5e:2c:23:38:7b:8e:03:ae:6a:90:51:f7:30:16:68:82:
40:ae:29:19:05:40:90:e3:87:17:b5:91:c8:60:07:08:63:3b:
b4:ec:5d:f3:06:e9:b6:91:68:e3:94:4f:d5:ec:94:3a:9b:9e:
d7:15:4a:91:a4:6b:63:3d:16:66:a7:02:d8:f1:f1:01:fe:7d:
40:60:0e:3c:64:40:92:70:e7:0a:1a:af:17:1d:66:f4:f2:71:
2e:47:d7:fe:39:f5:30:c1:1e:a4:29:42:2f:dd:49:e8:0d:55:
c2:fe:9f:48:a4:d2:6f:05:c2:5a:8d:11:1e:39:91:dc:20:75:
24:f7:d8:c1:12:ed:da:b6:6c:c9:98:fc:73:a1:4c:61:ba:c7:
aa:ca:54:cd:48:34:4f:51:f4:67:d8:26:ee:2e:b0:a3:e3:c4:
95:d5:35:7c:82:9b:65:a1:26:24:aa:33:e9:8d:1b:6e:c4:1a:
68:84:74:29:ad:76:25:48:70:f2:14:e1:45:4e:ce:8f:62:7d:
23:1b:a4:c7:ed:b2:c9:3e:83:21:9f:ad:b9:ad:fc:92:95:9a:
41:f0:a4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 09:36:05 2025 by rpki-client