This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json)
Hash identifier: LlaIEKMJOAPYPtkXlWPcT9MtbbV5mUG+AZjWlzgfjOo=
Subject key identifier: 77:81:C0:83:9C:1D:C6:6F:95:08:67:0E:75:9D:71:2F:00:A1:8C:EB
Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Certificate serial: 060D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
Manifest number: 05FF
Signing time: Mon 22 Dec 2025 22:04:00 +0000
Manifest this update: Mon 22 Dec 2025 22:03:59 +0000
Manifest next update: Mon 29 Dec 2025 22:03:59 +0000
Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: gq6A0PLa3T7b3nTURzGzihnbW3BI37/dbhhC3tqiSlc=)
2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: Gc4mTCPUdqsBkKm2JhVYgTwfshOEbNkn17lOcZFZIzM=)
3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: 2CCQESvocpfwmEybaJ8bYgcDotITBOYZN57oNNZ0pLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl
rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 22:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1549 (0x60d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Validity
Not Before: Dec 22 22:03:59 2025 GMT
Not After : Dec 29 22:03:59 2025 GMT
Subject: CN=6949c050-5d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fd:a4:b7:f2:43:86:60:46:71:b5:88:e6:e0:
5b:6d:dc:5a:7b:74:ad:47:74:fb:7f:b6:7c:00:b3:
bb:db:42:90:ce:bd:d7:18:fb:ad:ee:a2:13:b0:bc:
bf:cb:1a:f4:cb:7e:ae:c6:f0:ee:7f:b1:42:1c:17:
fe:6d:95:54:3a:d5:e9:6f:23:67:06:a3:1f:4d:a2:
c7:1e:19:3e:35:e1:7d:02:82:cb:2f:ac:8a:8e:5f:
54:d6:47:9d:20:1c:57:c4:db:c1:e8:13:ab:e3:2e:
51:98:d4:a1:a6:10:22:54:fc:71:ac:e3:d9:3b:da:
51:b6:be:31:04:6e:5c:e9:0c:78:aa:d2:62:f6:e0:
a7:fd:95:b6:5a:bd:66:d6:e0:64:12:b5:70:e3:5f:
84:55:c3:04:7f:8e:55:f1:29:fc:d1:0f:1e:d0:dd:
bc:73:2d:9a:14:27:29:14:fb:81:97:f4:06:84:98:
bb:77:8a:db:59:6c:5d:c0:b5:fb:04:2d:d5:58:d0:
4f:f4:39:d3:c8:92:1e:b4:bb:2d:d9:71:a6:83:57:
93:00:14:4e:07:c8:8d:d3:9e:89:8a:7c:04:03:07:
84:dd:ca:94:6e:8e:27:c4:e0:c4:f0:b3:fb:6d:40:
11:21:4f:ff:98:6e:e2:a4:4d:24:13:e1:81:4f:ca:
bb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:81:C0:83:9C:1D:C6:6F:95:08:67:0E:75:9D:71:2F:00:A1:8C:EB
X509v3 Authority Key Identifier:
keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:75:07:43:ea:bb:ce:1a:a4:fa:99:f9:8d:23:3c:e9:b2:17:
ec:83:37:75:3c:01:7c:33:4a:06:b5:aa:91:6c:a1:af:56:22:
7b:3a:7d:bd:94:2a:35:43:ab:fd:d4:78:a0:f8:f1:45:50:68:
68:c9:a2:b6:68:56:46:7f:f5:24:71:61:ae:1b:fe:5b:9b:1f:
49:8b:1c:61:ae:73:7b:15:4f:c5:4b:4f:13:66:fd:e0:51:d2:
20:93:51:91:d6:09:8c:3c:3b:04:bb:1f:87:8e:f2:37:08:1d:
87:1b:73:5a:3b:07:f6:10:d4:9b:64:d8:a1:d6:c7:ec:da:76:
f7:f0:ff:97:9e:1f:6f:e8:02:56:7c:bd:9c:ac:30:6b:b1:08:
cd:ac:7c:db:9b:e1:6a:a0:df:eb:a9:fc:56:ff:92:7f:61:5a:
ef:b1:af:27:e4:f5:e6:0d:6a:6a:4e:e5:19:07:b8:0b:2f:2b:
3e:b2:06:09:dd:8d:b2:99:dc:b2:59:99:d9:05:60:ac:4f:bc:
8e:60:cc:9a:e2:db:cb:96:74:44:45:e0:99:61:2e:ef:1b:7b:
7b:56:28:9d:d0:88:0a:60:c3:54:f6:2f:33:17:61:f3:c5:a4:
a2:a8:78:2b:71:de:e9:c6:ef:02:af:56:b4:f2:6d:ce:78:c2:
a2:c9:1a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:41:17 2025 by rpki-client