This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
File: WF3cT9n54xQAXzcZj9HiLmgknes.mft (raw, json)
Hash identifier: OgackZ9MCFxatdSaxg3/Meh4CaMEGszDVa8mUQ5bqW4=
Subject key identifier: D8:A0:D5:C7:C1:FF:47:22:9B:71:55:FF:66:2B:ED:5D:FF:71:F6:4B
Authority key identifier: 58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB
Certificate issuer: /CN=A912871A/serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
Certificate serial: 04C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
Manifest number: 04BD
Signing time: Thu 18 Dec 2025 23:12:38 +0000
Manifest this update: Thu 18 Dec 2025 23:12:38 +0000
Manifest next update: Thu 25 Dec 2025 23:12:38 +0000
Files and hashes: 1: WF3cT9n54xQAXzcZj9HiLmgknes.crl (hash: lSt3wrWWk9kyEmshD7HtCiv5GfSVrMGYXwz8CArAISQ=)
2: 5431D022524211ECA52D990FC4F9AE02.roa (hash: ngVDpB9EeVUj1wtwuXlGNZD63XjFCao61CO9K4ARPTk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl
rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1218 (0x4c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912871A, serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
Validity
Not Before: Dec 18 23:12:38 2025 GMT
Not After : Dec 25 23:12:38 2025 GMT
Subject: CN=69448a66-41ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:5a:3b:78:74:3c:61:fb:f4:45:66:35:ea:
04:da:12:72:54:b0:4b:e5:42:c1:e6:4c:c3:d2:41:
76:c2:fc:e2:a1:a1:08:c0:4a:5f:6c:eb:23:b8:fe:
3b:af:52:1d:9c:8b:1e:b2:5b:48:a7:84:32:54:52:
88:a7:a9:35:0c:81:cf:c9:56:e0:ab:5d:06:87:6a:
eb:2b:69:ad:3e:98:21:92:fe:24:6c:be:bc:6b:55:
88:e3:1c:9f:8e:05:76:db:aa:81:65:04:16:95:3e:
cc:06:23:67:9c:04:bc:df:b6:5e:26:59:f4:71:f1:
c0:bd:68:d8:8b:5b:58:b5:43:2b:cb:6a:12:d6:6f:
94:7c:65:e3:63:71:e3:f9:71:6e:19:aa:c6:9c:ed:
ed:4e:f1:1a:73:3b:46:ef:e4:d8:c1:e4:f1:46:74:
b0:76:0f:7e:62:0b:25:2a:0f:78:3d:b9:72:c9:3c:
17:b8:37:5e:05:38:88:21:c5:3a:0f:82:5d:f9:a2:
5e:44:79:6f:2e:8f:cb:be:50:e5:b1:6a:43:9c:52:
5a:f1:23:a5:e6:35:a5:8f:81:8d:ce:b3:90:4e:e7:
22:38:29:b6:7b:6d:56:03:4b:eb:3c:89:e8:ef:d4:
93:49:7c:80:15:70:66:cb:6d:70:02:47:e7:e8:fa:
af:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A0:D5:C7:C1:FF:47:22:9B:71:55:FF:66:2B:ED:5D:FF:71:F6:4B
X509v3 Authority Key Identifier:
keyid:58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:79:55:1d:a0:e3:a9:d7:60:cd:ed:65:b8:4b:3c:25:c2:80:
75:da:80:e8:e7:61:a5:a5:9f:78:92:df:a6:5b:38:14:73:b5:
ae:69:c4:5f:eb:95:72:b2:d1:e2:9b:d9:62:c3:08:fe:36:ca:
bf:8d:a9:e5:5a:0e:3a:26:e2:8e:e3:9f:1a:41:27:51:b4:26:
f1:50:d4:b4:9a:c3:1e:bd:31:bb:eb:30:e2:56:1c:09:09:72:
aa:51:f3:0f:03:be:30:58:db:0f:4b:22:d0:7e:f9:00:9b:fc:
50:60:10:c4:01:0f:e0:c2:64:e3:f7:7f:22:e8:fc:04:2d:ff:
6c:ee:b2:44:d0:d9:f8:e5:d7:98:e7:67:52:e8:5d:49:47:93:
7f:fd:d7:b1:7f:ba:09:a5:76:fa:fc:a7:fd:ac:f8:b4:82:90:
6e:4b:53:0b:a4:3a:3c:18:55:46:93:97:8f:bc:a2:18:ab:4f:
76:34:17:d3:92:32:20:04:2b:20:cf:76:a3:34:05:f2:b5:de:
42:d5:c2:93:00:36:78:34:c9:69:33:ba:b0:83:b7:a0:e8:e0:
ee:a1:d3:31:84:a7:fc:28:7f:b0:0a:c5:77:e9:2a:d2:bd:0e:
1c:f9:02:96:ba:65:61:98:ff:bd:6d:b3:dc:71:de:02:21:b9:
5f:cb:6b:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg3MUExMTAvBgNVBAUTKDU4NUREQzRGRDlGOUUzMTQwMDVGMzcxOThGRDFFMjJF
NjgyNDlERUIwHhcNMjUxMjE4MjMxMjM4WhcNMjUxMjI1MjMxMjM4WjAYMRYwFAYD
VQQDDA02OTQ0OGE2Ni00MWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAywxaO3h0PGH79EVmNeoE2hJyVLBL5ULB5kzD0kF2wvzioaEIwEpfbOsjuP47
r1IdnIsesltIp4QyVFKIp6k1DIHPyVbgq10Gh2rrK2mtPpghkv4kbL68a1WI4xyf
jgV226qBZQQWlT7MBiNnnAS837ZeJln0cfHAvWjYi1tYtUMry2oS1m+UfGXjY3Hj
+XFuGarGnO3tTvEacztG7+TYweTxRnSwdg9+YgslKg94PblyyTwXuDdeBTiIIcU6
D4Jd+aJeRHlvLo/LvlDlsWpDnFJa8SOl5jWlj4GNzrOQTuciOCm2e21WA0vrPIno
79STSXyAFXBmy21wAkfn6PqvpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNig1cfB
/0cim3FV/2Yr7V3/cfZLMB8GA1UdIwQYMBaAFFhd3E/Z+eMUAF83GY/R4i5oJJ3r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODcxQS8wNUJEMEYzMDUy
NDAxMUVDODY1ODA2MEVDNEY5QUUwMi9XRjNjVDluNTR4UUFYemNaajlIaUxtZ2tu
ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dGM2NUOW41NHhRQVh6Y1pqOUhpTG1na25lcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODcxQS8wNUJEMEYzMDUyNDAxMUVDODY1ODA2MEVDNEY5QUUwMi9XRjNjVDluNTR4
UUFYemNaajlIaUxtZ2tuZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBNeVUdoOOp12DN7WW4SzwlwoB12oDo52GlpZ94kt+mWzgUc7WuacRf
65VystHim9liwwj+Nsq/janlWg46JuKO458aQSdRtCbxUNS0msMevTG76zDiVhwJ
CXKqUfMPA74wWNsPSyLQfvkAm/xQYBDEAQ/gwmTj938i6PwELf9s7rJE0Nn45deY
52dS6F1JR5N//dexf7oJpXb6/Kf9rPi0gpBuS1MLpDo8GFVGk5ePvKIYq092NBfT
kjIgBCsgz3ajNAXytd5C1cKTADZ4NMlpM7qwg7eg6ODuodMxhKf8KH+wCsV36SrS
vQ4c+QKWumVhmP+9bbPccd4CIblfy2ue
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:10 2025 by rpki-client