This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json)
Hash identifier: N4hqo7i+Ah9j1/UtTYq6PRe+EAnA0GhXfxIbX0Hx+M4=
Subject key identifier: E8:9F:D7:8D:70:B8:87:F0:BF:65:DD:F9:B2:48:57:B0:56:36:A6:79
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial: 3577
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
Manifest number: 351A
Signing time: Sat 20 Dec 2025 14:25:59 +0000
Manifest this update: Sat 20 Dec 2025 14:25:58 +0000
Manifest next update: Sat 27 Dec 2025 14:25:58 +0000
Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: x6xjPT2jL4/r8GfP6vStew97CXBUOwTn+7z5RTvi1u8=)
2: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: /pyPonPmEFKa1hXT9c5EeNmCysabzskN0N3q8itE/yQ=)
3: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: XeOwCDJC/7tDXVlR92gvvBxO2ZkUMPl9GnCUEv+guSA=)
4: 78F6DFE8CB6411F0A28C973CC4F9AE02.roa (hash: 0G3q5fTwQFZqfpwdr70W2RcZ9RQYxzqD0UwSER0DP5U=)
5: 967D3674CB7911F0B5816B84C4F9AE02.roa (hash: BAOg63rbaOIys2g97FtFz7H79eFm+GfNyVf99pFuu0Y=)
6: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: ntvcTrpEA6rCyuNYSDHVsCeHSVzEDugmmxfTLFHpT0E=)
7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: S1GxLRyW9jbWfhzDlGsZRExghMXH5ph382L3rO+OSJc=)
8: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: y6Utban/MDhZmVm58zbd+GMT3Mgg7LB6jXrEukFmHX0=)
9: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 6Ne7hQRkoimBuuEaTeZdl5fhQ7yZ46EDX0Sh7Chvt50=)
10: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: e7zDDov11JCBn6iOfgz7E7SYErzUY0Kc8T1oGkGpfCQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 14:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13687 (0x3577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Validity
Not Before: Dec 20 14:25:58 2025 GMT
Not After : Dec 27 14:25:58 2025 GMT
Subject: CN=6946b1f7-ec93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:83:0b:72:ec:b4:f5:99:a4:e5:67:cb:7d:
62:fd:40:51:fe:bc:58:d4:55:8e:e9:ad:2f:82:59:
ef:ed:8b:c0:aa:90:0d:41:11:28:ab:09:ec:c1:d4:
07:88:8d:84:8c:af:ee:2a:c3:30:3e:2e:e0:bf:b4:
23:cf:3d:dc:a3:37:2c:8e:0a:68:c4:6b:68:cb:5a:
83:6b:fc:24:51:1d:2e:d6:6f:74:8c:91:1c:00:12:
14:86:5f:40:51:7d:aa:dd:ec:19:90:61:7a:a1:ab:
f3:ec:8c:4d:b7:26:0e:c0:61:81:7e:c2:33:69:90:
29:ca:47:9d:b1:12:06:e0:f4:50:92:e9:fd:54:a5:
48:06:2b:af:a3:1a:1c:35:c9:aa:0a:33:26:2e:62:
e2:69:40:8e:e7:c5:a0:51:3a:70:cc:f2:09:b7:83:
78:10:ec:a0:d6:40:a4:0b:aa:e6:3b:67:b9:b8:92:
d4:b0:77:7f:ac:66:0f:fb:7c:49:3c:7e:4a:15:9c:
0f:56:df:6d:68:d8:fc:22:ce:cf:ef:8a:fb:ab:20:
b6:03:ea:2b:0c:50:a1:f7:d2:52:29:80:41:9e:c9:
04:12:37:ae:73:e7:d2:b3:9a:df:60:11:35:85:d6:
98:c2:ae:e1:e7:31:87:7f:6a:5f:34:67:50:ca:a4:
e1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9F:D7:8D:70:B8:87:F0:BF:65:DD:F9:B2:48:57:B0:56:36:A6:79
X509v3 Authority Key Identifier:
keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:ac:67:82:99:55:c8:d6:56:ef:9c:d1:ec:6c:8c:cd:86:30:
b0:38:0b:e2:6f:d9:c7:12:05:3c:62:85:41:a3:3f:53:1f:fb:
d1:bb:0d:6a:60:dd:d1:32:c3:84:ab:a9:fe:ef:0c:48:c9:28:
be:1f:f7:ac:d1:e3:4e:21:4b:1a:a0:b7:83:cd:93:7f:af:14:
38:07:dc:fe:53:84:2c:49:65:3d:92:90:a4:d3:00:4b:c6:a7:
87:20:49:86:6d:df:21:df:a8:44:13:9c:07:9e:6b:15:2d:7a:
59:29:1c:80:86:b0:4c:93:4d:91:8b:03:95:9c:c8:fa:96:2e:
bb:7a:6a:f9:7c:7c:3c:44:25:bd:84:b6:db:41:13:92:3e:36:
98:e6:2e:0f:13:32:d3:cb:a7:23:63:d2:63:bd:31:22:77:0f:
8b:75:9e:c8:90:71:04:e8:ac:21:9d:fd:99:4c:55:41:ad:94:
02:19:8d:b7:2c:93:77:52:bc:1a:fe:a6:8a:60:bc:8c:4a:93:
80:9e:0e:d9:2f:0b:8e:b2:49:35:1a:53:c9:59:6e:e1:c8:a7:
7b:ce:53:4c:cd:5d:ce:22:89:d2:35:d3:1c:fc:a4:e4:9b:53:
41:62:b5:3a:12:cd:b4:a7:91:b1:03:dd:c6:ad:bf:bf:d1:b6:
92:67:b0:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw
NERBMTJGOUQwHhcNMjUxMjIwMTQyNTU4WhcNMjUxMjI3MTQyNTU4WjAYMRYwFAYD
VQQDDA02OTQ2YjFmNy1lYzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApmiDC3LstPWZpOVny31i/UBR/rxY1FWO6a0vglnv7YvAqpANQREoqwnswdQH
iI2EjK/uKsMwPi7gv7Qjzz3cozcsjgpoxGtoy1qDa/wkUR0u1m90jJEcABIUhl9A
UX2q3ewZkGF6oavz7IxNtyYOwGGBfsIzaZApykedsRIG4PRQkun9VKVIBiuvoxoc
NcmqCjMmLmLiaUCO58WgUTpwzPIJt4N4EOyg1kCkC6rmO2e5uJLUsHd/rGYP+3xJ
PH5KFZwPVt9taNj8Is7P74r7qyC2A+orDFCh99JSKYBBnskEEjeuc+fSs5rfYBE1
hdaYwq7h5zGHf2pfNGdQyqThUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOif141w
uIfwv2Xd+bJIV7BWNqZ5MB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE
ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpK
VFpJNTFTcnpXc0VFMmhMNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBRrGeCmVXI1lbvnNHsbIzNhjCwOAvib9nHEgU8YoVBoz9TH/vRuw1q
YN3RMsOEq6n+7wxIySi+H/es0eNOIUsaoLeDzZN/rxQ4B9z+U4QsSWU9kpCk0wBL
xqeHIEmGbd8h36hEE5wHnmsVLXpZKRyAhrBMk02RiwOVnMj6li67emr5fHw8RCW9
hLbbQROSPjaY5i4PEzLTy6cjY9JjvTEidw+LdZ7IkHEE6Kwhnf2ZTFVBrZQCGY23
LJN3Urwa/qaKYLyMSpOAng7ZLwuOskk1GlPJWW7hyKd7zlNMzV3OIonSNdMc/KTk
m1NBYrU6Es20p5GxA93Grb+/0baSZ7AP
-----END CERTIFICATE-----
Generated at Sat Dec 20 20:56:34 2025 by rpki-client