This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
File: wso-IoSMqAhkgVrBFxhWCJY6SW0.mft (raw, json)
Hash identifier: 4XkE7tAzfh2pIwZwxcttIHcJXcBEZSvRUfqgRSUOhjA=
Subject key identifier: 9B:1B:F6:B5:76:12:04:8B:EA:0D:73:1E:11:5A:56:0E:12:77:A3:14
Authority key identifier: C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D
Certificate issuer: /CN=A912D9B5/serialNumber=C2CA3E22848CA80864815AC117185608963A496D
Certificate serial: 07AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
Manifest number: 07A9
Signing time: Thu 08 Jan 2026 20:52:25 +0000
Manifest this update: Thu 08 Jan 2026 20:52:24 +0000
Manifest next update: Thu 15 Jan 2026 20:52:24 +0000
Files and hashes: 1: wso-IoSMqAhkgVrBFxhWCJY6SW0.crl (hash: DIyWlX9c9Szfp/8w76LoXT0oR8vpIAFONMMjslVERNY=)
2: 5FE8E1B42E1F11EBA5577457C4F9AE02.roa (hash: 1rB8wjfujUH34y0bYE/i/m37F3UP1B3bzE3MrCEyty0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl
rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Jan 2026 20:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1967 (0x7af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D9B5, serialNumber=C2CA3E22848CA80864815AC117185608963A496D
Validity
Not Before: Jan 8 20:52:24 2026 GMT
Not After : Jan 15 20:52:24 2026 GMT
Subject: CN=69601908-1662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:22:39:59:a0:82:e0:13:38:31:04:77:66:
8f:65:11:c3:df:00:ba:46:b4:a0:d0:ad:b0:0c:61:
a6:b6:56:e6:a0:96:48:8b:a1:ee:68:e0:22:92:49:
f5:0e:bb:09:a0:2e:4b:a9:09:59:31:94:1a:5c:8c:
21:a7:ba:a0:5a:d9:d8:e4:87:14:ed:87:38:31:d0:
da:df:2e:99:a1:1a:d8:24:f6:f2:59:0e:18:25:02:
02:16:53:1c:47:cf:bb:ea:3d:5d:c3:54:d5:6e:b0:
78:ea:52:b9:b9:47:da:92:d7:2a:97:8b:f9:73:da:
4e:b4:23:45:d8:c3:e8:bd:c4:a5:1d:6e:5d:e6:11:
02:88:d4:6b:07:e9:62:f5:fb:20:fd:f0:73:e8:49:
ca:85:85:30:ec:de:20:e4:4f:07:89:9f:54:8b:68:
79:ee:f0:40:8c:d7:a2:3c:ed:4f:6f:8d:59:0d:2b:
e7:bf:e4:9b:9d:fb:81:bc:31:f9:e9:e8:84:c7:31:
f8:eb:54:48:7a:3b:ee:a0:ce:1d:4f:fe:13:0a:af:
ff:b4:dd:5e:5f:03:cf:90:e8:cd:34:a0:66:c3:6f:
16:76:ec:74:5f:a3:46:bb:7c:26:39:f2:e1:35:52:
7e:47:5b:e5:43:31:6f:e3:dd:9f:30:f2:f2:89:c7:
cf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1B:F6:B5:76:12:04:8B:EA:0D:73:1E:11:5A:56:0E:12:77:A3:14
X509v3 Authority Key Identifier:
keyid:C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2c:c3:29:0c:03:bf:30:e4:81:c2:00:01:d2:e3:4d:b1:fc:
0d:24:47:65:ae:5e:f6:4d:84:33:27:09:eb:22:d7:29:e9:18:
34:a5:a0:6a:b9:30:df:23:c1:26:10:ec:d2:2c:cf:9c:c9:e7:
65:25:0f:4f:71:b3:4c:ca:c7:5e:78:8a:a6:ad:14:0c:9f:a5:
54:79:2e:d5:68:2b:62:7c:15:ba:65:37:24:8a:8d:77:b5:07:
90:6c:ea:0d:a4:5a:0a:a3:a0:c7:a1:32:df:0f:d4:00:bb:3e:
0d:1a:73:79:8d:52:c6:4e:a1:2c:59:a8:d8:d0:69:10:07:22:
0e:19:6c:3e:61:1e:18:d8:a7:f5:10:36:62:0a:f7:89:a0:3a:
44:7b:04:10:9c:03:f1:2b:e8:ec:2f:33:9d:36:b9:11:c2:d7:
df:d1:a8:9d:8b:8f:53:66:ca:c4:01:8b:f7:0f:4d:b0:fb:db:
3a:39:9f:6e:ce:51:d2:72:47:97:36:f1:ad:14:08:5f:63:88:
e9:45:c2:d4:81:49:79:ad:2d:37:b3:d6:56:7c:6f:68:f8:ed:
fc:e1:cf:01:f3:3f:2c:3c:76:ff:26:1a:e6:ea:b9:8d:25:6c:
75:b5:57:b2:04:aa:51:b8:9c:23:df:16:38:0a:43:82:8a:10:
d9:35:45:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 08:01:47 2026 by rpki-client