This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft
File: wI7HClt5dC_FX5EFNsoGXGz7fLU.mft (raw, json)
Hash identifier: Rl6YDnXq79aP89HlHbzT3ompqpmugMVJehHvv3Z5Hsk=
Subject key identifier: 85:28:CA:3C:D3:5E:46:7B:6B:47:CA:16:B4:EB:8A:14:71:B6:64:D7
Authority key identifier: C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5
Certificate issuer: /CN=A91302B0/serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5
Certificate serial: 269D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft
Manifest number: 2675
Signing time: Sat 20 Dec 2025 15:34:11 +0000
Manifest this update: Sat 20 Dec 2025 15:34:11 +0000
Manifest next update: Sat 27 Dec 2025 15:34:11 +0000
Files and hashes: 1: wI7HClt5dC_FX5EFNsoGXGz7fLU.crl (hash: I7z1siDDBzrN1l6IjOKuHJSilyfPuGYvXN5VGgVP3j0=)
2: C1B929B4682B11E9AE87C117C4F9AE02.roa (hash: Bji1Z+wCskup8d3EVsxZzlDVl29YQYSE+IGwR4pohHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl
rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 15:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9885 (0x269d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91302B0, serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5
Validity
Not Before: Dec 20 15:34:11 2025 GMT
Not After : Dec 27 15:34:11 2025 GMT
Subject: CN=6946c1f3-7fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:51:50:20:bb:fa:58:1b:a8:97:4e:27:92:
51:e1:46:28:ff:81:48:05:f0:fb:1d:20:73:f3:29:
af:0d:a9:ef:a4:4b:21:af:f4:d0:0a:b2:da:72:36:
48:45:a6:a8:dc:7a:b6:a7:22:11:cb:34:3d:e5:b8:
74:52:ab:af:49:fe:17:a2:64:4c:61:bd:2a:e4:6e:
a1:ed:17:86:a3:b8:26:47:30:10:4d:57:3b:ce:bc:
3c:56:ac:5f:fb:01:22:79:7a:25:f3:ed:dc:49:4f:
b1:dd:70:43:81:04:fc:b9:af:b6:42:11:d5:6a:47:
e2:cb:87:07:70:26:14:d8:a1:be:df:30:36:45:f3:
80:60:61:33:3b:5e:4d:41:15:a2:df:cd:d7:04:e2:
8b:b8:51:66:b2:da:63:91:02:91:76:73:c1:24:d6:
84:b5:66:33:e3:9a:7c:5b:df:41:4a:3a:ec:7a:cf:
b3:f6:df:ff:50:56:e8:e7:a9:0b:bc:9d:81:7e:89:
43:32:60:c5:56:f1:30:34:dc:78:03:11:40:26:f6:
dd:60:c5:bd:2c:49:27:3a:63:3c:c6:8c:f4:31:99:
c7:50:d8:47:c5:18:87:e0:19:96:49:4b:06:7a:ce:
89:5a:dc:a4:66:40:ed:52:5d:c1:1b:28:22:18:a1:
05:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:28:CA:3C:D3:5E:46:7B:6B:47:CA:16:B4:EB:8A:14:71:B6:64:D7
X509v3 Authority Key Identifier:
keyid:C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:6e:46:57:f1:56:70:23:3e:45:4c:60:ad:d1:8a:f0:d0:b2:
9c:92:34:be:3a:3f:4d:5c:80:71:02:f1:e7:46:94:e5:91:86:
59:12:aa:40:1f:67:9e:3d:f6:ec:18:56:72:77:51:3a:a7:34:
a1:52:f3:1e:4e:55:77:99:8b:ad:6d:d9:fe:66:80:2a:bf:04:
d2:44:2c:5b:df:14:97:74:94:8f:76:27:39:77:e5:03:0c:c1:
3c:99:23:a1:86:aa:aa:bd:ff:40:a0:95:b8:49:55:0c:de:71:
58:c5:c8:70:bf:df:4d:99:f7:4a:a2:7a:f0:d8:15:75:10:62:
d1:03:51:8f:6e:6d:6e:02:4e:f2:87:76:60:58:c1:f9:d5:9e:
f7:42:a2:5a:01:a3:44:1c:11:12:2c:59:85:56:ca:39:e9:fc:
56:66:7a:08:bf:95:57:54:c8:3c:86:05:a0:93:f6:be:fc:52:
4b:48:11:02:1b:78:1a:f9:47:13:a9:b0:0d:6c:a1:bc:a1:01:
56:ef:a9:a9:08:9a:14:45:4f:67:b8:15:ff:8e:7d:8f:69:5a:
ef:90:66:cc:8a:d1:9c:1f:47:f0:70:e2:a8:c6:06:c7:a9:4d:
fd:44:7d:37:01:81:6b:c6:b2:fb:ea:c6:c1:07:a2:bd:4e:b9:
3b:c4:3b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 05:03:41 2025 by rpki-client