This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
File: wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft (raw, json)
Hash identifier: 4ysbWFypKBZtvAq6WqIOLgGY03FmOV4+e9g7hEr5+Dg=
Subject key identifier: 87:D9:70:2D:CC:70:F7:57:66:19:65:CF:A4:09:89:5E:81:98:3C:6F
Authority key identifier: C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72
Certificate issuer: /CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272
Certificate serial: 03FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
Manifest number: 03F9
Signing time: Thu 18 Dec 2025 23:46:11 +0000
Manifest this update: Thu 18 Dec 2025 23:46:11 +0000
Manifest next update: Thu 25 Dec 2025 23:46:11 +0000
Files and hashes: 1: wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl (hash: 32b5poHovrbwi5A+3QozmLCFSt3N149k0IfT7v7VgpY=)
2: AFF4E1F89EB711EC8210607DC4F9AE02.roa (hash: +r7YhLJJlScIggKwXtneBk7o6LpJoWXkYcjOQ/aNmpo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl
rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1022 (0x3fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91365B9, serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272
Validity
Not Before: Dec 18 23:46:11 2025 GMT
Not After : Dec 25 23:46:11 2025 GMT
Subject: CN=69449243-f34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:89:d0:f0:eb:a5:8f:7d:bd:32:90:50:8a:
12:7c:0d:41:b1:6c:37:1f:b8:c6:bd:24:60:e4:bd:
0e:7e:0c:e6:08:96:f3:2b:e5:14:99:8e:c2:40:2e:
cb:84:99:a2:23:54:3c:ee:ea:9f:fa:f0:c1:6e:7b:
34:13:9c:10:f5:05:c4:1f:d0:59:17:a0:78:b0:10:
fc:86:be:24:5e:cd:8a:7f:93:3d:ed:d1:18:b4:c9:
50:dd:d6:5d:ac:32:15:80:24:10:dc:08:bd:65:63:
a3:28:7a:f1:43:2f:d7:ff:3f:79:62:bc:8b:46:b0:
66:77:1c:55:b7:4d:bd:63:8d:c5:96:97:ad:af:b0:
30:5b:43:93:e3:73:43:8a:24:ac:03:85:ae:c7:f5:
87:87:de:ba:41:08:8e:7f:94:a4:2c:f2:f7:09:d2:
7f:8b:39:57:1b:31:1f:4a:ef:57:88:2a:76:4f:c7:
52:52:aa:65:30:67:fc:af:96:73:dd:bb:fd:de:4f:
af:ee:c6:3e:4f:15:34:f6:e5:55:5b:cb:bd:ae:ba:
c4:a7:42:de:a9:1e:0e:5b:b5:aa:38:66:1c:a7:6e:
ea:d7:40:57:46:f0:bf:80:f0:ec:98:9a:0a:ad:b5:
aa:e1:07:c1:47:03:b5:df:11:36:75:e2:27:c5:d5:
1e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D9:70:2D:CC:70:F7:57:66:19:65:CF:A4:09:89:5E:81:98:3C:6F
X509v3 Authority Key Identifier:
keyid:C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:7c:d8:d2:6c:f0:94:ff:dd:8a:55:f1:5a:a8:c3:85:93:39:
c8:e5:cc:5b:36:59:02:ce:0b:95:9c:50:c3:6f:2d:06:a6:83:
8d:b9:d8:ae:f2:39:d0:ed:e6:60:35:ff:61:f9:ac:0a:fa:e1:
fd:17:71:5f:15:d4:7f:f8:27:bc:0b:61:a5:fd:a7:f7:78:f9:
5a:0f:89:22:f5:5f:44:21:68:03:c5:a1:0a:d1:8f:ae:77:24:
ea:0c:c6:b2:12:af:c3:95:23:63:a5:e9:96:38:9f:23:60:a1:
58:d4:2c:d7:2e:f0:1a:3e:6b:4c:c0:78:47:ba:ab:25:bf:ab:
59:ac:94:27:2f:b0:db:0c:98:d9:f1:d9:7b:06:17:34:d5:07:
11:3b:2f:d8:b3:16:7c:54:1d:25:7b:bc:9e:1d:0c:db:99:30:
ae:74:27:52:20:3c:88:be:ca:b3:7c:11:cd:1d:81:80:bc:2e:
d8:2d:88:a3:94:27:3f:1b:35:b9:69:46:f8:b7:bf:85:4b:91:
45:4b:41:f3:d4:4a:67:dc:bc:73:0c:75:f4:27:95:bf:b5:cb:
dc:b1:ee:8a:a2:86:4d:62:7b:b1:c4:88:fe:5c:bb:cd:27:c5:
63:d7:be:09:19:40:19:1a:2b:0f:de:57:a4:ea:79:d4:ad:63:
d0:fb:bd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:51 2025 by rpki-client