This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
File: wj38Jpc5QY-leSH40pBboWdC_E0.mft (raw, json)
Hash identifier: 8XiaT6ZxAcrkpPgVfdTy+ylQYWHoTx69nhJU8gUgyXA=
Subject key identifier: FC:EA:37:97:E9:EE:47:55:93:5A:48:02:F1:22:21:DB:33:5B:EE:96
Authority key identifier: C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D
Certificate issuer: /CN=A913F3A2/serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
Manifest number: C5
Signing time: Fri 19 Dec 2025 04:58:25 +0000
Manifest this update: Fri 19 Dec 2025 04:58:25 +0000
Manifest next update: Fri 26 Dec 2025 04:58:25 +0000
Files and hashes: 1: wj38Jpc5QY-leSH40pBboWdC_E0.crl (hash: 9bgtKWVLLoWyXzjWXmxvvf2t20uiGwv0giSjMV0f7Zk=)
2: 0136C13EAE4C11EFACFD730EC4F9AE02.roa (hash: ScWyAFX8IZVuqT/OkOtoT9rz8/7+EBsMEJn2VwqrRCE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl
rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F3A2, serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D
Validity
Not Before: Dec 19 04:58:25 2025 GMT
Not After : Dec 26 04:58:25 2025 GMT
Subject: CN=6944db71-e344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:28:9a:3f:48:53:f4:9b:81:7b:7c:dc:f9:ba:
87:37:ba:ba:6d:58:a8:a2:1f:aa:89:28:23:34:bf:
97:36:c6:46:62:43:a0:6f:6d:03:e4:03:ba:7e:17:
32:3d:6d:56:e2:b7:0b:cf:42:23:8b:5f:df:b8:e9:
a5:d9:fd:a5:ac:1c:bf:d5:85:a5:56:48:36:ff:f0:
f7:b0:c8:40:77:d2:a0:61:52:54:51:e5:a5:9e:86:
d0:86:aa:8c:30:b7:a0:77:54:9e:1c:55:00:1b:7f:
6a:24:f4:a6:7e:1e:b6:a0:b8:cf:19:30:ab:1a:4a:
e4:91:45:27:ad:80:80:d5:50:d4:b5:c0:a8:4e:30:
18:fe:c9:a3:05:58:17:e7:03:16:9a:64:40:a0:0c:
af:e9:fa:e4:d2:d6:1f:b8:1b:6a:ff:0b:5e:84:97:
7c:f1:70:43:91:d9:50:a7:8a:50:f5:41:ee:1b:46:
65:52:ee:12:08:19:ec:a3:2c:c9:a6:02:40:94:e4:
85:7c:f0:99:0e:b5:22:f1:0b:56:cb:82:23:75:32:
b9:7d:93:38:76:6b:3b:c5:73:1c:e1:ba:c6:cb:c0:
45:ae:fa:65:e1:50:73:fd:21:55:56:ab:0c:81:8d:
cd:8b:05:2a:0c:68:05:f4:a6:c8:b6:9d:c7:6c:56:
a5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EA:37:97:E9:EE:47:55:93:5A:48:02:F1:22:21:DB:33:5B:EE:96
X509v3 Authority Key Identifier:
keyid:C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:54:5a:ef:3f:81:dc:6b:ba:6f:fe:00:6e:44:44:05:ca:a0:
e2:41:26:51:d9:37:c3:df:89:29:fa:9c:2d:89:70:34:ce:f2:
32:52:31:02:2e:09:41:9e:26:ff:d6:64:78:8b:77:20:a3:1e:
05:df:4e:1d:b0:13:f0:cc:88:73:79:2b:d9:af:4f:03:55:a6:
77:95:a8:ae:e7:07:7e:2d:88:1e:c0:01:99:f2:7b:2f:bf:bf:
6f:34:9a:d5:a1:be:32:97:20:66:25:94:02:23:97:b8:f2:c3:
45:59:68:82:a8:81:f1:dc:14:63:2d:91:d9:8d:28:34:42:e3:
b6:94:ae:62:03:5d:e1:cb:29:25:9a:3c:8f:b8:71:0e:12:83:
f6:40:3f:ad:35:b7:04:69:94:37:68:1e:0b:cb:e1:83:88:03:
a6:d5:97:13:c5:96:15:b7:d2:c7:7b:de:59:79:79:88:9d:3e:
93:69:2b:3b:31:45:cd:5a:8c:b6:57:3a:a1:df:71:4b:58:ff:
f4:98:79:f9:53:8a:f4:8d:b9:cb:1a:14:20:e4:1e:1a:e2:75:
77:79:34:75:e8:a4:6e:14:eb:ae:f6:64:6c:34:70:3e:67:43:
ad:eb:43:b1:64:1c:e6:21:2e:70:a8:5e:ca:23:e7:73:d7:df:
e8:25:72:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:56:23 2025 by rpki-client