This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft
File: WAfnFR1ax7dL8iyZCSvS6S6mBig.mft (raw, json)
Hash identifier: tUr3RoLitBu5NRvK7TKZCcPJRx6IKFl7yS0XNRJpPjE=
Subject key identifier: 95:A9:67:B4:DB:DA:64:6D:B6:95:0C:D9:9C:A8:BE:E9:AC:49:B5:65
Authority key identifier: 58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28
Certificate issuer: /CN=A9144EC5/serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628
Certificate serial: 063C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft
Manifest number: 0631
Signing time: Sat 10 Jan 2026 22:02:28 +0000
Manifest this update: Sat 10 Jan 2026 22:02:27 +0000
Manifest next update: Sat 17 Jan 2026 22:02:27 +0000
Files and hashes: 1: WAfnFR1ax7dL8iyZCSvS6S6mBig.crl (hash: 5tSAlsSTPt2gP4Fe7j/VHpponSBKopPu5C3NaRobSWE=)
2: 9CCB30B0C5F411EB8A6F1525C4F9AE02.roa (hash: W3evTqtE3AeQu/+UCpmY09IhagDrzP1HZj8k+plv7KQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl
rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 22:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1596 (0x63c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144EC5, serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628
Validity
Not Before: Jan 10 22:02:27 2026 GMT
Not After : Jan 17 22:02:27 2026 GMT
Subject: CN=6962cc74-ae11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:58:bb:2e:6c:30:62:a9:3e:f2:dd:31:9f:
9e:78:01:9f:88:a5:fa:f4:95:7f:20:80:6b:52:f2:
19:49:f0:d0:8f:bf:99:33:42:7d:fd:a4:76:27:13:
2d:e4:5f:60:91:20:d2:15:80:43:72:d9:08:c4:55:
e9:0f:57:24:54:48:18:4d:96:d0:79:7c:df:7e:62:
3e:c3:2e:81:ed:6c:1e:a5:80:38:71:72:aa:f1:57:
47:d3:30:d6:e9:a0:af:ce:dd:29:5c:6a:a8:e2:e6:
2a:0d:46:28:9e:08:cc:1c:49:da:48:26:7f:c8:67:
6c:f6:16:5a:29:a2:37:58:bf:31:a1:33:e3:ac:fa:
8c:be:bf:df:2f:f2:64:7d:1e:08:69:58:88:83:2b:
e4:1a:35:1f:18:ee:d2:8f:92:57:c1:0a:70:c6:00:
e5:21:15:f6:42:4a:07:d7:fd:05:d3:93:35:da:b0:
37:87:2b:98:d8:a9:a4:bd:85:a9:71:82:c3:0e:32:
26:3a:0a:e6:a0:91:9e:0f:e7:c7:4f:3b:37:80:d5:
49:1d:8a:71:ad:19:ae:61:3b:ea:8a:1e:be:84:41:
a0:43:e1:2d:f5:64:eb:84:75:fe:af:77:f8:a9:ac:
c3:04:ca:c5:dd:88:78:4e:31:eb:e7:65:5d:3f:ae:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A9:67:B4:DB:DA:64:6D:B6:95:0C:D9:9C:A8:BE:E9:AC:49:B5:65
X509v3 Authority Key Identifier:
keyid:58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:aa:26:09:9d:b6:76:83:15:97:ff:5d:3e:9e:86:cd:f2:47:
61:fd:6a:f1:34:ff:79:96:cf:31:fa:79:14:6a:55:02:7d:77:
a4:e2:c0:73:05:7e:c1:c9:4f:69:43:2c:6d:b2:b8:2f:cc:02:
f4:0d:a4:73:c6:37:de:00:85:1b:71:fa:37:67:74:ce:6b:b7:
57:f1:f6:6f:8c:69:de:45:e3:d0:e3:cf:30:14:be:3e:d1:eb:
36:d8:de:3c:7d:64:93:5d:99:6a:60:e1:ed:82:2f:de:5c:db:
07:1c:a3:15:a5:00:11:f8:8e:00:8d:63:18:8a:78:f2:83:c1:
67:5f:fd:b9:f5:fd:b9:0c:23:34:c4:3b:73:77:08:94:39:b6:
1a:92:27:b1:ce:3e:d3:ea:a9:ab:30:d0:b4:73:55:a4:cc:b7:
12:00:57:84:ac:93:4b:99:38:a3:d9:4e:b2:05:0e:92:b3:39:
2d:35:d0:8b:4c:7e:2d:0f:6f:4b:cc:c5:25:ff:fe:2f:a6:63:
af:67:9c:16:8a:f9:ba:f5:08:c2:80:43:4e:67:67:93:bd:3f:
0b:21:5b:34:0d:e1:f6:8c:25:62:51:e8:4f:c6:23:80:ec:a2:
29:89:e9:1e:b6:10:58:7f:1c:a6:99:12:20:f0:80:2d:69:30:
6c:b9:6e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:33:52 2026 by rpki-client