This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
File: WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft (raw, json)
Hash identifier: tASa3n3Rzo0UMJTYyfhhtQD76VFG98pM/NnnehuvVyM=
Subject key identifier: 28:5B:58:38:4E:0F:10:D1:4D:C0:F9:69:96:11:1C:30:84:D7:CA:72
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial: 13E9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
Manifest number: 13BF
Signing time: Sat 10 Jan 2026 14:52:45 +0000
Manifest this update: Sat 10 Jan 2026 14:52:45 +0000
Manifest next update: Sat 17 Jan 2026 14:52:45 +0000
Files and hashes: 1: WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl (hash: XHgyDihWeKclNYJ0xl/tSg7j1zOlnHfll+B/WOGRoww=)
2: 0D4D857E3B9211F0857DC432C4F9AE02.roa (hash: 0YA+4PX9JYpc8QBE3JHr5LKBbRzHe9X88/5AFsZZNig=)
3: 005D2F8E56B611EAA08F9B82C4F9AE02.roa (hash: 660m80xTZki8ylh8j+pM5SznA/z6+3ERhy9Sd6ExGUY=)
4: 46CE46B416BF11EBB31D5A6AC4F9AE02.roa (hash: iD2PRHlOwSrAIealn0fu1cXe6nvlmtIZjMf00fYOaTs=)
5: 994F0A88D86B11E9B8BFCE0AC4F9AE02.roa (hash: tdnI+KOdNhmgHG0EaIdZJbs7v8BfbY1qAdFe/ckIHKI=)
6: E1982A2EAD7511EA94C97127C4F9AE02.roa (hash: QcX+JJfibmJ10vB/1qukQZesFZiH8h11fVVY2pTUDR4=)
7: E53A0A54450911EBBA450A64C4F9AE02.roa (hash: feexJekN/NDSkCAQIeZYtbVsbTI/ysDPGekXjAR1sEc=)
8: 5BE6FE3ED7A311EF9D214C13C4F9AE02.roa (hash: wgWYzuty+GM3VsiaayvTIFlkcVAcGiHHxoMLNBjrqzc=)
9: 069626A6ABC211EA9C9FC06EC4F9AE02.roa (hash: Ia9odNobe+dWh3uoJd1dENgZhirY+vgmKhJvqKgJrVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 14:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5097 (0x13e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Validity
Not Before: Jan 10 14:52:45 2026 GMT
Not After : Jan 17 14:52:45 2026 GMT
Subject: CN=696267bd-9cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1f:36:a9:ce:34:d7:e5:d5:c0:05:af:fd:9f:
2b:dd:93:02:58:c5:22:b7:f9:d5:23:4a:3e:33:de:
cd:ce:44:70:72:95:d6:22:8b:3a:a1:1e:de:e4:a3:
8f:4e:83:f4:ce:7f:6e:b3:2d:3f:d0:9b:80:66:c8:
04:f4:43:a9:8a:99:30:aa:63:f3:33:68:7d:b7:2c:
74:6d:10:e0:61:6d:62:4e:2d:28:78:93:f4:d8:37:
95:dd:12:cc:6e:f9:09:f2:ad:6d:8c:2b:e2:c5:59:
34:48:ac:74:22:40:4f:92:2a:d2:8d:74:1c:e7:3e:
07:82:fe:c2:2b:90:16:73:94:0f:e9:c5:5b:32:f1:
9a:17:44:b5:68:ab:a7:d2:15:ad:2e:91:63:a1:95:
d0:f1:50:d0:1e:99:3c:0d:62:6b:a6:70:1f:32:6b:
11:89:e1:fb:a9:17:74:aa:7e:41:9a:f5:a7:da:50:
ba:52:80:44:33:d7:96:a8:e2:d2:4e:fb:65:63:c4:
cc:09:2b:62:f2:52:15:80:5a:38:1d:cf:11:f6:7f:
1b:42:d2:98:81:91:b9:3e:07:1b:ee:9a:bf:d1:2b:
91:a3:d6:48:c1:eb:e0:db:7b:fe:26:c3:48:c7:19:
93:a3:3e:a1:58:71:4c:5b:96:5c:3f:d8:0a:b2:f1:
06:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5B:58:38:4E:0F:10:D1:4D:C0:F9:69:96:11:1C:30:84:D7:CA:72
X509v3 Authority Key Identifier:
keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:50:49:fd:d6:21:eb:51:81:32:9f:1c:39:8e:90:4e:18:08:
d7:f1:8b:76:eb:77:af:33:16:1f:b3:f4:c6:2b:b8:37:ec:18:
05:cc:51:6a:19:06:9e:8a:51:c2:f5:6b:54:19:ca:82:8e:98:
77:a0:ee:0c:b2:2a:7d:e9:e1:0c:26:ca:6c:7f:64:e2:20:a8:
62:01:8d:8a:1a:31:33:8d:09:6c:57:62:9f:70:ef:0c:a2:76:
00:6a:02:59:32:8a:b6:ec:ea:69:78:1e:ee:5a:81:d0:ee:d0:
b8:ae:87:f4:fd:f9:2f:22:92:d2:26:6a:c1:ef:11:86:d5:5c:
e1:77:08:15:90:9a:2a:0c:17:15:56:78:52:23:2b:c5:84:b1:
14:42:ad:18:d4:74:76:27:33:7e:7c:a8:36:54:da:90:57:99:
cc:0d:16:3e:a5:b7:1b:08:e1:21:20:fc:b0:28:d1:f7:e6:68:
16:37:d1:79:f3:33:d0:11:45:55:3c:8c:04:d0:e0:c8:e8:d0:
b1:cf:19:22:df:34:75:17:a2:7a:c2:d3:38:da:97:d6:99:8e:
4e:6f:0c:71:1c:1b:8d:58:2a:e2:b1:0e:a9:5f:c9:80:af:74:
f0:68:7e:f4:47:f4:be:36:e7:c5:05:48:23:7d:99:78:a4:08:
40:da:e8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 04:09:31 2026 by rpki-client