This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
File: wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json)
Hash identifier: nvdRDW9cKV6+o0qKJkKrfRO/3NYrmIBEk4nla6gS9Fw=
Subject key identifier: BB:42:BD:1B:1A:40:C2:CD:48:E5:05:28:AC:6D:2F:F7:08:AD:2E:DE
Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Certificate serial: 17FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
Manifest number: 17C5
Signing time: Fri 26 Dec 2025 16:19:45 +0000
Manifest this update: Fri 26 Dec 2025 16:19:44 +0000
Manifest next update: Fri 02 Jan 2026 16:19:44 +0000
Files and hashes: 1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: zgTLh/+piAnP9/twD7H2PkHFjGrn+CqerJSsp42/6Es=)
2: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: 9d6Qbuo6UefvoJTh1k6X27CExDhv7B/9JIB8aF5IHy0=)
3: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: yGKvF3UBsgJ6VKreN5e6xc+PrZFaa4A/B9g4uCEjRgk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 16:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6140 (0x17fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Validity
Not Before: Dec 26 16:19:44 2025 GMT
Not After : Jan 2 16:19:44 2026 GMT
Subject: CN=694eb5a0-0ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:74:44:4e:2f:5e:40:14:3f:d5:66:37:68:c7:
72:fe:11:ae:c4:d0:e1:38:26:40:04:59:de:c7:7d:
ad:e6:c8:4c:6b:00:70:f3:0e:d5:49:70:67:21:a1:
ae:86:8b:db:fe:14:23:3b:33:d3:63:b9:52:14:13:
5e:b2:41:25:c7:e5:6b:4c:f2:39:ca:09:70:56:40:
9a:b9:90:1c:9c:ff:a7:dc:64:db:4b:03:f9:83:f1:
f9:a6:8c:d5:ce:2a:20:2e:fd:32:1b:f2:a3:31:d5:
4e:ae:80:4c:e2:25:9a:d1:0d:27:64:1d:52:15:90:
be:ec:b1:32:ce:39:8c:87:1f:c7:e2:8f:2f:38:18:
73:39:72:75:52:8a:c1:fa:81:2a:98:5d:4c:a5:8c:
bf:5f:15:88:b0:2d:11:30:ec:7e:93:c5:c5:bb:09:
53:a6:77:8d:32:dd:b0:20:e0:c1:14:16:c5:55:99:
d5:e4:e7:6c:2d:0a:e4:42:68:22:f1:fc:94:25:5d:
53:84:df:3b:70:51:fc:2c:a8:bc:42:1f:68:87:26:
86:da:4a:23:85:f6:19:b3:ed:b0:2b:18:58:23:08:
0e:c2:dc:0c:af:48:c9:62:5d:f9:67:68:4e:17:0b:
cf:90:0f:57:1b:88:bb:55:ab:e9:62:d9:a7:82:e4:
a6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:42:BD:1B:1A:40:C2:CD:48:E5:05:28:AC:6D:2F:F7:08:AD:2E:DE
X509v3 Authority Key Identifier:
keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f1:f2:24:95:8d:a4:ea:b9:1d:52:a0:25:ab:35:e8:0d:57:
4a:e6:41:ee:d6:98:34:86:4b:13:3a:06:7f:f3:8c:c1:f7:56:
17:39:c1:0f:69:df:5d:e7:d4:30:59:2e:ba:57:81:a0:f2:d7:
a4:1f:ed:3d:4e:ba:87:a0:ba:5c:22:71:11:d5:87:14:68:e7:
bc:ea:9f:48:c4:4c:1b:2b:ec:d2:e3:6c:ee:52:c6:95:b1:ae:
f4:2e:a6:26:b4:76:53:e9:fa:90:19:c7:c4:62:52:1a:a0:27:
75:c4:b5:59:53:e6:11:1e:f3:fb:f3:ec:e7:51:fa:11:d2:53:
1d:fb:83:36:5f:bb:77:98:f9:e2:be:bc:1f:b1:d1:83:c6:8f:
d1:f5:4e:62:92:90:d8:a4:ac:53:41:01:6a:15:d9:a7:6e:d6:
90:77:c0:a1:f8:42:d4:7a:57:9b:c6:2d:b9:43:33:7f:9f:05:
3b:31:9e:ac:5d:6f:99:ab:d1:92:96:39:7a:9d:9c:9b:b4:9d:
61:bb:31:9a:2f:eb:7d:e3:25:05:be:89:db:ae:76:66:7f:c7:
a7:e8:52:5b:9e:ae:14:1d:17:31:99:93:bf:d0:46:3d:8d:cc:
3b:31:05:f4:8e:4a:3e:ad:d5:55:e3:95:a0:c9:1b:49:9c:51:
c8:73:ab:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 21:02:12 2025 by rpki-client