This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
File: wK73B39SYiVnF5rOVq1e6M1kYE4.mft (raw, json)
Hash identifier: 1iVUc4abiULjLafhiJWzFKVAplw9I/PD3G0e59nEomc=
Subject key identifier: DA:26:2A:13:F5:17:22:60:B1:8A:B3:46:5D:32:E9:DA:38:BE:C9:C9
Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
Certificate issuer: /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
Manifest number: 0194
Signing time: Sun 21 Dec 2025 02:46:11 +0000
Manifest this update: Sun 21 Dec 2025 02:46:10 +0000
Manifest next update: Sun 28 Dec 2025 02:46:10 +0000
Files and hashes: 1: wK73B39SYiVnF5rOVq1e6M1kYE4.crl (hash: qLxBXfF6idGyjVRMkMrgdbdkkW+Qu16IzLBsbwlrxcA=)
2: 3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (hash: 4PWxSJvGPsYEjGtgHYM8obqb8f7X6eyOT+IKt9t0/2Q=)
3: 6307B34A7CAD11EE9E7B9434C4F9AE02.roa (hash: c3SWUfV7Pzswi2wVxw1lSd2ayx+ZUQtxdR0BtT91QSI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl
rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 02:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Validity
Not Before: Dec 21 02:46:10 2025 GMT
Not After : Dec 28 02:46:10 2025 GMT
Subject: CN=69475f73-b599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:fc:95:10:52:b8:b2:76:6b:bb:5f:c9:0c:31:
fa:7f:a3:39:cc:dc:5a:14:88:6a:6d:3a:4d:ed:fb:
28:ae:ef:bf:26:c5:dc:43:f4:e9:01:3d:0f:40:e4:
9a:b5:8e:80:20:05:3d:90:1e:5b:cd:1f:e0:e6:0b:
14:79:89:41:15:fe:87:bd:06:03:18:18:f9:4a:2a:
14:fa:05:63:b1:4e:05:dc:dc:7c:e7:77:79:ba:78:
c1:2e:0e:36:06:fb:af:f4:f9:61:d2:ca:0a:a2:57:
19:dd:c4:49:e6:88:03:6d:ee:ca:61:9c:58:64:a0:
11:72:29:1f:97:32:ee:fc:39:dd:86:f1:03:6c:0c:
c8:f5:4b:06:fe:4b:0f:66:f8:24:67:00:bb:7c:92:
d9:61:dd:b6:b6:89:c5:df:bd:39:dc:96:55:eb:51:
65:25:48:17:6a:d1:34:7f:c9:a3:5f:e4:a5:98:a6:
ff:cf:ed:23:47:77:b3:08:30:1c:9a:23:36:33:96:
41:ee:91:5d:ce:eb:61:7f:fd:cc:af:80:86:25:ee:
6b:09:e6:05:df:05:1a:cc:c3:bc:d7:0e:91:16:27:
bb:3d:28:32:44:ee:4b:1f:01:a1:ce:ee:03:d8:12:
fc:30:0a:58:3f:41:7c:2e:74:fc:6b:45:2e:f4:e3:
80:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:26:2A:13:F5:17:22:60:B1:8A:B3:46:5D:32:E9:DA:38:BE:C9:C9
X509v3 Authority Key Identifier:
keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b0:34:9b:04:5d:10:61:3a:c4:2c:5a:fd:fa:66:d2:a9:d0:
79:c0:b2:c6:7b:0c:78:60:91:a7:8e:99:07:47:b2:2b:62:43:
d5:3f:1f:32:74:c9:03:10:36:dc:c5:ea:cf:d0:06:e7:e5:36:
43:f4:bc:8e:11:74:9e:40:ce:4b:ef:39:14:d0:81:80:ed:32:
52:68:e3:76:3b:36:2f:90:99:77:db:11:46:07:7a:f7:10:38:
51:2b:90:9c:fc:e6:30:f0:ad:8d:8e:2f:ef:37:7e:9b:d1:31:
ca:a7:83:7d:e7:28:4b:a8:df:8e:9b:86:e4:a2:c3:77:f6:10:
42:69:50:88:39:2a:53:25:c6:a4:05:e5:82:5e:b7:12:75:fe:
f5:f6:cf:26:e8:69:15:bd:b0:ad:20:9d:aa:d1:a8:69:ee:0d:
02:61:c1:ad:02:1c:3e:f9:6b:b9:9c:9e:2b:11:64:93:3b:c9:
9a:3b:8d:cd:32:c7:ef:21:f7:c3:5d:f4:d1:b2:97:a2:41:53:
8d:cb:66:61:d4:7e:c7:cc:a5:de:8d:97:a9:21:34:48:65:49:
38:7c:f9:65:e3:4e:7f:8e:86:da:00:7f:96:8e:bd:19:44:c9:
71:a3:25:cd:67:c8:b0:19:38:0d:4b:e6:57:4b:9e:a0:d0:3f:
4d:e6:e6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:30:40 2025 by rpki-client