This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
File: RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft (raw, json)
Hash identifier: JfP102SebDTsbpThv5JqA5ec2w30dbKcr2hEWsjiqi8=
Subject key identifier: D0:77:C3:FE:A8:58:A4:E6:03:94:98:2A:FF:A9:74:D1:DD:79:1C:9D
Authority key identifier: 45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75
Certificate issuer: /CN=A917BD68/serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75
Certificate serial: 033B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
Manifest number: 0335
Signing time: Sun 11 Jan 2026 00:13:13 +0000
Manifest this update: Sun 11 Jan 2026 00:13:13 +0000
Manifest next update: Sun 18 Jan 2026 00:13:13 +0000
Files and hashes: 1: RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl (hash: gXasCkBth8paWtNJvM18GaVKQpqaOIQg/QXZmp3AZuw=)
2: AF88A400F15711EC846A5F29C4F9AE02.roa (hash: Q4rmj8ZW9q3ZMhMYZknk/X38qXU9tpt3Fwr+6cA845w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl
rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 00:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 827 (0x33b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BD68, serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75
Validity
Not Before: Jan 11 00:13:13 2026 GMT
Not After : Jan 18 00:13:13 2026 GMT
Subject: CN=6962eb19-84c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:52:8a:18:57:26:26:cf:7b:34:f5:39:ee:
a8:04:08:c5:a1:f5:a2:59:96:66:6a:5f:54:65:72:
54:50:3c:c2:43:bc:0c:83:d0:67:a7:d3:ff:1c:a8:
a4:b1:c0:5c:99:c3:96:4b:d0:a4:84:86:9f:30:97:
9d:fa:0e:d4:51:43:eb:08:aa:2b:7f:43:5c:13:62:
c0:eb:f5:3c:66:fb:9d:97:eb:48:35:a4:bb:d2:fc:
48:4c:bf:5b:0b:cb:ac:0c:2f:2c:c0:43:c8:c1:81:
d9:ea:6b:33:49:28:cf:ce:99:b2:34:5e:9b:a3:e6:
84:0c:f2:04:22:23:b5:82:01:fc:b4:65:d0:bf:a9:
cd:78:76:0d:ca:c2:3e:8e:0f:71:99:bd:18:98:96:
81:a0:d2:cb:ab:c4:96:27:57:a7:14:ae:9e:e1:46:
54:ae:ae:6a:2e:34:69:c7:14:db:c8:f2:fd:b9:c4:
39:6f:4b:ce:45:b9:63:35:2e:1c:03:1c:f4:38:4a:
a8:bc:79:26:60:8f:d2:4e:a5:b7:c1:a0:ac:c2:0c:
a9:6e:b4:48:33:ce:e8:6a:c8:e9:7d:6b:d4:1c:db:
f4:00:10:db:f8:3f:a1:89:d0:42:9e:18:c6:7a:51:
eb:84:b9:e2:e1:62:fe:36:4e:f0:7e:a4:c0:17:9e:
a6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:77:C3:FE:A8:58:A4:E6:03:94:98:2A:FF:A9:74:D1:DD:79:1C:9D
X509v3 Authority Key Identifier:
keyid:45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4d:33:98:a7:24:d1:fd:42:2f:6d:89:62:41:ec:3b:fe:b4:
09:44:68:85:53:7b:6e:67:fe:e5:41:a1:b8:4e:af:dc:2b:a0:
fa:1d:e9:7a:cf:c4:98:9b:00:84:3e:69:de:3d:61:ad:5e:33:
80:d5:bc:54:9d:31:6d:a5:11:2a:85:d6:92:42:35:4d:3e:e8:
5c:1c:bd:7d:04:37:45:69:69:c3:15:ce:4b:82:bd:50:49:d3:
e6:a9:1c:0b:be:8a:60:d0:97:c6:95:f2:02:e0:4f:7f:96:d9:
d0:05:36:9b:57:52:97:9f:db:36:72:1c:19:9d:7d:92:8a:13:
c7:ca:47:d8:d0:6a:ff:e6:69:5a:78:ac:be:76:9e:22:2e:7c:
75:97:7c:de:8a:4a:0b:eb:a6:92:11:da:6e:5e:53:e3:64:ec:
fb:fd:a5:95:97:4a:df:cf:8c:ff:4f:a5:a3:fa:ac:fe:95:51:
c3:42:b5:8e:e6:69:35:3d:8f:fe:50:87:22:af:0a:66:02:71:
68:fd:5d:02:c1:f8:98:46:36:a3:eb:87:ef:dd:e9:69:b8:b1:
ed:0a:eb:56:8c:26:9c:ef:df:60:01:34:45:84:38:80:00:46:
89:f4:8d:1b:61:3a:26:16:12:c4:b6:95:62:74:d9:0d:7e:bb:
68:a3:1d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:40:49 2026 by rpki-client