This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.mft
File: wuH3Z0PV73o0ajcy6vkNrVgod90.mft (raw, json)
Hash identifier: oQ9GI7AAcvepPBvMSW0Rh99Ba9hWROtIoX3CSzXSB64=
Subject key identifier: AC:59:C2:E7:6E:76:BA:A3:4F:A7:D3:63:EB:2F:36:AB:36:CA:70:E0
Authority key identifier: C2:E1:F7:67:43:D5:EF:7A:34:6A:37:32:EA:F9:0D:AD:58:28:77:DD
Certificate issuer: /CN=A91843C6/serialNumber=C2E1F76743D5EF7A346A3732EAF90DAD582877DD
Certificate serial: 0242
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.mft
Manifest number: 023B
Signing time: Sun 21 Dec 2025 01:13:10 +0000
Manifest this update: Sun 21 Dec 2025 01:13:09 +0000
Manifest next update: Sun 28 Dec 2025 01:13:09 +0000
Files and hashes: 1: wuH3Z0PV73o0ajcy6vkNrVgod90.crl (hash: mXa4ud+T1D6zdwahmRkQflK8DV8EVURlmEBPd++ZNRk=)
2: 679A3A06D1F211ED8C598E75C4F9AE02.roa (hash: pUOWSo8C3C18wMXs6P1W7EoqHiAGq09js0x+ChnHsnU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.crl
rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 01:13:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91843C6, serialNumber=C2E1F76743D5EF7A346A3732EAF90DAD582877DD
Validity
Not Before: Dec 21 01:13:09 2025 GMT
Not After : Dec 28 01:13:09 2025 GMT
Subject: CN=694749a6-52fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:4b:53:2d:82:b7:24:32:74:59:15:9d:c4:
42:f5:f2:2d:67:8b:a1:98:41:64:97:d1:8e:0e:59:
29:4c:4c:85:96:ba:11:74:29:47:1c:d0:cc:a0:e5:
ec:e8:36:bd:c1:af:0c:a2:d6:d1:42:c2:ac:2b:45:
be:e4:16:c8:30:36:c0:3a:ef:21:c5:e9:2c:6d:47:
a0:6b:f1:2d:9d:4b:c2:74:f7:ba:e4:bb:47:e6:00:
bb:75:bd:49:15:ef:a9:f9:d1:1c:b7:71:97:cd:95:
0f:8b:0e:46:de:d7:f2:6d:09:7a:9c:68:d2:2c:7c:
ef:20:5f:00:3d:a9:29:9d:ea:d5:6a:06:4e:e4:e9:
3b:f7:74:55:27:b6:19:50:81:c8:4e:a3:5f:70:c7:
85:16:df:d5:c9:b9:d0:a6:6c:42:f7:b9:81:af:fc:
52:5a:48:b5:d1:d1:90:f8:8a:d2:42:06:73:f4:f6:
05:08:69:80:1f:d7:5f:f9:dc:f1:48:e1:57:2b:eb:
6b:53:6a:60:45:f5:34:d7:78:dc:15:c2:6f:f3:0c:
54:d3:3c:fa:d3:16:be:72:80:2f:9a:7c:1c:31:38:
d3:98:e5:c9:db:ea:96:5c:7c:d4:0a:60:15:09:61:
39:aa:d7:e2:29:1c:53:30:36:9b:05:0a:70:d1:b9:
70:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:59:C2:E7:6E:76:BA:A3:4F:A7:D3:63:EB:2F:36:AB:36:CA:70:E0
X509v3 Authority Key Identifier:
keyid:C2:E1:F7:67:43:D5:EF:7A:34:6A:37:32:EA:F9:0D:AD:58:28:77:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:30:d6:19:75:fb:00:23:b4:35:2d:e1:b5:3a:d1:3e:91:9b:
04:81:bd:8d:c1:b4:32:1a:1e:a9:2c:87:78:d3:ec:d2:60:2e:
fe:49:f5:c5:76:dc:ee:4d:1e:f1:38:c9:c5:0b:a4:82:ed:87:
ee:90:2a:53:58:d1:af:2d:24:9d:6e:66:ea:f0:8b:42:f1:9d:
3b:c9:70:fa:13:83:77:9d:ba:9c:66:1c:c7:03:ce:0a:b7:31:
4e:37:f6:99:c8:82:5b:aa:f6:14:d8:dc:f2:77:df:78:9d:de:
cc:ec:0c:74:c2:5b:9c:41:a5:ff:9c:37:10:11:21:9b:ee:d6:
39:cc:73:82:77:d7:fa:e4:c6:e0:a1:10:f6:f8:00:fb:ae:cf:
2e:71:70:84:48:72:ce:6d:30:87:34:7d:b4:12:41:d3:54:74:
6e:5f:6c:66:fc:af:c8:b8:eb:85:fa:42:a5:5a:3e:2e:13:f5:
5a:d5:79:8f:9e:bf:ee:47:17:11:6d:a1:40:2c:bc:8d:42:d3:
44:7d:46:c9:58:80:bf:f8:39:80:3f:a0:e1:8a:08:f9:69:83:
fb:96:7f:f2:3a:f2:ba:17:5c:69:1e:4c:2b:3e:1a:67:f5:cc:
82:06:69:58:32:7e:01:a7:18:10:fe:84:10:ce:e7:c5:e0:d1:
88:26:5e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 03:50:31 2025 by rpki-client