This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
File: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft (raw, json)
Hash identifier: NhPnqS364CsSl6hDsYdePGExxtusvs5WQw8ujFsU+78=
Subject key identifier: CA:AB:33:21:32:4D:55:EE:34:1C:7E:B1:73:82:E9:E2:06:53:9C:3D
Authority key identifier: 5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4
Certificate issuer: /CN=A9188D0C/serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4
Certificate serial: 0355
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
Manifest number: 0350
Signing time: Fri 26 Dec 2025 23:59:43 +0000
Manifest this update: Fri 26 Dec 2025 23:59:43 +0000
Manifest next update: Fri 02 Jan 2026 23:59:43 +0000
Files and hashes: 1: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl (hash: n9B5zjxYScWw/+BRbQfmJaWxHu+APJuyXsQ09lDPVoY=)
2: 42CD71AEE33511EC9EDB371BC4F9AE02.roa (hash: WrNqwpKibajA317uV8R1n49/EqSR3J93tv1ZPGtLnSs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl
rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 23:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 853 (0x355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188D0C, serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4
Validity
Not Before: Dec 26 23:59:43 2025 GMT
Not After : Jan 2 23:59:43 2026 GMT
Subject: CN=694f216f-ba72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:46:4d:57:15:f0:9b:45:db:4c:69:73:6d:
fc:06:05:a9:3c:ab:d2:90:25:93:29:22:e6:3f:87:
2f:5f:21:dd:ca:fa:24:ab:8e:ab:a2:79:40:fd:2b:
a3:0b:18:78:44:de:d8:71:8c:35:ce:c7:2d:95:eb:
74:fc:a6:a2:46:d8:2a:48:e6:3a:8e:a8:b0:38:00:
6a:fd:b6:98:f9:6b:69:e8:ed:48:f0:f0:34:9d:d6:
08:f8:d3:8f:79:f1:87:b4:7b:df:7c:73:63:f9:7a:
b1:92:ab:65:ca:05:98:87:f4:46:50:29:ad:68:ef:
e3:82:43:8a:1f:6c:1a:f0:74:40:f7:71:0e:72:92:
34:8d:c8:ce:db:c0:6f:16:24:f4:91:a7:9f:6a:66:
6d:56:24:6b:a8:2f:98:43:f9:1b:ad:83:f8:80:7e:
2f:c2:d0:81:53:c1:e3:51:cb:ae:35:f5:5e:a5:da:
b5:24:73:e9:fc:72:11:7b:58:61:36:eb:52:1b:33:
1d:6d:f9:7c:08:f7:8d:ed:b9:2f:67:b3:e9:4e:1e:
6a:ce:e2:ad:45:07:ce:76:4a:a0:26:81:fb:d7:26:
78:1b:8d:c9:96:9d:b5:03:9f:11:e6:9f:78:fd:3e:
a3:b1:78:ae:4a:22:8a:f0:0f:d6:22:1a:53:14:15:
66:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AB:33:21:32:4D:55:EE:34:1C:7E:B1:73:82:E9:E2:06:53:9C:3D
X509v3 Authority Key Identifier:
keyid:5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:ed:a5:59:a8:e0:af:3f:2d:bf:24:25:28:ea:52:55:c6:1d:
2b:37:99:12:70:c7:58:07:11:89:0b:8f:1b:c2:6b:5e:46:5f:
30:37:92:44:c3:7a:e5:46:c9:a1:27:4f:3d:3a:ab:c7:a5:de:
2c:56:32:39:19:c6:83:bf:f3:89:db:78:7b:e4:85:d4:f9:8e:
a9:91:de:4c:68:f6:b5:d6:eb:ab:eb:0c:e7:4e:3c:eb:8e:96:
55:e1:60:29:75:cf:9c:f3:e8:d5:1c:36:66:8c:26:07:20:14:
f8:46:29:82:fe:59:c3:70:28:1e:20:b6:6d:ca:a5:db:71:09:
22:64:a1:07:79:ce:8e:0e:71:cc:e0:c1:9a:3f:0e:fe:d0:b9:
55:09:d4:db:48:ae:49:d8:77:9c:ef:f0:72:3c:cb:29:8a:dc:
d0:7a:1f:4a:63:d3:37:a6:8e:ca:fa:36:77:f2:29:38:2c:5c:
19:60:33:85:63:35:32:f3:43:66:c8:c5:4f:af:c0:82:9c:69:
16:24:f2:74:55:ed:28:3e:03:f9:b5:2f:6c:67:02:c5:63:19:
03:27:10:23:28:16:4d:b2:33:94:37:36:4b:84:98:c8:d2:e8:
9f:99:b1:7f:11:5c:63:25:6d:81:ba:dd:85:f3:8a:42:80:36:
93:65:23:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 05:53:54 2025 by rpki-client