This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft
File: wLFgOcRs3wyI2adKgtnkWaOoyuY.mft (raw, json)
Hash identifier: XfATWMzdrvfpIv7ZXIZKpDJsRS+Qxk5NyqVoj7W9hj4=
Subject key identifier: 27:8E:72:BA:73:9B:47:67:B9:AF:CB:82:83:42:52:9D:CF:77:AB:96
Authority key identifier: C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6
Certificate issuer: /CN=A919A9EE/serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6
Certificate serial: 061C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft
Manifest number: 0608
Signing time: Sat 20 Dec 2025 22:13:09 +0000
Manifest this update: Sat 20 Dec 2025 22:13:09 +0000
Manifest next update: Sat 27 Dec 2025 22:13:09 +0000
Files and hashes: 1: wLFgOcRs3wyI2adKgtnkWaOoyuY.crl (hash: RDhvqqqAGZi7NKkLbbPJx30AhO+auP56zsToUxkdq2c=)
2: 96033290E15611EC9E14513DC4F9AE02.roa (hash: xormKkS6IMDdpKdH1Ny6qHrshE543pX8LQBYxdK1HpE=)
3: 1E75BFFA062311F084ABB51CC4F9AE02.roa (hash: K4YGCSLFayJYz0LYC876U0yxoD0NhBi/vRr7YCGJEZY=)
4: 974A6E0CE15611EC9E14513DC4F9AE02.roa (hash: 5cUeQX8aWmX9t5XpnUuO5ZCx3d0YwFQhU0FaZHJ8gp8=)
5: B95648BA062211F09E5D020EC4F9AE02.roa (hash: tQCXioRQJidNJqp0A7ZKqy48ZP3UvrqPeNbQhZXkPH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl
rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 22:13:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1564 (0x61c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A9EE, serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6
Validity
Not Before: Dec 20 22:13:09 2025 GMT
Not After : Dec 27 22:13:09 2025 GMT
Subject: CN=69471f75-be7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:1a:d4:a6:61:cd:82:9b:59:1f:fd:7e:26:
a2:f0:3f:54:94:80:6b:25:9f:b0:3e:5d:45:26:98:
f3:d0:a9:df:6b:92:54:96:cb:0e:81:a2:4c:55:b8:
94:34:9a:9d:72:51:b1:98:25:1b:96:bb:6c:c8:87:
c0:19:24:bb:cc:fb:ff:71:5e:e2:7c:43:08:bf:68:
17:5b:76:42:78:ea:1d:ae:e8:19:be:62:62:1d:5f:
e7:48:2e:26:d4:32:24:04:b4:cf:45:e0:71:ab:49:
9a:c7:8b:90:1b:88:63:d4:05:2f:f4:4c:d1:60:3f:
27:5e:fb:f0:70:83:0a:72:77:b1:ef:38:22:15:20:
b3:93:f3:9a:c2:b1:5e:78:e4:db:23:74:6a:77:9d:
85:cd:05:24:1b:e8:f2:ed:81:81:2c:ae:87:f4:eb:
d0:88:d2:f4:f7:c0:51:1f:c1:47:47:8d:21:09:3a:
61:34:bf:bf:cd:64:a3:14:6b:ea:b2:c6:33:32:47:
94:82:6f:fc:81:3f:c1:d6:2e:59:55:c5:86:95:39:
35:ee:2f:57:0d:b0:da:d6:71:b2:c4:4a:66:0b:64:
08:bf:c8:3f:d7:3f:5d:8b:79:69:3f:0e:5c:88:76:
d0:f5:9f:7e:67:12:5c:b3:40:38:58:4a:a4:3a:4e:
ad:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8E:72:BA:73:9B:47:67:B9:AF:CB:82:83:42:52:9D:CF:77:AB:96
X509v3 Authority Key Identifier:
keyid:C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:64:5f:44:01:df:9d:f6:69:13:c3:54:cd:04:54:36:98:ca:
da:78:ba:60:ed:08:b5:06:09:8b:74:b5:97:db:ce:67:d2:20:
ef:9b:cc:a6:2c:33:d4:97:1e:b3:38:e6:9e:90:7a:55:92:bf:
b6:41:5f:79:23:2e:cc:89:6d:64:c9:e1:8d:26:c1:f7:7b:ed:
8d:20:f0:af:6b:a0:02:52:17:71:b5:4d:e3:f6:1e:e7:e8:af:
5a:74:fc:40:5f:d8:26:47:26:77:98:fe:86:fd:24:7b:b2:19:
31:ba:df:85:73:81:7d:b5:60:47:03:8d:ed:c2:a1:52:67:54:
28:5c:42:4f:b5:a9:ae:5c:27:a2:a9:a7:b2:bd:02:f9:48:fc:
6e:ca:41:98:92:f6:6e:88:96:9a:fc:f7:c4:c2:2f:44:21:62:
e2:49:30:08:20:46:36:3e:da:38:05:f3:78:95:4f:ba:61:c9:
11:75:a3:4f:20:c4:60:d5:c8:f4:28:3c:bb:9e:5d:ff:a6:a7:
a5:3b:4e:85:e0:91:ac:95:96:78:10:14:b2:30:e1:ff:99:d5:
49:db:3d:d6:c8:60:13:2f:79:2b:4c:2c:95:93:b5:6e:8b:81:
fa:cb:33:ed:00:a0:36:24:71:1f:9c:0e:2d:94:15:7c:95:db:
13:7a:83:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:49:48 2025 by rpki-client