This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
File: WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft (raw, json)
Hash identifier: myjw6/WC/mQ9w9vGQO6vSqWPNWzFVM7nZTOzAubZ/9Y=
Subject key identifier: 62:15:F9:83:F4:E6:BF:DE:F0:34:BC:69:FF:B8:ED:51:25:29:D0:7C
Authority key identifier: 58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C
Certificate issuer: /CN=A919D1FE/serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
Manifest number: 0C
Signing time: Fri 19 Dec 2025 06:57:46 +0000
Manifest this update: Fri 19 Dec 2025 06:57:46 +0000
Manifest next update: Fri 26 Dec 2025 06:57:46 +0000
Files and hashes: 1: WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl (hash: qOH4cI+qgba8eyGVRpGMzS2zE3VLGW2Kag49TfBaezQ=)
2: 84797D8ACF8D11F09FB4175EC4F9AE02.roa (hash: peAS/ngmPwYZnb97WFQxinsPTC6bCf5NaFTKHcSyPQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl
rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D1FE, serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C
Validity
Not Before: Dec 19 06:57:46 2025 GMT
Not After : Dec 26 06:57:46 2025 GMT
Subject: CN=6944f76a-6da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2e:aa:2f:98:e6:ae:06:a7:64:8d:7d:02:1b:
a8:5c:f3:cb:e5:2c:5b:29:94:a2:43:3b:9f:1e:69:
e2:91:38:58:84:90:c5:00:b8:dc:f9:01:a3:ce:6a:
99:2a:2d:e8:07:92:49:44:b8:7d:7c:a1:85:a9:44:
c1:a0:ee:0f:aa:8f:45:ce:f8:06:af:fa:9f:e8:28:
ac:61:d1:82:18:c2:3a:ec:b5:19:3a:cf:f6:94:b0:
ab:66:73:f1:ad:b5:d4:1b:8f:80:a1:8c:30:c5:64:
7e:e8:20:dc:77:71:bf:fd:79:24:93:31:d7:5a:38:
2e:f9:80:73:2e:e7:1e:67:3a:5b:90:16:97:70:eb:
c9:8f:8b:d3:fb:e7:66:b2:8d:83:a2:e6:2f:ab:c7:
7b:cc:d8:be:c9:0f:81:a2:70:7b:c9:61:a6:f7:d4:
f6:8f:ba:ab:0f:b6:b6:90:e3:84:cd:9c:0c:26:4f:
ca:bb:55:60:da:a0:11:94:d5:5e:25:4c:39:8c:37:
e1:ae:31:91:ad:78:ca:72:a1:3b:61:82:83:25:15:
53:5e:80:d1:b4:50:05:c7:ca:77:90:64:ed:c5:47:
7d:b1:da:47:0d:7f:24:9c:61:54:b5:7e:cc:8f:59:
ef:d2:12:6f:86:e7:5f:90:95:57:39:23:d8:a2:de:
d1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:15:F9:83:F4:E6:BF:DE:F0:34:BC:69:FF:B8:ED:51:25:29:D0:7C
X509v3 Authority Key Identifier:
keyid:58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:35:fb:48:04:83:76:e4:07:6d:7c:e4:53:1a:b3:3a:9f:e8:
c7:30:c6:fb:a6:59:0c:79:4a:08:a4:ef:43:e5:17:77:59:48:
6e:68:4b:68:b8:77:f5:94:d0:b6:4e:96:fe:08:2a:7a:2b:a9:
75:22:d5:bd:dc:9d:4a:cf:aa:27:b7:96:3c:fd:51:a8:47:af:
1d:b6:d9:95:d0:4e:08:6d:d3:7f:68:8c:7c:7a:8f:8b:d6:34:
b8:23:d1:fd:2b:b4:b7:7f:87:c5:4d:33:37:4a:5e:9f:22:8d:
d9:4d:29:88:e9:c1:00:1e:17:63:71:55:54:32:f8:27:a4:17:
a8:ed:ed:7d:c1:f0:27:01:86:b9:1c:66:f4:a5:8b:58:17:7e:
8f:45:04:25:ba:cd:ee:e3:9b:16:4b:f0:49:33:1c:86:1d:34:
6f:1f:c9:90:25:3d:bb:d7:72:80:b7:0d:7e:f8:16:8f:d7:a3:
ca:bb:7e:f3:7b:52:f4:48:a7:5c:f6:ab:5e:1c:52:13:6a:ad:
ce:4a:80:ff:f6:a4:93:2f:ca:16:5e:f0:ac:62:96:2c:5b:fa:
64:5f:ff:9c:dd:39:1c:78:d1:d6:35:e3:22:21:2e:d8:61:48:
73:f9:f1:cd:3e:22:04:15:c3:a0:65:34:74:f6:f9:44:2e:bc:
42:dd:8d:a0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RDFGRTExMC8GA1UEBRMoNTg3QzRFRjg4NUJENDE2QTk5RDEwRjU1QjZFODE2OEMw
MkQwMjAxQzAeFw0yNTEyMTkwNjU3NDZaFw0yNTEyMjYwNjU3NDZaMBgxFjAUBgNV
BAMMDTY5NDRmNzZhLTZkYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDhLqovmOauBqdkjX0CG6hc88vlLFsplKJDO58eaeKROFiEkMUAuNz5AaPOapkq
LegHkklEuH18oYWpRMGg7g+qj0XO+Aav+p/oKKxh0YIYwjrstRk6z/aUsKtmc/Gt
tdQbj4ChjDDFZH7oINx3cb/9eSSTMddaOC75gHMu5x5nOluQFpdw68mPi9P752ay
jYOi5i+rx3vM2L7JD4GicHvJYab31PaPuqsPtraQ44TNnAwmT8q7VWDaoBGU1V4l
TDmMN+GuMZGteMpyoTthgoMlFVNegNG0UAXHyneQZO3FR32x2kcNfyScYVS1fsyP
We/SEm+G51+QlVc5I9ii3tHTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYhX5g/Tm
v97wNLxp/7jtUSUp0HwwHwYDVR0jBBgwFoAUWHxO+IW9QWqZ0Q9VtugWjALQIBww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMUZFLzVEQjYwOEFFQ0Y4
QzExRjBBRUY2QzU1OUM0RjlBRTAyL1dIeE8tSVc5UVdxWjBROVZ0dWdXakFMUUlC
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvV0h4Ty1JVzlRV3FaMFE5VnR1Z1dqQUxRSUJ3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE
MUZFLzVEQjYwOEFFQ0Y4QzExRjBBRUY2QzU1OUM0RjlBRTAyL1dIeE8tSVc5UVdx
WjBROVZ0dWdXakFMUUlCdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIo1+0gEg3bkB2185FMaszqf6McwxvumWQx5Sgik70PlF3dZSG5oS2i4
d/WU0LZOlv4IKnorqXUi1b3cnUrPqie3ljz9UahHrx222ZXQTght039ojHx6j4vW
NLgj0f0rtLd/h8VNMzdKXp8ijdlNKYjpwQAeF2NxVVQy+CekF6jt7X3B8CcBhrkc
ZvSli1gXfo9FBCW6ze7jmxZL8EkzHIYdNG8fyZAlPbvXcoC3DX74Fo/Xo8q7fvN7
UvRIp1z2q14cUhNqrc5KgP/2pJMvyhZe8Kxilixb+mRf/5zdORx40dY14yIhLthh
SHP58c0+IgQVw6BlNHT2+UQuvELdjaA=
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:41:57 2025 by rpki-client