This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
File: waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json)
Hash identifier: lU21XefHUtKFVZvyJNKugSAmh8bYxUdPy6IR0FrhV2o=
Subject key identifier: F7:92:42:0F:D8:56:78:72:0E:92:8D:E1:1B:2D:D8:29:36:59:28:81
Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37
Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
Certificate serial: 05D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
Manifest number: 05D3
Signing time: Thu 18 Dec 2025 22:23:06 +0000
Manifest this update: Thu 18 Dec 2025 22:23:06 +0000
Manifest next update: Thu 25 Dec 2025 22:23:06 +0000
Files and hashes: 1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: w5p5K8tsZIWY5GC7chfUMeidVuOv8wlfcKuEC3xMVDY=)
2: 9C3424A08F7F11F09A0D9529C4F9AE02.roa (hash: cwF8COUkuSrij9NX2KXpkgFn2IJIbJrzIKS8a9AaFJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl
rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:23:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1497 (0x5d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
Validity
Not Before: Dec 18 22:23:06 2025 GMT
Not After : Dec 25 22:23:06 2025 GMT
Subject: CN=69447eca-c8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:ee:21:73:a8:4b:42:3e:d0:ab:b1:29:0d:
0c:06:32:da:0b:d2:23:71:0e:22:ae:1b:4f:e2:0b:
96:bb:66:ff:cd:1e:2b:15:43:c1:21:d1:5c:e9:fe:
b3:5e:af:2b:6b:37:31:a4:41:13:f9:50:bb:18:66:
0d:1d:d7:b2:c9:55:9a:6d:67:f7:ad:99:fc:a3:0a:
e4:85:2d:ac:7f:f7:eb:5e:58:f6:10:75:ed:a9:11:
c2:a2:40:0b:b2:eb:81:c2:f0:dc:41:f0:af:b7:be:
e6:25:61:63:cd:79:cd:8b:56:52:74:0c:fc:66:24:
e0:38:03:57:61:20:96:86:92:04:33:ee:ef:90:d9:
1e:4f:3b:9c:ed:a4:53:c8:52:3a:4b:64:01:18:41:
f6:f1:0c:28:83:85:09:26:04:a7:0d:ae:4e:66:c1:
a6:73:0e:28:be:e9:44:bc:2a:03:14:de:4f:01:1e:
ff:32:b1:4d:00:b3:26:bf:04:b9:3e:7f:33:f5:3e:
db:18:78:0e:7e:4f:48:3b:ba:c4:bd:5b:e9:16:ad:
3d:25:46:ef:1a:89:00:45:7b:ae:4f:f7:f9:26:8d:
7f:54:45:10:49:95:87:f9:b7:ef:45:02:28:2f:40:
66:ad:66:84:12:cb:db:5b:78:87:5e:bc:39:1e:dc:
ff:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:92:42:0F:D8:56:78:72:0E:92:8D:E1:1B:2D:D8:29:36:59:28:81
X509v3 Authority Key Identifier:
keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:24:e2:23:2f:34:58:da:03:84:12:2a:fb:04:20:06:b0:4e:
60:5e:55:a0:48:f2:62:ea:1b:cb:44:d4:3b:c5:a8:19:46:5f:
a8:55:86:ef:30:84:2b:9a:8e:81:34:a2:7b:e4:3a:8c:ee:79:
2f:38:29:65:20:bf:49:46:8b:97:fd:e4:2e:15:94:33:43:4f:
f2:13:01:8c:55:e1:46:bc:e2:1c:a7:c0:fe:43:45:5e:a5:01:
05:83:67:d7:95:6e:0e:9f:3c:d3:ed:17:0c:c0:d3:76:d3:02:
9c:e4:3f:b7:78:2b:f9:81:a4:2a:78:41:58:1c:d9:ac:b2:c7:
08:be:23:35:6b:d7:77:c6:27:78:10:ce:4e:fa:4b:64:6b:d0:
66:34:38:8e:63:53:67:5a:8e:89:0f:22:e3:64:ca:c1:27:2a:
88:b0:07:b7:ac:7a:c7:28:f9:b8:ae:b5:f8:ed:35:3d:1f:d6:
7e:89:ba:2f:4b:8c:84:69:b7:a4:d9:b0:8d:45:32:a1:6e:05:
22:44:eb:81:d0:72:e0:6b:a0:80:0e:92:bb:73:d1:31:94:3e:
4d:02:22:e8:c3:b2:d7:fb:fd:72:0b:a0:95:18:88:ea:ad:5c:
d7:fe:b5:6c:cc:ea:f2:23:2c:4b:1b:2a:5c:c9:e0:51:e7:18:
0d:f3:9a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:58:57 2025 by rpki-client