This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
File: wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft (raw, json)
Hash identifier: jyIEiURuLELZZvvUparJg4zX27hixgDbhzFwwTEGlQM=
Subject key identifier: 9A:D2:F7:E7:F7:1E:99:B1:92:72:A7:33:AC:CB:25:61:54:6C:38:2F
Authority key identifier: C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED
Certificate issuer: /CN=A91AA618/serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
Manifest number: C2
Signing time: Fri 19 Dec 2025 04:02:34 +0000
Manifest this update: Fri 19 Dec 2025 04:02:34 +0000
Manifest next update: Fri 26 Dec 2025 04:02:34 +0000
Files and hashes: 1: wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl (hash: UBiCs6R+GU93RVyL5Ahd/e340mYxg1WWE4CIhXJZX3s=)
2: 1C236FDEE51411EFA6CE3C1EC4F9AE02.roa (hash: aY02E3irzGto2CDBM82Hws7+3Xp8gIBSyGbYsCwSjsk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl
rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA618, serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED
Validity
Not Before: Dec 19 04:02:34 2025 GMT
Not After : Dec 26 04:02:34 2025 GMT
Subject: CN=6944ce5a-7fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2a:f2:ce:c8:46:6e:5b:8b:41:e6:24:58:86:
72:e7:69:f6:b2:17:4f:80:76:96:61:83:2c:85:e1:
9c:f3:b3:bc:33:b4:2d:e7:e5:14:e5:18:7e:b8:4b:
68:de:bd:e8:a4:c0:bc:dd:f9:45:a3:ff:96:1c:8f:
f0:e2:57:f2:04:1c:e2:9c:c6:42:47:c3:a9:ed:ad:
0f:33:9f:d4:35:1b:df:17:87:d4:30:70:6c:a3:2d:
33:f1:cc:30:3c:d3:3f:ba:c3:e5:46:f8:4c:8f:96:
05:c4:2d:f0:82:d5:48:4b:b3:8c:a0:46:59:da:9e:
fd:54:2e:7d:cb:bd:37:be:46:75:b9:82:e6:06:f4:
51:14:ba:01:65:08:0d:99:30:20:f8:4e:d3:ab:54:
e3:7f:d1:fc:8a:34:40:e7:c9:54:25:cd:ef:36:e5:
26:84:bf:1d:b0:68:ef:09:7b:72:18:a5:54:0a:d7:
ce:11:81:90:b6:07:77:5f:42:19:ec:13:81:8e:18:
66:1e:6e:9f:07:31:6a:8a:bd:9c:bf:3b:d6:85:0c:
42:57:c2:2e:9c:55:82:20:bc:02:2e:13:75:e1:81:
0f:11:92:4c:be:e6:3d:83:c8:f6:cf:84:07:50:4e:
3a:8c:55:f8:3b:87:68:14:75:9a:c8:3d:c7:c4:f4:
e7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D2:F7:E7:F7:1E:99:B1:92:72:A7:33:AC:CB:25:61:54:6C:38:2F
X509v3 Authority Key Identifier:
keyid:C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c8:e9:3a:bf:25:90:2d:be:70:fc:1b:b8:78:f5:73:70:2c:
9c:7c:f0:f1:c5:8e:dc:51:8d:59:cf:5f:15:90:bb:66:38:a0:
82:2d:2f:04:dd:a2:4d:6a:41:74:bb:f7:27:59:70:7c:21:4b:
23:23:16:a1:2b:28:d5:a0:bc:fe:27:98:9f:f8:85:fd:24:58:
32:0d:36:de:e5:60:df:96:3a:c9:df:35:79:b7:64:3e:90:57:
6d:24:4e:32:e7:72:03:9c:a2:56:81:73:df:cb:b0:53:52:1f:
ed:19:6b:a0:85:d3:51:b4:a3:7c:28:6d:d4:00:be:53:2b:af:
ca:af:7e:2b:1f:c3:a9:62:f9:4a:57:10:ce:81:e7:f0:29:fe:
57:b6:69:af:17:b8:25:0a:c9:c9:8b:d9:99:82:4e:d5:d7:5c:
85:66:27:f1:27:ee:29:75:bb:b0:8e:9d:71:f7:c0:ba:b3:96:
43:59:8e:05:bf:b0:39:3f:22:7a:d2:35:44:1e:b9:02:d8:63:
12:d7:f3:4e:0c:4d:ed:dd:7b:21:f5:95:b6:cd:a8:3c:3b:aa:
b0:db:94:82:1a:5f:ed:5e:68:29:e7:cf:de:57:7f:32:1c:d4:
27:c0:d9:9d:20:88:8a:bf:ca:48:9a:93:f6:62:3b:8f:c3:f1:
c0:0d:75:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:55:06 2025 by rpki-client