This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
File: WHRSDaeB94Db1xDULIQcE6etF1c.mft (raw, json)
Hash identifier: O31P68tcfFasRvEp6+srvY6KPXS2s0EY/20nZXok2bc=
Subject key identifier: DD:87:0A:CB:FE:B0:2D:76:35:80:C2:F8:8B:10:34:C7:B4:12:28:6A
Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57
Certificate issuer: /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
Certificate serial: 0226
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
Manifest number: 0211
Signing time: Fri 19 Dec 2025 01:42:08 +0000
Manifest this update: Fri 19 Dec 2025 01:42:08 +0000
Manifest next update: Fri 26 Dec 2025 01:42:08 +0000
Files and hashes: 1: WHRSDaeB94Db1xDULIQcE6etF1c.crl (hash: 5c2MqNbuzmaF61Q9F9bK+8xFvvL1R8eBSUg2T+1lk8o=)
2: CF85B73C74F011F0847A5D0DC4F9AE02.roa (hash: ROJkHjEex+krTnEbfnPSXsQUMEVZuDVq8C6r5b58NiQ=)
3: 06CD7DF074F211F09D01EA15C4F9AE02.roa (hash: wlIu/nl9TYANb0F4m3+htDbTyhazmTRCofxCf5SqanI=)
4: B412DC700EC011EE8C18290AC4F9AE02.roa (hash: QaySh+U2ImR7fI4OfAXAG1QKvLn5LnVgI5Wmw5xhFUc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl
rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:42:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
Validity
Not Before: Dec 19 01:42:08 2025 GMT
Not After : Dec 26 01:42:08 2025 GMT
Subject: CN=6944ad70-efd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:da:49:87:14:43:e3:4d:74:8a:dc:d9:73:
ed:c7:0d:ba:53:ab:f5:59:4f:48:50:53:18:6a:c3:
15:02:b1:64:de:64:df:2d:e2:a0:75:e2:0e:81:18:
8d:c0:6b:2a:a9:be:e7:5a:5d:1e:2a:90:2d:92:31:
47:82:6d:fc:fa:12:40:04:9f:37:d8:33:17:51:d2:
4d:47:66:27:5e:7a:aa:94:95:bd:57:0d:5d:b1:5f:
4c:f3:ee:c5:eb:18:71:11:b5:1c:1e:89:af:e0:30:
51:9f:77:fc:2a:61:12:da:5b:f7:71:9e:e1:26:2a:
02:a0:3f:77:e5:7c:64:c6:f7:fc:a0:14:60:a6:8e:
75:71:98:d1:7c:75:83:62:86:fc:33:dd:2c:76:ab:
9c:2a:6e:8f:7a:08:7d:d9:59:62:1b:72:35:cf:d7:
09:d7:e3:55:7c:72:04:41:00:36:8a:d2:23:0e:0b:
1f:db:b7:6d:68:76:32:36:67:ce:ce:02:a1:ab:39:
60:43:4f:8f:f5:a2:cc:a4:b0:5c:df:3b:2a:40:25:
a5:de:8e:b4:ad:aa:7c:70:7b:28:0d:83:1c:04:f0:
41:a0:cd:9f:50:3f:e3:7b:a1:2a:a7:ec:54:cc:87:
69:82:f0:39:9b:bd:ab:b5:e0:08:57:af:78:56:34:
67:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:87:0A:CB:FE:B0:2D:76:35:80:C2:F8:8B:10:34:C7:B4:12:28:6A
X509v3 Authority Key Identifier:
keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:c2:b4:91:ec:8b:ea:e6:3a:88:e6:85:08:ee:9f:49:b9:d8:
b6:c8:5a:2e:13:d3:00:3d:b7:08:79:2a:38:a0:96:9b:a2:00:
fc:f9:72:c8:ef:75:a9:a4:1f:1b:ac:0f:02:de:cf:6b:aa:b9:
03:91:bf:f7:62:ef:43:de:30:8d:a4:eb:c3:40:b1:05:5e:79:
d0:71:ce:5f:56:95:fc:2a:35:9a:ab:bc:92:de:6b:23:eb:c2:
82:4c:c0:2c:10:ee:6a:4b:46:f4:09:de:6d:9d:dd:11:95:37:
8d:45:70:13:3c:5f:ad:66:ce:57:a3:a0:df:27:1d:f6:8d:57:
2f:ac:a5:d9:75:de:62:7a:e7:29:18:ce:c9:3c:25:f7:66:84:
35:11:5b:8e:75:d3:13:e5:32:13:8a:a5:57:16:05:89:0b:3c:
08:20:46:97:34:4c:f8:5e:f8:ad:f0:7f:93:ff:72:6b:11:0b:
30:d2:71:c8:c5:80:20:6b:93:7c:e2:93:e9:95:e2:cc:3e:58:
96:5e:cc:10:29:f9:fd:08:51:20:8b:8f:14:e2:68:1d:38:1a:
38:3f:e0:35:13:ca:58:1b:51:6b:a8:62:22:3a:46:a1:c0:4a:
6b:66:41:dd:d6:65:ab:17:ee:af:73:48:e4:c8:b5:f7:f7:00:
ea:9b:cd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:14:42 2025 by rpki-client