This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
File: wxT-rYcguxji2eIkk4K433VEbYs.mft (raw, json)
Hash identifier: OiSuBrHYZrEr0h9EvwqvKkS9HlsJpafEsl5r3EZEmXw=
Subject key identifier: 5D:17:6E:1A:C9:EF:CA:A7:92:9B:9A:91:06:8A:A4:DB:39:6E:EB:E7
Authority key identifier: C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B
Certificate issuer: /CN=A91CFCD3/serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B
Certificate serial: 05CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
Manifest number: 05C5
Signing time: Sat 10 Jan 2026 22:19:36 +0000
Manifest this update: Sat 10 Jan 2026 22:19:36 +0000
Manifest next update: Sat 17 Jan 2026 22:19:36 +0000
Files and hashes: 1: wxT-rYcguxji2eIkk4K433VEbYs.crl (hash: 1peYAnFhgPvvDZkTR4p7U6vI+0t59K8pSu0ifrJG1fg=)
2: 30D58974A53C11F0A057C775C4F9AE02.roa (hash: mLPy6bt3CbNAncCWplQO85aBCAGnfrSY9rHYwr8JJfA=)
3: 5058C6EEA53C11F096F1C284C4F9AE02.roa (hash: Ut3CDtCW4yFtzwlmPVnhZOKBuebePtbtjUycMS+MqHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl
rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 22:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1486 (0x5ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFCD3, serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B
Validity
Not Before: Jan 10 22:19:36 2026 GMT
Not After : Jan 17 22:19:36 2026 GMT
Subject: CN=6962d078-8605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:a8:67:ec:c1:e6:7f:29:76:cf:89:22:79:
f6:f7:3e:6f:70:eb:48:44:00:1c:65:a9:d6:a9:00:
5b:44:d3:33:2d:f8:b2:8e:6e:f9:cb:8f:8d:8a:4c:
54:f2:5f:b7:74:16:75:36:c0:57:28:3e:3b:4a:77:
1f:1f:b9:db:b1:d6:cc:27:51:dd:78:bf:f9:95:51:
40:27:69:37:1d:fa:da:b0:71:33:fc:ed:91:f5:de:
99:72:1a:1c:21:80:6e:b8:dd:02:74:9b:fb:1c:81:
53:ac:83:70:ff:bd:9c:d6:1d:ba:75:4f:f6:f2:6e:
df:ca:18:e4:a6:9c:2b:6e:82:9a:9a:f5:88:8a:73:
91:33:04:71:23:25:28:ce:a1:5b:c1:78:45:b1:d7:
f4:29:e2:30:1c:40:bb:a7:a1:27:4a:b2:ea:e4:ac:
90:84:37:6a:d2:fc:e8:62:78:9d:15:95:d7:ac:73:
88:b5:db:93:41:9d:c8:54:21:15:03:6a:48:92:f4:
eb:f6:02:d8:5b:74:2b:95:77:ff:a9:6a:5b:66:b2:
ac:ae:11:e1:6b:ac:41:7a:a0:f5:d9:92:7b:34:f4:
58:10:04:da:3b:ed:f9:85:1c:8c:85:bf:ba:23:ce:
42:3e:cb:4b:b6:55:f1:51:78:5e:6d:45:62:68:a4:
9e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:17:6E:1A:C9:EF:CA:A7:92:9B:9A:91:06:8A:A4:DB:39:6E:EB:E7
X509v3 Authority Key Identifier:
keyid:C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:53:2f:02:78:c3:4d:bd:3c:1e:70:a1:58:6e:17:2b:de:ff:
05:0c:7d:12:cd:2a:72:d2:3e:48:08:ca:a9:42:b9:d8:81:8c:
57:93:b3:c1:ae:40:33:de:f0:ef:b2:ca:3b:ea:d4:f1:01:73:
d5:e7:a5:5e:68:fa:09:ab:f0:07:17:11:02:40:96:c0:e4:3a:
1b:2c:ad:cd:ee:f6:42:da:7d:bc:1f:56:dc:da:e5:23:97:3e:
ec:f7:e8:58:8f:8c:87:9f:3a:32:5d:6b:be:73:c6:98:fe:0b:
c3:a8:1d:05:4b:05:b7:ca:e0:fd:ff:08:65:05:71:9c:cc:9a:
bf:50:ed:49:61:9e:aa:49:8d:67:43:47:4e:f1:7d:ed:c9:0f:
16:9b:f1:41:ff:43:1e:fe:cd:b8:7b:e9:90:44:ae:d9:68:17:
ed:d0:20:3b:3b:23:ce:45:ca:3d:33:7a:35:58:29:0a:12:3d:
2b:9b:82:7f:e9:b5:66:8e:c9:89:31:37:7c:d1:6e:e3:de:ae:
7a:99:9e:52:ab:ad:fc:2c:67:f9:9e:bf:49:34:b6:24:e2:d4:
25:95:7e:dc:46:b5:3c:32:e4:ba:e3:a1:0e:1d:81:ca:5b:2d:
0f:a0:d6:e1:b8:be:29:c4:d1:07:f8:8b:70:75:34:ac:80:05:
2d:cc:02:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:04:47 2026 by rpki-client