This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft
File: We3oFpsKLDIUaf8RsWKL3gwfLEE.mft (raw, json)
Hash identifier: 8akeGmFU37w1dwuFMH8J+uh9Qc8WK3dUP/5OSmBQgzg=
Subject key identifier: 86:B3:F0:7C:45:B0:AC:02:6A:97:33:12:5B:99:25:73:32:95:53:6D
Authority key identifier: 59:ED:E8:16:9B:0A:2C:32:14:69:FF:11:B1:62:8B:DE:0C:1F:2C:41
Certificate issuer: /CN=A91DEFAF/serialNumber=59EDE8169B0A2C321469FF11B1628BDE0C1F2C41
Certificate serial: 0778
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft
Manifest number: 076C
Signing time: Sun 28 Dec 2025 20:57:49 +0000
Manifest this update: Sun 28 Dec 2025 20:57:48 +0000
Manifest next update: Sun 04 Jan 2026 20:57:48 +0000
Files and hashes: 1: We3oFpsKLDIUaf8RsWKL3gwfLEE.crl (hash: t8Shpd2TenPHmXe2s0qNzbFpX7Aa5JMaD/vR3kZN13w=)
2: FD9457225B1011F0A31EF763C4F9AE02.roa (hash: Ve9Qh4M1YqONq/JG/DFrsaMyJzHBLRsnzhhtznWeJio=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.crl
rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 20:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1912 (0x778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEFAF, serialNumber=59EDE8169B0A2C321469FF11B1628BDE0C1F2C41
Validity
Not Before: Dec 28 20:57:48 2025 GMT
Not After : Jan 4 20:57:48 2026 GMT
Subject: CN=695199cd-15df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dc:6e:cf:bc:cb:c6:96:f8:87:e0:59:2d:9d:
9a:1d:ac:9f:59:19:9a:20:5b:99:94:51:00:a9:42:
3e:ba:27:48:59:ce:f4:cc:7f:cd:92:d9:f1:ac:c4:
71:71:51:94:93:95:c9:e1:90:8c:48:5b:a2:9c:b8:
23:d3:2c:ba:5b:c0:9c:1b:02:84:b9:07:23:23:82:
bf:b8:6e:a1:99:c3:35:f7:f2:76:ef:d3:8b:44:0e:
bb:f7:e4:ba:b2:c4:e0:e6:b1:5a:cf:7b:6d:6f:a2:
21:95:f2:d0:7a:a5:f4:8b:0b:03:d4:2e:fe:4b:a5:
ac:df:67:74:a5:b5:42:4a:b4:b2:c7:44:7b:cf:44:
5d:01:2d:85:89:02:ea:cd:b4:de:5b:72:7d:96:eb:
71:99:62:8d:a4:c9:46:c2:b5:8c:93:36:63:14:f3:
1e:66:82:e0:b3:36:94:7b:ef:ee:ac:f6:20:03:ea:
ea:ee:1c:d9:39:ea:c8:ce:f0:32:c7:65:5b:b2:63:
25:65:e4:08:3a:36:90:f9:38:2b:58:ce:d7:65:7f:
27:44:d9:46:ba:50:bc:3e:57:b6:10:9b:9e:0d:f0:
19:50:27:b2:7d:37:e6:ed:e7:17:e6:1c:79:7b:0d:
3b:0f:f7:41:ce:b9:c3:7f:bb:f9:9f:0c:1f:91:55:
c4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B3:F0:7C:45:B0:AC:02:6A:97:33:12:5B:99:25:73:32:95:53:6D
X509v3 Authority Key Identifier:
keyid:59:ED:E8:16:9B:0A:2C:32:14:69:FF:11:B1:62:8B:DE:0C:1F:2C:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:49:b9:ed:5d:99:b7:7c:20:26:08:14:88:93:c4:42:17:06:
34:01:a5:0d:79:9b:d8:7e:9b:9c:a4:e2:6c:c0:cf:8f:38:ea:
fe:5f:09:93:d6:31:07:01:2f:fb:bf:11:f2:1b:77:7c:98:38:
a8:d1:da:83:07:57:42:eb:7c:1f:c8:1a:12:25:57:ec:af:79:
ec:7a:f8:45:63:77:43:d7:49:7e:7b:ef:ab:7d:7b:3e:80:a6:
a5:58:1c:6c:22:dc:de:3b:6c:af:25:75:ec:1d:69:64:01:3a:
64:aa:d2:37:2b:3f:74:b7:d6:d4:af:08:4e:03:d5:d7:18:49:
45:64:82:dd:ea:47:36:23:47:24:d9:db:9e:98:c6:81:07:9d:
ae:10:09:2a:f7:a9:68:58:a1:52:f9:84:0a:1d:b5:aa:51:8c:
c0:d1:de:8c:9d:98:c6:90:ac:64:7a:53:bc:97:64:bf:5d:b7:
01:15:6b:ae:83:8b:ea:d6:6e:97:db:f7:50:31:a8:8c:99:68:
4f:88:d4:80:19:0a:b1:03:09:35:c8:ad:64:0e:11:c7:85:1e:
fe:f7:bb:b8:78:25:08:ea:36:f7:84:8f:70:06:16:3c:61:7a:
b5:ef:00:1a:87:8a:8b:0b:63:f6:b0:f9:52:37:c3:de:af:01:
cf:f8:ab:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 06:13:37 2025 by rpki-client