This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft
File: WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft (raw, json)
Hash identifier: alN401ZXBG+UpAjdoPGhusuOycwbVmQAS42XK5XMF2Y=
Subject key identifier: E8:4A:92:59:76:67:78:F5:33:6E:21:72:BD:4C:E9:EA:50:27:20:45
Authority key identifier: 5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D
Certificate issuer: /CN=A91E3B1D/serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D
Certificate serial: 0366
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft
Manifest number: 035B
Signing time: Thu 01 Jan 2026 00:25:32 +0000
Manifest this update: Thu 01 Jan 2026 00:25:31 +0000
Manifest next update: Thu 08 Jan 2026 00:25:31 +0000
Files and hashes: 1: WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl (hash: X9ng5n8fSUwUx9shY4t8J87eI4N9A1JgDwfTxjQ6vTo=)
2: A1C11FC2D18411EFBBD4971AC4F9AE02.roa (hash: qWTJIAG3h3YNb68+lXJuiAothAh37XoAXq3h1gsegjM=)
3: B370AF6CD18411EF960DE726C4F9AE02.roa (hash: PvYvKo7fKaUqaAiw6Bj232F7oy3FbMJoIWX4/DADB8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl
rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Jan 2026 00:25:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870 (0x366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3B1D, serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D
Validity
Not Before: Jan 1 00:25:31 2026 GMT
Not After : Jan 8 00:25:31 2026 GMT
Subject: CN=6955befc-3f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:ea:62:e0:3c:54:86:ac:cd:24:16:0b:bc:
d5:56:c9:05:38:23:62:15:7e:ef:5a:63:ac:8b:58:
b9:79:a7:a8:f0:04:8f:d7:ef:55:29:f5:b8:38:78:
3b:89:cc:39:64:02:62:f3:28:c9:87:04:34:9c:b0:
6a:7f:f3:18:1e:9b:9b:da:9c:b0:cc:87:63:e5:a0:
1f:a4:3c:2d:ee:1f:08:1f:d3:ba:c3:53:4f:ec:1c:
ff:8b:af:b6:d3:8d:ff:b1:b5:db:27:0e:b0:c8:16:
4a:56:f6:d0:ce:40:82:fb:31:8e:84:a6:20:ed:eb:
6a:80:0e:d2:86:a0:b7:7f:a6:0b:6e:2e:15:62:e0:
b4:f2:c9:f6:a8:00:80:5b:0f:c6:3f:de:3e:e0:eb:
c6:51:7a:83:3c:28:28:de:18:6c:fc:5a:a0:88:d7:
9b:db:a4:80:21:52:a5:59:22:ed:3f:cd:23:e2:f7:
75:48:fb:25:54:5a:a5:91:4a:bf:b1:94:e4:e9:a4:
26:0e:ef:1f:8a:e1:cf:03:8e:8c:71:88:69:c2:db:
31:33:61:23:da:ff:a2:05:4c:be:42:0d:b9:1c:f1:
85:2e:06:04:5f:63:14:64:1c:5d:20:f3:c1:c7:e6:
c3:31:b2:04:19:b7:fe:b1:13:50:21:1b:19:f3:31:
a3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4A:92:59:76:67:78:F5:33:6E:21:72:BD:4C:E9:EA:50:27:20:45
X509v3 Authority Key Identifier:
keyid:5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8a:3f:32:3b:b1:23:c5:54:1b:7a:da:b8:5a:d9:f5:3d:dd:
16:03:fe:ad:9f:75:8a:d7:dd:46:ad:86:fc:71:7e:76:53:1d:
5f:ed:35:0f:98:3e:c3:2d:de:d8:50:cf:b6:3f:2e:f0:2e:6c:
93:cb:17:16:0d:2e:5d:68:46:ea:74:31:63:11:a9:6d:75:88:
b5:d0:50:c1:68:8f:4e:39:a1:35:2c:6a:12:c5:3d:08:e0:8c:
8f:ef:44:70:eb:cd:71:c7:a2:40:31:4f:03:b6:33:15:72:e3:
bd:36:ee:e4:d4:43:97:14:11:0f:27:a3:85:28:48:c2:70:60:
d1:1e:5d:9f:f8:44:45:8e:12:21:df:bc:7f:9d:63:be:37:3f:
75:02:47:35:bd:a4:e8:7f:1c:db:0c:78:6c:ef:06:28:85:33:
02:b5:47:05:a5:0e:fb:c8:b4:d4:8e:e8:35:79:2f:60:71:3c:
1e:1b:6b:9a:be:67:69:b9:8e:3a:91:dd:8c:ef:73:e0:94:e8:
3a:a1:f0:cd:12:b6:18:11:c4:96:37:1e:3d:38:ce:bf:ac:bc:
9a:63:f8:d5:ae:16:5b:ba:3e:77:e7:6b:aa:49:07:53:84:f0:
12:63:b6:63:5c:03:6b:c6:49:bc:58:7e:12:e8:ec:20:1a:e4:
4d:e8:01:f1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTNCMUQxMTAvBgNVBAUTKDVBOTlCMDI3NjcxOUQzQTgzNzcwRkFBRTE0RDc1NzVD
QzY2NjQ4OEQwHhcNMjYwMTAxMDAyNTMxWhcNMjYwMTA4MDAyNTMxWjAYMRYwFAYD
VQQDDA02OTU1YmVmYy0zZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnsjqYuA8VIaszSQWC7zVVskFOCNiFX7vWmOsi1i5eaeo8ASP1+9VKfW4OHg7
icw5ZAJi8yjJhwQ0nLBqf/MYHpub2pywzIdj5aAfpDwt7h8IH9O6w1NP7Bz/i6+2
043/sbXbJw6wyBZKVvbQzkCC+zGOhKYg7etqgA7ShqC3f6YLbi4VYuC08sn2qACA
Ww/GP94+4OvGUXqDPCgo3hhs/FqgiNeb26SAIVKlWSLtP80j4vd1SPslVFqlkUq/
sZTk6aQmDu8fiuHPA46McYhpwtsxM2Ej2v+iBUy+Qg25HPGFLgYEX2MUZBxdIPPB
x+bDMbIEGbf+sRNQIRsZ8zGjAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhKkll2
Z3j1M24hcr1M6epQJyBFMB8GA1UdIwQYMBaAFFqZsCdnGdOoN3D6rhTXV1zGZkiN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IxRC9CQTY0RDA2NkUz
MzcxMUVDOTczMEVCM0RDNEY5QUUwMi9XcG13SjJjWjA2ZzNjUHF1Rk5kWFhNWm1T
STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dwbXdKMmNaMDZnM2NQcXVGTmRYWE1abVNJMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
M0IxRC9CQTY0RDA2NkUzMzcxMUVDOTczMEVCM0RDNEY5QUUwMi9XcG13SjJjWjA2
ZzNjUHF1Rk5kWFhNWm1TSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC7ij8yO7EjxVQbetq4Wtn1Pd0WA/6tn3WK191GrYb8cX52Ux1f7TUP
mD7DLd7YUM+2Py7wLmyTyxcWDS5daEbqdDFjEaltdYi10FDBaI9OOaE1LGoSxT0I
4IyP70Rw681xx6JAMU8DtjMVcuO9Nu7k1EOXFBEPJ6OFKEjCcGDRHl2f+ERFjhIh
37x/nWO+Nz91Akc1vaTofxzbDHhs7wYohTMCtUcFpQ77yLTUjug1eS9gcTweG2ua
vmdpuY46kd2M73PglOg6ofDNErYYEcSWNx49OM6/rLyaY/jVrhZbuj5352uqSQdT
hPASY7ZjXANrxkm8WH4S6OwgGuRN6AHx
-----END CERTIFICATE-----
Generated at Thu Jan 1 21:58:29 2026 by rpki-client