This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
File: CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft (raw, json)
Hash identifier: +F2x7TaP4X3ydXLdXi8rDahbib7m7+ruXL7szTnt2hY=
Subject key identifier: C4:01:92:A4:89:33:A5:6E:0A:6F:C0:29:C8:CA:EF:6D:6B:D2:6F:15
Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F
Certificate issuer: /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F
Certificate serial: 0F9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
Manifest number: 0F7F
Signing time: Thu 18 Dec 2025 17:23:06 +0000
Manifest this update: Thu 18 Dec 2025 17:23:06 +0000
Manifest next update: Thu 25 Dec 2025 17:23:06 +0000
Files and hashes: 1: CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl (hash: mkMl7qz8wT+BhpV1LOF8qUi88QpXgMsB0yLKsAIpwkA=)
2: 6153EE40A64911EEA2F9C24AC4F9AE02.roa (hash: 2FUCg0y6j+fzZjDHWeWQ+0mvZPhX1zx72r0IB9sChxs=)
3: D927A2DAA64A11EE8316D651C4F9AE02.roa (hash: xbh5NpVKALglVtZNCUBnPO9evcznNHzqKAZUvaztOkY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl
rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:23:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3995 (0xf9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFE9F, serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F
Validity
Not Before: Dec 18 17:23:06 2025 GMT
Not After : Dec 25 17:23:06 2025 GMT
Subject: CN=6944387a-ff50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:7f:3e:f5:f0:50:5e:fe:e9:c5:16:aa:74:
6a:26:c7:b3:87:27:85:2c:2f:e9:38:34:ac:a6:02:
b8:b0:b3:06:ac:bb:68:45:05:3b:94:9f:42:07:65:
a1:07:a0:f4:74:67:57:0f:42:3b:0d:9c:b1:81:84:
69:db:bd:31:7f:2c:10:b1:a4:32:60:fc:d6:dd:b2:
eb:f9:10:3c:e9:21:04:b3:cb:d0:30:70:7a:d0:fe:
7d:69:d3:d3:b1:2d:c3:9a:7b:6f:07:b3:ab:69:c5:
3d:88:67:35:94:69:f2:bb:9c:9b:67:7c:ac:01:28:
88:97:df:84:1c:3a:37:b9:0c:18:ad:a4:c7:a7:42:
bb:6e:bf:02:21:ee:44:60:51:77:f0:be:e4:fc:5d:
0b:03:98:c2:01:e2:c9:3f:ee:cd:65:b0:64:60:9c:
c8:df:16:6d:e9:81:0a:9b:f9:38:e6:61:52:e3:e6:
ad:6c:39:4c:96:c1:ed:84:12:35:a0:0e:76:ea:89:
bc:9b:80:fe:10:3e:bd:bc:7d:8c:b8:10:40:41:60:
23:70:b4:95:a7:84:e9:9c:e1:c8:c5:68:de:8d:a0:
89:97:bd:ed:6d:82:60:af:94:16:e2:3b:07:da:70:
a5:1f:c3:92:0c:95:79:ee:fd:6c:73:f0:57:ee:81:
5c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:01:92:A4:89:33:A5:6E:0A:6F:C0:29:C8:CA:EF:6D:6B:D2:6F:15
X509v3 Authority Key Identifier:
keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3b:39:c4:c8:22:c0:0f:01:d7:0f:08:b1:df:ce:88:90:7f:
f0:b5:77:4e:37:b4:10:25:58:7b:37:f0:be:98:11:d8:35:eb:
78:46:9a:b6:7d:c8:c7:70:1c:36:5a:26:6c:5c:88:64:3a:02:
67:1f:ae:e6:3d:f6:8c:23:6f:10:21:1c:18:c5:99:cc:01:69:
be:55:c8:37:05:93:ac:05:a3:df:67:aa:18:d5:db:45:d3:10:
1e:08:8b:1f:8d:c5:71:d0:9a:f4:1f:f4:34:63:41:02:53:3c:
34:af:ae:98:44:4b:4e:98:84:45:23:8a:a9:50:f4:31:a8:b9:
07:93:3a:90:70:60:23:0d:37:69:72:04:9a:44:fd:9b:62:5f:
61:2b:cc:be:c6:64:b8:0c:f9:bc:79:20:0c:65:3b:31:a4:92:
33:26:f4:1e:7c:2d:87:80:90:b5:ae:be:20:4f:ea:c8:90:e4:
b6:25:9e:a8:73:e7:ef:d6:8e:d6:a2:59:ab:17:e5:b5:60:87:
cd:d6:7b:a3:3a:a0:14:83:21:b0:ec:e9:33:dc:f4:81:41:ec:
c0:cb:36:02:8b:7a:07:55:73:70:14:2c:13:ce:78:12:b0:1e:
84:72:0f:48:4f:67:83:20:39:42:2e:be:08:34:0c:6d:5e:0f:
0e:66:22:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:42 2025 by rpki-client