This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
File: W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft (raw, json)
Hash identifier: C8xU2SdVuMFRcDb79FTsgEB+Eb5pq7CVR2e4WYEY+lA=
Subject key identifier: C4:02:35:F0:EB:5E:09:85:F4:13:BB:D5:1B:56:13:4C:41:74:4E:07
Authority key identifier: 5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
Certificate issuer: /CN=A911069A/serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Certificate serial: 01A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
Manifest number: 019E
Signing time: Tue 23 Dec 2025 02:22:30 +0000
Manifest this update: Tue 23 Dec 2025 02:22:29 +0000
Manifest next update: Tue 30 Dec 2025 02:22:29 +0000
Files and hashes: 1: W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl (hash: IeIXkKsxaU/QpM64/ntsYSdbPPHO+J/apHQ1asD7BkM=)
2: E286BAA24B5611F0A987864DC4F9AE02.roa (hash: +qxfuU3gIMXAGQMi2xVqEYmAlmIt7blHD4cbq1UZ4Zw=)
3: 12C3947A66F611EE82864875C4F9AE02.roa (hash: jGy1zmRFGKjgznbJPpHPfnv/NfD7nxR5cPMbL3NNWqE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl
rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911069A, serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Validity
Not Before: Dec 23 02:22:29 2025 GMT
Not After : Dec 30 02:22:29 2025 GMT
Subject: CN=6949fce6-493e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:81:6a:f5:3e:1f:3b:ae:75:90:93:a6:32:
d9:e6:8e:22:da:42:16:0c:61:e9:c4:89:23:33:de:
56:28:9e:1f:18:3e:53:23:9d:3d:a8:b4:7e:c9:8a:
23:7c:dd:d2:73:a8:90:d0:93:c6:7a:74:8f:5d:c2:
cc:c8:bf:ef:a0:77:b7:f8:2f:9d:bc:66:84:fc:e6:
ed:69:34:be:6b:fa:44:d7:a5:1a:a1:4e:31:07:78:
a1:4e:34:50:7d:51:13:ac:23:cb:80:6b:d7:3d:36:
d4:d8:53:5c:16:7e:ff:ed:5e:dd:5d:b4:84:aa:62:
87:03:c3:7e:a7:86:76:41:99:25:56:ae:0b:15:c0:
f3:6f:31:0a:d7:20:da:f3:c3:b5:28:af:f7:14:f2:
69:43:a2:97:00:c6:32:e6:d1:56:6c:10:56:7f:bc:
a9:16:2c:9f:fa:31:34:b2:d1:74:94:59:76:da:2b:
35:bc:07:53:63:1d:1c:bf:a4:7b:4f:2c:54:15:e1:
a9:0d:7b:b4:72:97:84:b1:c6:4b:9a:a2:fa:9c:2d:
09:1d:6c:27:d6:ee:0e:5a:7a:de:e3:34:3f:53:e8:
67:0b:1f:91:e3:0e:d9:a0:c9:8e:49:97:e5:db:7f:
99:3f:c0:57:7e:b0:4e:d8:d5:14:b2:03:4b:70:8b:
4f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:02:35:F0:EB:5E:09:85:F4:13:BB:D5:1B:56:13:4C:41:74:4E:07
X509v3 Authority Key Identifier:
keyid:5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:0c:26:e2:b4:f6:1c:a8:87:19:a2:95:db:82:a4:c9:5e:da:
71:db:a0:fb:91:9d:b5:dd:95:8c:16:2d:bf:2d:9c:75:04:6e:
b5:e8:cc:98:51:cc:a5:b0:6a:83:dd:38:cb:03:54:4d:b8:ac:
67:17:f4:73:3c:28:73:30:f4:6a:0c:32:ae:e2:f5:c6:e5:d3:
b6:11:b1:9e:94:eb:72:3c:de:2c:7e:67:7e:b8:3f:76:95:a4:
a1:df:44:4b:88:52:c4:a4:26:94:c6:32:1c:68:3a:a1:c2:83:
c0:27:2e:b4:db:e3:a9:8c:f5:1d:31:e2:2d:ab:d6:29:01:9a:
a4:4f:b9:56:e1:d9:62:24:46:ed:9a:13:d0:8f:58:f0:53:8f:
2d:06:17:80:b6:c7:fa:ac:8c:34:15:97:69:89:26:83:0e:49:
27:21:3e:57:e0:95:f4:97:8f:9e:cd:a9:2e:e8:7f:c8:20:b2:
f1:bc:5e:28:75:ab:34:b7:5b:88:81:bf:db:99:a1:6d:7d:ba:
c6:7d:82:b2:72:ce:6d:1c:31:1e:99:74:c8:19:f3:3b:9b:c3:
22:c5:ca:ed:4d:bf:16:12:ab:df:45:b5:d5:54:b4:67:d5:91:
bb:4a:b0:13:99:f3:a4:1b:dd:7d:8f:d8:69:7d:3f:13:e2:54:
cd:84:20:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:59:02 2025 by rpki-client