This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
File: wLnBGxsWDzIbiuxM_N3a2JX8R94.mft (raw, json)
Hash identifier: 9F4M+2mch021So1niSeVJjppz/QBSn5OfXU0XHbzdK0=
Subject key identifier: 50:19:08:4E:68:8A:84:70:65:C3:CE:57:B0:DF:F0:13:61:58:28:F1
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial: 0EEC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
Manifest number: 0ECD
Signing time: Tue 09 Dec 2025 23:26:48 +0000
Manifest this update: Tue 09 Dec 2025 23:26:47 +0000
Manifest next update: Tue 16 Dec 2025 23:26:47 +0000
Files and hashes: 1: wLnBGxsWDzIbiuxM_N3a2JX8R94.crl (hash: biZF2xWXPqi8CH6ckHg30M1NcL2lWuVgMjHs8fBzV3Y=)
2: 247099D084C611F09EBC052BC4F9AE02.roa (hash: LjL6siy8mS8KnL6NQqX66YEFFKmRPoJ1dR18D6pEQ04=)
3: A2369FBA595F11EF8C3B3D31C4F9AE02.roa (hash: 1zS8XWzZTz7+tGBFQYN1Yj55+aHf93rbvK5YUu69PHI=)
4: DC185D0CB0A111EE8C78834EC4F9AE02.roa (hash: m0l23vJryclykCD48Z3CE8U9M7wFbCoJly5IlJCZMlg=)
5: E54A88DE595F11EFB2BAB431C4F9AE02.roa (hash: SEuSI2XPVxN+1pVxedn+P+yPZW6RvN2NRh14bu8L37Y=)
6: A2E6430C595F11EF8C3B3D31C4F9AE02.roa (hash: rsXfvz54a2T+jOGss3629AVS3vLaxkP1937oobR11UI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 23:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3820 (0xeec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Validity
Not Before: Dec 9 23:26:47 2025 GMT
Not After : Dec 16 23:26:47 2025 GMT
Subject: CN=6938b038-bd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:da:cd:c7:24:9e:10:4a:55:dc:e8:53:7a:
b3:ed:50:28:f3:05:cc:f5:ec:e6:ea:1f:95:49:1d:
43:db:c2:95:c9:87:8c:12:29:d4:4b:75:27:6d:89:
98:56:66:6c:13:6b:92:67:7a:46:8f:79:ea:dc:12:
2d:40:65:4a:c8:99:b4:0d:b2:91:c1:71:e5:28:9f:
0a:9d:d1:04:64:6b:bc:18:68:91:f6:9d:3d:d1:bb:
74:87:07:4f:51:30:80:c2:69:60:ae:5b:be:37:25:
e1:d8:9b:20:0a:81:9a:a2:71:93:ba:fa:e8:7f:69:
37:30:9e:6b:8d:03:16:9a:96:3a:7d:c3:db:80:12:
68:ac:92:f9:a8:9d:d8:9a:ca:be:89:8e:dc:fb:15:
e9:f4:f0:d3:4f:b3:54:70:59:61:f9:4c:08:e8:95:
18:4c:4b:3e:c4:32:75:8b:ed:08:ae:c3:6e:28:7b:
fc:e0:ec:00:c4:9f:81:29:64:79:08:a2:70:79:fb:
91:37:26:28:b0:84:2f:e2:30:98:86:0a:be:47:ed:
de:7d:6a:c0:79:2c:17:04:57:27:61:d9:eb:a1:c8:
db:e0:a3:29:29:c9:b2:d9:e4:df:82:ab:6a:88:e6:
7d:df:96:68:c8:bb:9a:8b:00:53:45:a7:88:d4:56:
79:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:19:08:4E:68:8A:84:70:65:C3:CE:57:B0:DF:F0:13:61:58:28:F1
X509v3 Authority Key Identifier:
keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1c:df:7a:ea:08:37:8e:45:bb:3c:06:2a:6b:ff:71:46:8f:
87:58:4c:74:5f:67:85:12:94:a2:5a:0f:6e:09:12:89:e2:ad:
b7:26:39:b4:29:3b:1f:a8:53:4e:c7:aa:18:39:9a:3e:90:71:
88:63:bd:6e:8d:ce:66:ec:bc:98:88:7a:8d:e1:ce:c1:b8:be:
7f:59:bf:1e:fa:32:e7:23:35:87:fa:68:6a:b6:10:01:82:27:
ba:21:90:e8:d3:ae:a4:b0:30:c2:8e:da:63:f6:e7:4e:a8:91:
e8:fe:3f:bb:10:9d:97:aa:74:57:85:3e:d4:73:c6:5c:db:2d:
0e:f3:e2:74:f2:d5:4b:47:47:ec:48:98:ac:80:1f:88:25:a1:
42:26:ee:75:b0:33:e4:34:aa:f1:c3:e5:6d:e1:48:a8:58:fa:
66:74:ed:4c:32:49:f8:cc:65:93:34:cb:0c:ea:ae:19:2b:95:
e5:dd:a1:93:bf:53:05:44:86:a1:a9:58:91:c0:6a:80:f3:1e:
be:97:35:b0:43:2b:2a:a1:64:be:48:ef:d8:39:29:7b:7d:89:
04:3e:25:e1:c6:90:e2:f9:f4:5f:88:1f:ce:f6:18:5d:be:d3:
88:6b:54:63:30:2f:c8:01:4a:98:33:03:0a:cc:99:5f:05:d5:
f9:90:fa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 05:30:41 2025 by rpki-client