This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
File: pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft (raw, json)
Hash identifier: RvJ6Ug/HnHptdmpssKuKmiIsY1h+a/v333eZyS63QY0=
Subject key identifier: DF:69:23:C2:F3:95:B0:E6:4B:9B:6A:4F:51:B9:5D:ED:03:16:7A:A7
Authority key identifier: A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80
Certificate issuer: /CN=A912A471/serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
Manifest number: 0181
Signing time: Tue 23 Dec 2025 02:42:14 +0000
Manifest this update: Tue 23 Dec 2025 02:42:14 +0000
Manifest next update: Tue 30 Dec 2025 02:42:14 +0000
Files and hashes: 1: pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl (hash: Igvxov36EOKESPpACr+7GXEFcH737s29i/CLqBYN6e0=)
2: AC21E1E8924411EE96AA9544C4F9AE02.roa (hash: 84BaytmnsBEk+UaP5PFkzVU27GE8sU0iFIMHsasg/ys=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl
rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:42:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A471, serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780
Validity
Not Before: Dec 23 02:42:14 2025 GMT
Not After : Dec 30 02:42:14 2025 GMT
Subject: CN=694a0186-aa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f8:1e:fa:cb:21:74:61:37:6a:23:36:2a:b6:
1a:ed:f7:e5:55:07:c3:a9:d2:b7:e0:54:ea:eb:12:
8b:84:2f:92:fa:39:93:ff:19:1f:6c:69:46:eb:6f:
01:df:e0:e2:bf:82:ce:2d:a3:9a:f9:d7:9d:d6:44:
a3:23:be:d9:d7:c2:6c:03:58:a6:7b:db:59:a7:06:
10:74:5e:26:e2:c5:cb:df:e1:89:e4:be:e7:9a:59:
c3:f2:7e:5a:75:91:7c:7d:43:77:0f:5d:8a:60:0c:
30:ba:b3:9f:27:11:6b:5d:d6:bc:5c:c8:35:fe:7e:
e5:d5:40:42:f8:32:bc:80:b3:dd:3c:7e:d7:d0:4f:
92:95:d2:8a:13:51:36:69:26:12:0a:64:ad:94:7c:
2b:f4:ab:73:60:bf:06:24:88:c9:49:d4:dc:b9:57:
f3:7a:b6:70:51:24:fc:61:81:b2:fc:97:36:16:6f:
c2:71:aa:bf:65:54:f7:41:c3:2b:2a:3e:ff:d6:5a:
0d:47:e8:a3:0a:63:80:5f:a6:8e:dc:d8:81:42:2b:
3f:d2:6b:e4:d8:8b:9a:16:9f:d8:6f:f2:63:b9:43:
9d:2d:75:37:63:f4:dd:d5:ea:b4:7a:ac:f3:12:f1:
7a:4a:37:98:91:5e:43:b9:e7:4d:d1:fb:08:2d:62:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:69:23:C2:F3:95:B0:E6:4B:9B:6A:4F:51:B9:5D:ED:03:16:7A:A7
X509v3 Authority Key Identifier:
keyid:A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:52:e5:9b:f7:43:7b:48:3d:b0:9a:49:d7:1b:cc:e8:27:61:
fd:24:a6:e3:83:f0:f0:75:b7:89:da:3e:bd:2b:14:fb:9e:b4:
d4:47:33:f7:9d:99:b1:33:43:56:69:ae:0c:9f:3c:eb:9d:b8:
0e:b9:81:e0:01:52:02:b2:77:e9:ea:e8:75:fc:81:5f:52:49:
1a:2f:54:78:62:81:2e:1d:aa:82:3c:89:82:45:d5:2f:a1:21:
0d:93:3c:1f:ed:52:fc:dd:31:70:99:7d:ef:0f:f6:1f:64:5f:
78:f7:97:bf:9b:f2:2d:e3:3f:71:5e:4a:fd:ec:56:e0:68:81:
aa:29:7d:27:e8:db:9f:a6:9a:87:98:63:3c:d4:92:4d:49:6a:
8c:ac:68:eb:df:bf:01:fa:23:13:76:3b:94:62:07:cf:23:c8:
35:7f:ac:20:c1:a2:12:bd:74:53:a9:7f:13:90:cd:88:d6:ac:
89:71:ef:ff:89:51:c7:72:47:ba:b3:78:5b:c9:30:90:bf:21:
d2:3d:12:d2:8b:a7:24:a5:69:6d:b1:10:d5:68:db:e9:84:0f:
2a:c3:d0:2d:73:a3:d8:2a:1b:bf:4d:f1:25:79:00:25:b3:18:
8e:ab:30:75:fb:76:c6:34:d7:30:a7:78:9c:c4:71:dc:7c:15:
b8:b6:2e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:45:10 2025 by rpki-client