This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
File: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json)
Hash identifier: 5ziD3RSY5SoEAXsHScsxyTMe5UmQC9tL2L/CF4VCnWo=
Subject key identifier: F0:05:2B:8D:0D:51:1E:82:ED:70:43:E1:55:86:CE:0E:0E:02:78:A6
Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43
Certificate issuer: /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
Certificate serial: 017F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
Manifest number: 017C
Signing time: Tue 23 Dec 2025 02:46:20 +0000
Manifest this update: Tue 23 Dec 2025 02:46:20 +0000
Manifest next update: Tue 30 Dec 2025 02:46:20 +0000
Files and hashes: 1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: H1jUQYYDxdQI/+y6kNdWN964TnuMR2LKMbaSSDXS6g8=)
2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: r7m3CbmYBiJqaD0HNr0SYvdrD2KBG4gKkuGM3wdlcLU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl
rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
Validity
Not Before: Dec 23 02:46:20 2025 GMT
Not After : Dec 30 02:46:20 2025 GMT
Subject: CN=694a027c-f8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:ae:1f:d4:91:38:01:6d:53:fc:6c:e0:6e:
75:49:7a:61:af:9d:02:2b:9c:c3:46:96:82:ff:98:
fa:2f:1d:da:d8:e1:f4:7a:01:fb:1e:13:03:6d:c9:
a8:82:bf:c5:fe:3c:ed:32:b3:62:77:b1:45:83:11:
2c:46:ef:bd:14:47:83:03:66:32:00:00:24:13:91:
de:e2:ea:f1:60:b0:fd:9c:ba:3d:37:1c:b9:1e:d5:
32:b2:4d:18:37:ae:12:c5:9b:3e:91:bc:56:6a:33:
48:60:08:4a:bb:d1:5a:20:10:15:d1:e9:80:52:f1:
c7:20:e6:c0:67:9a:76:a4:98:17:06:db:22:8a:85:
00:68:df:0c:54:2d:bb:ce:9a:26:8c:70:c0:38:5e:
38:d9:2c:7d:28:8e:29:55:e4:d1:f6:73:82:d9:56:
9d:7d:5b:6b:88:27:d7:36:4f:00:30:b5:cd:7c:3c:
d2:e8:c5:9f:ad:fe:18:cd:d4:72:24:04:e2:f1:ee:
95:b3:a0:58:cd:a5:ef:d8:a5:22:a3:e0:80:81:2c:
03:eb:32:7b:f1:22:4e:ad:57:60:9e:17:e6:cc:8b:
4e:26:59:a9:69:09:b8:2f:fb:9c:00:59:29:75:76:
9a:28:d8:c2:dd:c3:09:2f:72:ef:4b:e8:a0:32:8a:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:05:2B:8D:0D:51:1E:82:ED:70:43:E1:55:86:CE:0E:0E:02:78:A6
X509v3 Authority Key Identifier:
keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:8e:c0:1f:a0:50:f8:ec:91:8a:64:0a:f1:f8:25:97:02:59:
03:74:eb:1f:ce:8c:b6:6c:77:44:52:92:45:ba:f5:61:71:46:
ea:d8:f2:ca:29:f9:04:e2:f5:a0:52:36:29:f5:52:ca:aa:35:
af:2d:c7:2c:8f:17:29:91:b4:15:20:a2:2f:bf:36:71:41:a1:
62:2d:44:6c:0b:4d:9a:19:be:1a:49:d1:2b:ab:08:e7:5e:52:
21:af:90:35:8b:1f:d7:28:6d:80:8a:9f:6f:85:90:f9:dd:99:
9b:e4:8d:44:ba:d9:a3:7f:84:64:12:21:ff:3d:74:c4:9a:83:
a2:f1:3d:86:d7:14:78:5f:8c:ab:9f:79:d0:83:8f:f9:2e:dd:
73:e1:cb:54:06:51:4a:9d:2f:18:87:f9:54:53:3d:89:a0:f0:
ea:ea:60:fe:16:1d:fa:66:ef:b9:f9:57:59:5f:e4:e4:29:0c:
ad:08:4b:99:63:b3:41:6c:22:81:71:b0:ef:4d:ca:82:1b:a8:
96:b3:7d:47:4d:f3:89:f6:ce:6d:89:97:6e:e3:ea:83:3b:86:
05:b8:d0:0d:7c:2e:ca:6a:fb:b5:4b:27:34:91:a4:92:71:09:
04:82:7c:31:28:16:40:6e:10:7d:2b:3f:96:f3:7a:de:4a:50:
dc:9f:c9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:40:28 2025 by rpki-client