This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
File: wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft (raw, json)
Hash identifier: G33DjD2zonXuLwM1EwbzVeyZC4kDvpvtpYm80pUugVE=
Subject key identifier: 0D:61:79:10:68:C5:02:46:49:0C:6F:0B:DB:4D:27:D1:6C:DD:73:C3
Authority key identifier: C2:AC:94:54:15:8A:37:C1:A1:18:9D:46:A2:EE:14:53:75:0D:A9:AF
Certificate issuer: /CN=A912FF31/serialNumber=C2AC9454158A37C1A1189D46A2EE1453750DA9AF
Certificate serial: 07EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
Manifest number: 07E5
Signing time: Mon 22 Dec 2025 20:29:34 +0000
Manifest this update: Mon 22 Dec 2025 20:29:33 +0000
Manifest next update: Mon 29 Dec 2025 20:29:33 +0000
Files and hashes: 1: wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl (hash: F17tM9cRX6h/c7gSUve2rIl72Kgwn0IujGXFyZeGPVc=)
2: 575CFFB013BE11EB943B905BC4F9AE02.roa (hash: paGBc2b6LPLnqdowl7MZLqnVoY/NNt1WUomSYnNyDjs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl
rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 20:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2028 (0x7ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FF31, serialNumber=C2AC9454158A37C1A1189D46A2EE1453750DA9AF
Validity
Not Before: Dec 22 20:29:33 2025 GMT
Not After : Dec 29 20:29:33 2025 GMT
Subject: CN=6949aa2e-91c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:b9:46:1b:31:92:52:ed:79:c5:14:e2:14:
70:12:18:e5:dd:d3:f7:99:04:a7:d5:26:52:e6:07:
b3:ff:b7:41:c1:9b:0b:2f:35:d6:34:0c:05:0e:3b:
a7:f3:61:14:17:5b:31:57:12:db:f9:68:07:8a:9d:
1e:bf:52:c4:eb:8c:f0:7a:31:af:76:b5:c5:da:10:
84:ed:96:49:83:41:6d:62:31:d2:fd:7a:e0:93:b8:
cb:ed:dd:14:9f:2c:75:84:9d:fd:17:7b:a5:5f:84:
83:67:5e:50:24:52:a2:b5:d2:f7:61:85:25:c8:75:
51:ce:ac:f5:da:6c:c9:a6:be:e2:0d:c2:29:d6:ed:
2a:f6:2b:05:35:7b:20:be:e4:7e:74:65:af:aa:1e:
54:30:a6:9e:67:ae:31:3c:c5:a5:98:b0:84:74:1c:
1e:01:57:2a:f5:ec:c4:08:21:0b:ce:f0:86:50:77:
40:12:b1:5a:13:8d:cc:2e:51:d8:78:f5:86:c3:0c:
f8:f8:20:80:dd:3f:50:5a:fb:58:eb:5e:c8:50:92:
0b:53:f5:fa:06:4a:19:ed:6b:b8:6f:fc:c5:f0:3d:
6e:e7:45:31:a2:6d:50:4d:4a:59:a5:af:df:8b:ca:
f6:d4:a0:74:a5:58:23:ce:48:22:94:06:00:54:d2:
20:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:61:79:10:68:C5:02:46:49:0C:6F:0B:DB:4D:27:D1:6C:DD:73:C3
X509v3 Authority Key Identifier:
keyid:C2:AC:94:54:15:8A:37:C1:A1:18:9D:46:A2:EE:14:53:75:0D:A9:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:fc:f2:cc:ae:31:8c:e4:65:13:86:82:be:5f:38:d4:e0:71:
05:53:5b:f6:93:de:64:57:28:3c:43:d4:92:b3:39:7b:b8:1b:
4c:7a:c6:58:07:94:f7:35:73:85:cd:2c:3f:7d:a4:76:4e:c7:
a1:66:a1:dd:2b:fd:90:ad:1d:b4:2d:98:4e:74:a3:33:1a:31:
fe:90:40:34:3b:0f:ff:09:3f:d4:6a:e1:28:07:92:57:3f:fe:
5c:84:e1:0d:b6:3b:9a:58:31:16:9a:5b:3b:b2:20:78:be:94:
ef:eb:f2:c4:fe:f2:07:17:c5:ac:2e:f5:dc:d8:a7:52:c4:e6:
79:ea:9f:bf:e1:b4:38:33:19:36:68:9d:ca:c2:bf:5f:5f:38:
fa:74:20:6e:3b:85:bb:8b:81:ec:89:cf:5b:0c:a4:a2:be:d1:
3a:7c:ce:ca:60:60:d4:16:24:23:e7:9e:59:6f:a9:9d:8d:39:
a2:63:34:a5:a9:54:0c:17:06:35:f1:58:a4:08:9d:82:de:5c:
a2:42:22:00:6f:6d:e2:db:cf:ae:f6:bd:9e:0e:c0:78:b0:fd:
29:4b:c4:90:8b:c0:e5:ad:0d:00:97:c2:a4:63:07:8b:14:e5:
ce:ea:50:3d:cc:7d:99:7a:e2:24:b5:fa:90:b4:1a:5d:24:b4:
c2:36:00:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 07:56:14 2025 by rpki-client