This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
File: wcRvxKcZaeWFBKc01JBKe9L_BUM.mft (raw, json)
Hash identifier: mED9FdQV+ra8taqkJ0oUnkZ2OEFQ21Cc9E4EYXSkEdo=
Subject key identifier: E1:73:67:10:23:CC:43:41:EA:1D:56:07:90:C1:AA:E4:21:53:CC:18
Authority key identifier: C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
Certificate issuer: /CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Certificate serial: 268A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
Manifest number: 2677
Signing time: Mon 26 Jan 2026 15:31:40 +0000
Manifest this update: Mon 26 Jan 2026 15:31:40 +0000
Manifest next update: Mon 02 Feb 2026 15:31:40 +0000
Files and hashes: 1: wcRvxKcZaeWFBKc01JBKe9L_BUM.crl (hash: T/sbS2IKnWb+Wj5cxVcB9WfD11j1lKdlxcUzWs1xhC8=)
2: 665C2DFC1C1511EFB1AF8F28C4F9AE02.roa (hash: lIonHfcn1CuwQW3kN+S33JwTNW1MriZKXW51TfBozU4=)
3: ACDC884E1C1511EF93C5F728C4F9AE02.roa (hash: pXwAyW9Hy/DMGmTjqX3G4l47uqWRP7c4rJmBKT94M2A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 15:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9866 (0x268a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E32A, serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Validity
Not Before: Jan 26 15:31:40 2026 GMT
Not After : Feb 2 15:31:40 2026 GMT
Subject: CN=697788dc-e9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:65:a1:6e:78:5c:eb:4b:78:ea:a3:52:5b:
a4:9e:83:e5:8e:df:2a:ea:ee:a0:56:57:af:7e:44:
a2:cc:ca:2b:88:b3:20:b1:49:df:4c:10:64:25:26:
48:88:20:c9:a5:c7:26:34:2a:2e:71:13:3f:23:de:
9b:d0:89:d7:ec:6a:c9:b6:51:8d:4c:13:c0:d3:80:
a9:16:6d:95:58:0c:27:b7:c7:77:6a:ff:b2:b1:0a:
08:2a:6a:67:5d:9f:2e:49:fe:bf:42:9c:bd:1d:b5:
dd:b4:d4:53:51:10:08:12:e0:10:f5:25:a0:66:c2:
2d:d8:90:0d:06:72:d6:a3:a3:c0:c2:49:a9:e3:b2:
f3:43:15:34:10:5b:21:37:dd:f2:be:a1:58:4f:69:
e5:a7:23:f7:88:59:d9:20:73:ff:5a:6d:ea:15:eb:
73:5c:b6:d8:af:16:e4:75:db:90:84:1a:10:40:da:
55:c6:da:87:00:31:72:84:30:46:a2:d8:74:39:20:
c2:59:3f:13:e7:f6:ef:68:e7:a5:67:f4:49:95:b5:
3a:dd:5b:c6:77:4f:15:e1:8b:96:43:7a:1d:d1:db:
60:c0:3a:d4:d7:b7:12:07:e5:f1:f7:22:63:e9:49:
8f:6d:68:66:35:77:fb:f3:6a:29:2d:c8:be:47:72:
63:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:73:67:10:23:CC:43:41:EA:1D:56:07:90:C1:AA:E4:21:53:CC:18
X509v3 Authority Key Identifier:
keyid:C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:fd:c5:14:b1:44:cd:f0:b8:81:5d:8e:5f:07:8c:f9:8d:fe:
eb:ba:f3:0f:6c:21:4f:28:70:43:f0:94:99:15:f1:64:74:05:
17:14:20:41:e9:31:ec:ea:60:57:29:45:ef:f8:ab:f6:b3:77:
7c:19:c7:17:7b:25:3a:eb:bd:11:36:87:68:46:a1:30:7b:c8:
2c:1f:78:4f:bb:40:0d:82:d9:cb:95:3d:36:98:0a:5a:19:24:
f2:a2:7b:cc:e2:0c:a5:c2:1a:df:63:e8:ce:54:01:71:9a:e5:
10:43:8d:bd:3a:6b:84:4c:57:92:fd:f4:c0:a6:08:2a:10:c5:
5e:f9:d2:fd:dc:e4:32:ba:c4:f0:3f:41:52:83:ea:46:e0:74:
42:b2:84:e2:e3:a3:40:ad:ff:b6:8a:dc:81:4d:43:95:22:91:
58:f3:ab:6c:5b:91:a5:46:0b:d6:34:3c:ef:57:83:ee:1e:a4:
3d:c5:13:67:9e:f6:11:50:ed:a0:94:ff:40:b7:6b:ab:65:8c:
58:32:98:37:7f:2c:14:38:94:d8:96:e2:13:54:24:00:00:d1:
99:64:cc:23:7e:90:48:9d:52:78:26:ac:c8:72:20:48:3c:27:
ae:da:da:87:a5:02:ca:90:63:02:0f:86:45:85:cc:4a:68:0e:
38:0b:cd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:52:23 2026 by rpki-client