This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft
File: wTya41wnwxAw4CQoc7otWnNdeBE.mft (raw, json)
Hash identifier: x1tjIntDFdLta83E1Ick6yYjWfi2pk4n+gcYBJ3Melw=
Subject key identifier: 51:6F:41:72:6B:DA:02:8D:B7:3B:8C:7D:88:A8:F8:B3:0E:33:A0:32
Authority key identifier: C1:3C:9A:E3:5C:27:C3:10:30:E0:24:28:73:BA:2D:5A:73:5D:78:11
Certificate issuer: /CN=A9161F73/serialNumber=C13C9AE35C27C31030E0242873BA2D5A735D7811
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft
Manifest number: 0111
Signing time: Tue 23 Dec 2025 03:53:46 +0000
Manifest this update: Tue 23 Dec 2025 03:53:46 +0000
Manifest next update: Tue 30 Dec 2025 03:53:46 +0000
Files and hashes: 1: wTya41wnwxAw4CQoc7otWnNdeBE.crl (hash: M7LU0leoE2Xcx0geF62ErGS5bl4A7Rk1pmfB7gpuw5Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.crl
rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161F73, serialNumber=C13C9AE35C27C31030E0242873BA2D5A735D7811
Validity
Not Before: Dec 23 03:53:46 2025 GMT
Not After : Dec 30 03:53:46 2025 GMT
Subject: CN=694a124a-ae17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:b6:a5:68:fe:79:45:e3:b6:00:51:2a:41:
04:3a:a6:ae:f2:3a:49:b4:9b:7c:bf:7d:34:15:f0:
ed:18:d0:62:6d:33:e9:6e:a4:15:46:c3:75:79:2f:
d1:54:18:82:b5:99:33:99:b9:86:59:f4:7d:b6:cc:
be:64:80:04:8b:bc:3b:6c:be:1e:d4:00:28:8d:b8:
3d:db:87:37:7a:ae:36:d0:1e:c0:1c:cf:db:91:71:
ea:9d:fc:be:bd:10:13:19:4a:2f:cb:a7:c4:ef:2d:
1f:b4:fb:1c:8c:bb:40:5b:e9:ee:e5:8b:b2:ee:a2:
68:b3:72:17:87:b8:37:2c:4e:9e:bc:4a:68:da:07:
02:d7:5c:33:6b:01:58:81:ba:60:b6:74:32:47:2a:
bc:5b:47:af:72:b4:6a:fc:5a:e2:a1:1b:ba:3e:2e:
85:e3:47:d5:66:dc:c9:e9:95:f0:e3:4f:6d:44:d6:
50:eb:f6:c6:38:19:6f:8c:78:a6:23:b9:d8:e3:fe:
b0:d2:9e:11:4f:4e:2a:de:87:4f:80:e5:2e:d2:c8:
e6:90:26:2a:f2:17:f3:ba:30:ec:45:8b:eb:32:f2:
73:a2:9a:27:ca:c2:f6:70:b1:f7:58:21:3e:7f:34:
e0:dc:c8:47:58:ae:79:8d:2c:de:27:2c:dd:9c:c1:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6F:41:72:6B:DA:02:8D:B7:3B:8C:7D:88:A8:F8:B3:0E:33:A0:32
X509v3 Authority Key Identifier:
keyid:C1:3C:9A:E3:5C:27:C3:10:30:E0:24:28:73:BA:2D:5A:73:5D:78:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:b6:19:47:67:fe:45:50:d9:87:97:56:d8:2c:c8:c4:b9:b2:
94:59:fa:56:1b:41:81:64:dd:66:5f:ac:6f:ec:13:6d:c4:13:
8b:b1:6e:bf:08:4b:cc:cd:fa:b5:73:e9:49:78:d4:f5:de:1a:
f5:68:f3:85:af:a2:9f:a6:8d:59:28:11:3e:52:0a:e1:67:92:
2d:ab:ae:8f:44:f9:03:d1:5c:54:7a:aa:e7:d7:aa:4f:35:5d:
e7:43:01:3a:24:29:cb:9a:ca:ce:14:a3:67:01:a2:25:22:14:
16:c3:fb:5e:c3:b1:5f:89:90:61:bf:1b:f5:d8:b3:62:53:4d:
21:6e:ac:53:c5:68:f3:bb:4a:5e:51:d5:d1:97:fb:a4:70:8a:
f1:6f:64:e8:9e:8f:28:55:4d:e4:44:4a:16:d0:28:50:c4:86:
78:3b:5e:6a:77:58:27:16:ca:dc:52:16:15:7e:c4:90:b9:4a:
45:e7:1c:b8:5c:99:c4:c6:67:39:96:2e:e3:e5:8d:66:91:bd:
62:2d:62:cd:d3:25:83:82:d4:7c:48:64:aa:7f:e3:33:1e:24:
b9:cd:6a:87:bc:9d:61:e3:0a:8d:6c:13:0c:07:f8:cb:53:8f:
98:ea:ac:f3:e6:06:f4:d5:2d:14:b8:75:de:b4:f2:2d:3b:11:
b5:a2:aa:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjFGNzMxMTAvBgNVBAUTKEMxM0M5QUUzNUMyN0MzMTAzMEUwMjQyODczQkEyRDVB
NzM1RDc4MTEwHhcNMjUxMjIzMDM1MzQ2WhcNMjUxMjMwMDM1MzQ2WjAYMRYwFAYD
VQQDDA02OTRhMTI0YS1hZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsre2pWj+eUXjtgBRKkEEOqau8jpJtJt8v300FfDtGNBibTPpbqQVRsN1eS/R
VBiCtZkzmbmGWfR9tsy+ZIAEi7w7bL4e1AAojbg924c3eq420B7AHM/bkXHqnfy+
vRATGUovy6fE7y0ftPscjLtAW+nu5Yuy7qJos3IXh7g3LE6evEpo2gcC11wzawFY
gbpgtnQyRyq8W0evcrRq/FrioRu6Pi6F40fVZtzJ6ZXw409tRNZQ6/bGOBlvjHim
I7nY4/6w0p4RT04q3odPgOUu0sjmkCYq8hfzujDsRYvrMvJzoponysL2cLH3WCE+
fzTg3MhHWK55jSzeJyzdnMEMswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFvQXJr
2gKNtzuMfYio+LMOM6AyMB8GA1UdIwQYMBaAFME8muNcJ8MQMOAkKHO6LVpzXXgR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUY3My83NkRGNzZFRTNE
MDcxMUVGQjVDOUVDMjRDNEY5QUUwMi93VHlhNDF3bnd4QXc0Q1FvYzdvdFduTmRl
QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dUeWE0MXdud3hBdzRDUW9jN290V25OZGVCRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MUY3My83NkRGNzZFRTNEMDcxMUVGQjVDOUVDMjRDNEY5QUUwMi93VHlhNDF3bnd4
QXc0Q1FvYzdvdFduTmRlQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBJthlHZ/5FUNmHl1bYLMjEubKUWfpWG0GBZN1mX6xv7BNtxBOLsW6/
CEvMzfq1c+lJeNT13hr1aPOFr6Kfpo1ZKBE+UgrhZ5Itq66PRPkD0VxUeqrn16pP
NV3nQwE6JCnLmsrOFKNnAaIlIhQWw/tew7FfiZBhvxv12LNiU00hbqxTxWjzu0pe
UdXRl/ukcIrxb2Tono8oVU3kREoW0ChQxIZ4O15qd1gnFsrcUhYVfsSQuUpF5xy4
XJnExmc5li7j5Y1mkb1iLWLN0yWDgtR8SGSqf+MzHiS5zWqHvJ1h4wqNbBMMB/jL
U4+Y6qzz5gb01S0UuHXetPItOxG1oqpk
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:58:58 2025 by rpki-client