This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179960/6E5E1AB0B39011F0B83F7761C4F9AE02/mw_7n2lH65AswiZBXa2OfYNN5h4.mft
File: mw_7n2lH65AswiZBXa2OfYNN5h4.mft (raw, json)
Hash identifier: AB8397BsrWxiA/6klc+3G/yl7Zr4smNlh4g6WGpoW6U=
Subject key identifier: 30:01:47:FF:B9:79:49:D6:8F:E7:FB:42:F5:BD:FE:28:0D:47:DB:34
Authority key identifier: 9B:0F:FB:9F:69:47:EB:90:2C:C2:26:41:5D:AD:8E:7D:83:4D:E6:1E
Certificate issuer: /CN=A9179960/serialNumber=9B0FFB9F6947EB902CC226415DAD8E7D834DE61E
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mw_7n2lH65AswiZBXa2OfYNN5h4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179960/6E5E1AB0B39011F0B83F7761C4F9AE02/mw_7n2lH65AswiZBXa2OfYNN5h4.mft
Manifest number: 20
Signing time: Tue 23 Dec 2025 06:36:41 +0000
Manifest this update: Tue 23 Dec 2025 06:36:40 +0000
Manifest next update: Tue 30 Dec 2025 06:36:40 +0000
Files and hashes: 1: mw_7n2lH65AswiZBXa2OfYNN5h4.crl (hash: Jpso17v0gDvNUQmwaj5hclVVptFbp7oMK1g2/TkkS5w=)
2: ED85B184BEFA11F0A7226D28C4F9AE02.roa (hash: FCZkcnWMKqwKfrD0AEQsW49hcqwvh4++F2LkcUoHYfQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179960/6E5E1AB0B39011F0B83F7761C4F9AE02/mw_7n2lH65AswiZBXa2OfYNN5h4.crl
rsync://rpki.apnic.net/member_repository/A9179960/6E5E1AB0B39011F0B83F7761C4F9AE02/mw_7n2lH65AswiZBXa2OfYNN5h4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mw_7n2lH65AswiZBXa2OfYNN5h4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:36:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179960, serialNumber=9B0FFB9F6947EB902CC226415DAD8E7D834DE61E
Validity
Not Before: Dec 23 06:36:40 2025 GMT
Not After : Dec 30 06:36:40 2025 GMT
Subject: CN=694a3879-aad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:a0:b5:06:7d:96:aa:38:fd:af:69:ef:98:
68:b1:aa:a3:3d:e7:e2:f8:c8:43:f6:ed:7b:bb:a3:
da:6f:c3:08:2b:75:ec:91:69:3f:d0:38:bb:41:dd:
1c:1a:e7:50:f9:e8:ef:35:2c:f5:be:d6:e9:bc:22:
5a:1e:66:d6:1e:e0:d1:59:f8:fe:4c:2a:a6:61:95:
cb:55:4e:e4:2d:2f:ce:0b:af:1d:ce:c0:33:04:6d:
28:2a:f0:0c:43:83:42:e9:35:4e:ed:cb:38:39:96:
16:50:ef:6f:5a:53:94:d6:99:ac:a4:bb:39:fa:d5:
5e:f0:42:f6:26:3c:48:25:cf:7f:4d:85:72:98:ab:
a4:3c:a8:b5:4c:a9:9b:64:12:d6:11:4a:13:8e:2f:
c7:75:5a:be:1d:04:04:76:99:5c:e6:c8:10:0d:05:
2d:b2:e8:e9:bb:16:d9:b9:de:82:9e:b3:85:f8:f3:
56:fc:ae:eb:b2:5c:d0:2e:13:66:80:8d:75:5b:a1:
87:e4:0b:33:0b:b8:7e:48:42:58:0a:1a:34:98:14:
fe:68:15:e2:aa:83:ab:3d:a7:e9:4c:bd:a1:6b:4e:
21:5b:6f:6e:50:9e:4d:b8:4d:6a:1a:48:0f:bf:a5:
7b:f5:4f:9b:34:ba:e0:99:54:8c:db:fe:51:57:9e:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:01:47:FF:B9:79:49:D6:8F:E7:FB:42:F5:BD:FE:28:0D:47:DB:34
X509v3 Authority Key Identifier:
keyid:9B:0F:FB:9F:69:47:EB:90:2C:C2:26:41:5D:AD:8E:7D:83:4D:E6:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179960/6E5E1AB0B39011F0B83F7761C4F9AE02/mw_7n2lH65AswiZBXa2OfYNN5h4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mw_7n2lH65AswiZBXa2OfYNN5h4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179960/6E5E1AB0B39011F0B83F7761C4F9AE02/mw_7n2lH65AswiZBXa2OfYNN5h4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:74:e9:2b:c7:ae:50:08:8e:71:43:c6:66:af:62:8f:ca:cc:
90:62:c8:45:97:c7:43:a5:d2:24:65:d7:19:83:06:d1:88:86:
fb:07:d3:e5:bf:3e:a7:1c:14:89:d3:10:a7:63:c6:d7:d6:a2:
04:58:d7:3f:e0:34:18:59:2a:6a:4d:08:9f:d7:a7:0a:f3:cc:
8a:0a:0e:0c:18:26:2a:ae:32:8a:e5:7d:b1:ee:bb:08:9a:22:
f8:b6:55:e8:c6:72:aa:0c:25:f1:39:5b:8f:9f:30:12:b7:3a:
44:cf:9d:9d:45:a8:7f:6c:7f:db:ec:e1:37:35:20:7f:55:4d:
7b:e7:5b:95:89:1b:8b:c4:68:5f:29:1d:8c:7f:8c:7c:34:7d:
43:05:3f:e9:c6:a9:99:4e:33:30:4a:b3:62:ca:54:8b:66:00:
db:f0:47:1f:2b:4d:0e:2c:4f:4b:fe:bb:1d:71:dd:0f:22:e1:
08:eb:3e:11:b2:bf:c0:75:a7:55:a1:a0:89:11:0e:9a:17:09:
fa:20:3a:4f:3a:d2:90:d0:6d:7e:b2:92:c7:53:77:eb:7c:a6:
f0:52:74:fc:0a:02:9e:0f:8f:2b:16:1a:e1:49:21:ea:d4:4e:
91:5f:00:f2:b0:0d:6f:35:58:9f:c9:fd:28:4f:d4:d7:48:2f:
cb:0e:a8:d3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
OTk2MDExMC8GA1UEBRMoOUIwRkZCOUY2OTQ3RUI5MDJDQzIyNjQxNURBRDhFN0Q4
MzRERTYxRTAeFw0yNTEyMjMwNjM2NDBaFw0yNTEyMzAwNjM2NDBaMBgxFjAUBgNV
BAMMDTY5NGEzODc5LWFhZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTz6C1Bn2Wqjj9r2nvmGixqqM95+L4yEP27Xu7o9pvwwgrdeyRaT/QOLtB3Rwa
51D56O81LPW+1um8IloeZtYe4NFZ+P5MKqZhlctVTuQtL84Lrx3OwDMEbSgq8AxD
g0LpNU7tyzg5lhZQ729aU5TWmaykuzn61V7wQvYmPEglz39NhXKYq6Q8qLVMqZtk
EtYRShOOL8d1Wr4dBAR2mVzmyBANBS2y6Om7Ftm53oKes4X481b8ruuyXNAuE2aA
jXVboYfkCzMLuH5IQlgKGjSYFP5oFeKqg6s9p+lMvaFrTiFbb25Qnk24TWoaSA+/
pXv1T5s0uuCZVIzb/lFXnqvXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMAFH/7l5
SdaP5/tC9b3+KA1H2zQwHwYDVR0jBBgwFoAUmw/7n2lH65AswiZBXa2OfYNN5h4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5OTYwLzZFNUUxQUIwQjM5
MDExRjBCODNGNzc2MUM0RjlBRTAyL213XzduMmxINjVBc3dpWkJYYTJPZllOTjVo
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbXdfN24ybEg2NUFzd2laQlhhMk9mWU5ONWg0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5
OTYwLzZFNUUxQUIwQjM5MDExRjBCODNGNzc2MUM0RjlBRTAyL213XzduMmxINjVB
c3dpWkJYYTJPZllOTjVoNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHZ06SvHrlAIjnFDxmavYo/KzJBiyEWXx0Ol0iRl1xmDBtGIhvsH0+W/
PqccFInTEKdjxtfWogRY1z/gNBhZKmpNCJ/XpwrzzIoKDgwYJiquMorlfbHuuwia
Ivi2VejGcqoMJfE5W4+fMBK3OkTPnZ1FqH9sf9vs4Tc1IH9VTXvnW5WJG4vEaF8p
HYx/jHw0fUMFP+nGqZlOMzBKs2LKVItmANvwRx8rTQ4sT0v+ux1x3Q8i4QjrPhGy
v8B1p1WhoIkRDpoXCfogOk860pDQbX6yksdTd+t8pvBSdPwKAp4PjysWGuFJIerU
TpFfAPKwDW81WJ/J/ShP1NdIL8sOqNM=
-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:07 2025 by rpki-client