This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
File: Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft (raw, json)
Hash identifier: uSmgulRggbWEbKjNgKxZ7CiYp3u5jJ8F3Myq7t6cruM=
Subject key identifier: FB:83:F3:CF:64:53:FC:0D:04:7B:E6:66:31:8E:48:44:1C:B6:E6:4F
Authority key identifier: 5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68
Certificate issuer: /CN=A91806C2/serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568
Certificate serial: 03A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
Manifest number: 03A0
Signing time: Tue 06 Jan 2026 23:53:22 +0000
Manifest this update: Tue 06 Jan 2026 23:53:21 +0000
Manifest next update: Tue 13 Jan 2026 23:53:21 +0000
Files and hashes: 1: Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl (hash: Qttqn+0aT6l6Nx1UJclUw12qjeAF/ntiGHJk14FevNA=)
2: 1CD62088C4A211EC8FD6D313C4F9AE02.roa (hash: KamW1zC+t0AxsWxUwBVMnEzMkI75A/xxojQk/vMnrhE=)
3: 1C3679E8C4A211EC8FD6D313C4F9AE02.roa (hash: R45goBc9ltNNydJH/crrPm7jUsX2yEtOzi9r+yJorZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl
rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Jan 2026 23:53:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936 (0x3a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91806C2, serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568
Validity
Not Before: Jan 6 23:53:21 2026 GMT
Not After : Jan 13 23:53:21 2026 GMT
Subject: CN=695da071-6032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:29:6d:17:34:04:69:f7:48:89:08:3d:e0:
ea:0f:41:60:d6:96:81:ef:02:1f:62:00:65:d9:7d:
d4:05:75:a7:0b:32:4c:76:11:9c:13:7d:a7:67:37:
9c:61:41:ec:9a:11:6d:11:d3:1f:46:f7:ae:b0:d7:
6b:45:35:cb:f5:15:ff:a1:f4:18:11:a6:61:b6:d8:
de:8f:2f:a6:c6:3e:90:2d:8f:0d:ce:bf:43:2c:2d:
49:91:30:82:28:5b:32:f7:8d:82:21:b4:b0:d5:88:
0c:ed:a6:2d:9e:74:bc:8e:52:77:87:d1:d2:fd:7c:
1a:57:81:cb:5d:ae:7c:49:b8:21:e0:75:87:11:6b:
48:b7:5d:7d:3b:35:2c:9c:60:c9:1e:54:4a:b2:ea:
0e:f7:08:93:79:4a:e9:e8:53:27:ef:ed:8d:5d:b0:
0d:26:8a:52:04:a1:45:9d:e1:98:03:cd:7c:6d:db:
9e:f3:44:5f:fe:a1:64:8c:98:2f:69:d1:cc:4e:4c:
de:1f:3d:ba:3e:35:62:2f:6d:31:17:cc:2b:4c:64:
1f:ad:82:8d:12:8d:cf:a0:75:a5:3b:3d:c9:4b:a2:
00:57:ba:ac:ee:d2:b5:a0:bd:92:d6:df:91:05:a2:
4a:1b:8a:82:0a:21:57:ba:e7:e4:7a:5b:43:7d:76:
b7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:83:F3:CF:64:53:FC:0D:04:7B:E6:66:31:8E:48:44:1C:B6:E6:4F
X509v3 Authority Key Identifier:
keyid:5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:7c:11:b7:78:05:3a:c3:6b:57:63:3d:8a:4d:e3:ec:81:f4:
c5:e8:18:e9:41:4f:51:2d:6f:af:80:44:ec:f5:50:1d:7d:d2:
bf:57:09:0e:12:ec:71:31:b3:17:da:31:3d:88:e2:5d:1e:8f:
ea:bb:94:8f:3d:58:5a:f2:be:44:17:47:6b:c4:a3:bd:2b:c1:
c4:12:6d:52:d5:c2:49:3f:b4:72:ad:1b:cb:21:4c:e3:ac:d5:
da:9a:9c:a3:b7:2b:a6:a7:7f:72:3b:aa:55:46:43:7c:87:ea:
c1:38:c7:bc:23:a4:a0:ae:3e:a9:86:50:7e:7f:05:b3:0d:96:
a4:47:0f:5d:02:61:ad:ad:88:36:51:b2:c6:90:25:92:f6:ab:
38:28:aa:0d:ce:7a:b8:a4:71:46:d1:1e:d7:b0:b4:10:44:41:
28:25:5a:31:df:c7:00:ba:31:af:f6:f0:08:7b:ec:35:06:23:
11:61:06:9c:05:cf:ea:5e:03:7f:00:7b:14:a4:0a:f3:cf:18:
28:43:c3:a5:c5:49:8f:7e:83:43:33:a1:dc:e3:19:2f:c8:dc:
8e:fe:5f:6e:11:10:5f:f2:f7:42:3b:9b:0d:7c:a0:83:92:86:
f8:98:3c:7a:d1:a7:01:9c:62:7f:1c:d9:59:70:ae:5f:cc:4b:
94:16:ea:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 00:53:27 2026 by rpki-client