This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft
File: r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft (raw, json)
Hash identifier: D+mqvZkaESqokY0ziYf7GFITqdBCc7KiBtRAw2pjsJM=
Subject key identifier: A4:30:72:DD:59:8B:7A:6A:86:5D:0E:B9:A4:42:49:4E:F5:7F:90:06
Authority key identifier: AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40
Certificate issuer: /CN=A9194692/serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40
Certificate serial: 0785
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft
Manifest number: 0774
Signing time: Mon 22 Dec 2025 20:54:34 +0000
Manifest this update: Mon 22 Dec 2025 20:54:34 +0000
Manifest next update: Mon 29 Dec 2025 20:54:34 +0000
Files and hashes: 1: r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl (hash: H36xIbxbMsSzRj+hiM9MG9wK6ZsYPlGvRdBnk0vNtsA=)
2: B3878620B15E11EE9521E85BC4F9AE02.roa (hash: czgCm9inUwQtKmsycjisqnVVnUqNecHZYtpi4MypO+s=)
3: DF0A2BF4B15E11EE8E75695CC4F9AE02.roa (hash: I3DJPrqQDQWNYUcfVkhfL36sgECV3rkEkAXDv9beZH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl
rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 20:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1925 (0x785)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194692, serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40
Validity
Not Before: Dec 22 20:54:34 2025 GMT
Not After : Dec 29 20:54:34 2025 GMT
Subject: CN=6949b00a-2026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:7d:e2:34:83:ce:3f:48:eb:05:d7:a8:c0:
fb:3b:5a:0b:e2:16:12:11:92:f0:6c:f4:92:04:64:
d5:ef:8b:e0:74:6b:09:e1:9c:e7:9d:cf:d1:00:30:
57:1e:85:e1:d8:99:5f:82:c7:f3:2d:36:30:a6:43:
46:70:74:0d:36:a5:55:ce:70:2d:53:1e:57:cf:e1:
2d:b9:e9:2e:78:93:e5:07:55:ba:c0:4c:de:d1:3f:
74:db:65:43:c4:d4:23:68:b6:1d:cb:31:cf:25:2d:
16:26:9c:58:bd:fb:b0:b2:4c:31:0f:55:68:4c:4e:
06:eb:ed:b5:87:62:62:19:29:c1:a8:ba:10:93:35:
26:37:69:a2:b5:88:13:5e:47:7b:1e:f4:c9:19:5f:
ec:6b:9d:f1:8e:22:c5:f7:b1:3a:56:5a:9c:7b:7a:
23:50:a2:1b:96:76:0d:6a:44:6e:ca:9f:63:50:15:
aa:74:7e:af:88:27:f5:28:53:79:50:ca:7a:0b:fe:
4c:5f:b9:6c:fc:d4:49:35:02:fa:b7:d6:4f:97:3e:
f7:2f:81:77:38:e9:49:c5:36:48:15:68:a6:90:7c:
d7:83:76:f0:86:6b:8c:fa:8b:a5:f3:33:bd:6b:97:
ed:02:3b:30:4d:cd:51:fb:cf:59:f0:fb:64:23:e5:
04:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:30:72:DD:59:8B:7A:6A:86:5D:0E:B9:A4:42:49:4E:F5:7F:90:06
X509v3 Authority Key Identifier:
keyid:AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f8:73:b8:e8:aa:e7:57:4d:0e:3b:5e:47:7a:25:e5:99:a6:
41:32:bf:9b:1c:f7:48:c6:6a:01:a1:5f:c8:12:81:5f:22:c7:
2b:c1:cf:12:6a:13:8c:8c:28:66:53:15:fc:02:10:20:9e:6d:
9c:1b:fb:a4:7a:44:70:3f:5f:b8:40:6c:e4:93:a2:f3:7f:83:
70:11:66:a2:e8:ae:bc:07:ec:36:6a:db:80:2f:c6:3a:eb:44:
7e:a1:3a:ec:4f:19:b9:88:12:4a:f4:76:e8:85:32:84:da:e5:
f6:e7:08:05:fe:9a:88:b2:de:52:b8:96:c3:b1:92:be:2c:6e:
e0:93:c5:3b:6c:fd:f9:07:a9:bb:39:06:7d:a8:35:94:99:42:
08:c7:df:03:4f:89:30:b0:1b:8e:84:36:cf:f7:0b:28:1e:1d:
5a:fb:1c:11:2a:21:2c:08:7c:4b:50:2f:94:ea:42:ca:5c:69:
c9:65:75:a2:54:46:05:6b:f1:2f:bf:74:47:95:5e:1d:81:a9:
58:01:69:12:32:0c:1c:7e:c7:e6:ea:30:17:e7:6f:58:1e:50:
ce:21:72:b2:75:e8:db:1a:bc:1d:8d:09:8f:3c:ac:b1:18:f3:
5a:9b:87:40:ee:fb:5c:ba:13:7f:50:72:2c:10:79:a8:49:59:
50:54:d7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:10:09 2025 by rpki-client