This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
File: cwyRiCmzP6bI58jQUnsmzFC5NS0.mft (raw, json)
Hash identifier: 9IOz2oqTQ3iUAZp8I0nNa1bNg8X5cLJAHg3Ri1xXYbE=
Subject key identifier: 06:C5:7D:D9:AD:0F:86:5C:94:93:D2:91:F1:64:1B:ED:62:74:99:60
Authority key identifier: 73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D
Certificate issuer: /CN=A91A0FB6/serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
Manifest number: 0203
Signing time: Fri 19 Dec 2025 01:39:19 +0000
Manifest this update: Fri 19 Dec 2025 01:39:19 +0000
Manifest next update: Fri 26 Dec 2025 01:39:19 +0000
Files and hashes: 1: cwyRiCmzP6bI58jQUnsmzFC5NS0.crl (hash: /mbe6JH5q5xWkqSHZRQtyWWF0glIMMyeEijt8tJ4oLI=)
2: 1B010960CD2211ED8A66486BC4F9AE02.roa (hash: ITkHREhI8lLVIH2Au6rzuq8NwycAn6Ki4B1eHf36uWo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl
rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0FB6, serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D
Validity
Not Before: Dec 19 01:39:19 2025 GMT
Not After : Dec 26 01:39:19 2025 GMT
Subject: CN=6944acc7-865f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0c:ea:ec:15:ba:b0:60:44:a1:23:09:27:9a:
3e:09:21:a9:8c:98:98:db:de:36:92:93:66:3b:f5:
0e:55:59:d1:e5:3a:ef:c1:16:98:cb:c7:d1:63:1e:
a7:c2:2b:d7:f2:12:29:06:d4:f0:a4:20:45:fa:b2:
54:6e:22:3b:8f:49:84:05:ce:2e:18:96:68:83:1f:
46:d9:36:48:69:e6:08:52:66:77:51:36:49:e3:bc:
ec:e9:88:36:7e:df:4f:7c:b8:2a:c0:4b:31:40:3f:
d0:80:dc:dc:c1:a9:68:37:05:09:ec:15:5b:a8:14:
70:2a:26:28:10:f1:f8:de:04:1e:5c:66:99:27:a7:
4b:c3:a9:4f:f3:38:b1:0a:63:4c:2c:0a:2d:c7:17:
b6:fc:00:eb:43:af:01:04:5a:50:26:a4:b1:79:83:
66:5c:a9:ef:ee:52:55:24:d4:e1:2f:69:fd:0f:9d:
b0:21:9b:85:03:53:6d:77:e3:8a:b7:31:47:59:d0:
51:d7:b9:44:2c:34:64:ad:50:5b:26:0f:f3:ad:12:
f5:16:91:af:51:c4:f5:1c:56:66:38:33:62:79:b6:
0d:59:f0:61:0b:f6:60:1e:b1:35:32:27:65:54:17:
5a:18:7d:9b:df:28:31:ab:b1:30:ca:03:6d:9f:8b:
35:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C5:7D:D9:AD:0F:86:5C:94:93:D2:91:F1:64:1B:ED:62:74:99:60
X509v3 Authority Key Identifier:
keyid:73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ad:f2:58:3f:88:60:e6:86:88:4c:68:0a:50:a1:a1:4a:c6:
7d:5a:1a:12:a6:d3:68:8b:2f:90:aa:c9:3b:10:1d:e5:d5:86:
e8:9b:07:3c:69:4c:03:aa:2f:50:16:88:73:47:2f:46:12:2c:
c3:bb:eb:43:5e:83:c7:23:7f:c4:40:20:8b:b4:f0:46:62:1e:
e5:91:01:e6:13:6d:64:ed:46:69:4c:8d:09:68:2f:d0:ab:df:
fc:d8:9e:0d:b7:04:58:f3:ea:21:6f:f6:4e:2e:1e:79:d7:05:
27:d9:3e:3a:98:f9:c5:65:b7:0b:89:a0:4d:cb:32:22:5c:74:
91:69:08:d8:44:ac:fe:d6:c0:f8:3c:c4:25:e2:f9:fd:27:4c:
25:92:96:2d:93:f7:66:41:3f:8c:df:c7:f7:e4:d2:d3:21:8d:
3b:55:75:2d:e5:c6:a5:40:3e:95:36:66:b3:fe:3c:03:3e:0c:
fb:c3:90:06:3e:b3:d2:f8:71:c2:83:09:4d:c2:25:75:c0:60:
e5:f5:d9:c8:a4:62:f8:2c:99:a2:e9:fc:d7:78:38:83:cb:65:
05:b0:05:98:33:a0:d6:81:89:e9:e7:25:33:cc:7e:12:5d:bc:
7f:2c:a1:bd:ae:cd:fe:a1:1f:95:26:2c:7d:b8:fe:70:9a:ed:
28:d4:58:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:16:33 2025 by rpki-client