This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft
File: wg3R4FYYZcBSLH4nS87SSTC78EU.mft (raw, json)
Hash identifier: E0+xfhyW6LYlf5ptC4IutEw3CJgKghrgq1pZqKalzXg=
Subject key identifier: CD:C9:CE:B8:C4:2A:AB:4B:57:E8:BE:A4:99:B4:47:A3:EA:39:96:B7
Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45
Certificate issuer: /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045
Certificate serial: 047C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft
Manifest number: 1C43
Signing time: Mon 22 Dec 2025 16:18:43 +0000
Manifest this update: Mon 22 Dec 2025 16:18:43 +0000
Manifest next update: Mon 29 Dec 2025 16:18:43 +0000
Files and hashes: 1: wg3R4FYYZcBSLH4nS87SSTC78EU.crl (hash: sFeP/osy//aGJekZ48Z8Q19EBN3a/1TWxmrRRUss7dE=)
2: F9D345C0DE8811F0B0147CB83D6F56BC.roa (hash: 9LZHUJ48ZB+c/Aj0hibpaG7ilv/wbJ9nVDLdm2suDsk=)
3: 4A7F092A776811EFB6FA747DC4F9AE02.roa (hash: +EpmAAjo6yFTAjun44cjj7Z2OPFIr6kC+2bjFTkfQ8k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl
rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 16:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148 (0x47c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B08F7, serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045
Validity
Not Before: Dec 22 16:18:43 2025 GMT
Not After : Dec 29 16:18:43 2025 GMT
Subject: CN=69496f63-3691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:c3:45:31:bb:60:e3:3c:6b:9c:68:29:bf:
6e:e0:8e:e6:28:7a:3b:76:ca:d8:b5:06:a0:33:82:
82:4c:7c:71:f1:8c:a1:ed:ed:22:23:77:10:99:04:
2c:20:3f:1f:20:27:7b:dc:49:cd:c6:87:e0:0a:42:
fc:9d:24:98:b7:21:a5:69:c7:23:16:42:f8:99:00:
81:ef:c7:0a:10:91:2b:4e:3b:75:31:10:d7:b3:9b:
e5:10:ed:fb:d7:d1:ed:81:2f:7b:b8:fa:bc:cc:d2:
64:62:ad:2e:f9:ea:38:6a:f4:a7:bf:cf:45:c6:ab:
36:36:85:18:20:32:d7:44:4e:b4:44:3f:24:ed:16:
d2:40:11:83:fb:f3:13:56:26:fa:83:0a:13:d7:83:
45:41:81:08:2e:2a:ff:44:c1:ff:dd:16:38:7b:eb:
d1:98:f2:c4:47:75:64:30:bc:df:b4:93:fe:16:f7:
c7:e4:91:18:14:0f:ba:87:52:34:28:30:1e:fa:59:
05:16:70:16:d4:21:e0:90:92:c1:55:a8:39:3a:2f:
88:48:0c:5f:7c:f1:29:0b:b8:ca:18:cd:a3:ed:29:
6a:e3:c7:9d:78:f7:ef:07:b7:17:18:62:07:ee:b6:
7d:25:8a:c6:ac:5a:2b:08:29:f7:5e:5b:88:68:06:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C9:CE:B8:C4:2A:AB:4B:57:E8:BE:A4:99:B4:47:A3:EA:39:96:B7
X509v3 Authority Key Identifier:
keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:81:c6:41:8e:f0:b8:ee:c4:f0:4a:56:a9:c0:42:ab:04:39:
7f:35:c7:0e:57:5b:41:50:9a:41:ed:49:4e:b4:8c:c3:1c:6d:
af:cf:2c:68:e3:1b:4f:db:0b:40:a0:b8:0b:69:7b:f8:15:e4:
28:2b:5a:b9:d3:95:67:b8:01:99:25:86:d3:0e:21:56:c1:89:
8c:08:bf:31:3f:8c:44:50:d6:07:3c:09:37:2c:7a:96:7c:6a:
6a:1c:e0:1c:86:26:26:3c:cb:7f:76:42:66:a0:35:48:1c:69:
bd:a4:2b:0d:68:61:c7:e1:5f:06:c2:eb:dc:8e:a2:93:e8:8e:
2b:59:c9:da:b6:e3:97:83:62:0b:a5:f2:2d:41:a9:66:ce:23:
37:d3:e1:78:ae:2a:4f:7b:5e:17:49:03:42:eb:95:3d:85:4a:
67:89:91:86:eb:df:75:e3:80:df:40:4f:d9:c3:cb:34:41:5c:
0d:29:a4:38:c2:9d:0e:db:d6:e5:3e:a0:db:03:70:6c:9a:08:
99:e4:29:ab:12:4a:11:ba:1d:e2:25:ce:c7:1a:95:a0:6b:1f:
61:27:b0:75:08:a6:89:57:7e:61:36:56:c9:79:05:4c:1b:57:
e8:ad:f1:91:a3:2a:c1:1b:20:dc:0a:bf:db:f9:6d:be:bf:14:
45:0d:30:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:42:57 2025 by rpki-client