This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
File: WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft (raw, json)
Hash identifier: C8UGnHXcmaW1iJacLfGvoS9+dI3hcy2roQMNN8JRbXY=
Subject key identifier: BD:76:41:7B:CC:4D:4B:0E:23:E5:42:7D:61:3D:0D:9E:21:B0:DD:86
Authority key identifier: 59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
Certificate issuer: /CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Certificate serial: 017F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
Manifest number: 017C
Signing time: Wed 17 Dec 2025 03:18:18 +0000
Manifest this update: Wed 17 Dec 2025 03:18:18 +0000
Manifest next update: Wed 24 Dec 2025 03:18:18 +0000
Files and hashes: 1: WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl (hash: BooVHHM7kOAmHGmkBGwa8TZEUuNgfqZatuEd1u2eIVE=)
2: 5CB841E69B1411EEA456FE83C4F9AE02.roa (hash: pLOgKyFyMkYkgWZ7IaxS8IlsIuIv5okTjVaTAgIeoac=)
3: 7CF0A45404DF11F0B877A115C4F9AE02.roa (hash: bc2WkbYAbuGAx2Gf2EfnLZLtMVMYcpQMrHnCADXGRJs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 03:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7AB9, serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Validity
Not Before: Dec 17 03:18:18 2025 GMT
Not After : Dec 24 03:18:18 2025 GMT
Subject: CN=694220fa-478a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:00:df:9b:c6:34:91:b1:a5:3d:b2:a3:16:
ea:eb:6c:f1:8e:19:8b:81:fa:3b:a4:f6:c0:cc:50:
f8:4c:f3:6c:ab:73:2a:57:84:eb:1f:b5:44:76:59:
ce:72:73:f7:54:c5:c7:6d:f9:7d:96:c3:4e:53:52:
0a:38:a3:b3:98:7f:0f:b6:65:82:e3:e8:3f:e2:66:
11:42:5a:db:64:87:11:48:9f:b5:97:ec:76:6b:35:
de:64:4f:25:af:b4:3c:4d:2b:44:58:4f:a2:d2:24:
36:b2:d8:0f:6a:d6:07:5b:e6:e9:69:24:37:ed:21:
f7:37:63:59:0a:3f:d5:df:36:05:40:c5:de:fb:de:
55:27:94:bb:92:7a:ad:1e:c8:9d:78:32:20:1a:cd:
cc:2e:1a:86:2c:c5:b5:4c:88:61:00:81:ac:13:30:
ce:12:4a:c4:62:54:51:61:3c:30:bf:75:ec:fe:96:
af:81:73:f5:fa:95:ec:1a:b3:c3:bf:6f:fb:93:5b:
5a:c8:19:11:44:ed:5c:74:6e:68:7c:47:93:8d:fc:
de:45:9b:36:3f:22:96:0c:d8:19:ff:0e:13:ae:5b:
32:73:23:c8:20:73:63:ae:8c:24:1b:93:f4:60:19:
3c:b6:19:02:0a:aa:62:bd:6f:fc:49:35:38:e6:f1:
9f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:76:41:7B:CC:4D:4B:0E:23:E5:42:7D:61:3D:0D:9E:21:B0:DD:86
X509v3 Authority Key Identifier:
keyid:59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:42:61:f3:71:67:f3:49:f2:ab:e1:d8:84:73:e1:e1:2b:76:
7a:6e:5e:64:0f:f5:1c:46:be:1e:72:58:fe:84:82:d4:44:b7:
d6:f8:c3:12:a3:6f:39:00:27:87:ad:5f:9f:23:53:55:55:2a:
64:f4:86:00:ba:03:dc:c2:1a:b0:0d:d1:7e:ad:96:52:4f:b5:
e9:7e:ca:88:25:ef:9e:1c:b3:84:a0:58:0f:65:7f:2b:c9:2d:
19:b2:92:11:15:85:f2:a3:0f:57:ee:4a:20:a0:93:d1:24:68:
de:05:53:a7:ff:5d:ed:c1:e5:47:d2:ce:b6:ee:3d:dd:8c:d6:
d3:f3:00:32:0d:d9:13:9d:dc:d8:a4:ba:21:f6:45:73:04:ac:
a5:2b:37:e9:c4:f7:70:d9:5d:53:cd:f4:a8:74:8c:f6:b4:5f:
38:8a:33:ee:39:3f:5a:48:5d:b8:1c:f5:a3:4d:c8:0c:45:7b:
71:aa:b8:45:d8:7f:65:23:3a:05:9b:af:f6:b0:28:6e:ce:ee:
d4:d1:bc:6b:ed:ac:06:5a:77:a0:e7:6e:7f:50:57:01:13:66:
ac:8c:93:d0:5f:f7:1a:08:f8:1c:2d:ea:35:22:7c:03:44:7f:
52:b5:7d:69:f7:4a:e1:bf:05:ee:39:34:1f:d7:7c:cf:8c:ae:
f9:24:6e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:08:23 2025 by rpki-client