This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
File: wuC1g9pA223YMwUcBSRZnhpZAsY.mft (raw, json)
Hash identifier: IEVqZlD5//e9fF+Q2Qda6Cw0htO1pAhQiiqIrrGYqYI=
Subject key identifier: E4:95:D7:D3:A7:A8:14:83:B0:63:7E:FF:2A:BD:2D:F1:6A:B2:02:C6
Authority key identifier: C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6
Certificate issuer: /CN=A91CCDD3/serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
Certificate serial: 08BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
Manifest number: 08AA
Signing time: Fri 12 Dec 2025 19:57:42 +0000
Manifest this update: Fri 12 Dec 2025 19:57:42 +0000
Manifest next update: Fri 19 Dec 2025 19:57:42 +0000
Files and hashes: 1: wuC1g9pA223YMwUcBSRZnhpZAsY.crl (hash: VF59RXJGvujhKG3gf55aReaw8CaXEHunlwGfOIEOUQE=)
2: 68EAE318D09411EA9D19403FC4F9AE02.roa (hash: 36vsX/kRCXg+ogIu5Zo1EQtB8DOFdXEItLvHPcLnMbo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl
rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Dec 2025 19:57:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2237 (0x8bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCDD3, serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
Validity
Not Before: Dec 12 19:57:42 2025 GMT
Not After : Dec 19 19:57:42 2025 GMT
Subject: CN=693c73b6-518c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:67:3f:28:86:e0:e5:37:02:0f:b5:e8:04:
51:8f:6d:46:22:33:47:9d:9d:7a:13:7e:35:37:ad:
10:5a:d5:51:bd:29:6e:c0:66:41:07:f7:15:46:0d:
70:cb:f2:e1:57:c0:78:f9:85:91:a4:8d:ac:07:cb:
ed:04:ba:7a:f9:09:42:4f:eb:aa:af:1c:bd:35:4a:
70:e9:c0:5f:be:ac:58:bf:b1:1d:47:83:10:1e:85:
f8:16:99:c2:68:a9:97:ac:cf:ba:ab:6c:8a:37:fd:
ce:6f:d9:53:4d:87:14:1d:43:a0:48:7b:a2:e5:89:
d7:d3:45:05:10:62:e5:81:c9:b4:fb:53:de:c7:a0:
19:a8:5f:67:cc:7f:0c:7a:08:56:2f:e3:ad:ef:9c:
91:3a:dc:c6:6e:85:31:63:74:47:bf:5e:f9:fd:1c:
2e:75:cb:23:84:60:6d:8e:27:8d:52:59:10:0b:7d:
39:82:a4:12:23:e8:db:99:ff:25:3d:1b:89:0a:2a:
65:04:b1:e3:c7:5d:c8:9c:61:6f:2e:3e:fb:b9:b8:
2d:ea:5a:01:0a:38:a6:5c:26:4f:04:f1:7c:c2:9f:
59:45:c2:a0:8f:16:36:37:f1:dd:1f:04:7d:e5:ec:
d3:d1:e9:fd:32:d2:f3:41:ad:34:76:c4:6e:57:6b:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:95:D7:D3:A7:A8:14:83:B0:63:7E:FF:2A:BD:2D:F1:6A:B2:02:C6
X509v3 Authority Key Identifier:
keyid:C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:02:04:1c:26:15:2a:0f:57:70:e0:cd:7f:d7:21:09:7d:06:
23:f8:c5:54:28:85:3b:0b:bb:d2:74:66:e4:37:2c:ed:35:bb:
eb:e0:1b:89:87:5c:12:bc:06:51:9d:e4:63:8c:22:c6:1d:df:
e4:31:99:9b:f8:5b:0e:db:ee:3e:7d:2c:7c:fa:11:4f:8d:a0:
a5:e6:e0:6d:63:d0:f5:1e:81:eb:02:c0:fe:03:64:12:4a:44:
d2:bc:ba:39:3a:a1:9d:d3:5d:17:3f:52:c5:87:7d:2e:d6:7d:
b3:6b:91:79:f5:0b:e8:56:08:9f:9a:06:aa:9e:ff:cd:e6:69:
fe:0e:c2:77:24:b6:eb:34:2a:49:a8:a1:54:b9:04:f9:d2:9e:
42:05:7a:ad:51:7d:9e:21:ec:4c:93:bd:11:55:6c:a8:43:e1:
02:4a:fe:4b:de:02:ed:c7:15:ed:3d:f2:25:e2:78:e4:9b:5e:
5c:0b:be:b3:7a:d7:f4:32:45:8d:da:99:93:8d:b7:f6:05:21:
58:7d:c5:87:40:34:21:2e:ae:28:ea:ec:c9:4e:d1:5a:59:12:
7d:07:c7:df:f9:01:66:dc:56:19:1c:10:7f:4c:a7:60:f1:89:
da:0d:93:9d:b9:93:d0:7a:9a:79:e4:d4:b6:51:0d:2d:5d:ea:
e3:88:8f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 15:23:37 2025 by rpki-client