This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft
File: wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft (raw, json)
Hash identifier: /qJzvCCQAvuZv4b+YNkMnAMnDMAJFH3MfDjd6XiDGZM=
Subject key identifier: 3C:C0:47:DC:2E:38:4D:80:19:38:F6:97:41:09:6D:CC:A6:F6:B0:C8
Authority key identifier: C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99
Certificate issuer: /CN=A91DD1F9/serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft
Manifest number: FE
Signing time: Wed 03 Dec 2025 03:33:37 +0000
Manifest this update: Wed 03 Dec 2025 03:33:37 +0000
Manifest next update: Wed 10 Dec 2025 03:33:37 +0000
Files and hashes: 1: wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl (hash: zex74G1FV6Epv3N0Lt/XrRo0DTQIrR6zM+jo5GGqK1w=)
2: 36CFD1EE4AD011EF9B941D17C4F9AE02.roa (hash: R4BuH0z4o97i8tZeyVvIgqOfDLo2IBdC5O5u6V1sdyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl
rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 03:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD1F9, serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99
Validity
Not Before: Dec 3 03:33:37 2025 GMT
Not After : Dec 10 03:33:37 2025 GMT
Subject: CN=692faf91-2e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:a1:ad:54:59:b5:79:4c:e4:82:76:89:e3:
1e:03:e5:1b:49:27:cd:35:e6:b4:62:0c:59:80:6e:
05:e4:ed:3f:9f:57:c8:f8:8f:0b:c3:98:82:fa:e5:
95:c5:64:3d:72:bf:bb:62:5f:3c:be:9e:7b:4e:c4:
14:73:af:15:6a:34:e2:1e:5c:b1:c1:9b:2a:ab:87:
a0:a4:63:04:22:a2:a4:ad:ed:1c:4e:56:4b:ae:23:
70:93:fc:7d:75:ae:ba:5b:53:9b:0c:fa:06:26:91:
a3:80:45:ac:f3:3e:fc:cc:b1:1f:dd:e3:92:4a:e6:
e5:5f:56:ac:9c:98:ad:28:cd:8b:1a:da:97:f8:40:
80:09:2d:eb:de:7a:b6:b8:60:a2:f5:4a:dc:c4:18:
bb:0c:f6:6b:ac:69:42:ab:37:ea:78:9f:7f:29:b8:
15:ec:3d:26:3b:36:03:1d:c1:d9:50:3c:64:9a:aa:
11:55:65:27:04:2c:79:fd:a1:fa:12:2e:26:16:cc:
ca:ac:85:e6:79:29:72:c6:be:f7:dc:fd:c4:cc:16:
38:a0:b7:9f:cc:91:95:65:3c:e5:36:85:29:c2:4a:
23:d3:8d:5c:a5:88:ba:78:d6:60:9e:c2:ba:d1:4c:
ad:ec:7e:31:19:8b:f7:92:d3:2e:d0:da:63:b5:5d:
e2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C0:47:DC:2E:38:4D:80:19:38:F6:97:41:09:6D:CC:A6:F6:B0:C8
X509v3 Authority Key Identifier:
keyid:C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:8d:bf:09:80:2e:62:47:90:8f:93:94:b2:ec:4a:f5:7f:97:
83:00:de:e9:59:47:4e:4d:06:7b:26:30:ca:f1:1f:6d:86:11:
ea:f4:ad:bc:f1:c3:e1:a3:08:5a:87:03:1a:63:ce:7e:e4:db:
db:09:f2:cd:b5:d1:7f:10:00:95:0d:e8:77:42:c8:96:5d:75:
f7:fe:2c:6e:99:93:66:ae:24:b8:81:a8:00:98:71:24:cf:08:
7a:fd:7c:f0:8a:a6:3a:8f:e6:cb:16:bb:0e:09:27:17:7e:68:
ac:a1:d1:22:36:dd:01:83:43:74:19:60:7f:e0:f0:22:85:25:
86:b3:2e:97:bb:7a:13:87:07:5b:2a:81:26:85:40:91:04:93:
99:0d:37:79:c0:0c:89:e3:6f:7e:6a:5f:b8:e1:cf:f2:67:fa:
8b:b3:e0:ee:a0:a3:8f:dd:0b:99:8e:9b:5a:c2:61:a4:16:5b:
6d:4a:a8:b1:2d:3d:b1:3c:18:fe:0c:ab:86:3e:b9:e3:2d:66:
fe:1b:33:59:77:c8:f9:ff:8b:f4:54:df:09:ca:c1:c0:f2:57:
d0:f0:9b:20:e3:5a:49:5a:85:6b:bc:da:0f:d4:c8:8e:e1:00:
ee:5e:32:0d:36:2b:01:64:76:6e:cf:51:85:1f:0c:0f:e4:a5:
41:26:5f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:46:52 2025 by rpki-client