This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
File: woYQciwbyJvjK01LiizCHeZxfMg.mft (raw, json)
Hash identifier: TR/aWhoRcCU3bXwTl9d0vAcxkh3zF2p6p06wkEP/Ucg=
Subject key identifier: 48:D5:D0:59:F2:09:B8:F1:C9:DF:34:D2:1C:57:BC:0E:04:D8:04:BD
Authority key identifier: C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8
Certificate issuer: /CN=A91E11D6/serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
Certificate serial: 02F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
Manifest number: 02F0
Signing time: Sat 06 Dec 2025 23:48:57 +0000
Manifest this update: Sat 06 Dec 2025 23:48:57 +0000
Manifest next update: Sat 13 Dec 2025 23:48:57 +0000
Files and hashes: 1: woYQciwbyJvjK01LiizCHeZxfMg.crl (hash: /vg1Pqeoq4Xne3YnSQuhI8h/455imjJBaCnKfXFxL0A=)
2: ACBFA1221CD111EFB2BDF412C4F9AE02.roa (hash: ifFLN+8twN04B6jY6cx/b65AiJj/Z2yB7h3ev34IjTI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl
rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758 (0x2f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E11D6, serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
Validity
Not Before: Dec 6 23:48:57 2025 GMT
Not After : Dec 13 23:48:57 2025 GMT
Subject: CN=6934c0e9-1b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a1:c8:d7:8c:42:77:24:d1:09:3d:72:17:d1:
b7:50:fd:cc:0f:5e:a5:39:b9:b4:04:6a:a3:4f:6b:
68:9b:a6:63:03:b9:2d:f1:4a:5e:e7:6b:a4:e5:44:
a0:55:54:3f:3d:6c:6f:5c:98:3d:95:68:4f:d2:17:
50:18:48:47:1f:a0:ad:b5:06:76:b3:f5:b8:0b:d6:
f9:92:86:f0:0e:4d:49:2a:e4:78:23:e0:e8:8b:40:
12:66:65:2e:d2:3a:e3:60:98:82:ee:b6:1f:32:dc:
dd:11:f2:df:9a:e0:8f:65:20:8a:e3:e8:33:0d:81:
23:10:46:15:e7:89:23:25:1a:9a:09:8e:9f:5f:28:
85:eb:fc:42:98:a6:43:8b:3c:68:2f:0d:ce:93:6e:
21:18:05:8e:e1:ba:44:07:58:0e:64:f4:cd:3b:5d:
70:eb:7e:99:dd:89:fb:31:18:c4:35:09:88:1f:fd:
e5:54:fd:47:6a:e7:fa:26:5f:23:6c:59:0d:1d:e2:
74:17:5a:e5:f1:de:8a:43:2c:b3:47:d2:3d:44:0a:
ca:9f:76:50:21:69:8f:b4:9c:be:44:97:f0:14:ea:
6a:1a:7b:0e:56:26:46:34:c2:0c:fa:53:98:9f:ae:
6c:3e:76:82:5b:fb:8c:a3:1c:40:82:65:43:a3:b3:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D5:D0:59:F2:09:B8:F1:C9:DF:34:D2:1C:57:BC:0E:04:D8:04:BD
X509v3 Authority Key Identifier:
keyid:C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:45:98:f4:d4:20:9f:9c:b8:36:44:f8:56:04:e9:04:6c:df:
27:d0:c5:4e:c7:eb:95:4c:99:b5:4f:9c:20:64:32:c1:dd:3e:
fe:85:a5:db:18:9e:3a:dc:73:d0:04:9e:be:39:7c:b9:05:37:
4c:a0:72:bf:63:90:5d:92:ad:e6:f0:70:25:3b:06:28:cd:64:
75:4f:99:81:30:68:49:c7:a9:db:a9:44:12:ed:80:ba:73:6c:
3a:fc:b3:32:9d:b7:2d:98:c6:42:fc:f8:51:10:e8:ec:cd:22:
8b:84:65:73:38:2e:a0:42:66:65:40:56:b7:61:70:ff:d0:4b:
5f:6e:e8:58:a7:fa:bb:94:ac:2e:0d:84:00:c6:e4:5e:77:a6:
b9:35:8d:40:c6:5c:89:f2:27:a7:77:99:39:c0:87:1e:3e:a1:
ef:e5:43:34:99:75:8e:cb:7b:74:3c:72:b0:43:c9:25:09:52:
6d:a5:02:6c:ee:4b:0f:cc:bd:94:ec:de:da:c5:50:6b:bf:76:
e4:48:ea:1f:5d:e8:f5:af:29:8e:bc:15:38:7b:6a:6f:be:e2:
37:fa:75:5c:aa:9c:b0:79:0b:7f:8e:fe:d5:d6:75:82:c4:72:
03:3c:1d:1c:31:19:f6:a9:a6:c4:27:89:10:2e:c8:97:ed:5a:
44:1b:52:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:58:25 2025 by rpki-client