This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft
File: whcUQpGt4TEa-2LQLllQN8jatdw.mft (raw, json)
Hash identifier: wO0gixBXH4zMmG2yuwZmUbmIJi/R0pKvFqtaqB/7Jog=
Subject key identifier: D5:01:53:A3:D3:FF:8F:02:33:68:86:5C:37:26:B8:79:A4:FC:2E:E2
Authority key identifier: C2:17:14:42:91:AD:E1:31:1A:FB:62:D0:2E:59:50:37:C8:DA:B5:DC
Certificate issuer: /CN=A91E3E8B/serialNumber=C217144291ADE1311AFB62D02E595037C8DAB5DC
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft
Manifest number: 0D
Signing time: Wed 03 Dec 2025 06:08:01 +0000
Manifest this update: Wed 03 Dec 2025 06:08:00 +0000
Manifest next update: Wed 10 Dec 2025 06:08:00 +0000
Files and hashes: 1: whcUQpGt4TEa-2LQLllQN8jatdw.crl (hash: or4hFwuC0GlNcdq0xAc9TDFAnaY2EtnWENIbedatOm4=)
2: 0359510CBE2711F08C3BFC4DC4F9AE02.roa (hash: xMDfluTZ+ozklwcjk6WSJjCTPWq07m8+7WXhvd6X+vs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.crl
rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 06:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3E8B, serialNumber=C217144291ADE1311AFB62D02E595037C8DAB5DC
Validity
Not Before: Dec 3 06:08:00 2025 GMT
Not After : Dec 10 06:08:00 2025 GMT
Subject: CN=692fd3c0-7371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:18:e5:26:4a:c0:b7:f5:09:57:58:ef:d1:f3:
95:2f:a8:28:11:1a:9d:04:66:9b:b1:78:83:78:e4:
b5:10:c1:fe:96:6f:a0:e9:87:65:98:a1:83:cd:91:
21:95:df:51:80:93:85:38:9a:88:c5:e8:12:a1:45:
4c:52:e3:67:1f:f9:b0:3e:93:f0:55:58:bb:b3:2a:
63:c0:1c:b8:fa:1d:bc:73:6d:17:6a:b1:9d:7e:70:
70:96:11:f5:69:78:8e:22:ce:0b:06:62:f3:ee:b4:
e7:46:ad:db:d3:d2:c9:16:0f:4b:ad:71:b9:1e:01:
30:5c:b6:0a:5f:f3:e9:d8:4e:ac:84:bf:5d:a2:c8:
7b:d1:7f:35:ac:7d:e3:7c:04:9f:96:e5:25:61:25:
fe:94:9f:1f:f5:2b:36:a5:c8:17:9f:ec:51:73:64:
a9:ba:6b:06:db:d7:80:29:4b:f6:09:a4:19:d4:ba:
b6:4d:a6:22:8c:62:50:68:58:0f:bc:4d:68:d7:ee:
83:09:a0:97:5f:af:42:e6:c5:05:01:41:3d:01:99:
2d:9e:bb:6b:53:a6:00:a7:4e:1b:13:1b:e4:2f:4f:
cc:0c:66:22:40:0f:c0:3b:39:3a:b2:2d:59:da:3e:
53:48:74:53:e9:45:62:53:e8:7a:13:33:d0:52:a1:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:01:53:A3:D3:FF:8F:02:33:68:86:5C:37:26:B8:79:A4:FC:2E:E2
X509v3 Authority Key Identifier:
keyid:C2:17:14:42:91:AD:E1:31:1A:FB:62:D0:2E:59:50:37:C8:DA:B5:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6b:d3:c1:e5:9f:6b:65:ac:2c:23:06:42:75:b6:99:63:c6:
e6:b8:28:e9:d9:23:8c:11:70:8a:04:1a:ac:15:25:9f:7b:c2:
36:0e:f7:ff:c4:15:f9:87:62:b5:92:2d:18:3b:9c:ac:d4:51:
74:43:4f:6e:45:73:6a:32:4e:6d:c2:df:8a:d3:9f:be:a4:ae:
85:02:b1:14:99:f1:fb:c9:1a:68:bf:ab:08:26:63:ce:46:d9:
1c:24:d3:3a:02:29:a1:48:bc:5a:db:65:02:5a:29:18:c3:a7:
5e:e4:ee:d2:ca:a4:96:b9:07:32:df:a7:36:f1:77:c4:86:ce:
ca:69:d1:2f:79:d8:4d:1d:d4:51:39:fe:4f:82:b5:43:aa:76:
7d:6d:c3:d0:70:d8:9a:f7:94:85:d4:cc:0d:b6:5c:f1:bb:a1:
40:ba:47:f1:87:9b:f8:d7:5e:c3:ed:c3:be:ca:62:ca:78:e8:
8a:27:24:32:89:9f:2e:48:bd:25:5a:ab:42:90:0b:28:d2:6d:
e4:0e:3b:46:70:23:70:f4:ba:81:fd:a3:3a:83:4a:7f:bd:ca:
9b:94:7a:e2:d1:f0:35:c8:24:eb:d8:d0:4e:e4:1c:53:87:40:
a5:39:d0:56:13:e4:f6:5e:20:4c:09:35:32:2f:1c:cb:a1:91:
9a:f7:88:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:00:14 2025 by rpki-client