This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
File: WKDd0CVVyDdIbVVDUYbcxXahKD4.mft (raw, json)
Hash identifier: z1fwCU7fxtw+s1xWOE2a9M3pqO0mdbXMfzeyanAUfxg=
Subject key identifier: 07:E3:35:6C:E3:FB:46:AE:AE:32:E3:D8:58:BE:AA:28:3B:DD:C6:33
Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Certificate serial: 0251
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
Manifest number: 0240
Signing time: Tue 27 Jan 2026 01:11:28 +0000
Manifest this update: Tue 27 Jan 2026 01:11:27 +0000
Manifest next update: Tue 03 Feb 2026 01:11:27 +0000
Files and hashes: 1: WKDd0CVVyDdIbVVDUYbcxXahKD4.crl (hash: bqQtYUWuc8QyAPuRV+fc4cNchyKqcLQXouTrW72flzc=)
2: 8C48B22C47E711EE91530D28C4F9AE02.roa (hash: Kj9sN/OBzKppmcG5oP7VAOMrdejW1RyL9i6F6SFa73Q=)
3: 58A53DF483EB11F083FC5148C4F9AE02.roa (hash: NjVDS2QkAh1ArmSLgoyPKfqDVYo9nr3xlwWJ1P+4P9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 01:11:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Validity
Not Before: Jan 27 01:11:27 2026 GMT
Not After : Feb 3 01:11:27 2026 GMT
Subject: CN=697810bf-3b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fb:e8:fa:90:f7:3d:33:88:89:09:2b:99:ec:
cc:89:85:2e:9e:07:4f:3b:26:f7:34:34:d4:73:b6:
ab:45:f0:81:2e:90:78:34:56:62:c9:69:bd:9f:b2:
32:47:d5:1f:5a:d9:e0:95:4a:33:08:54:ff:68:24:
a7:8b:5f:ff:39:d0:c2:96:b8:d9:f8:b7:64:3f:cc:
aa:78:93:a9:c2:b5:4c:f7:f2:6b:e1:e3:a3:1e:27:
58:2a:ff:3e:6f:ea:4d:a1:36:24:73:70:44:68:95:
7c:9b:8e:bf:12:46:29:d2:35:ad:f6:66:92:cd:46:
db:13:9d:a3:90:70:d9:50:e4:d4:a5:0a:c6:42:1a:
bc:bc:dd:c0:01:eb:5a:a4:b1:b0:03:42:7b:1f:c7:
5d:2a:eb:41:01:ca:48:d9:9f:48:bb:48:63:ff:cb:
01:ff:b4:f0:52:eb:e9:24:5e:f0:b7:74:74:00:8f:
53:d2:d2:f4:f9:4e:c5:83:2f:7c:89:91:26:52:c9:
0c:e2:b7:46:3e:0f:ab:67:bc:44:bd:3a:72:86:72:
90:3a:40:20:a9:50:d7:d7:fe:68:33:12:6f:4d:e3:
59:88:89:f5:5d:36:3a:b6:58:76:50:f0:88:f4:5f:
45:98:8a:fa:4e:cf:a9:93:70:f1:b4:60:22:49:5e:
72:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E3:35:6C:E3:FB:46:AE:AE:32:E3:D8:58:BE:AA:28:3B:DD:C6:33
X509v3 Authority Key Identifier:
keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:de:7a:df:6b:3c:cb:16:35:87:0f:c6:39:ee:c8:21:8d:06:
3f:dd:c1:67:7b:66:6e:01:29:ba:9e:d3:44:51:ba:67:a7:72:
6d:12:f9:8f:5a:67:75:6c:47:0f:02:b2:98:da:88:1e:56:d1:
16:69:e9:2e:06:b9:e5:2a:4a:8b:bb:af:3d:b0:ef:7e:a4:e1:
0d:40:bf:f6:f2:4c:95:72:07:46:42:25:51:1d:03:ca:8e:a3:
64:fd:0d:2a:39:e1:53:38:84:55:07:79:7a:29:b6:db:b3:68:
62:90:a2:cb:8d:94:ee:34:17:92:c2:74:3e:47:4d:fc:77:68:
9c:d5:1b:98:ea:85:84:7f:d2:39:84:9f:e5:fd:b0:a1:04:e0:
2c:60:3b:dc:94:cf:0c:3f:59:f8:bd:7d:c2:01:f7:7a:b4:4d:
62:74:a7:c7:6b:c8:18:d7:3c:45:1e:3d:10:9b:a2:4e:0c:d5:
39:b1:98:5d:3b:26:0a:7b:0d:5d:4e:f5:c5:79:29:15:3a:40:
cb:a6:1a:a5:00:48:18:03:bd:f7:f1:bc:f3:68:3b:e7:1b:b5:
24:ea:3c:09:97:dc:31:64:48:9a:f4:82:3f:39:4f:6e:af:c3:
c3:e9:9d:a7:49:6a:72:7d:df:47:ea:71:cd:f6:60:0c:0b:81:
c0:ae:a6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 17:50:15 2026 by rpki-client