This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File: WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier: Se0MQkNvxNrAvcKrq5ihJpZ5L4U5bLFaaHmKeyjB5pM=
Subject key identifier: FD:EF:CE:23:0B:CE:24:4E:4F:DB:B2:1B:85:D3:F8:B1:BE:B4:52:87
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3676
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number: 3584
Signing time: Thu 04 Dec 2025 14:43:05 +0000
Manifest this update: Thu 04 Dec 2025 14:43:05 +0000
Manifest next update: Thu 11 Dec 2025 14:43:05 +0000
Files and hashes: 1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: OcsOLRzidij5F8ImZG5oPFClIKTRGPuN/rh2VNFBq0c=)
2: 61352DFCC46F11F0848EF936C4F9AE02.roa (hash: rzFGoJ54qGibQHLbmWB2hMncJkQRjlW4zZk27bctTrE=)
3: 92B41AACB17B11F0A5D78E54C4F9AE02.roa (hash: bdFFvc6eNQU1+yjsu6zdGpd9HjnTWxx0y+6B+LSnliU=)
4: EFF618B85C7311EF9CC47281C4F9AE02.roa (hash: lIANGK6Kn2MugRFq01BJgGhUwBHYhGPRL+AhDQBA5Do=)
5: AC8A67CA100311F085EE3D29C4F9AE02.roa (hash: T/rcx/oBePx/fFY5liuYl1FWNJgd5CikRWxOV60Eb+s=)
6: 493BCC24BC6911EFBA2E5C78C4F9AE02.roa (hash: ED0l+M3XW8yfiIKv/qBb5H5Y5anJhlkDWFxpGJ+C/jc=)
7: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: 7Y+BMS/66rPoGcFQGfUmmEmIY/lvqgpMP8T/jWrEFog=)
8: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: JW9VEUpPQX6Yip1p8OuIfJey2xwoc83kLB7ewV443Q0=)
9: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: pHntxFpGcz85fh4g8wJJV0K9ZMyE2AlZpDPCheVdfGE=)
10: 5C5998765AD611EFA2E29C7BC4F9AE02.roa (hash: I3gilpNI/WjtxsTD/w6Z3Y+IRfSXnYHa5irJjXL586Y=)
11: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: ZGq5JFpnBl6F/9RJYSzWIqvoJrxf/ut9GoB7c3G4b0w=)
12: F1120B125C7311EF9CC47281C4F9AE02.roa (hash: lWRvTuPg6LzSZBPd+6lJM0jAzSYZ9gW7/FAk9bnrczc=)
13: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: pC+fVhWZhAlHI54GzrYegWShgGirXMUII/btkAhefI4=)
14: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: vkdEUpa0uX2LdRNKslgCoqxAxrazYilRXx4dGIkC7ss=)
15: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: tm6lZWT2jSaQ2mTovYZkiilxmKWiSUYMcY5Ywr80DlM=)
16: EF706AC45C7311EF9CC47281C4F9AE02.roa (hash: KFqiJvZSOQ4AGYSeiVNs4qK0DY9PSIDgrHR+mxW9KOs=)
17: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: tZHLP6nM/PTOaw/rmeUMVa1wU4QqlWqKu6p2vcEjWm8=)
18: F097E10C5C7311EF9CC47281C4F9AE02.roa (hash: 7CjS9ffPyOrzJz1ZAktWX3KaOjOKC/5jGyfAIJ4BJyo=)
19: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (hash: LT9r+sRto5ZOYudi5sFYiwbtxYl/cY+w1R+R7OKpEeI=)
20: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (hash: P6z1l/i5fCMa+njXzS/IVZH5AnBAQ64cA+kn7DDOLo0=)
21: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: SGgawQJ8e+bc7GkpKZMh+cEtFBap2rFAVcln1BmNOkI=)
22: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: bo4+lqzgHx9mwwzNsiPnPqvLCTaS+zSdlr02VCrtbuY=)
23: 6201F1DEC46F11F08682F936C4F9AE02.roa (hash: FY0t2N10iRK+Zr0ip8svKKHBrZSNX6MAybdSYEAFs30=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 14:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13942 (0x3676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Dec 4 14:43:05 2025 GMT
Not After : Dec 11 14:43:05 2025 GMT
Subject: CN=69319df9-51e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:34:e6:3b:ca:93:3c:b8:8c:2c:26:a9:c7:
93:05:2f:1e:d8:10:ed:83:22:ad:9d:7d:2e:12:c3:
09:8b:50:8e:62:d6:7d:30:9c:25:ca:28:0d:0a:8f:
6b:fa:55:59:18:8c:70:e4:ac:f1:8f:6a:eb:62:62:
38:84:76:1a:ad:36:56:31:90:44:d8:10:c3:c3:a5:
86:ab:da:d6:31:3f:00:ec:bd:4c:ec:73:7b:0b:92:
de:18:1c:4f:5a:93:c0:28:93:e2:fc:08:f6:c7:72:
89:0d:fa:ad:c9:0e:bd:cc:e4:27:e0:86:2c:ba:c2:
3b:88:0a:6c:8f:70:70:1d:29:9b:d4:01:57:b3:27:
40:c4:45:05:1a:a3:c4:3c:80:0b:35:90:fa:e5:d7:
79:54:56:32:69:47:cb:62:f8:b8:0e:c3:e3:07:6d:
42:c1:d9:6c:44:c2:3f:75:56:14:9f:c3:97:92:71:
6c:5b:7a:97:25:fe:4b:1a:35:61:c1:04:d8:21:fc:
13:2e:bb:ce:f1:bd:ca:54:f6:cd:da:50:00:48:2a:
82:b6:97:f3:29:25:31:46:e1:be:ce:13:1e:89:39:
c4:9f:9f:de:5a:6a:4b:fa:ec:93:3f:80:68:27:2e:
69:9e:75:ca:45:2b:ff:95:16:4f:15:20:a3:5a:a8:
e8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EF:CE:23:0B:CE:24:4E:4F:DB:B2:1B:85:D3:F8:B1:BE:B4:52:87
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:a1:cd:f4:b1:66:58:ee:41:96:61:51:c1:81:6e:4d:d2:ad:
90:a9:30:d9:36:f1:b4:4a:87:9b:da:38:ba:51:ee:1e:24:04:
12:05:13:c4:80:f1:d5:56:73:06:7d:05:69:6f:d1:39:4e:b0:
51:30:76:64:06:b7:e9:a8:19:18:35:ab:fc:a2:45:3b:b2:70:
c3:d7:59:16:4f:ae:7b:09:ec:28:07:6c:af:3a:fa:c8:2d:9a:
f1:30:fa:5c:fe:c4:19:9e:eb:b6:60:61:c2:ad:ab:76:6e:f2:
9d:9e:35:8a:84:ea:8e:0a:27:11:4b:d0:dc:65:ee:51:b3:e1:
a7:8c:5c:e3:89:7c:3d:7c:fc:a1:f6:a1:fc:09:00:0f:04:ab:
dd:0a:4a:e2:b9:fa:33:46:4b:17:9f:11:12:68:0c:5b:cf:d1:
f4:5d:97:9c:34:ce:cc:b8:06:b2:41:cd:06:72:81:74:10:c9:
d6:f0:55:f4:2c:ff:fc:05:17:3d:42:f2:93:26:49:83:df:51:
39:44:5b:fc:68:e8:a1:af:1b:94:ae:0e:a2:69:4a:bc:3e:f6:
7c:4b:d6:a2:d9:90:ed:e5:6e:a2:21:6d:bb:9c:d4:2d:07:40:
03:b1:88:3b:22:ab:c8:7d:b0:63:d0:67:4e:d8:b1:41:f0:b6:
01:88:b2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 07:26:48 2025 by rpki-client