This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File: WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier: qTJvQ1amUfDRYHqRUOPGLeeUXLm7eIAE7iPdGkOsbzg=
Subject key identifier: 43:99:36:E3:66:CF:67:F9:1D:38:C1:F0:65:59:4C:60:86:C6:01:BA
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3690
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number: 359D
Signing time: Mon 19 Jan 2026 03:16:49 +0000
Manifest this update: Mon 19 Jan 2026 03:16:49 +0000
Manifest next update: Mon 26 Jan 2026 03:16:49 +0000
Files and hashes: 1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: sPTf+77QaQzQe5whQELEj55n/b600RtgZC60e+4jKbI=)
2: EF706AC45C7311EF9CC47281C4F9AE02.roa (hash: KFqiJvZSOQ4AGYSeiVNs4qK0DY9PSIDgrHR+mxW9KOs=)
3: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: pC+fVhWZhAlHI54GzrYegWShgGirXMUII/btkAhefI4=)
4: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: vkdEUpa0uX2LdRNKslgCoqxAxrazYilRXx4dGIkC7ss=)
5: 6201F1DEC46F11F08682F936C4F9AE02.roa (hash: FY0t2N10iRK+Zr0ip8svKKHBrZSNX6MAybdSYEAFs30=)
6: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (hash: LT9r+sRto5ZOYudi5sFYiwbtxYl/cY+w1R+R7OKpEeI=)
7: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: ZGq5JFpnBl6F/9RJYSzWIqvoJrxf/ut9GoB7c3G4b0w=)
8: F1120B125C7311EF9CC47281C4F9AE02.roa (hash: lWRvTuPg6LzSZBPd+6lJM0jAzSYZ9gW7/FAk9bnrczc=)
9: F097E10C5C7311EF9CC47281C4F9AE02.roa (hash: 7CjS9ffPyOrzJz1ZAktWX3KaOjOKC/5jGyfAIJ4BJyo=)
10: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (hash: P6z1l/i5fCMa+njXzS/IVZH5AnBAQ64cA+kn7DDOLo0=)
11: EFF618B85C7311EF9CC47281C4F9AE02.roa (hash: lIANGK6Kn2MugRFq01BJgGhUwBHYhGPRL+AhDQBA5Do=)
12: 493BCC24BC6911EFBA2E5C78C4F9AE02.roa (hash: ED0l+M3XW8yfiIKv/qBb5H5Y5anJhlkDWFxpGJ+C/jc=)
13: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: JW9VEUpPQX6Yip1p8OuIfJey2xwoc83kLB7ewV443Q0=)
14: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: SGgawQJ8e+bc7GkpKZMh+cEtFBap2rFAVcln1BmNOkI=)
15: BA0DF746D9F611F08511A4D47CD3641D.roa (hash: FaBVsUXWtdTBULefU8iO1BgtwzRuhinKdm9tVg3D5qQ=)
16: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: tm6lZWT2jSaQ2mTovYZkiilxmKWiSUYMcY5Ywr80DlM=)
17: 92B41AACB17B11F0A5D78E54C4F9AE02.roa (hash: bdFFvc6eNQU1+yjsu6zdGpd9HjnTWxx0y+6B+LSnliU=)
18: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: tZHLP6nM/PTOaw/rmeUMVa1wU4QqlWqKu6p2vcEjWm8=)
19: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: 7Y+BMS/66rPoGcFQGfUmmEmIY/lvqgpMP8T/jWrEFog=)
20: 5C5998765AD611EFA2E29C7BC4F9AE02.roa (hash: I3gilpNI/WjtxsTD/w6Z3Y+IRfSXnYHa5irJjXL586Y=)
21: AC8A67CA100311F085EE3D29C4F9AE02.roa (hash: T/rcx/oBePx/fFY5liuYl1FWNJgd5CikRWxOV60Eb+s=)
22: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: pHntxFpGcz85fh4g8wJJV0K9ZMyE2AlZpDPCheVdfGE=)
23: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: bo4+lqzgHx9mwwzNsiPnPqvLCTaS+zSdlr02VCrtbuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 03:16:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13968 (0x3690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Jan 19 03:16:49 2026 GMT
Not After : Jan 26 03:16:49 2026 GMT
Subject: CN=696da221-7a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:13:a0:a0:fa:81:8b:5b:11:ec:0d:3e:6d:5e:
30:7d:2c:fd:95:b5:f2:0a:5d:8f:09:88:54:98:0f:
9f:b3:db:e4:96:b5:35:1a:5e:a8:27:bf:3d:36:39:
b9:c8:0a:ff:10:7d:9a:5b:e9:13:10:77:58:60:c6:
8e:72:ba:de:4e:a9:36:2e:a2:66:59:2e:e0:9b:83:
1a:76:12:d3:80:e7:a8:af:44:eb:b0:de:d6:9f:90:
3f:55:af:48:c3:c1:3e:8c:1c:60:f5:74:e4:21:64:
6a:ea:7a:1a:7e:a4:d2:e6:68:93:b4:d2:f2:7f:18:
6f:9f:0f:a6:17:b5:b4:88:6d:34:5f:c9:40:51:35:
cf:12:ae:6e:a2:dc:59:c2:03:8d:e5:07:06:48:c6:
72:68:07:b4:37:44:8a:92:6c:27:64:ea:21:69:c3:
07:3f:f5:cd:c2:b9:54:7c:10:a0:13:f8:8d:8c:5b:
d8:91:9b:b2:fd:6c:97:09:52:63:fe:39:c7:e0:a2:
7b:03:90:b2:19:df:a7:d1:53:af:40:77:26:68:33:
3d:64:cd:03:0a:9c:6e:58:fe:19:c8:8a:ad:5c:e2:
5d:ec:62:8b:22:8f:d8:10:91:c1:64:cc:71:91:aa:
2f:b8:f9:e2:4c:de:f2:fd:ca:a8:e6:0d:ac:c2:b4:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:99:36:E3:66:CF:67:F9:1D:38:C1:F0:65:59:4C:60:86:C6:01:BA
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:60:df:5e:22:ea:ea:f9:8f:b4:47:3b:5a:14:95:4a:03:ad:
b4:82:e3:5f:d5:59:ab:1e:b9:f2:8f:97:0b:e8:44:31:73:9b:
67:bd:49:7e:db:67:51:06:f0:6a:3e:2c:69:6f:bd:ed:6c:8c:
5e:1e:06:f5:74:b9:c9:02:d1:0f:4d:26:42:e1:de:6d:94:59:
fc:07:2d:88:e2:1a:bb:f6:43:16:7e:ef:76:d5:3a:7d:47:50:
4a:8a:35:9e:3e:63:8e:2f:a2:e7:cd:c4:6d:f2:25:eb:5b:15:
2a:9f:85:5a:33:20:1a:55:9d:86:71:14:47:32:66:b8:0d:9e:
92:a3:bb:da:4a:ca:c3:9b:13:35:d7:54:7e:cc:c8:c8:cc:5c:
eb:5f:88:31:75:73:66:92:e7:a9:8d:21:d4:b9:38:4f:1e:04:
8d:78:f1:f3:34:65:00:fc:c5:44:77:cb:99:a1:f4:b6:f1:51:
cc:5c:3e:86:17:20:ce:fc:e4:41:c6:4e:b9:74:be:9e:b0:32:
1e:2d:33:fd:0b:ae:47:9b:80:2c:25:56:eb:ae:01:90:1e:0b:
57:0b:93:e5:f1:8f:3b:7f:d8:9a:59:b3:d6:a7:73:d0:15:94:
05:ec:34:67:b2:d3:71:8b:bf:9c:a1:a2:c4:02:ba:be:15:1a:
d7:3a:09:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:05:48 2026 by rpki-client