This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
File: wUIqDEz_JI1Rc1jr33tOgCuswOc.mft (raw, json)
Hash identifier: 3zWEfqDxlcUEDiwLHSJXYLWy9X4yAhddMG8/1xNV+FY=
Subject key identifier: 17:8C:5B:39:EC:34:E0:30:0C:14:07:B6:4D:A1:E2:13:9B:AA:9B:08
Authority key identifier: C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7
Certificate issuer: /CN=A91EB45A/serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
Certificate serial: 3505
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
Manifest number: 34FA
Signing time: Wed 24 Dec 2025 14:59:30 +0000
Manifest this update: Wed 24 Dec 2025 14:59:30 +0000
Manifest next update: Wed 31 Dec 2025 14:59:30 +0000
Files and hashes: 1: wUIqDEz_JI1Rc1jr33tOgCuswOc.crl (hash: nAMiYfGykoa/OPgA/zX7+4jY6MiBvQTjl+EiolObJis=)
2: 17BB4C20F17E11EAA3CC597BC4F9AE02.roa (hash: sb92Yiu1DkaA/Jlw4YPyCeHs7T2hutc7NkpwUwObZxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl
rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 14:59:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13573 (0x3505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB45A, serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
Validity
Not Before: Dec 24 14:59:30 2025 GMT
Not After : Dec 31 14:59:30 2025 GMT
Subject: CN=694bffd2-891e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a2:48:73:7d:73:a4:a2:40:f3:ac:ea:45:f1:
34:2a:b5:4a:aa:e6:8f:7f:74:39:a1:8d:0a:e2:7d:
f3:fc:37:b1:29:ff:d1:1e:01:29:91:4a:e5:0a:34:
59:e0:cf:78:b2:f8:b7:3f:a5:17:21:62:ce:11:b3:
ab:91:04:0f:7d:ab:0b:40:be:d7:bb:a7:0d:ff:56:
84:06:e7:76:44:f9:b7:74:5e:17:c6:a5:ae:81:80:
f6:df:e6:8c:59:3c:68:41:14:40:cf:fd:5e:a7:c6:
ff:d7:a3:cd:fc:f1:e7:31:a2:5d:20:a3:6f:7d:ea:
6a:fd:54:fc:a7:6d:67:22:02:27:6b:c5:88:cd:f1:
e5:07:83:c4:24:4a:74:cb:a8:e4:e9:80:e6:b4:4a:
37:92:2a:ed:08:dd:d4:6d:7f:d8:94:8e:78:b5:2a:
c4:11:04:e6:a4:ca:e8:1b:38:1d:32:2e:f1:68:0c:
b7:21:6c:e6:01:8d:6d:9c:e8:d4:37:5f:4d:6e:08:
b7:56:1e:68:bf:fd:1e:cf:25:6e:e8:7d:5e:5d:ed:
84:f5:8b:55:15:85:a5:eb:3e:be:92:19:e6:76:b2:
e4:65:0a:2f:21:2a:11:87:88:ff:12:ed:5a:ae:b9:
ce:2a:36:b5:e8:2b:00:c8:96:0f:af:58:a2:c4:a1:
15:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8C:5B:39:EC:34:E0:30:0C:14:07:B6:4D:A1:E2:13:9B:AA:9B:08
X509v3 Authority Key Identifier:
keyid:C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:32:33:35:dd:77:eb:cd:b0:2b:2e:03:b8:4a:58:a1:a4:33:
f6:30:90:0c:6f:a7:d5:fc:8e:52:2c:77:d5:1e:bd:08:c3:50:
b4:7a:57:48:f1:0e:4e:ff:d3:de:26:00:6e:de:85:2a:79:ff:
c1:ff:55:fc:d6:e3:f3:e4:8c:d5:f3:aa:8a:a0:14:59:1b:50:
f3:6f:4a:8c:68:b0:91:00:9c:88:83:89:ed:1d:d9:dc:79:8d:
5a:f2:08:e5:ba:6a:7a:6e:28:47:cc:a9:df:1a:a9:78:63:db:
70:f9:67:b3:c9:41:1d:75:fc:f9:e8:d4:e9:53:46:9d:95:65:
bc:58:f1:f9:02:ca:a2:b9:68:8c:cf:fe:27:5f:50:36:d5:68:
34:bb:6c:57:6d:01:79:d2:65:5c:c4:e3:89:c3:55:c6:d5:90:
77:c0:fb:72:a8:e9:81:ab:9d:15:48:25:20:9e:cc:13:59:1d:
1c:97:d5:fb:c8:e0:62:1b:db:8b:f9:18:50:41:ae:09:60:dc:
9c:5f:c1:3e:7d:f9:e2:17:7c:2f:58:d6:89:08:74:2a:f0:bb:
cb:f5:4f:94:5a:1f:9c:01:2b:a6:7d:48:de:d7:a2:f8:00:01:
36:09:09:46:2a:98:0c:f8:4c:a9:26:fb:fa:8d:19:10:ab:9b:
c6:f2:ee:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:15 2025 by rpki-client