This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft
File: WFBPIARWFTaBikTQvkFutQVej0g.mft (raw, json)
Hash identifier: JuZS/YKs8fcaqgHDIvquK8VY5KPuKxYhTTZJhl6e+n4=
Subject key identifier: 1D:52:0C:D9:73:54:17:E5:40:F4:3D:DC:85:42:AE:77:68:78:6C:3C
Authority key identifier: 58:50:4F:20:04:56:15:36:81:8A:44:D0:BE:41:6E:B5:05:5E:8F:48
Certificate issuer: /CN=A91EEC3B/serialNumber=58504F2004561536818A44D0BE416EB5055E8F48
Certificate serial: 19C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft
Manifest number: 2D88
Signing time: Wed 24 Dec 2025 16:12:52 +0000
Manifest this update: Wed 24 Dec 2025 16:12:51 +0000
Manifest next update: Wed 31 Dec 2025 16:12:51 +0000
Files and hashes: 1: WFBPIARWFTaBikTQvkFutQVej0g.crl (hash: iMsoHoxy48HJJ4BAH940r0yfoPzt5IrT1popHvQf7RI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.crl
rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 15:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6594 (0x19c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEC3B, serialNumber=58504F2004561536818A44D0BE416EB5055E8F48
Validity
Not Before: Dec 24 16:12:51 2025 GMT
Not After : Dec 31 16:12:51 2025 GMT
Subject: CN=694c1103-31df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:61:e2:6d:14:af:e0:45:be:03:44:5f:ae:
51:93:d5:79:4f:79:83:ba:1f:a7:a3:58:9a:b3:8b:
02:2d:85:bc:53:78:cb:0c:f4:30:89:bd:41:28:cf:
a4:7a:a4:e7:27:28:7f:a0:19:80:8c:17:41:15:7b:
7d:11:3a:9e:94:13:2f:52:cc:9e:b3:df:15:06:d8:
5e:a6:a9:d4:69:0a:0b:d7:60:23:2e:9b:cc:b9:e4:
74:81:e4:64:e6:ff:4b:71:16:1d:67:6b:4f:d6:58:
83:74:03:76:15:fc:7d:33:e5:3b:23:3a:57:4e:99:
0d:ab:7a:c3:56:01:6b:e4:27:92:f5:0a:08:6d:81:
66:65:d5:87:e8:9c:31:ed:5e:30:73:c8:f8:95:77:
ee:3b:71:15:a8:8d:80:57:a6:6b:36:08:a9:92:5e:
2a:cc:18:55:17:be:86:79:1b:be:68:79:9d:ee:60:
6a:12:1b:b6:03:17:04:3e:74:2e:3a:24:44:d3:fc:
2e:5f:5c:df:aa:ab:ca:0d:98:e7:ea:2c:52:99:a2:
dc:6d:d7:30:67:f9:f8:2b:0f:68:22:1a:44:35:cb:
12:37:53:f1:57:56:f1:5e:05:ca:69:7f:b7:96:41:
ef:e1:09:71:16:e5:8f:f5:72:df:2d:04:e5:c6:ac:
39:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:52:0C:D9:73:54:17:E5:40:F4:3D:DC:85:42:AE:77:68:78:6C:3C
X509v3 Authority Key Identifier:
keyid:58:50:4F:20:04:56:15:36:81:8A:44:D0:BE:41:6E:B5:05:5E:8F:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:2f:c4:9d:a1:75:8b:eb:c6:b5:19:18:3f:1a:69:ec:31:d7:
f3:ac:0d:67:4d:28:a3:f5:7e:39:0a:de:11:ce:a9:0a:4d:d8:
d7:7e:b2:9d:48:0f:29:2f:61:bf:7a:b4:7f:ef:12:b1:71:d2:
ef:71:6f:55:01:d7:58:be:f4:77:4e:78:ca:f0:e1:01:7e:67:
71:b0:c3:69:3d:28:01:e7:22:98:a6:c1:9e:38:75:53:24:97:
d4:ff:d2:39:ba:69:da:d2:64:ee:6f:d5:1c:5d:0b:ad:f7:f1:
ea:03:f9:4b:54:eb:e8:f1:64:3e:67:8e:bb:d5:f7:d0:96:9a:
0f:c1:f8:43:0f:c1:d7:84:37:05:19:47:d2:82:b3:5e:c3:7e:
f2:41:d2:51:0d:a1:a6:20:9e:3e:db:8b:dc:c3:75:58:7b:cc:
6d:79:97:06:eb:66:67:e5:2a:c1:9a:b5:95:7a:d6:26:bc:ea:
cb:5f:7d:a2:15:97:9a:ff:97:97:55:0b:99:e8:22:77:04:d1:
77:dc:0d:72:dd:85:26:bd:ee:70:dc:f7:dc:8d:ac:34:f7:16:
f2:38:c8:8b:db:7a:86:1e:c2:c2:26:a3:ad:b8:78:db:1c:55:
c1:3a:6d:18:60:48:04:34:ec:53:74:f3:7f:41:49:ab:11:47:
70:93:db:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVDM0IxMTAvBgNVBAUTKDU4NTA0RjIwMDQ1NjE1MzY4MThBNDREMEJFNDE2RUI1
MDU1RThGNDgwHhcNMjUxMjI0MTYxMjUxWhcNMjUxMjMxMTYxMjUxWjAYMRYwFAYD
VQQDDA02OTRjMTEwMy0zMWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp2Nh4m0Ur+BFvgNEX65Rk9V5T3mDuh+no1ias4sCLYW8U3jLDPQwib1BKM+k
eqTnJyh/oBmAjBdBFXt9ETqelBMvUsyes98VBthepqnUaQoL12AjLpvMueR0geRk
5v9LcRYdZ2tP1liDdAN2Ffx9M+U7IzpXTpkNq3rDVgFr5CeS9QoIbYFmZdWH6Jwx
7V4wc8j4lXfuO3EVqI2AV6ZrNgipkl4qzBhVF76GeRu+aHmd7mBqEhu2AxcEPnQu
OiRE0/wuX1zfqqvKDZjn6ixSmaLcbdcwZ/n4Kw9oIhpENcsSN1PxV1bxXgXKaX+3
lkHv4QlxFuWP9XLfLQTlxqw5ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1SDNlz
VBflQPQ93IVCrndoeGw8MB8GA1UdIwQYMBaAFFhQTyAEVhU2gYpE0L5BbrUFXo9I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0
MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9XRkJQSUFSV0ZUYUJpa1RRdmtGdXRRVmVq
MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dGQlBJQVJXRlRhQmlrVFF2a0Z1dFFWZWowZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9XRkJQSUFSV0ZU
YUJpa1RRdmtGdXRRVmVqMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJL8SdoXWL68a1GRg/GmnsMdfzrA1nTSij9X45Ct4RzqkKTdjXfrKd
SA8pL2G/erR/7xKxcdLvcW9VAddYvvR3TnjK8OEBfmdxsMNpPSgB5yKYpsGeOHVT
JJfU/9I5umna0mTub9UcXQut9/HqA/lLVOvo8WQ+Z4671ffQlpoPwfhDD8HXhDcF
GUfSgrNew37yQdJRDaGmIJ4+24vcw3VYe8xteZcG62Zn5SrBmrWVetYmvOrLX32i
FZea/5eXVQuZ6CJ3BNF33A1y3YUmve5w3Pfcjaw09xbyOMiL23qGHsLCJqOtuHjb
HFXBOm0YYEgENOxTdPN/QUmrEUdwk9tO
-----END CERTIFICATE-----
Generated at Wed Dec 24 17:40:35 2025 by rpki-client