This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
File: WCInA0DzKvjXCSJhC3CA_DQXes8.mft (raw, json)
Hash identifier: aJVyTsawxZayZLxe7EaWCf0ViBc/B2yGZ5x7dt/N5pM=
Subject key identifier: 4B:F1:84:70:46:14:32:D1:71:1D:09:5B:65:29:33:AA:04:80:71:E0
Authority key identifier: 58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF
Certificate issuer: /CN=A91F742D/serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
Certificate serial: 05E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
Manifest number: 05DF
Signing time: Mon 22 Dec 2025 22:08:43 +0000
Manifest this update: Mon 22 Dec 2025 22:08:43 +0000
Manifest next update: Mon 29 Dec 2025 22:08:43 +0000
Files and hashes: 1: WCInA0DzKvjXCSJhC3CA_DQXes8.crl (hash: RicNm1w8G9LL+yC1zVAW4BwZvL4CSMpYs0CLqKcBIuo=)
2: 78423A52DE2911EB9B09A334C4F9AE02.roa (hash: eAEKnlDfmbmvzyOLqZ04+l0qIxLGX9JSF33CVH6hcIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl
rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 22:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1508 (0x5e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F742D, serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
Validity
Not Before: Dec 22 22:08:43 2025 GMT
Not After : Dec 29 22:08:43 2025 GMT
Subject: CN=6949c16b-04b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:cd:ef:59:f5:6a:59:7d:7a:1b:6e:e7:9f:
e7:91:07:e9:60:c6:5e:b9:f9:13:86:59:4c:65:f5:
e9:85:21:2a:d6:4b:81:73:52:13:d0:6d:99:df:f6:
1d:9f:a5:da:cf:68:54:b1:e0:b8:10:fc:b7:8a:92:
2e:0c:a2:9d:9a:e1:7a:96:67:b4:44:70:54:6f:da:
84:0c:1a:48:f3:9d:fc:28:68:df:de:77:d1:f3:c3:
2f:01:28:89:c6:b1:ac:5c:ca:25:83:4c:06:2c:16:
ab:b7:87:4a:00:b6:4f:18:48:44:84:c5:18:86:1e:
02:e8:f9:79:c8:2c:81:e8:bd:25:31:d6:8c:1d:d1:
21:7a:b8:cd:3c:60:1f:c1:a5:87:a8:11:cf:9d:00:
7f:88:1c:a7:8c:6d:c7:8a:e7:24:d8:78:18:8b:95:
6a:79:98:b0:4b:78:a7:e0:08:e1:03:88:b5:dd:57:
50:b0:d3:db:18:fc:7f:fc:b4:8c:83:fa:c6:83:46:
f2:65:8e:32:e5:a2:53:71:8a:82:b3:c3:46:37:f9:
b9:2f:82:09:0e:86:cc:41:a8:c4:ee:01:ed:d0:af:
03:76:61:56:c2:23:94:20:7a:cc:aa:9f:61:ae:03:
a8:2d:96:df:5b:d6:2b:86:4c:92:d6:37:a4:b7:6f:
26:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F1:84:70:46:14:32:D1:71:1D:09:5B:65:29:33:AA:04:80:71:E0
X509v3 Authority Key Identifier:
keyid:58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b5:1e:8f:75:54:f8:b8:fb:13:5a:23:b5:e9:92:37:d7:e7:
12:cd:33:7a:96:38:b6:d9:81:1d:85:6b:fb:01:ac:c5:4d:0e:
6d:6e:67:e6:37:ca:08:f7:c3:17:0c:d7:9b:27:3a:af:7e:cd:
77:31:d3:43:7c:e2:61:d6:c5:41:1a:b7:ee:b4:71:2f:e1:60:
88:0b:7d:01:a6:98:91:61:f6:db:39:ec:60:e3:ce:c2:2c:ad:
cf:44:15:e5:38:fc:72:f2:3b:2b:d5:2a:ec:2f:c8:2c:f1:f5:
5f:72:26:3a:14:15:40:e2:5c:7d:b2:00:2f:ca:6c:39:85:7d:
73:67:08:38:97:57:03:ed:35:f9:be:3f:93:b4:75:6d:e7:72:
9a:1f:54:7c:70:3e:52:7e:cb:d4:7c:a7:d8:12:1b:a9:67:5a:
ea:03:fa:77:10:d8:e2:6c:06:2d:6d:b4:e4:cb:73:dd:78:cc:
82:3d:e0:40:41:82:6e:b8:f6:15:57:a2:34:1a:3b:d7:0c:5b:
18:fe:1c:38:df:f5:f0:56:79:2b:a6:81:6c:5b:18:31:5b:9f:
0c:97:bb:0b:fc:81:d9:db:79:36:f3:fb:eb:0f:4c:80:15:48:
ed:90:a8:0b:5b:24:ac:ff:7c:14:9a:2e:19:61:a1:81:db:6b:
9f:06:33:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:07:40 2025 by rpki-client