This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft
File: p-wiWGgvb66fhDj6JicYnlQvTe8.mft (raw, json)
Hash identifier: qIxk4D2GK7PumW5hbFNvkF+cpB1ZfkAE18qENP7zLs0=
Subject key identifier: EA:84:1A:41:AD:BB:C7:E0:EF:7D:BB:6D:FE:4C:50:1D:2A:E3:74:75
Authority key identifier: A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF
Certificate issuer: /CN=A91FA92A/serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF
Certificate serial: 1A59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft
Manifest number: 1A48
Signing time: Wed 24 Dec 2025 16:09:28 +0000
Manifest this update: Wed 24 Dec 2025 16:09:27 +0000
Manifest next update: Wed 31 Dec 2025 16:09:27 +0000
Files and hashes: 1: p-wiWGgvb66fhDj6JicYnlQvTe8.crl (hash: eBdt76tKvQh6+4E6d2vwS/kajb0avDnk4QRAH4sxcs4=)
2: 3A1C441A5A4E11E7965D9A75C4F9AE02.roa (hash: chUIzbNJwC8TKgIYKXoVKKtNLNEU3qxTe43tCLXzLSw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl
rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 16:09:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6745 (0x1a59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA92A, serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF
Validity
Not Before: Dec 24 16:09:27 2025 GMT
Not After : Dec 31 16:09:27 2025 GMT
Subject: CN=694c1038-3a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:54:88:aa:b6:f4:78:44:f8:45:5d:af:fd:7b:
61:f5:99:04:71:74:17:94:68:ec:bb:25:ad:df:7c:
8b:30:64:fa:8e:05:be:96:6c:ee:a2:5f:0a:ab:75:
ce:5f:ef:1c:a9:7b:de:68:e1:11:9d:ac:02:df:c3:
d2:62:a3:9b:38:14:e1:38:db:aa:50:51:7f:17:e2:
c4:c4:b6:b1:7a:2a:62:d9:9c:dd:ba:41:51:29:b9:
d1:b8:94:84:1b:52:5f:c3:95:4a:8e:f9:27:df:68:
7a:79:8f:f8:fa:d0:23:c7:c3:f6:a9:86:3c:13:f3:
e4:a8:17:c6:dd:8b:d9:b2:41:ae:1f:0b:ed:42:e2:
3f:ed:95:72:0c:8d:5b:30:a6:a2:65:bb:12:e1:f9:
72:cd:81:8a:ab:f6:59:3d:64:65:43:e1:09:e2:27:
bd:31:6d:67:3d:25:31:73:b9:1a:ff:a1:4e:15:08:
68:39:5d:8a:96:52:27:33:b3:d8:6b:c4:22:f3:33:
1a:92:5f:f1:fe:56:e1:8d:fe:9f:59:69:dd:7c:d4:
e8:d8:e2:30:be:1f:50:78:24:46:54:df:2c:e6:a6:
67:3c:cb:34:78:c6:08:6e:70:20:94:4a:38:05:00:
50:85:3b:0a:d7:30:0e:d6:8d:7c:11:62:44:6a:8a:
84:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:84:1A:41:AD:BB:C7:E0:EF:7D:BB:6D:FE:4C:50:1D:2A:E3:74:75
X509v3 Authority Key Identifier:
keyid:A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a6:fd:50:dc:f1:6a:e4:e5:40:3b:be:6a:67:cd:ca:a4:08:
82:46:94:87:ce:be:35:88:df:ce:ff:54:e5:8f:c5:94:db:a8:
72:61:d2:e1:8a:ab:2e:e2:85:3f:83:09:a5:9a:bf:fd:ef:62:
1d:ba:ca:55:82:8f:e9:bd:24:f8:7c:17:f8:5a:43:9f:70:29:
0b:99:cb:e8:79:8a:a8:c8:a1:84:84:f4:44:57:ce:35:1c:c0:
62:66:77:85:49:e3:e4:8f:81:4d:68:52:36:35:70:a3:64:9a:
fe:55:56:81:ca:53:76:97:d2:05:5e:0f:fb:b6:b8:a5:a5:d7:
17:fe:87:f9:67:b0:f4:a2:c9:f0:6e:1a:c6:da:02:7a:d1:bc:
a3:14:d4:41:ff:ca:17:2f:2f:69:e0:5f:03:7d:a1:31:de:62:
5d:02:5a:60:fc:8f:e0:11:0b:c1:02:95:e2:c5:b8:ca:83:f8:
5b:b6:0c:8f:3f:2b:db:22:14:a9:03:5a:49:c1:07:31:2b:a4:
e0:93:ba:00:07:6e:42:84:c4:3b:96:3e:4d:e1:21:0d:db:35:
a0:6e:6b:a8:30:98:27:d8:82:3a:2b:94:89:38:26:6a:7d:59:
28:1f:63:56:16:ed:f9:e8:02:e4:b7:13:53:e3:1e:5f:df:79:
1e:67:b6:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE5MkExMTAvBgNVBAUTKEE3RUMyMjU4NjgyRjZGQUU5Rjg0MzhGQTI2MjcxODlF
NTQyRjRERUYwHhcNMjUxMjI0MTYwOTI3WhcNMjUxMjMxMTYwOTI3WjAYMRYwFAYD
VQQDDA02OTRjMTAzOC0zYTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3VSIqrb0eET4RV2v/Xth9ZkEcXQXlGjsuyWt33yLMGT6jgW+lmzuol8Kq3XO
X+8cqXveaOERnawC38PSYqObOBThONuqUFF/F+LExLaxeipi2ZzdukFRKbnRuJSE
G1Jfw5VKjvkn32h6eY/4+tAjx8P2qYY8E/PkqBfG3YvZskGuHwvtQuI/7ZVyDI1b
MKaiZbsS4flyzYGKq/ZZPWRlQ+EJ4ie9MW1nPSUxc7ka/6FOFQhoOV2KllInM7PY
a8Qi8zMakl/x/lbhjf6fWWndfNTo2OIwvh9QeCRGVN8s5qZnPMs0eMYIbnAglEo4
BQBQhTsK1zAO1o18EWJEaoqEjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqEGkGt
u8fg7327bf5MUB0q43R1MB8GA1UdIwQYMBaAFKfsIlhoL2+un4Q4+iYnGJ5UL03v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTkyQS80NTc5N0M1QzVB
NEQxMUU3OTlGNDZCNzRDNEY5QUUwMi9wLXdpV0dndmI2NmZoRGo2SmljWW5sUXZU
ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Atd2lXR2d2YjY2ZmhEajZKaWNZbmxRdlRlOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTkyQS80NTc5N0M1QzVBNEQxMUU3OTlGNDZCNzRDNEY5QUUwMi9wLXdpV0dndmI2
NmZoRGo2SmljWW5sUXZUZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCppv1Q3PFq5OVAO75qZ83KpAiCRpSHzr41iN/O/1Tlj8WU26hyYdLh
iqsu4oU/gwmlmr/972IduspVgo/pvST4fBf4WkOfcCkLmcvoeYqoyKGEhPREV841
HMBiZneFSePkj4FNaFI2NXCjZJr+VVaBylN2l9IFXg/7trilpdcX/of5Z7D0osnw
bhrG2gJ60byjFNRB/8oXLy9p4F8DfaEx3mJdAlpg/I/gEQvBApXixbjKg/hbtgyP
PyvbIhSpA1pJwQcxK6Tgk7oAB25ChMQ7lj5N4SEN2zWgbmuoMJgn2II6K5SJOCZq
fVkoH2NWFu356ALktxNT4x5f33keZ7ZN
-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:09 2025 by rpki-client