This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
File: FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft (raw, json)
Hash identifier: oXM0zfNvwr/73chqhLGATWCvmd9ObpV4WI8LZZ+/0JU=
Subject key identifier: ED:46:23:54:07:6E:36:F2:C5:D3:23:D8:AC:C5:31:1A:B6:50:E4:0A
Authority key identifier: 16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45
Certificate issuer: /CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
Certificate serial: 1982
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
Manifest number: 1974
Signing time: Mon 22 Dec 2025 16:10:42 +0000
Manifest this update: Mon 22 Dec 2025 16:10:41 +0000
Manifest next update: Mon 29 Dec 2025 16:10:41 +0000
Files and hashes: 1: FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl (hash: Um7srrULV9PscYTqN4RDHZczj4RLiT8U7reki7un/M8=)
2: 543AF5B283D911E78F2FA066C4F9AE02.roa (hash: XS/tQXFr6hMyKrYJ8vxPUjZePNffAHjlSJ+Stv9rn5s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl
rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 16:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6530 (0x1982)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A0C0, serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
Validity
Not Before: Dec 22 16:10:41 2025 GMT
Not After : Dec 29 16:10:41 2025 GMT
Subject: CN=69496d82-1c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:e9:e9:a2:d1:5b:dd:f6:4e:fd:56:f4:f6:
7f:d7:03:12:bd:fa:a7:aa:18:ab:48:30:7a:c0:13:
5d:88:75:10:47:fa:81:19:e2:fb:cd:f6:42:bc:a8:
91:93:5e:f9:c2:58:5f:07:bd:3e:a9:be:ce:ff:f1:
7f:0f:52:c1:00:6b:6b:76:05:01:f7:5d:c2:3e:56:
9d:88:60:d1:1a:d9:a5:0e:1a:89:a4:52:6a:7f:7a:
f2:b9:f9:28:fe:c1:cd:e4:b4:36:9e:c2:b8:9b:58:
7d:6f:b5:0e:5d:0d:ec:60:be:01:f8:fc:34:4c:40:
e4:19:0a:34:d6:9c:22:d5:2f:7f:e4:75:04:51:1e:
58:9e:cb:cd:28:68:42:0f:83:4d:19:7b:7b:10:18:
36:ee:29:1c:b5:5e:22:c0:3d:2b:de:3c:f9:bf:f3:
11:d3:0b:b1:0e:52:f1:85:d5:d6:af:9b:8f:35:9f:
8f:c0:08:19:20:23:8a:b0:31:cd:01:14:b5:fc:f5:
12:d8:0d:9f:18:da:f5:f3:94:7d:d6:79:a9:61:f0:
94:33:13:68:5e:91:2f:b6:9c:14:04:6f:2f:1e:5b:
2c:d7:14:09:26:dc:53:90:e8:0f:49:59:d8:94:15:
ca:b5:18:be:d4:f7:72:dc:31:1a:6a:2a:fa:07:39:
3b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:46:23:54:07:6E:36:F2:C5:D3:23:D8:AC:C5:31:1A:B6:50:E4:0A
X509v3 Authority Key Identifier:
keyid:16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:68:a5:25:1f:cf:03:81:f4:ee:42:73:4d:83:47:8f:a9:28:
3c:ba:23:4e:b2:ba:f0:ba:ee:e8:69:fb:83:34:2a:66:08:cc:
7b:f0:99:3d:0d:1e:98:67:93:df:86:77:9d:98:67:a6:65:d3:
33:34:9b:7b:11:88:6c:cf:b6:d8:a9:36:6c:1a:36:47:5f:cc:
f4:a8:87:19:38:7f:a0:d2:12:11:57:46:b8:8a:db:f4:08:10:
41:13:f1:52:f4:94:c3:57:bb:81:44:55:51:69:39:93:7d:b5:
be:45:df:a0:26:67:80:58:a7:1d:32:84:f8:46:21:2d:5e:be:
2e:bb:1f:04:eb:4e:9a:cf:b8:22:49:69:15:57:21:67:bb:83:
28:93:3b:54:77:9f:1c:6a:98:ed:e2:4c:a8:e8:78:ab:29:11:
6d:e8:3d:b7:a1:8d:f0:8c:22:19:ce:85:12:91:0a:61:cf:19:
1e:fc:97:cd:fd:f0:68:e6:fe:80:c2:b4:fa:ff:cc:32:12:61:
ee:9a:43:6b:54:88:6c:2c:0e:ec:f7:6a:c9:ba:ad:f1:ed:46:
6e:48:b0:ad:6f:37:7e:3b:e7:a2:f3:23:a2:79:c3:e2:40:e8:
ca:48:9b:39:8d:fa:3f:cc:e6:a9:78:9a:96:d7:55:d0:a8:ea:
73:20:5e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:50 2025 by rpki-client