This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
File: G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft (raw, json)
Hash identifier: IMoXcTep8s3n94veCwILoNVvD5YRIhwcb/3r1o94NXQ=
Subject key identifier: D7:C5:AB:50:B1:BE:93:92:5A:5A:AD:AE:4A:AA:FC:64:24:D3:9F:42
Authority key identifier: 1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87
Certificate issuer: /CN=A911DF56/serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
Certificate serial: 57
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
Manifest number: 55
Signing time: Wed 17 Dec 2025 06:44:57 +0000
Manifest this update: Wed 17 Dec 2025 06:44:57 +0000
Manifest next update: Wed 24 Dec 2025 06:44:57 +0000
Files and hashes: 1: G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl (hash: Wko4FC8+RDj0R0rETtcc/f1CwH5pGbDHA+dn2baQnDw=)
2: C31F44C25BD211F0962D6F5BC4F9AE02.roa (hash: BfA3s4/uFwS/+pxJ7ydc7p+vBZQ3SLc68WxBr74xpL8=)
3: 6D18C6E88FF311F0B3309340C4F9AE02.roa (hash: c9l4QPfF5HgbdK2wjGcEEf1Z5xYqEsv1DWpNYE3IzBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl
rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 06:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF56, serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
Validity
Not Before: Dec 17 06:44:57 2025 GMT
Not After : Dec 24 06:44:57 2025 GMT
Subject: CN=69425169-4c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:76:b9:d0:6b:56:4d:2a:87:85:82:30:41:40:
b5:1d:84:08:a8:ee:ee:83:31:d4:d4:a5:d8:6f:06:
c1:dc:38:1b:45:e5:26:77:ef:7a:31:58:d4:45:14:
56:bb:a9:27:fc:2f:85:61:35:0c:ac:54:b5:8a:3e:
14:ca:2f:fc:1b:79:2a:87:46:4a:ae:20:96:27:b1:
49:90:63:47:70:05:bb:26:ad:dc:17:c0:e0:64:f4:
55:b9:b6:f4:a1:c6:d2:a4:a6:fa:35:4d:bf:08:8b:
6f:61:e0:72:07:63:b6:33:b5:a2:8a:85:8a:5e:f0:
14:ad:cf:36:ba:95:b4:94:99:ac:de:9a:03:69:80:
e5:bd:77:c3:24:79:a4:92:13:18:06:39:de:05:0e:
98:02:bc:a7:96:5a:31:20:1d:ff:0e:49:05:e0:f5:
d6:06:67:fb:25:67:6a:50:78:0a:c9:2a:19:f8:2f:
ae:5e:5c:f2:d6:38:87:bc:a2:ab:59:2c:d0:83:43:
26:b1:44:00:d5:eb:23:62:e1:bb:40:4d:d5:dd:de:
a3:d5:15:82:99:2c:78:49:c2:49:c8:4e:b4:26:01:
a5:33:3c:ce:4b:06:7e:10:16:09:27:69:79:25:83:
c0:30:d3:e4:93:7d:2a:2e:e0:e7:7c:bb:8e:1d:a9:
b4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C5:AB:50:B1:BE:93:92:5A:5A:AD:AE:4A:AA:FC:64:24:D3:9F:42
X509v3 Authority Key Identifier:
keyid:1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ea:4c:de:21:73:91:de:8b:31:ab:47:ac:6e:9a:05:56:28:
dd:b6:bb:37:4c:64:de:c9:53:0d:46:80:ed:c9:79:27:2c:56:
36:9c:d2:42:49:cf:0c:da:c0:4d:f0:ca:5b:5c:45:1d:18:ae:
31:8c:29:1c:06:dc:43:ca:ea:5e:cb:71:02:b6:ea:9b:ca:6d:
b0:b9:51:9e:cb:29:78:e6:76:0c:fe:c9:3a:2f:cb:9f:ef:db:
e0:c7:56:c5:31:a5:c0:af:a3:62:f5:56:e9:f6:0b:4f:6c:06:
99:b7:7e:08:2f:0f:ce:44:e8:cb:94:2f:c8:de:20:24:88:a4:
b0:65:8d:f8:ed:ee:c4:30:6e:29:b7:5c:be:e6:06:ce:fb:4a:
af:c6:ba:e7:f7:b0:57:e8:f3:d4:9a:55:99:69:e1:f7:a1:7d:
33:51:69:04:24:03:39:8a:79:7c:7e:ea:e7:60:28:27:0f:f8:
cc:77:57:a7:9d:e2:d8:db:61:1b:90:e8:d4:ab:60:93:fb:2b:
16:16:ac:77:7d:b9:c9:fb:2b:5a:91:b6:91:44:e7:66:e1:81:
d9:b7:3c:60:7d:bf:d2:ad:26:17:f4:6a:fb:93:3c:a9:ca:57:
38:8e:d9:67:4b:c0:22:3b:97:80:ea:18:fc:80:69:26:70:c4:
71:ef:b5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:26:12 2025 by rpki-client