This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
File: G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft (raw, json)
Hash identifier: oeLG9RpvvAfu0cru5a1Wyt/W+QkjXZe7XC6x7EOb5LY=
Subject key identifier: E2:CC:0C:8F:B3:00:1C:85:3A:10:F0:9A:9C:DE:FF:DD:1E:AA:E8:F2
Authority key identifier: 1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45
Certificate issuer: /CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
Certificate serial: 0999
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
Manifest number: 19D0
Signing time: Sat 20 Dec 2025 17:07:21 +0000
Manifest this update: Sat 20 Dec 2025 17:07:21 +0000
Manifest next update: Sat 27 Dec 2025 17:07:21 +0000
Files and hashes: 1: G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl (hash: dGCRnK41QPqLk8IrkqMbgLlPrZeyde1/7BjXFpFFMbw=)
2: F70F5E7A505E11ED9947920DC4F9AE02.roa (hash: i9BL1rlX0oUvps1Va07G59cz+t1l/lyXzZ/KRVLbWW8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl
rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 17:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2457 (0x999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912611F, serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
Validity
Not Before: Dec 20 17:07:21 2025 GMT
Not After : Dec 27 17:07:21 2025 GMT
Subject: CN=6946d7c9-f4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:78:a6:e1:da:13:e5:a4:b7:59:83:2b:f6:
d8:95:52:a5:fd:72:3f:56:08:0b:4d:80:b9:e6:5c:
32:24:2d:f9:3d:f0:45:e1:a2:0a:fb:76:75:0a:2a:
e8:e1:ea:44:14:77:02:98:65:2d:04:19:97:ba:77:
3e:13:62:3b:e0:de:28:1e:a9:f7:61:df:0c:be:db:
9d:5d:e7:b5:ae:21:b2:32:5c:68:90:db:64:02:50:
87:45:da:c0:16:21:f6:19:cc:76:89:a1:83:57:fe:
8f:f3:63:14:e7:6b:1d:58:37:08:a9:79:d6:aa:4e:
ac:fc:0d:15:1a:f8:61:47:ac:59:05:6b:3d:c9:b9:
8e:67:32:f3:4a:c2:9f:ca:00:30:6b:86:1f:9c:2b:
f1:79:66:c8:8e:c4:28:ff:14:b5:90:01:41:04:9b:
0a:cc:fb:bb:dc:6f:6b:34:fe:79:0a:a0:a6:3c:0c:
2e:f2:d0:54:3b:0e:15:d6:30:c6:d6:0e:6c:79:30:
37:dd:3f:51:c2:49:04:b8:c8:c2:57:ef:5a:96:1a:
f6:32:32:70:36:7a:b5:44:c0:6f:ca:36:4c:a1:e4:
19:ca:18:61:f2:db:c9:a4:da:63:24:38:b2:74:32:
ef:43:3d:fe:10:95:ce:23:53:37:d2:4b:d4:1c:90:
84:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CC:0C:8F:B3:00:1C:85:3A:10:F0:9A:9C:DE:FF:DD:1E:AA:E8:F2
X509v3 Authority Key Identifier:
keyid:1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:16:d4:e7:66:3a:3f:53:a9:a0:c5:e6:d5:56:e2:1b:f5:0e:
11:c3:84:a6:8c:ea:3f:44:6e:ac:95:0c:63:fd:ad:79:7c:0c:
af:d3:3a:68:ca:f3:73:0c:c9:03:d0:2f:25:5f:2c:68:42:a1:
73:1e:41:be:de:1c:ea:fd:72:77:94:27:e6:2e:f4:cb:8f:23:
3a:65:6c:8e:e5:9c:54:8a:cf:7a:6e:6a:ae:36:36:4a:c9:8c:
6d:ce:17:a8:cc:fa:ee:b3:93:f6:65:92:56:e9:71:c2:cf:33:
09:c0:0a:cf:0b:d8:5d:bb:db:93:e2:9b:dc:6c:0a:02:74:65:
1e:65:1e:9f:99:8d:cb:85:6b:b1:1a:70:04:ef:35:ba:ac:5c:
9c:3a:54:67:4f:8b:d2:6f:99:dd:09:a4:1a:72:d5:67:63:4f:
5e:e7:c5:7e:f5:36:d5:63:63:d0:45:1c:81:6d:ed:c8:01:0b:
71:8d:6a:3e:8c:c1:69:2e:ed:cf:cc:77:30:e7:0e:14:c9:9f:
65:d8:ea:06:3e:13:97:87:fd:5d:b9:9a:60:a5:3d:f8:84:1f:
bb:0a:2c:fa:5a:0c:f3:19:da:ab:18:dd:ce:d9:7a:57:ee:cc:
9b:47:21:de:0a:19:0a:0c:77:bd:11:4d:52:de:e0:cf:6d:9f:
e4:fe:06:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:23:43 2025 by rpki-client