This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json)
Hash identifier: QyG5wLjgEr7hRhBCc0QkkewfQfCkhSlK9MGLxi0kE7Q=
Subject key identifier: 6C:82:DC:91:96:79:C7:8A:C1:89:79:83:EA:82:7D:3F:BC:56:8E:D5
Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Certificate serial: 18C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
Manifest number: 18A8
Signing time: Thu 18 Dec 2025 16:21:26 +0000
Manifest this update: Thu 18 Dec 2025 16:21:25 +0000
Manifest next update: Thu 25 Dec 2025 16:21:25 +0000
Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: WraZzE+LQq8/puaOmL42g2DwNqWD+8OtqRPQxHimCdg=)
2: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: 2gFzBsEhEhcTbqin7FXKA5BqnV1mEmGbBayottd+FiM=)
3: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: QilVeNcrZMzdebQdu5lhKwqK5efz8FDEbIZ0Q0oTuqk=)
4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: J1isGAaAC1N3wCHlklcmvvBBqBFgE12sIwzwgEuPOdA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 16:21:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6341 (0x18c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Validity
Not Before: Dec 18 16:21:25 2025 GMT
Not After : Dec 25 16:21:25 2025 GMT
Subject: CN=69442a05-ef72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:22:f0:1a:c1:5d:66:90:c6:65:b2:21:26:
33:0d:5a:d1:7d:1e:87:17:ed:b9:74:79:eb:e6:1c:
26:c7:ff:0b:68:0e:24:a1:1b:bf:3b:8f:28:40:98:
5b:51:b9:cc:26:85:d6:b2:68:7a:a0:86:72:92:9f:
6b:96:f2:18:cf:3f:0e:86:78:dd:16:04:70:4d:22:
73:0c:86:f2:16:42:c5:e1:30:f5:5f:ef:83:b0:71:
5b:53:34:ee:64:bc:8c:97:be:72:2b:f4:59:67:0b:
60:20:5f:e8:ba:e8:27:aa:82:e9:61:20:28:a0:cd:
db:c2:df:ad:02:97:fc:58:cd:82:8d:8e:48:d0:96:
15:6c:01:13:1f:a1:4a:2f:e3:04:6c:f2:8b:e5:57:
e6:40:02:76:48:da:68:56:e9:80:28:cd:22:e8:44:
32:44:5e:8b:b0:dc:fc:39:28:78:c3:c4:75:81:24:
97:10:a8:9b:2b:52:a6:1f:d6:f5:d4:74:ac:ff:06:
37:d1:b0:50:be:c9:0e:6f:21:44:b8:3b:51:d7:7d:
e0:52:9b:6c:b0:b2:be:08:89:47:3b:e9:69:fb:06:
df:a7:d2:45:91:1c:11:c9:92:a5:8e:9e:25:e7:b3:
5e:67:6d:20:9b:86:da:f5:25:ad:a3:14:52:e5:51:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:82:DC:91:96:79:C7:8A:C1:89:79:83:EA:82:7D:3F:BC:56:8E:D5
X509v3 Authority Key Identifier:
keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2b:9c:a5:dc:96:f9:65:31:06:36:19:57:c5:c4:df:6c:64:
00:d3:ee:b4:ed:cf:8a:8c:d0:43:d5:59:7a:2f:37:f7:5a:70:
c3:a8:77:49:31:13:c7:38:97:5d:b1:0f:cb:94:1e:6e:60:eb:
d7:96:51:dc:4c:a2:47:09:31:fc:83:30:83:29:1b:9b:f1:41:
ac:13:be:6b:b1:aa:05:5f:07:b7:40:09:d0:7f:40:08:bc:28:
1c:d0:a3:b2:1b:b5:0c:e6:ff:a5:df:55:cb:49:f4:43:81:60:
ac:7a:f1:cd:ee:5f:91:70:38:16:32:92:74:2f:89:c1:90:03:
6a:eb:9b:68:2a:12:76:c0:73:9c:95:9e:98:8d:a3:0e:68:7f:
4d:7e:7c:6e:e8:85:e3:a1:bc:53:b5:da:c6:fe:34:2c:a2:c7:
71:d1:6d:79:42:6c:c8:b0:6d:d5:02:14:df:81:dc:50:64:d5:
e7:19:d9:32:b7:95:5d:02:d3:88:35:74:23:f2:2f:53:f9:2a:
4b:1e:9b:e4:0e:ab:ab:72:79:9e:22:45:23:ec:32:b4:30:4e:
63:20:0b:29:0a:ad:75:ef:24:e0:28:c4:c3:dd:0e:d5:33:8b:
26:de:a7:1d:f9:6e:2e:58:57:42:3e:cd:78:b5:7f:d9:8b:ba:
9f:8c:a3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:30:16 2025 by rpki-client