This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
File: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft (raw, json)
Hash identifier: jaVUVGrp75KNGVpxJtI35Rthg6vVd2ggoNPN2kHA5q4=
Subject key identifier: 30:DE:57:08:BB:4E:89:83:F1:EA:37:18:27:A7:CA:37:D6:93:13:FA
Authority key identifier: 19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D
Certificate issuer: /CN=A913E0D7/serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
Manifest number: 0264
Signing time: Sun 21 Dec 2025 00:51:25 +0000
Manifest this update: Sun 21 Dec 2025 00:51:24 +0000
Manifest next update: Sun 28 Dec 2025 00:51:24 +0000
Files and hashes: 1: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl (hash: 5raBOainL2hwbjgpoZIA6ojePCUv8TXhhcK96E8jyas=)
2: 12326B1E3ED211EDAE00DB18C4F9AE02.roa (hash: ZO40cDLO9gCJwUx/TeWQoT8tC/grIjJKwCJILx9s2x0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl
rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 00:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E0D7, serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D
Validity
Not Before: Dec 21 00:51:24 2025 GMT
Not After : Dec 28 00:51:24 2025 GMT
Subject: CN=6947448c-7c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:a6:e3:1e:6d:19:df:04:22:ff:08:ea:9a:
b9:60:31:aa:22:56:b8:ed:2b:98:41:d3:28:b9:c0:
ff:0a:fa:8e:33:da:ba:ec:57:4e:3f:da:e1:1a:b7:
ec:77:b1:01:82:00:fe:ff:cf:1d:fa:4b:96:9a:dc:
e1:d8:7d:98:1b:08:b4:23:24:ac:90:5d:e3:ff:e9:
b7:00:be:f6:fa:a2:cb:e2:cc:32:2e:a1:b6:0a:0b:
9d:4b:f7:bb:e9:c1:95:1d:46:00:6f:7f:38:44:b1:
e6:c7:b5:2c:10:b9:e4:c3:cc:eb:26:45:ac:81:03:
6f:2b:83:80:b1:e0:b2:0c:4d:9d:9d:da:87:7c:31:
2c:d4:7f:b3:48:00:70:7b:42:8b:cc:d5:27:93:ca:
c8:0e:68:84:79:57:c3:29:c5:ac:2f:9d:a8:9c:c9:
53:b2:03:04:26:51:ec:16:57:5f:a7:aa:ab:0d:e2:
32:75:58:54:eb:d5:0b:47:38:45:5f:2d:7a:59:43:
7e:74:a4:b7:79:c4:17:10:ce:d0:dc:e9:dd:f5:fe:
81:9e:00:d0:f1:67:62:1c:e6:87:e8:84:29:e0:7d:
6b:b4:25:cf:fe:7d:2e:a4:9b:d4:60:fd:cf:9f:a1:
42:87:6c:67:12:75:9a:a9:b9:f9:17:c1:d4:17:ba:
1c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DE:57:08:BB:4E:89:83:F1:EA:37:18:27:A7:CA:37:D6:93:13:FA
X509v3 Authority Key Identifier:
keyid:19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:53:fa:11:04:64:61:31:34:37:33:69:6f:85:5d:64:70:42:
14:94:32:08:b8:16:9a:c6:75:cd:c0:a5:0b:fc:61:aa:0b:85:
f4:ff:78:fc:55:d3:70:73:0f:ef:3f:03:05:df:f8:33:61:34:
15:22:5b:22:4c:f1:10:e8:dd:8c:87:11:7a:fc:31:9b:bc:bc:
71:65:44:58:0a:2f:38:33:ff:17:6a:e0:30:6a:9b:6e:82:ef:
5e:f0:f8:c3:ac:92:0f:1e:c7:c1:f0:8a:dd:76:2a:5d:34:33:
fb:24:93:c0:0d:fc:df:74:8b:ab:e0:16:10:66:f0:2e:e4:43:
d0:b2:f3:53:26:a7:e8:61:d0:3d:db:94:c4:cd:93:9a:92:a8:
c3:37:8a:da:15:3f:4f:1f:bf:4b:0b:b7:f9:2c:72:74:9b:9f:
e7:c7:94:be:3b:9a:38:67:d5:b2:e6:a6:1b:01:e6:a4:8d:08:
ea:b2:ff:b0:18:21:da:d2:99:5d:d2:4f:8d:ad:8b:48:01:58:
4e:8a:bb:e2:d5:52:d3:3a:b2:0b:30:b4:1a:99:6d:67:71:04:
e5:c2:64:44:1f:9c:06:1b:64:b0:d6:58:32:e7:5e:24:cc:99:
2d:30:dc:7f:48:0e:34:51:6a:27:53:9a:83:e2:fe:67:a4:5f:
a3:4c:39:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0UwRDcxMTAvBgNVBAUTKDE5QkFCQkNGNEM5OTk5MzAwQUMwNTlDNjUzQzI5MDg0
MkY2QTY2MEQwHhcNMjUxMjIxMDA1MTI0WhcNMjUxMjI4MDA1MTI0WjAYMRYwFAYD
VQQDDA02OTQ3NDQ4Yy03YzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsGym4x5tGd8EIv8I6pq5YDGqIla47SuYQdMoucD/CvqOM9q67FdOP9rhGrfs
d7EBggD+/88d+kuWmtzh2H2YGwi0IySskF3j/+m3AL72+qLL4swyLqG2CgudS/e7
6cGVHUYAb384RLHmx7UsELnkw8zrJkWsgQNvK4OAseCyDE2dndqHfDEs1H+zSABw
e0KLzNUnk8rIDmiEeVfDKcWsL52onMlTsgMEJlHsFldfp6qrDeIydVhU69ULRzhF
Xy16WUN+dKS3ecQXEM7Q3Ond9f6BngDQ8WdiHOaH6IQp4H1rtCXP/n0upJvUYP3P
n6FCh2xnEnWaqbn5F8HUF7ocgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDeVwi7
TomD8eo3GCenyjfWkxP6MB8GA1UdIwQYMBaAFBm6u89MmZkwCsBZxlPCkIQvamYN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTBENy84RkVGODQwNDNF
Q0YxMUVEQTVGMUZBMTdDNEY5QUUwMi9HYnE3ejB5Wm1UQUt3Rm5HVThLUWhDOXFa
ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dicTd6MHlabVRBS3dGbkdVOEtRaEM5cVpnMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RTBENy84RkVGODQwNDNFQ0YxMUVEQTVGMUZBMTdDNEY5QUUwMi9HYnE3ejB5Wm1U
QUt3Rm5HVThLUWhDOXFaZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCU/oRBGRhMTQ3M2lvhV1kcEIUlDIIuBaaxnXNwKUL/GGqC4X0/3j8
VdNwcw/vPwMF3/gzYTQVIlsiTPEQ6N2MhxF6/DGbvLxxZURYCi84M/8XauAwaptu
gu9e8PjDrJIPHsfB8IrddipdNDP7JJPADfzfdIur4BYQZvAu5EPQsvNTJqfoYdA9
25TEzZOakqjDN4raFT9PH79LC7f5LHJ0m5/nx5S+O5o4Z9Wy5qYbAeakjQjqsv+w
GCHa0pld0k+NrYtIAVhOirvi1VLTOrILMLQamW1ncQTlwmREH5wGG2Sw1lgy514k
zJktMNx/SA40UWonU5qD4v5npF+jTDmV
-----END CERTIFICATE-----
Generated at Mon Dec 22 09:08:50 2025 by rpki-client