This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft
File: GBAcuEWHASNcPxMzmuWp2zx1skA.mft (raw, json)
Hash identifier: fRJXu66BTqW+3DQynDnm+qWmXdo02PiwbXo5pp4kbKk=
Subject key identifier: 7C:40:44:65:03:60:73:19:D7:02:1B:5C:3D:63:A0:CC:26:1A:0B:06
Authority key identifier: 18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40
Certificate issuer: /CN=A9144D58/serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft
Manifest number: A1
Signing time: Sun 21 Dec 2025 05:23:34 +0000
Manifest this update: Sun 21 Dec 2025 05:23:33 +0000
Manifest next update: Sun 28 Dec 2025 05:23:33 +0000
Files and hashes: 1: GBAcuEWHASNcPxMzmuWp2zx1skA.crl (hash: 8OIQv7NSJjG6Q0hLneNSLUyzI9+igxryqP6v8/9FBWs=)
2: 5BFE0C8AE83A11EFB30F7245C4F9AE02.roa (hash: /alBYOnMh059IKMZJi/2ekO+PLUQa0YwQIF0wpnJha8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl
rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 05:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144D58, serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240
Validity
Not Before: Dec 21 05:23:33 2025 GMT
Not After : Dec 28 05:23:33 2025 GMT
Subject: CN=69478456-9d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:37:0a:71:35:2f:c7:29:b6:fc:ef:cb:63:
4a:8e:00:d1:04:e9:d0:0e:70:c6:44:92:bd:0d:ed:
a4:ca:98:e4:9a:d2:ad:e2:47:32:d6:7d:d7:b3:5c:
86:c1:f6:c8:0b:79:77:26:ee:07:94:b4:91:be:c7:
44:e7:67:50:82:a4:20:ef:08:84:cb:0a:9b:27:9d:
82:bb:59:bc:b6:54:d7:5b:e1:2b:38:8b:1d:25:3d:
8e:62:d6:94:ac:a1:b2:34:ad:3b:f2:97:c2:a7:0b:
ef:e8:c3:6f:3c:03:d1:0e:fa:bc:ce:1e:0f:80:2a:
e9:0d:eb:a2:27:04:0c:60:1b:2f:46:4d:e2:13:16:
55:44:1a:0b:d2:1c:55:a0:27:44:87:95:32:03:4b:
76:aa:e4:fa:dd:a7:45:44:49:9d:c8:ae:1d:03:e5:
cb:a8:d9:d7:39:97:b2:b9:9e:4a:3a:b6:1f:f2:bc:
99:f8:25:37:37:86:c3:71:03:57:65:3c:8d:33:09:
29:31:92:86:b2:62:60:91:6d:87:cf:1d:c1:63:58:
a2:8e:13:3e:0b:01:e2:f8:01:2e:bf:24:fe:9c:62:
29:80:9c:8d:b6:a0:89:fb:0a:d1:03:0f:9f:09:fd:
b9:4b:d6:8c:ef:ff:f7:c9:78:63:3a:f4:64:ac:90:
9c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:40:44:65:03:60:73:19:D7:02:1B:5C:3D:63:A0:CC:26:1A:0B:06
X509v3 Authority Key Identifier:
keyid:18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:dd:39:86:5b:4d:19:a7:4c:30:2b:92:e1:35:d7:17:59:ec:
21:12:80:29:34:48:4c:68:21:60:a6:3a:a4:ff:3c:43:5b:fe:
a9:11:00:43:09:ab:62:57:4a:83:53:42:17:d6:2d:b2:54:04:
69:79:64:5e:f0:33:8d:c9:77:53:95:09:04:c2:fa:e6:fa:ff:
20:5b:90:47:a3:cf:fd:cd:a7:4b:09:f3:c5:b8:fd:37:f6:7b:
fa:3f:b2:df:96:32:80:bb:73:41:5b:56:46:d3:e2:56:fd:51:
82:8e:c4:64:95:39:15:aa:0b:93:3d:cf:1f:51:21:41:86:3e:
85:4e:44:fc:da:8f:5e:ea:f3:ca:56:e5:d6:8e:1e:ff:48:d6:
46:d7:f5:6e:0c:ac:19:79:4e:ed:7d:e0:cf:a8:95:42:14:93:
0a:bd:26:89:67:fd:9b:bd:9b:c0:d4:9b:9a:50:36:0b:fb:a8:
5b:5f:d4:98:41:6c:94:0a:00:e3:4d:bb:f4:c9:02:ee:33:ca:
22:ab:13:72:c1:18:e5:44:47:52:f1:8f:db:c7:a1:ba:36:9d:
0a:59:ee:45:14:18:97:1c:5d:57:da:85:c9:0a:b9:d9:7e:92:
94:7f:30:fc:37:e5:c7:9b:65:42:19:ba:27:f8:5a:9d:a3:ee:
f9:25:2a:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRENTgxMTAvBgNVBAUTKDE4MTAxQ0I4NDU4NzAxMjM1QzNGMTMzMzlBRTVBOURC
M0M3NUIyNDAwHhcNMjUxMjIxMDUyMzMzWhcNMjUxMjI4MDUyMzMzWjAYMRYwFAYD
VQQDDA02OTQ3ODQ1Ni05ZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzWw3CnE1L8cptvzvy2NKjgDRBOnQDnDGRJK9De2kypjkmtKt4kcy1n3Xs1yG
wfbIC3l3Ju4HlLSRvsdE52dQgqQg7wiEywqbJ52Cu1m8tlTXW+ErOIsdJT2OYtaU
rKGyNK078pfCpwvv6MNvPAPRDvq8zh4PgCrpDeuiJwQMYBsvRk3iExZVRBoL0hxV
oCdEh5UyA0t2quT63adFREmdyK4dA+XLqNnXOZeyuZ5KOrYf8ryZ+CU3N4bDcQNX
ZTyNMwkpMZKGsmJgkW2Hzx3BY1iijhM+CwHi+AEuvyT+nGIpgJyNtqCJ+wrRAw+f
Cf25S9aM7//3yXhjOvRkrJCcdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxARGUD
YHMZ1wIbXD1joMwmGgsGMB8GA1UdIwQYMBaAFBgQHLhFhwEjXD8TM5rlqds8dbJA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEQ1OC80NEM3M0ZENkU4
MjIxMUVGQTg5NzNGODRDNEY5QUUwMi9HQkFjdUVXSEFTTmNQeE16bXVXcDJ6eDFz
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dCQWN1RVdIQVNOY1B4TXptdVdwMnp4MXNrQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NEQ1OC80NEM3M0ZENkU4MjIxMUVGQTg5NzNGODRDNEY5QUUwMi9HQkFjdUVXSEFT
TmNQeE16bXVXcDJ6eDFza0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAg3TmGW00Zp0wwK5LhNdcXWewhEoApNEhMaCFgpjqk/zxDW/6pEQBD
CatiV0qDU0IX1i2yVARpeWRe8DONyXdTlQkEwvrm+v8gW5BHo8/9zadLCfPFuP03
9nv6P7LfljKAu3NBW1ZG0+JW/VGCjsRklTkVqguTPc8fUSFBhj6FTkT82o9e6vPK
VuXWjh7/SNZG1/VuDKwZeU7tfeDPqJVCFJMKvSaJZ/2bvZvA1JuaUDYL+6hbX9SY
QWyUCgDjTbv0yQLuM8oiqxNywRjlREdS8Y/bx6G6Np0KWe5FFBiXHF1X2oXJCrnZ
fpKUfzD8N+XHm2VCGbon+Fqdo+75JSr4
-----END CERTIFICATE-----
Generated at Tue Dec 23 03:35:12 2025 by rpki-client