This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.mft
File: GUG9CIuIgrZhVo5krJLeasogoFY.mft (raw, json)
Hash identifier: cJJR+KB8x0D6JtyVJ9JYhpduYfcQAX1tr1+ZHaFwGAY=
Subject key identifier: 4A:A1:1C:77:F9:38:ED:B4:B7:A1:85:86:8D:51:08:DA:DD:13:83:50
Authority key identifier: 19:41:BD:08:8B:88:82:B6:61:56:8E:64:AC:92:DE:6A:CA:20:A0:56
Certificate issuer: /CN=A914AD92/serialNumber=1941BD088B8882B661568E64AC92DE6ACA20A056
Certificate serial: 03D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUG9CIuIgrZhVo5krJLeasogoFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.mft
Manifest number: 0590
Signing time: Mon 22 Dec 2025 23:38:21 +0000
Manifest this update: Mon 22 Dec 2025 23:38:21 +0000
Manifest next update: Mon 29 Dec 2025 23:38:21 +0000
Files and hashes: 1: GUG9CIuIgrZhVo5krJLeasogoFY.crl (hash: ClDM1Sb46ATLj9DlPN0iGTkw/l1f/C3H+CcUgQh7v/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.crl
rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUG9CIuIgrZhVo5krJLeasogoFY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:38:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 984 (0x3d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914AD92, serialNumber=1941BD088B8882B661568E64AC92DE6ACA20A056
Validity
Not Before: Dec 22 23:38:21 2025 GMT
Not After : Dec 29 23:38:21 2025 GMT
Subject: CN=6949d66d-c790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:8e:17:da:1e:47:23:82:7b:46:9b:53:71:
d4:9d:de:28:f9:4a:ad:28:e1:be:41:c1:26:57:83:
b5:fb:7f:05:33:f8:57:15:33:bc:ca:88:89:ab:a0:
24:ac:48:59:68:96:74:17:0e:90:eb:e3:ce:5b:4e:
3e:c4:81:0e:66:95:c5:80:d3:73:d4:48:ba:4c:f0:
ef:b2:ff:4d:92:8c:66:6c:82:b0:22:83:99:c1:a5:
74:e1:b6:05:19:8e:b4:16:2a:af:67:03:fb:50:a9:
a5:ed:e1:45:51:e6:70:c8:80:cc:b6:4c:fc:b0:02:
34:56:e9:08:66:e3:00:8a:b1:7c:31:b1:48:b0:6e:
96:f5:2a:a2:26:43:bb:6c:10:10:bf:6f:3f:65:f1:
d8:68:3a:14:a7:7d:d9:ee:d4:a8:7c:77:fd:c1:15:
d4:77:95:1f:a6:c2:dd:c6:ea:be:79:53:1a:a6:0e:
bd:64:d1:50:b5:94:62:10:e8:d4:07:4e:e6:4e:29:
ee:ac:bb:48:dd:24:43:9a:ee:65:01:fb:c4:93:ef:
b3:f4:1c:d7:02:d0:d5:53:bf:7a:1c:0e:5e:93:0e:
eb:89:dc:18:23:dc:19:d9:02:ff:40:b7:10:6c:cb:
88:7a:d1:f1:68:04:d6:ce:ad:92:7e:05:76:f3:4b:
f1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A1:1C:77:F9:38:ED:B4:B7:A1:85:86:8D:51:08:DA:DD:13:83:50
X509v3 Authority Key Identifier:
keyid:19:41:BD:08:8B:88:82:B6:61:56:8E:64:AC:92:DE:6A:CA:20:A0:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUG9CIuIgrZhVo5krJLeasogoFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:39:69:69:87:e8:7e:b1:54:08:d1:b4:0c:55:c5:97:be:38:
50:62:98:9d:3a:2c:fb:ba:ca:9b:91:a0:87:28:27:2a:21:ec:
34:81:a2:5f:0d:7a:01:b8:83:96:2d:70:e5:d9:de:9a:9e:76:
f1:49:82:ad:ed:46:bc:55:8c:4d:37:7d:ff:37:a5:d0:a3:45:
9c:76:ff:01:1a:28:d7:8c:14:59:28:70:ad:bb:bc:bc:20:07:
eb:cf:86:ab:f5:c6:8e:79:b6:66:1c:c4:eb:0d:e6:05:e9:5a:
66:af:70:3f:e2:80:ab:ee:14:9d:f2:4a:6e:bc:5f:eb:43:67:
54:a6:b2:5a:70:67:88:01:25:75:67:91:d1:15:09:83:5b:1f:
6f:7a:6e:dd:18:a0:55:1a:10:5c:65:d6:68:e1:ae:61:48:e1:
d8:6f:90:82:cf:ea:b4:d4:46:fe:49:32:c0:8c:d3:bc:bd:2c:
ac:85:62:eb:3b:5e:e5:2b:d1:32:f7:f6:d4:ba:eb:8b:df:95:
8e:5b:7b:2f:1b:99:3c:f9:4f:02:ab:ee:07:67:af:46:57:63:
34:3b:29:9d:b6:19:4f:59:38:c0:73:23:73:2a:fa:52:3c:fb:
46:c7:16:73:ea:fc:52:c1:50:04:ca:ad:b0:f7:27:1f:11:81:
43:35:b5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:52 2025 by rpki-client