This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
File: G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft (raw, json)
Hash identifier: T5zCQldOnCGlK7f10w8/51lMAcdjyzVlX4eTgX8rkFI=
Subject key identifier: 2C:81:24:3A:8A:B0:A1:C6:E2:8B:2B:A0:7F:50:00:3E:31:5E:0E:B0
Authority key identifier: 1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61
Certificate issuer: /CN=A9168F50/serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
Manifest number: 06
Signing time: Wed 03 Dec 2025 06:15:21 +0000
Manifest this update: Wed 03 Dec 2025 06:15:20 +0000
Manifest next update: Wed 10 Dec 2025 06:15:20 +0000
Files and hashes: 1: G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl (hash: apmRPaG9Zudi7ZskWIj17QrzHzF0McX3MeIn2Jm6zNM=)
2: 8F62775EC9B311F08EBFD366C4F9AE02.roa (hash: HxgOvE8EAPC40IUOqEwdYq0KSHkJcIRXkuZt02zGc1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl
rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 06:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168F50, serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
Validity
Not Before: Dec 3 06:15:20 2025 GMT
Not After : Dec 10 06:15:20 2025 GMT
Subject: CN=692fd579-b182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2f:68:1c:77:b9:6c:dd:58:95:42:03:48:b4:
bf:2c:f0:b3:2f:95:5c:71:af:6b:b7:6a:01:b4:fc:
05:4b:6d:46:41:5a:27:d0:00:fa:93:19:49:4d:31:
da:e7:86:bf:04:e8:52:a8:1f:60:4a:74:19:67:d4:
12:33:af:72:c9:f9:a6:93:d3:20:90:d3:e4:78:e7:
76:66:b7:d2:16:cc:36:a6:7e:e7:20:bc:24:4c:64:
d6:02:93:09:79:7d:e6:40:e1:a0:93:b0:59:c4:b6:
16:61:10:86:16:7f:db:67:26:65:33:00:f8:3e:c5:
bd:60:47:78:6b:1b:2f:b5:1b:40:a5:d7:17:48:28:
bb:9e:21:f2:cc:33:52:a1:3a:d3:33:e2:3a:47:c6:
3e:58:aa:be:11:d0:90:99:53:ab:96:2f:1d:2a:59:
c5:ce:0a:b0:2a:57:69:6a:0a:93:89:98:64:6b:17:
20:e4:62:82:4e:02:2b:ef:99:79:a4:b6:76:6c:e6:
8c:a1:51:ef:9e:aa:28:55:49:c0:30:bf:be:d4:6c:
4e:f2:04:3b:a3:5d:a0:71:05:3b:a4:a9:aa:56:92:
33:72:cc:57:25:13:c0:34:0d:c9:6d:8e:eb:b4:de:
63:e3:d2:45:72:63:6c:77:44:6b:48:1a:94:be:09:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:81:24:3A:8A:B0:A1:C6:E2:8B:2B:A0:7F:50:00:3E:31:5E:0E:B0
X509v3 Authority Key Identifier:
keyid:1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1c:07:a0:ba:14:61:ad:7f:04:da:b3:63:29:2b:29:52:0f:
13:47:5d:ae:c3:70:fa:db:89:8d:18:30:fc:89:80:5b:53:8b:
ba:5c:be:ec:1d:29:d0:31:6d:9a:31:e0:a5:05:6f:44:33:ea:
33:48:81:3e:cc:c8:e3:d0:08:6b:a6:ca:31:f3:82:12:6d:5d:
52:c7:9f:0f:c6:5d:c9:bc:b2:34:50:73:1e:cb:98:d6:80:b3:
15:f9:eb:04:6c:99:b0:2f:fc:c7:2b:57:ea:50:28:64:4d:6b:
7e:66:23:41:ea:82:51:8f:fd:98:47:52:37:93:ea:a4:28:ac:
b6:1d:5a:f4:3a:5b:7c:ae:16:b8:d2:48:9c:bc:41:99:e7:99:
7f:d6:7f:8e:37:f5:2c:c0:ed:37:f1:1f:15:54:aa:8e:4e:dd:
84:d0:ee:8d:2b:3c:1f:c4:cc:f6:f7:b6:a0:56:8f:b0:71:dd:
e9:22:7b:f2:3a:e9:ea:d7:47:a4:e0:df:f0:8a:e8:82:f9:df:
43:f0:2f:b5:f3:2b:64:5a:05:b2:3d:21:3d:06:bf:20:0e:1c:
d0:93:a9:f1:4a:7d:12:40:57:e3:f7:e9:7a:20:c9:07:bb:2d:
35:74:58:d9:8c:db:bb:a7:3a:fa:6a:a9:71:48:a9:cf:bc:46:
f2:d5:ab:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:00:15 2025 by rpki-client