This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
File: gSJD5rXQ3hGucMcns50fIeOurAM.mft (raw, json)
Hash identifier: nHkEY5uPCCkmLZymiqJPALOEeQhnC52tGU9FwkptGeU=
Subject key identifier: C3:B6:40:BE:6B:BA:AF:97:7F:24:F4:4E:47:B2:C0:F5:72:F7:E2:2B
Authority key identifier: 81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03
Certificate issuer: /CN=A916E44B/serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
Manifest number: 010A
Signing time: Sun 21 Dec 2025 04:12:12 +0000
Manifest this update: Sun 21 Dec 2025 04:12:12 +0000
Manifest next update: Sun 28 Dec 2025 04:12:12 +0000
Files and hashes: 1: gSJD5rXQ3hGucMcns50fIeOurAM.crl (hash: XkvWAHElJPD4Lj+W6uS6bbdvtGJb8iu/H9Ig9Hlmm48=)
2: B02CCB344E0C11EF9175067FC4F9AE02.roa (hash: B07v/r28GGPExOvdtIgZQOaQqr8pYN3jGjnhD5+9r68=)
3: 546C4C7C4E1911EFA1FB9E57C4F9AE02.roa (hash: IGD/nUTNGHPyuAjXeELESWHybLe2c2lWOrT+ME6IDwg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl
rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E44B, serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
Validity
Not Before: Dec 21 04:12:12 2025 GMT
Not After : Dec 28 04:12:12 2025 GMT
Subject: CN=6947739c-ea2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:e7:c2:f2:c9:7b:58:76:e9:3a:69:b9:99:
cb:d4:59:34:f8:81:b6:70:0f:37:0b:fa:3b:c0:f6:
56:37:72:56:31:22:01:c5:de:42:b4:bd:19:bc:33:
0f:51:bb:98:ef:8c:28:70:85:33:7e:3c:4f:50:09:
fd:10:cd:4c:3c:6b:21:8c:80:9d:71:f1:9d:ce:9c:
e5:07:a9:a0:04:40:72:e3:1f:33:4e:96:10:ce:35:
f8:e8:b5:38:39:72:6c:56:fe:ac:02:b0:ca:af:c1:
3c:62:91:42:01:ca:32:b7:44:52:a9:72:e5:20:0c:
64:b2:33:ac:3a:86:be:0a:6e:97:46:f9:21:01:6d:
fd:6d:39:f9:d2:44:84:48:aa:ee:d5:d1:8b:a9:7b:
5c:ef:b0:ee:c4:3a:4d:ec:56:ea:de:97:de:c5:53:
6d:30:28:3e:b2:3f:42:f2:cf:a6:2c:ce:98:8f:d9:
80:a4:31:60:3a:ee:86:cf:e4:d7:bf:05:0c:1b:21:
35:dc:26:99:82:ca:ba:05:e5:65:34:59:45:b7:af:
f3:3e:e2:4d:7f:38:ad:b1:ce:5c:d7:03:46:c3:53:
42:90:ce:79:58:91:99:98:05:92:2c:2c:9c:aa:ad:
fc:fa:52:dd:27:44:d5:63:87:8b:1f:f9:fd:83:98:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B6:40:BE:6B:BA:AF:97:7F:24:F4:4E:47:B2:C0:F5:72:F7:E2:2B
X509v3 Authority Key Identifier:
keyid:81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:36:7f:44:9a:c9:5e:e0:c0:67:8b:7d:f1:75:79:68:59:73:
1e:06:ad:b3:16:7a:fc:bb:9a:dc:79:1f:31:72:78:7e:47:a6:
ea:ae:b7:71:9b:78:a6:57:df:0e:f5:c0:9f:64:a0:84:c7:0c:
9a:b6:93:a9:a6:24:a2:3f:b0:6a:9b:50:a2:92:0b:02:1d:6b:
ad:58:79:62:28:17:10:a2:e7:4c:01:57:0e:93:af:1f:8e:4d:
b2:02:b4:3b:5d:35:10:b1:69:79:a6:cf:d9:d1:47:de:70:8d:
c2:74:52:38:64:a9:6a:23:e2:04:a2:8b:c9:b5:50:02:37:5d:
63:1b:52:40:cd:c5:3d:cc:37:20:23:25:d6:1f:ab:82:ab:0e:
64:0b:90:d0:de:76:3f:fe:e1:75:f3:9e:60:47:7c:09:bc:1b:
8b:7c:01:0c:04:34:be:d8:7c:45:24:cf:4f:90:93:c2:e7:ab:
fc:86:56:b0:20:51:d8:62:5a:5f:da:9e:96:c9:27:dd:2e:ec:
a5:5f:dc:ed:88:fc:da:49:2a:82:d4:f0:81:80:43:a7:a1:09:
93:2c:95:48:df:fe:82:28:1a:ca:3a:a7:56:1f:f3:b0:f2:52:
d0:a6:cb:f0:19:93:1e:10:e3:68:be:f8:e3:ce:47:6b:d7:33:
c0:27:c2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:18:20 2025 by rpki-client