This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
File: bGZwF1JoMcwYJ1GN4StiH28_N4g.mft (raw, json)
Hash identifier: Nmvn9pA3vz1uxx0fKFw2CcfLzubwzqhLNFksYb7Rg6I=
Subject key identifier: 30:30:CE:10:89:3D:95:E9:1E:AD:E0:C8:3D:51:75:D2:9B:76:5E:B3
Authority key identifier: 6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
Certificate issuer: /CN=A9183704/serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Certificate serial: 44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
Manifest number: 41
Signing time: Sun 07 Dec 2025 05:29:15 +0000
Manifest this update: Sun 07 Dec 2025 05:29:14 +0000
Manifest next update: Sun 14 Dec 2025 05:29:14 +0000
Files and hashes: 1: bGZwF1JoMcwYJ1GN4StiH28_N4g.crl (hash: lUa1LWUuihVOn7P3+tB4O1VHpHc8wJbB7+4sD4ucz88=)
2: DC1B4E64768D11F0BC42C048C4F9AE02.roa (hash: USdlwRhVoGGdyrGSWsnHqMd9hND59OuaWTUHS/xq5TE=)
3: B25E5954768D11F091768048C4F9AE02.roa (hash: bFSzjXTpedQHU5GXRyOAp3ruzrbAgAWRW8Prl1dvtXY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 05:29:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183704, serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Validity
Not Before: Dec 7 05:29:14 2025 GMT
Not After : Dec 14 05:29:14 2025 GMT
Subject: CN=693510ab-fc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:a9:e4:d1:10:a4:53:b6:f3:5e:cc:e3:af:
c9:e4:3e:cc:c9:94:bb:ec:85:d9:71:b1:ea:59:44:
ae:63:e3:fc:13:2a:c8:eb:6e:47:a2:de:86:c7:93:
1b:a8:75:d5:aa:83:be:9e:ca:4c:74:1c:96:77:e6:
5c:3b:ba:28:6f:20:7e:e9:f7:29:d4:cf:22:22:25:
e0:4d:7a:bc:f9:fd:3d:c0:b3:f9:42:2c:df:ab:25:
4b:a5:ce:af:ee:98:cd:cf:38:93:1e:05:f8:7e:9a:
2c:e4:c7:39:5d:dd:5d:b0:1b:94:c6:cd:99:a6:2b:
39:7d:9c:d0:46:4d:3c:84:63:c1:ed:be:89:90:0d:
01:76:a2:42:f9:26:c1:c7:4b:ce:52:2f:6b:2f:f9:
6d:57:6d:ca:0a:24:c3:c2:66:2d:47:7b:42:dc:b6:
0c:3e:b0:1b:26:5f:83:11:78:43:3c:a3:39:16:d7:
af:f2:6b:7d:83:a1:be:39:d7:d2:52:31:3d:32:8b:
6d:6f:38:74:08:9a:6d:81:d3:c1:72:70:32:3b:2b:
65:3d:10:34:8d:c8:ac:5b:c5:55:e1:fa:e5:f9:4a:
99:a5:b1:e8:d2:dd:21:08:69:1f:91:8b:20:b5:5f:
8b:5c:01:a6:af:ca:b6:5a:3f:7a:da:d8:f6:9b:6f:
57:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:30:CE:10:89:3D:95:E9:1E:AD:E0:C8:3D:51:75:D2:9B:76:5E:B3
X509v3 Authority Key Identifier:
keyid:6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:28:69:52:60:ad:dd:6e:b7:7a:87:ff:e0:92:45:10:e0:c2:
6f:4c:a8:da:61:7b:ac:c4:1c:be:fc:c0:25:aa:a8:1f:d6:8f:
ea:76:93:7a:46:33:d6:61:37:e1:e4:bc:68:c4:99:72:12:23:
e1:81:84:35:58:bd:2b:be:04:81:68:74:63:0e:af:01:d6:c5:
51:19:8a:9a:0a:b7:1f:9f:84:f7:03:a4:bd:73:ab:5d:56:15:
af:31:5e:1c:85:a7:c0:47:26:62:b0:08:b8:c0:8b:9b:9f:43:
5f:f6:5c:a4:1f:76:e5:f9:5b:39:72:04:46:f2:03:c8:7c:df:
27:bc:73:92:12:97:6d:0e:9d:bb:74:44:d9:5c:1a:a2:29:79:
c1:df:3d:73:f5:eb:af:db:f2:d3:d4:9d:e5:b9:f5:5c:d1:89:
65:4d:d4:72:f5:a1:d7:91:9f:a4:29:f2:0f:f2:be:84:da:6a:
c1:a3:cf:31:5e:d1:7d:35:cd:d9:65:40:4e:50:ee:83:ac:51:
9a:38:89:0f:43:df:f7:8b:3f:f3:58:b9:77:bd:8c:22:e9:c3:
0a:b5:d3:0d:83:2f:32:4f:c6:39:d6:f6:be:b7:5b:a0:5a:b2:
57:40:90:d3:72:0b:50:4e:a0:bf:cc:0a:7e:31:00:cc:20:33:
98:2b:a7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:11:51 2025 by rpki-client