This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
File: gH5oiqUL0-OL4xtdTE4GCATrFdw.mft (raw, json)
Hash identifier: BP3Rcwa2YNYSFmXkmhYUHk0QhplnnOQpMDtwoox/u4E=
Subject key identifier: A6:35:8D:FA:2D:22:1B:19:FF:31:98:34:1C:35:2C:7A:E2:81:53:EF
Authority key identifier: 80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
Certificate issuer: /CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
Manifest number: D1
Signing time: Sun 21 Dec 2025 04:52:51 +0000
Manifest this update: Sun 21 Dec 2025 04:52:51 +0000
Manifest next update: Sun 28 Dec 2025 04:52:51 +0000
Files and hashes: 1: gH5oiqUL0-OL4xtdTE4GCATrFdw.crl (hash: EwDW1tOxk4mCcyj8zsJGvInYtPnh4qcqs/H4D04Zers=)
2: EF63DB0EA26B11EF8F077C3FC4F9AE02.roa (hash: iLpw/uJbge7uZ/WmLMuhiuh6b3ClTayyECZNu36JGVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F0E2, serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Validity
Not Before: Dec 21 04:52:51 2025 GMT
Not After : Dec 28 04:52:51 2025 GMT
Subject: CN=69477d23-65fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:b7:41:bf:2e:6f:14:1c:db:bd:60:b8:2a:
8b:fd:18:5f:83:22:b8:cd:dd:3e:80:99:b0:f5:e8:
39:42:b1:a4:28:f9:ba:b1:14:bd:bd:1f:3e:9d:a7:
9b:73:ba:1b:be:7c:ff:d5:91:39:94:5e:0a:fe:e1:
2a:03:a0:eb:cc:84:46:b4:d0:9f:dc:19:53:ad:93:
57:b4:1e:5d:24:72:23:01:7e:2d:26:14:b4:2f:22:
b3:97:f7:df:74:7e:a4:96:56:65:7d:aa:a4:2d:4a:
39:bd:49:df:52:6e:52:e4:ea:1d:b6:eb:ed:e9:98:
99:cd:03:29:3f:2a:f7:c9:17:bc:4c:d9:52:59:f5:
e5:fa:9f:38:fe:2b:55:ba:88:95:57:5d:61:64:ba:
9c:33:6e:c2:29:5d:9c:66:24:a5:c7:e3:a1:3b:78:
07:5b:c3:8a:57:91:14:dc:31:e9:c5:cd:0f:0f:2f:
7c:ed:2c:bd:a2:07:67:03:42:b1:6e:71:7c:1c:c9:
68:50:0f:a7:76:ab:39:38:e0:34:44:78:3a:09:72:
6f:20:91:f8:24:0f:58:00:aa:85:36:0e:19:a5:a2:
ee:2e:48:96:18:60:dd:4f:33:2f:97:fc:88:8c:2e:
ef:f4:ae:5e:fd:c6:5f:e2:6f:3e:55:8c:af:3c:99:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:35:8D:FA:2D:22:1B:19:FF:31:98:34:1C:35:2C:7A:E2:81:53:EF
X509v3 Authority Key Identifier:
keyid:80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:7d:e4:ab:5b:62:c2:1e:bf:a8:b9:d3:07:ba:a1:d3:3a:c1:
3c:83:2c:0a:fe:63:f3:fe:87:98:3b:15:b2:d3:63:82:2b:39:
fb:3c:51:69:ad:9f:07:d7:29:50:49:fc:a6:cf:a6:60:fd:a0:
ab:ed:45:b1:70:23:06:c2:0c:bd:81:2b:da:40:4e:3e:f2:64:
03:20:6a:d6:c6:f1:ad:48:75:d6:84:a3:3a:81:7b:c2:dd:65:
0f:c6:a3:45:0b:e5:99:88:e5:30:16:bc:e0:8f:20:68:ab:aa:
ea:fa:80:56:67:c7:ac:e4:df:13:1d:af:35:0e:b2:b0:1b:95:
61:70:04:9b:10:7a:c8:c3:84:14:99:f1:a1:c9:6c:d5:1b:c5:
83:7a:fa:15:3a:57:df:9a:fc:ce:fc:c7:3a:63:0c:61:5c:f2:
89:61:6c:60:89:9e:6d:02:1d:3e:cc:a6:e1:65:6f:f2:e9:93:
12:b1:b6:94:12:f9:cf:99:88:5d:b1:60:30:cb:00:47:e5:57:
1a:a5:83:1a:55:ba:9d:4e:96:10:d9:49:75:51:d6:5a:2a:8d:
81:39:5c:be:10:07:04:94:c5:1a:f0:77:37:85:bb:70:29:ec:
70:4a:be:f2:90:95:0d:b5:2c:90:a1:eb:6f:6c:ad:6e:05:4c:
14:c9:1b:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEYwRTIxMTAvBgNVBAUTKDgwN0U2ODhBQTUwQkQzRTM4QkUzMUI1RDRDNEUwNjA4
MDRFQjE1REMwHhcNMjUxMjIxMDQ1MjUxWhcNMjUxMjI4MDQ1MjUxWjAYMRYwFAYD
VQQDDA02OTQ3N2QyMy02NWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAth63Qb8ubxQc271guCqL/RhfgyK4zd0+gJmw9eg5QrGkKPm6sRS9vR8+naeb
c7obvnz/1ZE5lF4K/uEqA6DrzIRGtNCf3BlTrZNXtB5dJHIjAX4tJhS0LyKzl/ff
dH6kllZlfaqkLUo5vUnfUm5S5Oodtuvt6ZiZzQMpPyr3yRe8TNlSWfXl+p84/itV
uoiVV11hZLqcM27CKV2cZiSlx+OhO3gHW8OKV5EU3DHpxc0PDy987Sy9ogdnA0Kx
bnF8HMloUA+ndqs5OOA0RHg6CXJvIJH4JA9YAKqFNg4ZpaLuLkiWGGDdTzMvl/yI
jC7v9K5e/cZf4m8+VYyvPJl68wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKY1jfot
IhsZ/zGYNBw1LHrigVPvMB8GA1UdIwQYMBaAFIB+aIqlC9Pji+MbXUxOBggE6xXc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjBFMi8yQjRCQjQyRUEy
NUUxMUVGQTM4RDkzNzVDNEY5QUUwMi9nSDVvaXFVTDAtT0w0eHRkVEU0R0NBVHJG
ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2dINW9pcVVMMC1PTDR4dGRURTRHQ0FUckZkdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjBFMi8yQjRCQjQyRUEyNUUxMUVGQTM4RDkzNzVDNEY5QUUwMi9nSDVvaXFVTDAt
T0w0eHRkVEU0R0NBVHJGZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRfeSrW2LCHr+oudMHuqHTOsE8gywK/mPz/oeYOxWy02OCKzn7PFFp
rZ8H1ylQSfymz6Zg/aCr7UWxcCMGwgy9gSvaQE4+8mQDIGrWxvGtSHXWhKM6gXvC
3WUPxqNFC+WZiOUwFrzgjyBoq6rq+oBWZ8es5N8THa81DrKwG5VhcASbEHrIw4QU
mfGhyWzVG8WDevoVOlffmvzO/Mc6YwxhXPKJYWxgiZ5tAh0+zKbhZW/y6ZMSsbaU
EvnPmYhdsWAwywBH5VcapYMaVbqdTpYQ2Ul1UdZaKo2BOVy+EAcElMUa8Hc3hbtw
KexwSr7ykJUNtSyQoetvbK1uBUwUyRv5
-----END CERTIFICATE-----
Generated at Sun Dec 21 17:30:25 2025 by rpki-client