This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
File: GOzmKe7ztqJpbrqzSz-wLviouIc.mft (raw, json)
Hash identifier: uLrxYme30zuOIO/q84sgFqi7cOoCbhDVVvSfI+kIv9I=
Subject key identifier: 57:09:39:CB:94:36:22:55:8F:AC:11:DC:9F:F0:D1:6F:9C:1D:3F:A5
Authority key identifier: 18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87
Certificate issuer: /CN=A91951AF/serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
Manifest number: 2A
Signing time: Sun 07 Dec 2025 05:39:47 +0000
Manifest this update: Sun 07 Dec 2025 05:39:46 +0000
Manifest next update: Sun 14 Dec 2025 05:39:46 +0000
Files and hashes: 1: GOzmKe7ztqJpbrqzSz-wLviouIc.crl (hash: bFpxoiynr3W2olYlMhalMuK1j6+AzvuFFY0SNudrXZA=)
2: 0A2469F095E011F0B2B5CE77C4F9AE02.roa (hash: 2TUs1YZ2Eqxk5relT6yIF5miILYOJS8mbAVh6fsYe7A=)
3: 8201D598AD9B11F080BD6B82C4F9AE02.roa (hash: XnkbG03fdUQKsnLMxvWnS0QGXcRDDBgD4VhVjpHPreg=)
4: 0A86FD7C95E011F0B2B5CE77C4F9AE02.roa (hash: 9TR+7jMSEj42WP2HgrvlmxnuqGeYCxwav28DarkHDK0=)
5: 9F82952895C511F0B89BD26BC4F9AE02.roa (hash: +1Bt6gAyfoUFpig1US0y9IYf8gqxESp603kTB9cS2LI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl
rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 05:39:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91951AF, serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887
Validity
Not Before: Dec 7 05:39:46 2025 GMT
Not After : Dec 14 05:39:46 2025 GMT
Subject: CN=69351323-7bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d6:f4:11:92:d2:76:2c:67:4a:2f:71:ab:ec:
8c:22:a9:d8:1c:df:b9:a3:24:e7:48:98:12:79:d7:
22:a8:e1:4c:23:3c:9c:a9:11:7c:90:39:97:68:fc:
9d:66:ee:14:87:0d:a9:90:8e:2c:d0:b9:d2:ef:d6:
1e:ee:82:0a:61:36:d3:ba:e5:3b:3d:ed:08:5d:70:
a3:8f:36:56:1c:41:c6:df:61:15:37:11:71:6b:0d:
82:ee:0a:b1:08:68:b4:17:27:8c:e8:99:45:50:10:
82:0c:3f:bd:e8:92:b4:cd:56:f1:ad:7f:c5:ba:59:
5d:75:70:24:49:80:62:73:80:8d:e1:f6:53:af:92:
47:12:93:c2:6a:6e:3b:78:02:be:b4:2a:82:4a:b1:
8e:d1:9f:47:32:47:ed:da:59:aa:bc:63:c1:39:42:
8c:54:67:b9:05:9c:77:98:3b:9d:e9:99:65:4c:f3:
b7:64:fe:cf:1b:12:fc:ff:11:a8:86:66:d6:3c:62:
ea:02:ed:67:d5:e7:f6:22:3d:12:dd:0c:49:de:cf:
b2:ff:39:41:8a:69:a6:6c:d1:17:47:cd:7d:2f:94:
4f:c6:b5:9d:95:cd:fc:79:ec:7e:d0:5b:27:47:08:
89:df:b9:d8:07:64:30:9b:5b:3b:61:2a:53:00:9c:
95:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:09:39:CB:94:36:22:55:8F:AC:11:DC:9F:F0:D1:6F:9C:1D:3F:A5
X509v3 Authority Key Identifier:
keyid:18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:37:ed:03:37:71:63:59:e2:2e:e8:9d:d0:29:25:0e:e4:7f:
47:51:99:01:7c:d8:8f:c6:ec:55:f6:62:b5:97:3b:e4:cd:fa:
6b:ba:26:00:1d:b1:96:4c:c8:cd:bb:d8:7f:5a:e8:72:03:b9:
db:16:cb:1d:b2:27:a1:20:32:fb:1b:53:89:7a:03:7f:e6:7e:
70:fd:31:9d:c5:f0:b7:1e:49:88:e0:ac:7e:13:05:eb:e6:d2:
c5:b7:cf:e5:f9:26:d6:13:98:9b:11:5a:dc:a5:6d:d3:92:53:
3d:23:1a:50:66:44:a0:ed:6e:28:8d:ca:2b:e2:2b:58:58:98:
8e:e8:79:2c:10:37:ef:66:58:99:4d:0d:6f:f5:96:22:b1:08:
a9:ae:dc:ef:a0:d9:7e:05:19:90:84:c3:99:2f:09:31:0d:22:
85:6d:8a:24:6d:17:b3:8f:2e:97:65:2d:de:2e:65:5e:ff:ee:
7c:84:08:9c:22:ee:66:b5:c6:cb:de:a1:c1:28:c3:9f:6a:8b:
cc:2c:30:83:33:04:63:50:ec:2f:67:27:70:d2:e5:ac:b3:90:
71:f7:e4:e9:e6:cc:c3:ea:0d:9f:b6:ac:22:29:d8:45:0a:a4:
5e:1e:64:bf:22:91:99:07:a7:10:56:ab:a6:97:eb:fa:05:d4:
ea:7e:51:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:11:01 2025 by rpki-client