This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
File: GWgoqCH0FqupzswxqnGjA_QhR3g.mft (raw, json)
Hash identifier: f3wZOjOy7yTaa3FiUPOEGHuhYnL4MRIqKQ0YxXMr9iU=
Subject key identifier: C6:7D:9D:EA:43:52:03:93:99:E7:31:EA:A9:A1:DF:45:42:B4:EC:16
Authority key identifier: 19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78
Certificate issuer: /CN=A9197724/serialNumber=196828A821F416ABA9CECC31AA71A303F4214778
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
Manifest number: DD
Signing time: Tue 23 Dec 2025 04:32:42 +0000
Manifest this update: Tue 23 Dec 2025 04:32:41 +0000
Manifest next update: Tue 30 Dec 2025 04:32:41 +0000
Files and hashes: 1: GWgoqCH0FqupzswxqnGjA_QhR3g.crl (hash: IgAKZG/U0s3s/ao9Kf7oiZ4d4i91ewzEi6k4nc/3PdY=)
2: B5907D4E904E11EFA704CB22C4F9AE02.roa (hash: 5l5e+UsXvisCMP10s+0rYzrljGYf5zRzOJR/tcgke3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl
rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197724, serialNumber=196828A821F416ABA9CECC31AA71A303F4214778
Validity
Not Before: Dec 23 04:32:41 2025 GMT
Not After : Dec 30 04:32:41 2025 GMT
Subject: CN=694a1b69-c838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:e9:e5:7a:6f:1a:ca:bf:d9:b6:4f:bd:cd:
b9:89:6a:f3:55:3e:5e:f6:e7:da:bc:28:6b:51:67:
bc:c7:ed:9a:cd:76:dc:54:92:82:a3:6e:20:63:52:
22:4d:c4:cc:83:e6:89:16:ef:c4:c1:94:dd:57:30:
13:e7:48:15:ed:b1:d3:e3:40:a2:66:89:83:27:4d:
cd:a4:31:e9:bf:9a:9b:81:77:ca:be:a9:eb:67:9e:
d1:3f:67:7f:3f:f5:1e:5d:9a:8a:e5:11:1c:f0:99:
39:d3:e4:78:f0:ac:0c:0e:83:ef:42:31:c0:fa:e7:
68:ca:7b:18:ec:e1:c2:7e:8a:45:7f:74:e3:e3:16:
33:6d:a9:0d:9d:10:bb:43:61:8b:f9:72:8d:56:96:
ce:4f:03:52:d3:21:e1:46:1b:ef:64:ef:c6:f1:a1:
24:81:be:61:54:93:52:3b:52:1e:a4:88:65:7e:c0:
2d:7a:95:70:dc:62:46:8b:68:82:a1:db:88:c4:aa:
78:fa:29:73:de:3b:2d:13:0e:4d:c0:3e:38:93:04:
7e:b5:9b:f6:a4:74:8c:64:fd:74:12:be:bd:f5:a3:
a1:75:30:38:32:cc:02:7b:e8:1b:69:eb:d3:59:f8:
6c:00:c9:15:c0:d1:fc:69:7e:a2:83:36:46:68:3e:
93:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7D:9D:EA:43:52:03:93:99:E7:31:EA:A9:A1:DF:45:42:B4:EC:16
X509v3 Authority Key Identifier:
keyid:19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:90:88:db:40:92:53:d9:10:45:73:06:ba:18:3f:21:c7:4a:
20:6c:67:ca:e0:a9:e0:05:61:5d:bc:be:ea:83:45:27:76:84:
6c:e8:d5:40:2c:43:b2:a7:8a:54:53:5d:1e:4d:92:c4:61:bc:
a0:f7:4d:d1:16:69:f8:04:8f:aa:d0:b1:5e:48:c2:5d:90:21:
3b:2f:35:4d:a0:3d:7d:b2:d8:6f:ff:8d:07:93:71:86:63:2b:
72:c2:69:40:1b:e1:f2:92:43:38:31:63:a4:f9:8b:af:ad:8b:
e5:bc:a7:a5:70:00:08:e8:1d:07:51:94:57:0b:c4:b0:9c:ff:
d1:03:4d:90:a6:d5:5c:0e:4f:47:3e:dc:fa:52:a2:af:49:4c:
db:91:e8:3b:ad:ca:da:97:d5:91:e5:14:2d:c3:eb:07:3a:e1:
ac:28:dd:8b:42:bd:94:70:6c:a8:e3:6b:5f:a1:49:98:16:5b:
c9:ea:09:8b:f7:fd:f8:ed:3d:07:17:00:b0:e6:f5:1a:d7:47:
28:80:d7:87:72:73:ae:2c:34:e5:fc:94:6c:f0:ea:c9:9d:6b:
13:38:34:fd:36:42:fc:e1:3e:ec:28:41:de:8d:5f:d8:01:e3:
4a:b0:59:85:60:4c:75:da:36:68:7f:eb:24:9d:76:e9:53:21:
4d:a2:d0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:42:56 2025 by rpki-client