This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
File: e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft (raw, json)
Hash identifier: 7mVnpjG4cGjsahgZkTl6QshjN6ieMH7qOsoDnOqm9To=
Subject key identifier: 7C:D5:A0:01:E3:2E:DF:E0:4F:99:0A:E5:9D:D9:DB:3F:92:B3:6B:B4
Authority key identifier: 7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5
Certificate issuer: /CN=A91A5EF2/serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
Certificate serial: 06A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
Manifest number: 069C
Signing time: Wed 10 Dec 2025 21:06:41 +0000
Manifest this update: Wed 10 Dec 2025 21:06:40 +0000
Manifest next update: Wed 17 Dec 2025 21:06:40 +0000
Files and hashes: 1: e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl (hash: V3nH07ObMBJL5pvkzPvNwIY98ceDEUjfLn3cTPxVK+8=)
2: BC56EB8EA21811ED94424B59C4F9AE02.roa (hash: CnCawUsQtxE6gdOQrKIQ65eTD+z0tUhxmLZpOOZFkv0=)
3: 3520A4C0DDA711EBA436967CC4F9AE02.roa (hash: TACWMKsVmIF+DWEhLbG6Mmy8oK2ZJgn16SR/MDsvAC8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl
rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Dec 2025 21:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1703 (0x6a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5EF2, serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
Validity
Not Before: Dec 10 21:06:40 2025 GMT
Not After : Dec 17 21:06:40 2025 GMT
Subject: CN=6939e0e1-92b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f0:96:9f:36:5e:41:49:76:d4:14:0a:28:c2:
ef:8e:f9:2d:29:7e:be:5c:db:e8:20:ad:cf:cf:6e:
b9:fd:07:19:45:e1:29:3c:3b:9b:a5:99:28:48:18:
98:3a:53:e0:74:74:8c:e5:d1:d5:ca:f2:a0:e7:1f:
02:82:21:6c:00:f1:b0:ce:85:7b:a6:4f:57:3f:54:
84:05:fc:3d:34:33:13:47:74:5b:ba:ae:80:05:42:
ee:80:93:12:6f:ef:0a:89:e0:3d:14:36:d1:a5:db:
7c:85:d4:ce:43:a6:47:98:4d:c2:2c:37:c0:63:cf:
5b:b6:12:a3:c4:90:91:ad:c5:09:de:61:02:82:0f:
17:bc:df:06:e8:bb:37:84:a4:d0:8b:96:7f:8e:11:
58:97:d8:f9:67:b5:2b:3d:35:8f:ea:5f:55:62:e0:
4b:4f:51:88:a4:33:a3:5e:22:a7:54:c8:dc:6d:1f:
b2:68:37:ea:bb:14:02:3d:13:8b:77:05:74:01:6c:
f2:b3:f4:d8:2d:f7:01:1e:f7:f2:1a:58:c2:8e:73:
c9:27:f7:2c:d2:50:f1:79:49:c0:6a:62:d3:75:53:
0e:26:d6:39:b4:03:7b:dd:73:e3:f3:94:e3:9d:7a:
b3:4c:82:f5:82:11:0e:f4:3c:00:d9:bc:9a:57:bc:
52:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D5:A0:01:E3:2E:DF:E0:4F:99:0A:E5:9D:D9:DB:3F:92:B3:6B:B4
X509v3 Authority Key Identifier:
keyid:7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:6d:97:c6:f1:38:e9:50:53:4e:35:01:92:8f:3f:79:82:8c:
17:3b:a5:d8:7b:f5:51:1f:da:1e:30:05:01:72:46:45:dd:b0:
d7:3b:15:e3:8f:fc:77:d5:e3:28:c5:b3:51:44:a4:33:17:12:
b8:25:1c:0d:41:4d:88:19:77:e8:72:03:74:45:73:3d:77:e1:
28:aa:bb:55:f6:98:9f:8f:4e:6a:60:6a:00:73:ba:0d:77:64:
ee:11:1c:88:27:16:5b:d5:38:22:aa:a0:82:76:f7:a4:ca:69:
d2:54:94:1c:87:3b:ef:6b:a7:48:70:34:81:28:a2:74:72:b4:
3a:5b:e6:5a:57:bc:2c:df:35:6b:13:90:10:99:be:dc:87:33:
e6:95:9b:1d:46:b4:5e:ed:d6:96:36:bd:f7:45:f0:bd:04:7f:
55:9f:77:65:4c:30:9e:3c:ae:8c:a5:e6:22:93:ca:4d:6d:92:
0f:ea:bb:75:e3:17:f3:90:e3:58:91:06:12:f1:f6:f6:59:eb:
c7:ce:57:8d:3f:d4:3b:66:03:d1:0a:41:03:7e:6b:08:56:42:
a1:5e:3d:56:6f:6d:c0:40:72:6a:0c:f7:e5:c9:9a:61:eb:f3:
4d:43:53:f0:6c:e0:49:ea:1c:8d:1f:79:d7:4b:fc:27:ca:82:
bc:db:fe:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:11:33 2025 by rpki-client