This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
File: ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft (raw, json)
Hash identifier: CL7sOB2qCOHYVFsDSkhEgqaTwQbiKiu0AQQw72gb/xI=
Subject key identifier: C1:F2:AC:E6:23:3E:DD:E3:80:E5:6B:22:75:51:F3:4A:6C:1E:AE:96
Authority key identifier: 82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35
Certificate issuer: /CN=A91AC777/serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
Certificate serial: 0677
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
Manifest number: 0672
Signing time: Thu 18 Dec 2025 21:56:06 +0000
Manifest this update: Thu 18 Dec 2025 21:56:06 +0000
Manifest next update: Thu 25 Dec 2025 21:56:06 +0000
Files and hashes: 1: ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl (hash: NbOus/9qh4JQoGbipdbnRdcn2/As6Q0OSxr2JsCK0d0=)
2: 92967BBA78F811ECAF1C286CC4F9AE02.roa (hash: ljHjZ6k7MiI2pN3VX1Cgx4pPDWP1h2Cokp04xup/nNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl
rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 21:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1655 (0x677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC777, serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
Validity
Not Before: Dec 18 21:56:06 2025 GMT
Not After : Dec 25 21:56:06 2025 GMT
Subject: CN=69447876-eb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:ae:c1:a6:00:b1:66:b4:a4:90:91:07:dc:
f5:1f:fb:84:e8:b7:bb:de:f5:8b:df:46:f1:cb:dd:
0b:05:e3:2f:09:60:f9:24:d9:33:36:f3:f3:41:ed:
e3:fc:22:f7:58:47:ef:2a:57:9a:e4:1a:de:0a:41:
3c:61:15:98:75:5e:c1:1b:88:76:3b:36:1a:da:37:
2f:ac:f2:a7:a4:8b:f5:79:a9:44:6d:19:1c:a0:ba:
6c:e0:9b:4e:7b:29:0c:c5:36:13:d5:49:78:7a:e3:
21:6a:b4:9f:a3:68:49:05:36:53:ca:a0:8f:23:63:
ee:2a:e0:b4:10:58:26:36:1d:50:11:0b:a3:31:47:
6b:26:6e:d7:02:fa:86:cd:99:22:c0:92:a9:88:62:
e1:7e:9b:0b:72:f6:4b:c8:33:4b:ce:21:7c:24:d6:
4c:57:d4:88:11:c8:16:12:e7:73:a6:ba:f6:82:9a:
31:77:81:c2:69:bc:4f:1c:1f:c4:bb:b2:c3:7e:da:
14:e2:b2:40:b3:5a:fd:57:4e:5d:76:e9:7a:bd:e5:
b4:60:37:a4:d6:d7:84:8b:9f:f8:da:e5:4e:2c:48:
9e:97:d4:a9:7e:0b:b2:22:87:7f:f6:c7:cc:bd:db:
36:3a:91:2c:ef:65:74:d3:d6:b8:c9:39:e1:e7:17:
f5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F2:AC:E6:23:3E:DD:E3:80:E5:6B:22:75:51:F3:4A:6C:1E:AE:96
X509v3 Authority Key Identifier:
keyid:82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:75:ed:59:2d:d8:63:64:68:5f:88:ad:1e:e9:ff:72:16:dc:
f9:36:ac:ea:34:c9:ca:c1:fc:a7:c3:93:4e:59:30:97:1e:b4:
a4:81:f3:7a:02:ff:d8:c4:3f:76:4a:10:38:69:d7:12:bf:b9:
a8:e0:44:e1:01:5f:e1:35:c4:be:2d:9e:8d:24:f9:72:87:ad:
f9:a8:a7:d3:1a:65:86:44:ab:df:d6:74:d3:98:2e:58:6f:eb:
e8:31:c4:3a:eb:78:6c:cf:f1:ff:c2:7e:26:54:c8:16:b8:78:
2c:00:92:5a:f7:ea:87:96:3d:55:63:e1:00:8c:45:20:67:80:
4c:0c:0d:ce:fd:31:5e:c1:d9:88:90:0b:27:6b:c4:a4:95:33:
12:eb:42:49:b0:40:30:8c:62:85:e1:0c:86:e3:e6:f4:36:7b:
cb:fc:4b:01:cd:9b:f1:6e:24:e0:98:8d:00:94:76:96:3f:a2:
fe:fb:7d:4f:fe:50:64:57:61:a3:ba:ac:b8:55:db:2e:fc:09:
00:3e:ff:80:58:cf:90:45:65:48:26:a4:84:06:14:c1:a5:19:
a0:35:a8:d9:80:ec:c9:55:3a:25:8d:67:f2:bc:6e:08:d5:aa:
a9:e0:cf:9d:bb:a1:d5:7a:97:2a:01:cf:a9:82:54:20:fe:a1:
b6:ac:73:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:16:19 2025 by rpki-client