This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft
File: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft (raw, json)
Hash identifier: bG5W205qbq8VXe99qEHcGFk2+x7ep38WCP+KtExN/z8=
Subject key identifier: 83:F1:4D:AB:AC:F2:E5:0A:55:E0:FA:C9:43:24:47:99:EC:D1:D4:04
Authority key identifier: 81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B
Certificate issuer: /CN=A91CDC32/serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B
Certificate serial: 0103
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft
Manifest number: FF
Signing time: Wed 17 Dec 2025 04:38:59 +0000
Manifest this update: Wed 17 Dec 2025 04:38:58 +0000
Manifest next update: Wed 24 Dec 2025 04:38:58 +0000
Files and hashes: 1: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl (hash: bhEMCZFoVju9sCQaxEJ5Py2k23pbcGuzyWfJLwP6HhQ=)
2: 997D587CABD011F0AA576211C4F9AE02.roa (hash: J29CpVyilVJkH0F5PyK/Jzg80ZDp2eVcyqh2z2cf3Ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl
rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 04:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDC32, serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B
Validity
Not Before: Dec 17 04:38:58 2025 GMT
Not After : Dec 24 04:38:58 2025 GMT
Subject: CN=694233e2-7cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:d8:79:e7:11:d0:91:62:37:0b:a7:bb:fc:
18:43:f7:c0:c1:87:8f:90:77:f3:47:e9:84:e0:14:
28:cf:45:72:15:4b:1f:97:dd:05:e9:69:26:27:d5:
2b:f0:e0:29:60:78:2d:4e:7b:74:38:fd:ce:46:5c:
f4:be:6d:43:dd:1a:3e:ae:57:66:4e:14:34:58:c3:
f4:bd:66:b0:65:3e:bc:6f:97:c5:81:fe:c4:4c:b9:
99:2e:82:9a:8e:de:4e:c1:2a:f4:f6:78:5a:7e:32:
fb:7e:70:ee:77:f9:35:9a:33:18:a2:3c:79:45:da:
43:ab:b9:fc:26:a8:76:08:77:08:86:a7:51:46:32:
b9:26:ff:89:b7:49:74:37:d6:a6:78:2d:44:72:fe:
0d:18:47:8b:12:20:82:cc:59:82:31:d6:4a:a5:32:
0d:54:71:a5:14:89:f8:09:80:4d:bc:4c:33:87:aa:
14:3a:cb:45:af:54:4d:14:23:34:dd:39:74:10:08:
6a:f9:94:61:0d:87:1a:ef:2a:67:7c:dd:64:3d:0f:
0a:9f:42:38:f2:ee:7f:26:c3:4d:25:bc:84:f7:ae:
68:1a:4c:08:13:c5:f6:f1:ae:dd:d2:8c:79:ed:89:
be:a3:d4:af:f5:5a:91:4c:b1:8c:c0:c0:f9:6c:6d:
10:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F1:4D:AB:AC:F2:E5:0A:55:E0:FA:C9:43:24:47:99:EC:D1:D4:04
X509v3 Authority Key Identifier:
keyid:81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:97:25:2e:3b:27:5a:ec:e8:6d:5c:4b:bb:4a:ee:58:90:88:
35:43:d0:64:fd:22:4d:e5:63:27:d1:48:30:7d:82:16:75:87:
c7:71:c9:6f:57:5f:63:4c:cc:f5:3b:a7:5f:0c:6f:8e:f2:01:
47:d0:93:46:35:87:43:42:5e:e3:15:91:79:00:31:2d:a6:3d:
a6:68:40:62:e2:4d:d2:84:01:6f:09:ef:1c:8b:07:de:ee:f7:
4d:eb:13:92:04:15:a4:68:09:2f:86:d1:1e:c5:56:2f:b0:81:
2e:a1:e9:b6:36:df:cc:f8:da:ff:37:9a:92:23:1b:58:41:a4:
3a:f8:31:61:5f:fc:7d:f7:7f:07:64:02:80:78:e7:a8:de:fd:
f5:ec:c0:5c:16:08:b7:76:a5:cc:16:7c:38:71:86:1f:78:a3:
f9:03:d6:6a:cb:9a:cb:b8:a9:f5:91:7e:99:60:09:a0:aa:fe:
a2:ff:ce:cb:9d:8a:28:19:53:86:e7:1c:58:a8:87:29:7c:d8:
6f:5f:56:99:e4:96:4b:16:c7:78:96:2e:12:49:29:7c:be:e3:
b3:a4:e8:47:c1:ce:75:23:6a:0f:b8:aa:4d:5c:00:79:24:6a:
c1:1c:55:5c:93:fa:21:0a:25:5a:9d:58:21:f4:8b:8c:bb:4a:
95:97:39:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:55:51 2025 by rpki-client