This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft
File: anyGILARkTWk4pZxECAuepIQ_XY.mft (raw, json)
Hash identifier: 3ktofAfsC6iJC8i8BeqBpLznaNOzMPl/NifcIcp2yyo=
Subject key identifier: 54:05:E3:B6:96:64:8B:81:AA:3D:DB:5E:6D:E7:44:59:47:7F:F4:3C
Authority key identifier: 6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76
Certificate issuer: /CN=A91D2659/serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76
Certificate serial: 0D1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft
Manifest number: 0D13
Signing time: Mon 22 Dec 2025 17:39:55 +0000
Manifest this update: Mon 22 Dec 2025 17:39:54 +0000
Manifest next update: Mon 29 Dec 2025 17:39:54 +0000
Files and hashes: 1: anyGILARkTWk4pZxECAuepIQ_XY.crl (hash: hC12BXIBK888kgNCWxKKzPtzs1d6YxisQwGq+O4w+rQ=)
2: 3ED2E738F0C511E9AD7DCC11C4F9AE02.roa (hash: Wr1nIVXklBpPXHRfvPiRNdEC8EzroDNqpMylbn6Uxs4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl
rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 17:39:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3354 (0xd1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2659, serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76
Validity
Not Before: Dec 22 17:39:54 2025 GMT
Not After : Dec 29 17:39:54 2025 GMT
Subject: CN=6949826a-db40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:3b:fe:93:71:6c:a2:ef:d4:c4:23:fb:14:
5a:b4:8f:74:d8:e0:32:69:6a:21:8b:48:d2:88:ee:
67:27:a1:76:77:c8:75:36:43:a2:4c:61:c6:e6:23:
c6:b7:b5:5b:18:ca:d6:11:f6:6f:03:b0:87:d9:cb:
59:39:98:f7:45:84:32:3f:a2:72:f0:21:92:67:15:
59:4b:ad:84:09:f1:93:7d:4b:1e:af:85:24:31:3f:
5e:d1:f9:67:5e:7f:86:e8:a0:a0:99:3a:35:85:c9:
f6:08:b3:2b:57:85:58:63:7d:89:b4:11:bd:f7:9e:
0d:1a:24:5b:92:50:a4:4e:d9:44:fc:af:91:7d:ee:
e8:40:25:23:67:6f:1c:60:5d:b2:07:b2:22:57:d6:
df:79:ce:36:ba:ad:25:94:ac:f6:ec:03:7c:e0:c9:
d9:66:dd:7d:36:48:88:75:ef:57:92:d2:b5:0a:11:
ab:34:31:cd:78:37:7f:92:6e:f1:05:13:3b:52:2d:
5c:00:cd:7a:ef:c3:c9:7b:86:8d:97:a7:8f:ee:18:
17:6a:09:77:fd:55:d0:c9:e9:3a:3c:0d:32:38:7d:
c9:c2:50:b7:d8:e4:09:11:b1:0f:49:b4:55:73:b0:
2c:f8:4e:71:76:f1:e4:64:83:7d:10:e3:47:64:73:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:05:E3:B6:96:64:8B:81:AA:3D:DB:5E:6D:E7:44:59:47:7F:F4:3C
X509v3 Authority Key Identifier:
keyid:6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:6c:91:87:89:07:e0:c0:65:f0:c3:a1:90:d5:0e:9a:49:4d:
c4:dd:77:85:b9:23:36:2c:6f:a8:33:06:67:1a:df:f7:e7:42:
0c:f5:3c:8d:9c:16:8b:9b:81:b9:fe:ab:c1:c4:10:5a:3b:27:
aa:05:12:b1:b1:2a:ee:4f:27:68:5b:d8:93:90:34:9d:37:cd:
12:1f:bf:dc:46:cf:ef:78:92:9e:34:a9:23:63:eb:5d:0d:b6:
72:ab:8a:65:ed:7a:2f:ea:77:0c:ea:85:45:8a:87:4a:d2:78:
3b:c5:c5:1e:07:a1:2c:15:ca:a8:ea:2b:56:d6:e1:60:07:e7:
1d:88:db:8b:02:f5:4a:b4:1e:cf:d2:e6:7c:91:41:5a:29:4b:
62:f7:ba:84:0c:ab:b9:13:fb:33:e6:dc:45:4d:ca:91:2c:46:
02:83:fa:f0:8e:44:bc:da:26:6d:12:f4:47:c0:40:5f:a0:c0:
62:78:ed:32:0d:ed:85:9c:0e:a5:83:f6:5d:9e:4f:a4:94:f0:
4f:b9:0c:89:b4:db:a2:0c:08:d7:6b:99:5a:94:ae:1d:d1:d3:
86:bd:18:8d:21:ba:64:5f:a8:83:67:c0:3f:63:be:9a:c7:37:
ae:a7:5d:1c:01:58:e3:1a:e6:60:a5:f0:60:ba:75:4b:1a:b3:
87:4c:22:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:33 2025 by rpki-client