This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
File: Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft (raw, json)
Hash identifier: rAou2zDafYdYzmrWBeS7rWN16CzDpkIfDCquczITuiM=
Subject key identifier: 6D:11:0F:59:A5:DF:05:A5:67:8F:DD:44:4C:B7:47:E3:D4:FC:CD:8D
Authority key identifier: 1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82
Certificate issuer: /CN=A91D3834/serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282
Certificate serial: 07A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
Manifest number: 078F
Signing time: Thu 18 Dec 2025 21:01:06 +0000
Manifest this update: Thu 18 Dec 2025 21:01:05 +0000
Manifest next update: Thu 25 Dec 2025 21:01:05 +0000
Files and hashes: 1: Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl (hash: /hI3Wp9ZeXQWmlV3e5ST6XwCjUX5/830CKdoHUNar9E=)
2: F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa (hash: T8t0u+yg7mtule8ArVhtoDM1ddDwweThTsXFq2+QBzE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl
rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1955 (0x7a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3834, serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282
Validity
Not Before: Dec 18 21:01:05 2025 GMT
Not After : Dec 25 21:01:05 2025 GMT
Subject: CN=69446b92-490f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:32:b9:14:8a:30:a4:88:f2:c8:75:3b:60:bc:
a0:3b:dd:e5:72:36:e5:9b:5e:b3:eb:6a:ce:21:49:
84:2b:10:9a:58:eb:f0:d9:9b:28:55:c9:1b:11:e2:
27:54:40:4f:be:00:4d:ac:45:1d:f1:06:1e:97:85:
a3:11:bb:be:0b:ad:f1:e1:89:82:c2:ef:04:69:f6:
93:ce:73:37:18:5d:ef:d8:12:6f:09:1c:03:fb:25:
72:17:6e:57:3b:44:3e:2c:a9:a7:d5:b4:a8:13:fc:
60:04:fe:ad:38:3f:7a:09:ff:7b:76:29:21:ca:1c:
29:55:64:d8:68:ac:8e:a5:8e:35:31:d3:ca:c3:29:
7b:39:d2:26:e9:f0:83:92:7a:57:ad:f7:f9:30:c4:
d9:a2:2c:8f:b9:b4:18:61:cc:f5:d1:05:ab:78:2c:
20:fd:7b:c9:b5:b0:9a:ad:0d:bb:4b:21:03:af:1d:
93:8d:94:92:ca:3e:d5:76:55:57:b4:9c:cd:1f:8e:
6a:65:4c:95:33:9f:1a:bd:61:8b:c9:c4:e4:d2:fe:
ca:09:42:f9:ed:86:e0:dd:51:70:88:f0:1a:0d:5c:
bb:0e:7e:44:ab:64:18:32:2f:40:e1:ed:5e:c6:95:
77:fe:61:9c:35:82:af:2e:9e:7e:44:40:19:1e:74:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:11:0F:59:A5:DF:05:A5:67:8F:DD:44:4C:B7:47:E3:D4:FC:CD:8D
X509v3 Authority Key Identifier:
keyid:1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:6e:d2:f8:dd:19:db:21:ed:26:19:77:1e:06:b1:ab:12:0f:
63:07:07:14:15:0f:80:12:fc:3f:70:66:f6:29:51:c1:95:2b:
c0:42:90:00:d4:17:05:57:b0:d4:3a:07:67:9b:97:d5:b6:f9:
15:36:a7:9c:77:ff:f5:71:24:cc:70:6b:f3:59:d4:c9:20:cb:
d9:2a:a9:24:a9:95:dd:d3:06:64:c4:46:53:09:09:ff:2e:09:
f1:27:78:3d:05:f0:e7:d6:03:6e:a7:4b:94:0c:1b:18:97:59:
6a:11:7e:4c:1f:15:3d:86:f5:2b:ce:e1:1d:19:46:95:cb:d3:
e6:90:92:3f:2a:20:a8:55:1f:b2:c3:f0:e4:8f:89:02:e8:45:
32:8d:07:8d:7c:61:9b:da:0b:2d:82:24:f6:a1:cf:a2:f1:e9:
ad:28:6a:2b:70:47:4c:a3:e5:30:ec:f7:9a:fc:69:b9:75:72:
b6:57:93:49:e9:11:56:02:d1:ff:fe:7f:bf:62:08:1f:bc:a9:
69:4f:29:64:06:29:d5:26:ec:f5:8b:63:cd:f4:d7:85:41:75:
f9:7b:9b:9b:5f:46:27:c9:92:49:7d:4b:79:31:54:c9:d9:ed:
af:f5:27:13:c5:1b:85:f8:af:0e:84:99:12:de:4c:a3:1a:9f:
b5:73:b1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:20:44 2025 by rpki-client