This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json)
Hash identifier: ipcYdNTqgXUCqxSmAURPktKnOGPgGSwa4/utWEOjse4=
Subject key identifier: 87:A5:82:97:C3:BE:25:89:85:B1:E1:C1:82:E4:ED:D0:F9:E8:0C:EC
Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Certificate serial: 070D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
Manifest number: 06FF
Signing time: Sat 06 Dec 2025 19:39:12 +0000
Manifest this update: Sat 06 Dec 2025 19:39:11 +0000
Manifest next update: Sat 13 Dec 2025 19:39:11 +0000
Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: valrElcn183BYt4eeOPIwIfNNo51lEHVrY8EwY6dyx8=)
2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: 8hBGvOyNwxB7qMibVDGpuRU5HevQ+Tcv9ZjJM79y8+w=)
3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: s8i5IxWnvTImsz9H5D4MuEQAm14mPHlkRay9ZZj+Qsc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1805 (0x70d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Validity
Not Before: Dec 6 19:39:11 2025 GMT
Not After : Dec 13 19:39:11 2025 GMT
Subject: CN=6934865f-312a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:55:ed:b2:63:9c:5f:67:13:11:59:03:89:
d5:8a:2e:35:d8:81:8e:78:dc:b3:a3:79:c7:e6:fb:
d7:3c:a0:84:29:7a:93:dd:ff:b1:5d:22:08:da:3e:
f5:d1:fd:e1:85:a9:fa:39:f2:c3:f2:5b:69:3d:d8:
af:fb:e0:a1:ea:cd:02:c0:48:b1:e5:2c:0b:ed:30:
43:85:a3:b3:90:9e:51:ae:f7:00:b2:ef:0f:97:50:
2c:f8:9c:b2:2d:60:33:21:87:ff:55:0f:2f:59:8c:
a8:da:b7:22:24:24:e1:eb:44:f1:06:a5:3b:36:42:
5e:49:66:dc:a1:9e:68:1b:30:11:eb:6c:09:31:70:
e2:8e:f0:dd:28:c2:6b:24:c3:66:70:3b:67:a9:43:
95:cf:7e:94:7d:14:bf:57:63:4f:1b:17:f8:08:3d:
ea:ce:b4:19:06:ad:d6:86:44:47:e1:1b:55:12:8f:
7f:f4:b8:57:24:ff:a3:a7:a3:d8:4d:c3:e3:bf:b7:
bd:f1:92:88:01:d4:43:4e:4b:a5:f3:1a:5d:60:bb:
f8:6c:76:02:c7:29:00:08:0d:65:67:44:89:8f:92:
0d:dc:72:67:13:49:49:3b:2e:a9:95:12:6d:7d:d6:
71:1c:82:67:ad:c6:bf:66:de:60:ef:7c:2f:21:b8:
80:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A5:82:97:C3:BE:25:89:85:B1:E1:C1:82:E4:ED:D0:F9:E8:0C:EC
X509v3 Authority Key Identifier:
keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:fb:7f:af:3c:07:a7:26:74:ba:fc:7d:aa:cd:b8:c4:30:86:
be:70:ae:11:58:d3:f9:ff:5a:4e:ab:9e:7a:1d:2e:d7:90:f9:
d2:58:07:6d:87:58:63:17:90:25:c2:44:97:d0:c4:0b:01:01:
4e:c3:85:9f:18:5b:32:76:82:54:8c:b6:fe:59:18:96:78:03:
e7:66:a1:bc:e6:83:a3:de:4c:4e:45:2b:a0:11:87:34:98:53:
9a:b8:c5:a5:af:82:ca:8b:2d:20:4a:45:a2:16:cb:f5:81:7a:
5b:47:fa:b2:96:b8:5a:4e:a3:8e:6f:bb:93:c4:43:8b:b4:e3:
cb:c7:b2:c2:e8:7d:7f:79:f2:05:5c:42:2f:12:b1:f3:5c:78:
83:5b:5e:06:4e:6c:de:4b:c1:27:da:2d:c9:28:ef:82:43:88:
d3:1a:ca:2e:92:2c:dc:91:39:3e:a9:a2:70:b5:3e:d7:10:e0:
ce:a5:e8:d4:e3:39:7e:18:22:22:75:67:96:92:ef:18:b9:90:
22:ae:10:aa:b8:8d:05:43:7a:57:1c:f5:5b:c5:cb:0e:d3:40:
07:36:ba:13:8c:32:2e:33:c8:3c:9c:2d:2b:0b:4b:9c:cb:da:
58:a6:2d:e1:58:67:c3:10:c7:18:de:32:ee:0e:ac:c4:86:02:
cd:a1:46:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RERDQjYxMTAvBgNVBAUTKDE4REM1MzFENDRGMDU5NjJFOTdGMjM4NDU3MzYxNDFE
M0UwMjY4MUIwHhcNMjUxMjA2MTkzOTExWhcNMjUxMjEzMTkzOTExWjAYMRYwFAYD
VQQDEw02OTM0ODY1Zi0zMTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwkBV7bJjnF9nExFZA4nVii412IGOeNyzo3nH5vvXPKCEKXqT3f+xXSII2j71
0f3hhan6OfLD8ltpPdiv++Ch6s0CwEix5SwL7TBDhaOzkJ5RrvcAsu8Pl1As+Jyy
LWAzIYf/VQ8vWYyo2rciJCTh60TxBqU7NkJeSWbcoZ5oGzAR62wJMXDijvDdKMJr
JMNmcDtnqUOVz36UfRS/V2NPGxf4CD3qzrQZBq3WhkRH4RtVEo9/9LhXJP+jp6PY
TcPjv7e98ZKIAdRDTkul8xpdYLv4bHYCxykACA1lZ0SJj5IN3HJnE0lJOy6plRJt
fdZxHIJnrca/Zt5g73wvIbiAtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIelgpfD
viWJhbHhwYLk7dD56AzsMB8GA1UdIwQYMBaAFBjcUx1E8Fli6X8jhFc2FB0+Amgb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi82RTlBQzgwNjcx
RDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dXTHBmeU9FVnpZVUhUNENh
QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0dOeFRIVVR3V1dMcGZ5T0VWellVSFQ0Q2FCcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RENCNi82RTlBQzgwNjcxRDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dX
THBmeU9FVnpZVUhUNENhQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAG+3+vPAenJnS6/H2qzbjEMIa+cK4RWNP5/1pOq556HS7XkPnSWAdt
h1hjF5AlwkSX0MQLAQFOw4WfGFsydoJUjLb+WRiWeAPnZqG85oOj3kxORSugEYc0
mFOauMWlr4LKiy0gSkWiFsv1gXpbR/qylrhaTqOOb7uTxEOLtOPLx7LC6H1/efIF
XEIvErHzXHiDW14GTmzeS8En2i3JKO+CQ4jTGsoukizckTk+qaJwtT7XEODOpejU
4zl+GCIidWeWku8YuZAirhCquI0FQ3pXHPVbxcsO00AHNroTjDIuM8g8nC0rC0uc
y9pYpi3hWGfDEMcY3jLuDqzEhgLNoUYv
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:59:30 2025 by rpki-client