This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
File: 1gwwsan1nJWa1JZ_L21XKst1KZw.mft (raw, json)
Hash identifier: 0cnJt/k78eUm1vm+6zZ4YtBbVD+veaGF9DUubWDzK7k=
Subject key identifier: 8C:6C:6E:2F:01:23:62:A6:6A:79:6B:6A:CE:D8:4E:8A:11:A2:0F:CF
Authority key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C
Certificate issuer: /CN=A91E5EEA/serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
Certificate serial: BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
Manifest number: B4
Signing time: Fri 19 Dec 2025 05:16:08 +0000
Manifest this update: Fri 19 Dec 2025 05:16:08 +0000
Manifest next update: Fri 26 Dec 2025 05:16:08 +0000
Files and hashes: 1: 1gwwsan1nJWa1JZ_L21XKst1KZw.crl (hash: G7dqrzU/j/tV4i1aj1h7feMcd2mnEOKzFzeAMNCLyyQ=)
2: 2B6A4C480CDC11F0BAA65183C4F9AE02.roa (hash: htNwSI5H54iT9rmt0clXooV7uI/0VSjQJZC/u1wLlfY=)
3: A7C0D96E0CDD11F0A8463D28C4F9AE02.roa (hash: 3AmwEQdkffGIWwCP59F8UtXcsDQEm9UnobcPgXH/cBA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl
rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5EEA, serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
Validity
Not Before: Dec 19 05:16:08 2025 GMT
Not After : Dec 26 05:16:08 2025 GMT
Subject: CN=6944df98-822a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:32:a7:cd:31:bf:6b:e4:94:c5:b2:2f:31:bf:
20:01:32:dd:ed:f5:42:57:a9:59:23:76:4f:7c:f0:
b6:64:8a:9c:8e:2c:9a:03:74:89:27:36:ef:9a:a9:
b3:79:21:45:99:3a:c7:b2:db:6a:ff:70:77:29:dd:
6f:6d:ff:25:de:be:67:99:7e:43:5c:6b:26:c0:be:
65:94:4d:8d:32:5f:3a:eb:c3:e5:53:ac:d0:3e:82:
69:58:b3:c5:50:7f:4d:33:4d:b1:48:f1:29:34:8e:
bc:2e:17:9c:12:20:f1:50:01:4b:64:9b:9b:8e:d6:
a7:7f:ec:c6:6f:8a:5d:92:ba:ae:f8:ab:83:9d:d8:
c6:29:9a:cb:d5:f7:2a:6b:ca:f0:2d:56:68:a4:c1:
c7:f7:06:30:42:46:78:2a:ed:3c:6d:fd:0b:ba:87:
20:79:b8:c7:03:17:dd:5e:f7:ad:04:c0:7d:92:f7:
db:b9:41:05:18:9c:2e:2a:2b:17:0c:d8:53:13:b5:
b5:2f:97:94:71:31:37:5d:c0:1b:e6:b4:d9:ea:d7:
4c:9c:5c:90:fa:32:10:81:15:e6:1b:35:9a:6c:a2:
b1:4f:a2:85:49:ed:1a:82:bd:68:8f:a8:39:f6:3e:
35:21:c0:fe:42:15:83:1e:5d:3c:62:a3:6f:75:09:
fb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6C:6E:2F:01:23:62:A6:6A:79:6B:6A:CE:D8:4E:8A:11:A2:0F:CF
X509v3 Authority Key Identifier:
keyid:D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:f4:88:69:66:3c:8c:9a:ff:2a:db:bf:de:e3:a6:0c:60:7c:
f9:b4:ab:fd:ff:70:6b:ac:3f:47:f8:ba:fa:62:03:34:02:6a:
b3:3b:2d:39:98:22:32:05:47:bb:e0:3c:6f:4d:19:8b:22:40:
3f:fd:96:8d:66:38:f5:e5:8e:14:25:aa:e8:2a:86:b4:ca:d0:
a5:1e:9e:5c:f0:22:45:5e:0c:6e:53:b0:81:b2:27:e6:4e:8c:
01:a4:fd:17:72:45:7a:94:b3:b0:41:cf:2e:d6:3e:fe:6c:e4:
3d:0b:3d:79:9e:c8:9e:12:2c:ca:4c:bc:cc:63:50:76:8e:5e:
e0:47:6f:98:47:2e:c4:99:57:10:88:91:a2:41:b7:20:7f:ff:
6f:be:de:4b:a0:d7:8e:91:d0:d8:b2:ec:f8:f8:13:7e:14:c4:
17:3d:e1:58:ee:dd:97:93:4f:7c:ff:39:5b:a8:de:39:01:4a:
3f:14:83:e0:cf:f9:26:04:24:c7:8d:38:35:59:7b:81:0e:84:
d4:ca:e6:e7:9b:b2:23:92:21:ba:13:ae:28:6f:cc:7d:60:d4:
e5:0e:7a:22:91:f0:86:ec:40:57:6a:25:c4:1e:53:3f:27:cd:
01:79:81:84:2a:02:b1:62:ab:b2:04:f5:08:1a:78:53:17:5c:
0c:c5:08:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:01:57 2025 by rpki-client