This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft
File: giq84EQXvhV7KDO6OwIw3iOEwkA.mft (raw, json)
Hash identifier: V3jhdSvej81nKKUAnZMke4iZ9x3wr/KWvr0miNP0lvQ=
Subject key identifier: 62:D2:13:CC:F1:76:07:B0:18:50:B9:BC:D4:17:B3:8C:F6:6C:87:B7
Authority key identifier: 82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40
Certificate issuer: /CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240
Certificate serial: 0BCA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft
Manifest number: 0BC3
Signing time: Thu 18 Dec 2025 18:36:38 +0000
Manifest this update: Thu 18 Dec 2025 18:36:37 +0000
Manifest next update: Thu 25 Dec 2025 18:36:37 +0000
Files and hashes: 1: giq84EQXvhV7KDO6OwIw3iOEwkA.crl (hash: aTQosKW1LjjOED4H8WKp7VFqPWFUW1e/y/76Ed4+SOc=)
2: BFB35A9831E011EA91E99C3CC4F9AE02.roa (hash: BaHDfNkjZ1fMZBSLRiFXON3hK0vL1pU4sF4hs/DbBBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl
rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 18:36:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3018 (0xbca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FCC1, serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240
Validity
Not Before: Dec 18 18:36:37 2025 GMT
Not After : Dec 25 18:36:37 2025 GMT
Subject: CN=694449b5-7f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:d0:5a:6d:7c:80:05:65:28:f6:c2:a7:b9:
1c:c1:05:43:8f:47:ba:3a:6d:e3:bb:88:aa:c9:58:
ce:c9:2f:a8:b7:e0:cb:e5:da:dc:b9:34:9a:29:c2:
9c:d4:d4:74:86:d9:82:b9:73:b8:da:5f:15:b5:bf:
20:bc:5b:4e:f9:27:e9:f3:7b:24:5e:62:01:b6:4e:
ac:6d:24:c0:19:ec:77:60:6c:fe:cf:c6:a7:e6:a7:
b8:8a:3d:1f:1f:d9:2f:d5:61:8d:a9:36:44:a8:5f:
30:cc:f3:d8:75:75:b0:97:21:ca:71:ab:f1:36:bb:
40:47:b8:17:f6:bb:40:d5:38:fb:4f:4f:2b:15:0f:
5e:bc:a8:eb:4f:b0:9d:bc:d6:ee:2a:c0:17:fb:63:
0a:7a:d4:4a:c8:20:11:f4:80:11:f2:cd:d1:4d:36:
a1:6f:c2:f8:12:33:80:76:1e:e6:94:ff:13:0c:ff:
00:e3:dc:aa:00:7f:ad:bc:cb:c3:44:a0:49:6d:24:
08:25:46:1f:b3:dc:49:49:55:06:86:37:f2:88:1b:
f0:69:8c:5e:b8:b1:af:6f:bc:0a:69:ad:e7:99:43:
48:dd:fc:e0:04:45:c4:79:6a:b0:1f:83:d7:e6:91:
01:59:15:47:05:4f:30:0a:fc:10:1a:9e:36:89:67:
e0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D2:13:CC:F1:76:07:B0:18:50:B9:BC:D4:17:B3:8C:F6:6C:87:B7
X509v3 Authority Key Identifier:
keyid:82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:b8:c3:37:65:cf:88:27:b6:7a:3d:7f:37:14:46:e3:bb:8a:
1f:d6:72:61:25:21:3d:ce:15:25:cf:f5:74:f2:eb:7e:5f:aa:
d9:79:55:b6:a0:c5:d8:16:56:be:c5:eb:e4:0f:19:c0:d5:3f:
6f:0f:ea:a2:e4:d9:60:92:61:c5:a9:a7:17:fb:e4:3c:52:74:
a7:e1:bd:c5:75:77:b8:06:03:95:d4:4f:a9:3a:60:d6:11:c4:
de:29:38:75:eb:cc:e2:7c:20:67:f8:d0:0c:bb:28:bc:ae:54:
1a:eb:ae:22:b0:17:c7:27:5d:b7:e1:d4:20:66:a8:81:c6:2a:
8c:0d:4e:f0:ba:f6:54:e2:67:3c:75:8d:30:33:ce:fc:c5:88:
98:27:aa:20:5a:75:cf:30:77:16:a6:0f:48:58:08:9a:7a:14:
53:5a:46:bb:70:b2:bd:d2:99:19:3f:06:73:56:21:e5:28:ba:
b2:e1:54:e3:34:c7:0f:0d:6e:ce:ad:f8:19:60:c6:17:00:52:
cc:f9:08:9f:30:03:ab:fb:38:3a:ce:22:8b:64:9f:07:b3:de:
6e:aa:1c:99:02:91:78:6d:94:7f:ce:fe:52:ad:e8:2f:84:d8:
ee:b3:ea:ce:c4:69:ae:35:0c:41:75:bf:a1:72:cb:e1:ec:88:
fb:e6:bd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:21 2025 by rpki-client