This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
File: gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft (raw, json)
Hash identifier: yBPG1i7kKfSuvkg/xcvsdMsX6js2w7vCbgPzOK/YDZc=
Subject key identifier: 0E:55:D4:05:4C:98:43:C3:0F:FD:80:C5:5C:1C:DF:AD:B4:54:FA:5F
Authority key identifier: 80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23
Certificate issuer: /CN=A9134A42/serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123
Certificate serial: A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
Manifest number: A2
Signing time: Fri 19 Dec 2025 05:25:03 +0000
Manifest this update: Fri 19 Dec 2025 05:25:03 +0000
Manifest next update: Fri 26 Dec 2025 05:25:03 +0000
Files and hashes: 1: gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl (hash: PLuN3jFdiIl/ep9H2WRqXxKcmATWifJa2cxGC74o540=)
2: 89040F5A341011F0808A991DC4F9AE02.roa (hash: aQCWDBoOh5osM5C7MBD0kh6o6WsN7hx2kjcWDkx53es=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl
rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134A42, serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123
Validity
Not Before: Dec 19 05:25:03 2025 GMT
Not After : Dec 26 05:25:03 2025 GMT
Subject: CN=6944e1af-7285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:5c:74:91:26:c5:bf:77:dd:73:92:d2:7b:
e1:47:72:9c:2f:46:26:22:58:75:19:72:76:64:95:
aa:b1:a1:99:9e:3c:a8:50:51:40:6b:ef:01:1f:c6:
34:bb:93:c2:bd:ee:73:84:c1:74:f3:42:ce:7c:cc:
c4:02:ce:49:64:65:65:ae:86:81:08:73:2a:b1:52:
26:e6:32:92:16:37:92:18:6e:b1:5f:89:a4:0d:f8:
e5:6e:3b:ba:12:3a:1a:d8:42:2a:1d:c4:0a:51:ee:
d1:31:6d:d5:d1:b6:e8:1c:68:47:f3:7c:10:1a:3b:
80:19:d5:4d:29:ce:90:ed:71:d8:8b:f8:86:26:6f:
14:f0:35:a6:55:0f:d7:26:7e:22:a0:7d:70:54:4d:
0c:d1:e7:59:e4:3b:f4:5d:b7:f4:c7:4a:d6:3f:19:
13:88:a1:f7:9e:c3:43:1c:3c:c7:4c:6d:96:a7:a0:
5c:d3:0c:ed:8d:0d:eb:01:6c:47:a3:96:66:2e:7a:
df:07:62:d1:13:86:df:09:aa:27:a8:48:ef:4e:b7:
20:70:f7:74:90:22:73:4c:47:de:55:3d:43:17:e4:
79:71:9e:4e:d8:fd:f9:b2:e7:5c:ca:e7:0e:d1:5a:
ff:45:21:e2:d4:d1:5c:63:d5:31:bd:53:b2:11:26:
d4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:55:D4:05:4C:98:43:C3:0F:FD:80:C5:5C:1C:DF:AD:B4:54:FA:5F
X509v3 Authority Key Identifier:
keyid:80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:7a:37:6f:60:73:d3:e3:4a:1d:c3:c9:73:0e:ec:c4:bd:a1:
5a:69:7f:80:fa:61:8d:ec:30:ee:69:06:c5:23:26:a5:f0:57:
17:2b:f7:43:fb:0d:93:c4:dd:d5:6f:8c:77:9e:26:80:17:c9:
fc:08:c9:4d:c6:9d:aa:dd:dc:ee:36:18:1d:a6:8d:76:e5:a9:
5b:97:10:05:c3:a8:9a:84:6f:3e:3c:e1:b2:9c:03:b4:26:2f:
56:51:e4:d5:fa:0c:f1:66:a9:fc:94:04:ce:2f:53:bd:b9:15:
42:35:e8:97:53:3d:3a:ef:a2:fd:84:e0:3a:01:60:2a:14:86:
0b:58:28:8f:bf:5a:c8:67:c0:dd:0f:17:c9:3a:3c:18:54:1c:
37:e9:93:3d:78:f3:13:3d:25:7e:91:cf:2e:e3:9e:cc:ca:68:
bc:c4:e4:7f:ad:b6:16:bc:f5:30:0a:a9:f6:f9:65:63:36:85:
e2:b8:19:f4:12:ad:06:f1:d7:7c:99:e9:15:ce:3b:dd:6c:dc:
70:e5:2b:cf:0b:7d:0a:f9:e8:2d:92:b8:e7:48:8f:6c:ee:21:
dc:59:27:f6:28:58:47:eb:88:be:25:c6:86:eb:aa:97:47:63:
d7:90:54:4d:ac:ce:b6:54:f5:ca:7b:f9:b2:de:fd:99:54:60:
11:09:7c:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzRBNDIxMTAvBgNVBAUTKDgwQjE4QjgxRDQ3QjYxNzcxMzA0RTBGNzYxMEQxMUE3
QzM0MDYxMjMwHhcNMjUxMjE5MDUyNTAzWhcNMjUxMjI2MDUyNTAzWjAYMRYwFAYD
VQQDDA02OTQ0ZTFhZi03Mjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv01cdJEmxb933XOS0nvhR3KcL0YmIlh1GXJ2ZJWqsaGZnjyoUFFAa+8BH8Y0
u5PCve5zhMF080LOfMzEAs5JZGVlroaBCHMqsVIm5jKSFjeSGG6xX4mkDfjlbju6
Ejoa2EIqHcQKUe7RMW3V0bboHGhH83wQGjuAGdVNKc6Q7XHYi/iGJm8U8DWmVQ/X
Jn4ioH1wVE0M0edZ5Dv0Xbf0x0rWPxkTiKH3nsNDHDzHTG2Wp6Bc0wztjQ3rAWxH
o5ZmLnrfB2LRE4bfCaonqEjvTrcgcPd0kCJzTEfeVT1DF+R5cZ5O2P35sudcyucO
0Vr/RSHi1NFcY9UxvVOyESbUnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5V1AVM
mEPDD/2AxVwc3620VPpfMB8GA1UdIwQYMBaAFICxi4HUe2F3EwTg92ENEafDQGEj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEE0Mi8xRkIwRjY3NkVB
OEMxMUVGODhDOTA4NUFDNEY5QUUwMi9nTEdMZ2RSN1lYY1RCT0QzWVEwUnA4TkFZ
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dMR0xnZFI3WVhjVEJPRDNZUTBScDhOQVlTTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NEE0Mi8xRkIwRjY3NkVBOEMxMUVGODhDOTA4NUFDNEY5QUUwMi9nTEdMZ2RSN1lY
Y1RCT0QzWVEwUnA4TkFZU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCTejdvYHPT40odw8lzDuzEvaFaaX+A+mGN7DDuaQbFIyal8FcXK/dD
+w2TxN3Vb4x3niaAF8n8CMlNxp2q3dzuNhgdpo125alblxAFw6iahG8+POGynAO0
Ji9WUeTV+gzxZqn8lATOL1O9uRVCNeiXUz0676L9hOA6AWAqFIYLWCiPv1rIZ8Dd
DxfJOjwYVBw36ZM9ePMTPSV+kc8u457Mymi8xOR/rbYWvPUwCqn2+WVjNoXiuBn0
Eq0G8dd8mekVzjvdbNxw5SvPC30K+egtkrjnSI9s7iHcWSf2KFhH64i+JcaG66qX
R2PXkFRNrM62VPXKe/my3v2ZVGARCXxH
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:28 2025 by rpki-client