This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
File: gBf49rHsAjxINqRXp7BYQqBxnyg.mft (raw, json)
Hash identifier: gVlrRCaW6GjmD6Xb/GevPs5iHPyCIV32XoHDHhx31zY=
Subject key identifier: 57:55:EF:14:7B:7F:15:2C:22:BE:54:03:B2:74:4E:1B:D0:AE:6B:83
Authority key identifier: 80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28
Certificate issuer: /CN=A913B088/serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
Certificate serial: 0BA9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
Manifest number: 0BA2
Signing time: Sat 20 Dec 2025 18:33:21 +0000
Manifest this update: Sat 20 Dec 2025 18:33:21 +0000
Manifest next update: Sat 27 Dec 2025 18:33:21 +0000
Files and hashes: 1: gBf49rHsAjxINqRXp7BYQqBxnyg.crl (hash: qaj5MQ188ic+gIeMBffrAeOz6/SSMF1s6aNuTloouss=)
2: 6DEDEF66387A11EA9450A37CC4F9AE02.roa (hash: o4u5Q2Jc2gCY8tVjsD1bgPzcbwwoDr6mqctN+7fPekU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl
rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 18:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2985 (0xba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B088, serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
Validity
Not Before: Dec 20 18:33:21 2025 GMT
Not After : Dec 27 18:33:21 2025 GMT
Subject: CN=6946ebf1-9bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:5b:1c:93:b8:48:a6:b0:0d:65:9c:e3:34:
c7:b6:f2:a3:06:d1:bc:a5:68:db:89:15:67:cc:62:
67:21:67:b6:9b:d9:d7:b2:1c:59:45:6f:83:c8:ba:
ca:7a:fd:a2:2d:d4:aa:e1:7c:be:51:c1:a1:b9:89:
4a:35:a1:97:e3:ea:0e:29:1a:e6:4f:b4:ee:03:5d:
f3:dd:a2:cb:cf:7a:dc:4d:dc:cb:66:f0:f8:ae:67:
bc:e3:bd:1d:a9:5a:d8:00:62:1a:d2:1f:ad:8a:15:
34:86:eb:64:c7:b0:a8:90:a0:96:1b:68:b7:ad:ce:
7e:7f:d4:6a:75:66:d7:57:23:c3:15:34:d1:e4:8f:
29:84:70:b5:eb:34:9d:70:13:64:bd:10:32:ba:09:
88:69:59:8c:71:de:4b:e1:da:e1:06:72:1f:1d:0c:
35:cd:5b:d9:56:ab:eb:b6:66:ca:b5:70:aa:82:0b:
90:a9:3c:91:e9:46:4e:4c:93:d4:33:b7:55:89:a6:
9e:ec:af:64:81:df:ad:8c:53:75:47:b9:e0:0a:d1:
7d:08:85:a9:2d:d6:30:64:28:d9:d9:20:46:ba:d2:
68:47:6f:90:ec:22:db:41:73:ad:be:ed:d3:56:71:
a6:1f:75:75:6b:ad:82:90:16:86:3d:ff:1b:38:a1:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:55:EF:14:7B:7F:15:2C:22:BE:54:03:B2:74:4E:1B:D0:AE:6B:83
X509v3 Authority Key Identifier:
keyid:80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:24:c6:de:d3:41:1e:fa:07:09:de:77:b1:6b:7e:42:9b:cf:
9f:e3:5a:03:3e:80:6d:fc:79:88:8b:21:6d:f0:5e:fc:5c:cb:
26:07:aa:2d:d6:a2:dc:a1:f1:ef:19:98:8c:4f:0b:8a:b0:6a:
ca:9c:4d:1b:1b:87:df:1e:ce:b7:37:66:99:96:01:e6:b7:5b:
69:89:26:da:ce:a1:28:21:48:dd:1e:6f:6d:88:68:0a:35:4b:
a2:47:3a:94:66:19:1d:5f:1b:d4:81:a0:b9:74:98:15:19:e4:
4d:2b:93:6f:55:2f:16:63:49:26:2e:39:fa:f1:9c:6f:b3:f5:
9e:f6:6c:05:ca:3f:5f:a5:b0:93:45:2a:94:37:8c:7b:62:89:
8f:5c:4d:c0:e7:6c:57:bf:04:c5:19:4a:4f:41:d2:a3:aa:fd:
c2:b9:47:fa:3d:64:3e:3f:e6:74:0a:61:d7:7f:89:b1:c8:f0:
f3:87:f1:67:e0:67:ce:13:51:4f:e4:38:59:27:0c:f0:3b:18:
07:53:08:30:06:7f:f2:4a:76:8e:18:dc:eb:ed:8d:32:9a:f5:
3f:e1:05:aa:02:ad:99:7c:fd:ef:24:60:98:9e:9a:79:19:f4:
c0:65:5a:7f:0e:d9:8c:91:62:b3:f1:5f:87:be:8b:62:65:f1:
21:22:35:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:59:04 2025 by rpki-client