This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
File: GXlPPKo3VSe6D9M0SAx-Azjnnio.mft (raw, json)
Hash identifier: 2zFp5lDQy0tSo/sAhOlTxEttcRLbPSGqtkNZYy6SHbM=
Subject key identifier: 7B:F0:4C:71:97:9E:D1:6E:67:4D:AC:57:74:3E:2F:34:A7:42:66:31
Authority key identifier: 19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A
Certificate issuer: /CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A
Certificate serial: 013C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
Manifest number: 013A
Signing time: Thu 25 Dec 2025 03:31:41 +0000
Manifest this update: Thu 25 Dec 2025 03:31:41 +0000
Manifest next update: Thu 01 Jan 2026 03:31:41 +0000
Files and hashes: 1: GXlPPKo3VSe6D9M0SAx-Azjnnio.crl (hash: x6JHupEph2U7vHLAHXBWFjWwJSkgnkHgdTkjD0TqgCo=)
2: AB05727AFE8C11EE81FDAB6FC4F9AE02.roa (hash: kL+8sBegJ1XGnndePATDLqR1ij+F7xDhoLyLkaA0qyw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl
rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 03:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FA48, serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A
Validity
Not Before: Dec 25 03:31:41 2025 GMT
Not After : Jan 1 03:31:41 2026 GMT
Subject: CN=694cb01d-3059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:81:98:d6:3a:73:33:be:a2:f9:bd:85:9c:
df:8a:4a:fb:df:89:ac:0a:16:cb:7d:0b:8d:91:08:
5f:bf:8d:71:46:06:83:a7:e3:b8:e8:bb:af:71:61:
1a:4c:3e:2f:9a:8f:d2:a9:c1:ea:8c:c9:15:72:88:
cf:8d:03:11:63:3b:b0:73:38:fb:97:d2:32:3a:7b:
79:45:49:da:db:03:5c:8e:3d:63:21:39:11:70:6b:
39:57:d8:41:f8:ad:e2:66:34:eb:0f:59:46:04:95:
fa:b0:db:76:09:0c:31:f9:7e:fb:66:12:ab:09:73:
72:21:15:98:55:19:42:2a:2c:77:41:a1:65:7f:57:
f1:b6:5a:39:07:c7:b7:61:21:3b:80:e6:b8:5e:a8:
9c:6e:db:36:c1:bf:50:2c:ca:cd:84:24:0d:85:68:
1c:ad:54:af:ec:13:2d:d1:29:28:09:ae:e8:cb:8e:
e9:25:a5:85:77:a3:7a:d2:2d:6b:09:6c:ad:b6:68:
65:2f:50:d8:a1:0e:d6:cc:a1:09:6f:b9:5e:76:6d:
79:af:11:38:89:e7:a8:d8:18:bb:69:ba:50:08:3b:
0f:e2:b0:16:fc:bb:1a:3f:bc:05:ae:74:d6:96:7e:
4c:8a:38:5f:01:c0:b2:90:4d:59:56:a1:2b:cd:aa:
d8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F0:4C:71:97:9E:D1:6E:67:4D:AC:57:74:3E:2F:34:A7:42:66:31
X509v3 Authority Key Identifier:
keyid:19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:9f:b0:00:c8:22:b5:1e:56:3f:56:e1:cc:a3:22:9a:e8:29:
5c:ad:2d:e8:8e:ac:60:ae:6b:29:43:bc:36:a1:c6:66:68:7a:
69:62:89:bd:c3:85:1b:56:07:a8:ce:0d:1f:ce:90:4f:d2:84:
90:3b:4a:d6:b5:71:0a:2d:db:bc:3e:70:98:62:95:b5:b2:e7:
c3:54:af:9a:8a:6c:d0:3b:35:aa:fb:91:7c:4a:01:7f:93:51:
cb:5b:01:9d:89:a1:40:03:80:fa:2a:37:70:56:a6:3d:1c:87:
68:68:12:b2:02:83:c9:74:63:9e:88:7f:f7:5b:e9:5f:4a:53:
ea:51:42:a8:f0:13:45:dd:22:71:52:89:36:21:92:ca:d4:a4:
b9:0f:41:6f:1f:4c:ad:a2:27:ee:44:8e:b4:6b:28:8b:66:72:
80:04:78:3f:0f:66:86:42:3d:dd:98:16:ea:49:22:4b:e9:fe:
c0:d3:a8:b8:24:44:a9:24:02:52:df:12:c6:a3:51:be:93:f0:
06:da:1f:97:d5:99:aa:f1:83:d3:83:4c:e6:f8:32:60:bb:e9:
26:1b:24:4b:2a:7e:4f:e1:cc:c2:6f:c2:d9:79:31:cc:31:1e:
5f:6b:e5:ac:e4:19:8d:9d:39:c2:0b:c6:66:dd:e6:56:38:d0:
22:36:9f:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEZBNDgxMTAvBgNVBAUTKDE5Nzk0RjNDQUEzNzU1MjdCQTBGRDMzNDQ4MEM3RTAz
MzhFNzlFMkEwHhcNMjUxMjI1MDMzMTQxWhcNMjYwMTAxMDMzMTQxWjAYMRYwFAYD
VQQDDA02OTRjYjAxZC0zMDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvImBmNY6czO+ovm9hZzfikr734msChbLfQuNkQhfv41xRgaDp+O46LuvcWEa
TD4vmo/SqcHqjMkVcojPjQMRYzuwczj7l9IyOnt5RUna2wNcjj1jITkRcGs5V9hB
+K3iZjTrD1lGBJX6sNt2CQwx+X77ZhKrCXNyIRWYVRlCKix3QaFlf1fxtlo5B8e3
YSE7gOa4Xqicbts2wb9QLMrNhCQNhWgcrVSv7BMt0SkoCa7oy47pJaWFd6N60i1r
CWyttmhlL1DYoQ7WzKEJb7ledm15rxE4ieeo2Bi7abpQCDsP4rAW/LsaP7wFrnTW
ln5MijhfAcCykE1ZVqErzarYmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvwTHGX
ntFuZ02sV3Q+LzSnQmYxMB8GA1UdIwQYMBaAFBl5TzyqN1Unug/TNEgMfgM4554q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkE0OC9COUUyQUNBMEZF
NTQxMUVFOTYxOUEzMTRDNEY5QUUwMi9HWGxQUEtvM1ZTZTZEOU0wU0F4LUF6am5u
aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dYbFBQS28zVlNlNkQ5TTBTQXgtQXpqbm5pby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RkE0OC9COUUyQUNBMEZFNTQxMUVFOTYxOUEzMTRDNEY5QUUwMi9HWGxQUEtvM1ZT
ZTZEOU0wU0F4LUF6am5uaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWn7AAyCK1HlY/VuHMoyKa6ClcrS3ojqxgrmspQ7w2ocZmaHppYom9
w4UbVgeozg0fzpBP0oSQO0rWtXEKLdu8PnCYYpW1sufDVK+aimzQOzWq+5F8SgF/
k1HLWwGdiaFAA4D6KjdwVqY9HIdoaBKyAoPJdGOeiH/3W+lfSlPqUUKo8BNF3SJx
Uok2IZLK1KS5D0FvH0ytoifuRI60ayiLZnKABHg/D2aGQj3dmBbqSSJL6f7A06i4
JESpJAJS3xLGo1G+k/AG2h+X1Zmq8YPTg0zm+DJgu+kmGyRLKn5P4czCb8LZeTHM
MR5fa+Ws5BmNnTnCC8Zm3eZWONAiNp+V
-----END CERTIFICATE-----
Generated at Thu Dec 25 07:12:52 2025 by rpki-client