This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
File: GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft (raw, json)
Hash identifier: 3fopxajPGjHfHmcweS79p4iKS5kGvrTKgWfvnMSbHTs=
Subject key identifier: 4A:3A:F8:F4:EE:42:96:D5:61:45:6E:F1:7B:C3:5B:82:BB:4B:9B:CE
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Certificate issuer: /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial: 0537
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
Manifest number: 04D4
Signing time: Thu 18 Dec 2025 23:20:57 +0000
Manifest this update: Thu 18 Dec 2025 23:20:57 +0000
Manifest next update: Thu 25 Dec 2025 23:20:57 +0000
Files and hashes: 1: GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl (hash: eELIdz6xze+1ezY58ehMYVuZ+3VuGm0mntXIqnI2m+o=)
2: 53A6072E7AD611EC8A330A0CC4F9AE02.roa (hash: c9Z2TSZfqohxCIBb22YrZB4ezrswRH+F9Usd0k39src=)
3: 4472E7B85B6011F0A2E8311CC4F9AE02.roa (hash: T5/KdpDeKUQiXnSS9T8mbCWPeI35IszMHYXsXr691fk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1335 (0x537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91618BC, serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Validity
Not Before: Dec 18 23:20:57 2025 GMT
Not After : Dec 25 23:20:57 2025 GMT
Subject: CN=69448c59-c673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:e9:1c:34:d3:05:49:50:a7:69:a3:97:b3:
37:6c:8a:2b:79:0c:dc:76:05:21:c9:2c:c8:cc:4c:
0b:63:32:de:e4:4c:17:3a:fc:c2:8b:a7:a2:5a:c5:
13:f0:4c:9c:ca:2f:7e:a1:6f:f3:9d:5c:f4:bc:91:
09:65:bd:ea:e8:53:31:5b:c7:eb:ef:63:e2:43:e4:
60:9e:61:96:e5:60:69:84:d1:24:a2:27:db:d3:2a:
68:55:c3:17:ad:db:0f:1a:a2:85:34:fa:1b:ea:57:
dd:b2:59:5d:c2:42:96:26:db:01:d1:14:8e:19:7c:
57:46:97:54:f9:2d:9d:62:60:c1:d2:7a:4f:18:ec:
3b:4f:66:53:33:4e:dc:e9:3e:da:83:f4:36:d2:d8:
fb:a5:2d:7d:0a:82:90:14:f0:96:f6:02:96:fb:dc:
74:f4:3c:8e:c5:ab:e5:b9:d7:3d:ed:ef:a8:71:0d:
49:40:56:6b:e9:dd:f8:7d:35:a8:db:d2:49:eb:c3:
07:31:11:22:95:f0:76:a4:04:70:7a:d1:6d:95:a0:
8c:cc:f4:cf:68:53:4a:6e:d4:fe:11:28:79:9f:fa:
18:c0:7e:f3:05:86:eb:60:b5:00:48:0a:20:fb:c8:
62:d6:49:5a:87:0d:b2:79:10:9d:e7:4e:1a:e3:d5:
75:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3A:F8:F4:EE:42:96:D5:61:45:6E:F1:7B:C3:5B:82:BB:4B:9B:CE
X509v3 Authority Key Identifier:
keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:09:46:b4:20:e8:2e:66:46:37:90:69:52:91:8a:be:60:61:
41:30:ba:9f:21:5e:63:8f:bb:f1:2a:65:55:8e:2e:ba:78:38:
c8:75:52:8b:79:34:a8:06:e4:f4:7d:b4:5f:98:9a:6a:69:b8:
d0:81:55:5f:b6:c7:39:b4:7b:a7:02:69:23:9a:03:8f:25:09:
c2:7e:19:e9:12:81:49:0e:60:01:17:0d:be:d1:a7:d5:66:7d:
f5:ac:a7:71:e6:42:17:ec:41:23:21:ab:75:4d:b7:48:d7:43:
2b:cc:1e:30:a9:c1:05:20:7a:af:0c:3d:a4:24:d4:cb:5d:07:
65:ac:c2:60:51:64:31:5b:91:db:a1:bd:4f:6c:37:d8:e0:00:
ab:4c:ea:64:56:2f:c3:18:62:2c:53:e9:e8:9d:ba:78:db:58:
53:1e:f0:48:dd:45:06:85:ab:f8:45:80:55:0c:c0:d8:e4:ac:
20:12:58:03:87:fe:5f:f0:e7:1c:25:99:6f:9a:e7:8c:eb:73:
e2:2b:b6:e6:5a:3a:d8:53:22:e6:39:b6:87:00:b9:34:e2:5f:
71:98:70:62:eb:58:bb:99:28:f0:c0:a9:e5:df:21:05:de:cf:
ad:19:e9:5b:51:0f:03:bb:67:38:6a:3d:af:08:23:cb:0d:91:
38:9c:3c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:00 2025 by rpki-client