This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
File: G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft (raw, json)
Hash identifier: wE5StRkPSgjIyMmnXS3KcLPdEYpZUIUSr6R3Yz5Vk0k=
Subject key identifier: C5:C9:93:3F:E5:F5:AC:34:4F:76:6C:80:6E:C6:6B:11:6B:10:95:82
Authority key identifier: 1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61
Certificate issuer: /CN=A9168F50/serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
Manifest number: 0E
Signing time: Fri 19 Dec 2025 06:54:49 +0000
Manifest this update: Fri 19 Dec 2025 06:54:49 +0000
Manifest next update: Fri 26 Dec 2025 06:54:49 +0000
Files and hashes: 1: G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl (hash: hsn6XdelendjT4XIGMnMx97F2bNPWnuATLnFRXBuh64=)
2: 8F62775EC9B311F08EBFD366C4F9AE02.roa (hash: HxgOvE8EAPC40IUOqEwdYq0KSHkJcIRXkuZt02zGc1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl
rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168F50, serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
Validity
Not Before: Dec 19 06:54:49 2025 GMT
Not After : Dec 26 06:54:49 2025 GMT
Subject: CN=6944f6b9-aa39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:94:e7:45:6d:de:58:ff:c4:d7:6a:74:a2:
06:ae:4e:5b:e2:6c:49:b7:89:f0:4e:5e:29:9e:5e:
22:de:cd:d9:6d:d1:a8:92:da:b6:3d:0a:94:12:99:
04:50:a6:ab:a3:ff:55:d2:75:20:b6:f4:86:9f:83:
20:a0:43:62:e9:8c:fc:b6:9e:80:b7:5d:98:a7:01:
f7:e2:1d:ce:a1:bf:f2:73:d0:49:4e:77:4c:ee:d5:
a8:ee:23:71:91:f6:78:f6:64:57:00:6c:91:63:1b:
38:0c:84:09:86:8b:a4:ef:84:70:eb:65:54:0e:f7:
dd:9a:fc:63:55:ac:31:14:d2:83:da:89:a7:31:01:
9f:18:51:5b:ed:cc:fd:33:0c:0e:50:b2:2d:94:92:
0e:18:b7:fc:89:3d:93:03:eb:3d:70:63:32:08:20:
e7:c3:7a:3a:dd:2c:50:b4:d5:d5:c4:8c:d2:c7:3f:
20:72:30:ed:a0:28:0e:c2:86:2c:f6:e8:bb:e9:a2:
24:67:d5:9f:41:49:d6:d2:76:da:a9:a8:28:72:cd:
42:9e:1b:c4:6c:6e:db:62:e7:ee:fb:88:91:7f:97:
e1:68:93:65:98:04:ed:88:22:d4:3f:a7:5e:b8:7d:
1a:18:40:ea:e1:f1:43:e3:49:78:d9:75:ef:60:47:
f1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C9:93:3F:E5:F5:AC:34:4F:76:6C:80:6E:C6:6B:11:6B:10:95:82
X509v3 Authority Key Identifier:
keyid:1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:90:6d:4d:43:2b:5c:07:f3:d6:f2:74:8e:6f:2d:9c:bc:59:
16:8d:39:f4:aa:e2:3c:80:7c:f6:48:e6:ad:ce:b8:20:22:8b:
26:b9:bc:8a:52:5c:76:9b:ad:85:11:de:d1:ca:01:eb:8c:6b:
56:8b:ea:19:df:43:73:e0:2a:a3:7f:8d:ac:16:60:33:cb:1f:
bb:e5:62:29:28:2a:bb:4d:c9:5a:2a:7f:65:a4:e9:f7:44:52:
f8:26:41:d2:b4:fd:d4:d6:5c:05:f7:04:72:77:96:96:eb:11:
b8:2a:ad:9f:c6:5e:9d:6b:f9:71:95:c2:60:1c:fc:7a:f3:f8:
57:d8:23:96:fe:c3:da:58:06:c2:3e:6c:e3:db:2e:42:8c:bb:
38:f0:70:34:d7:2f:a1:cb:d6:31:9b:e6:03:73:2a:df:4e:e7:
fd:ae:72:c5:d5:af:93:2f:5a:ca:a5:c8:2b:16:cc:dc:b2:8e:
1c:23:68:2b:e1:8a:ae:a0:74:9c:86:e6:76:1d:a9:2e:3f:d9:
f5:30:2a:72:dc:8c:65:c0:68:94:8e:17:ef:5c:7d:6d:bf:7b:
32:12:3a:c3:7e:d4:c7:53:f8:64:a2:86:e1:00:52:b6:de:a9:
33:b0:3c:f4:38:93:26:d6:7a:52:f1:b0:84:31:6a:43:50:1c:
1a:9d:86:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:36:22 2025 by rpki-client