This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
File: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft (raw, json)
Hash identifier: NFQdt0Cgrh54rtezhidZ5JqZRazFSztFaQ7FO9KPzBA=
Subject key identifier: 83:93:D7:10:61:6A:4E:DC:16:78:F8:DE:44:88:38:7C:60:37:8A:43
Authority key identifier: D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57
Certificate issuer: /CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
Manifest number: D6
Signing time: Sun 21 Dec 2025 04:48:00 +0000
Manifest this update: Sun 21 Dec 2025 04:48:00 +0000
Manifest next update: Sun 28 Dec 2025 04:48:00 +0000
Files and hashes: 1: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl (hash: TP8Tc0ONYeFKZQdRG4cXapcp5ckXD0X2bwGnZyN/n4g=)
2: EB2858349B4B11EF86A11C85C4F9AE02.roa (hash: 5WheE+aXkzXZDT7gqdgoxdvd7cxjWWrADEec8lz4BxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl
rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170F11, serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557
Validity
Not Before: Dec 21 04:48:00 2025 GMT
Not After : Dec 28 04:48:00 2025 GMT
Subject: CN=69477c00-aacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:14:49:99:24:1d:b4:76:a9:5d:21:e7:1e:e2:
fd:a6:22:85:b3:32:07:6f:cd:2d:d6:f8:b3:97:34:
79:0a:47:eb:c0:4f:a2:04:0e:95:34:3a:7b:7e:f7:
18:6b:8f:32:48:2e:03:a7:1f:31:97:b2:1c:6f:1b:
41:c8:bb:ff:8d:70:fe:11:68:5f:67:94:eb:9e:0b:
00:79:ab:27:bc:58:4b:b3:5f:3f:f2:39:aa:13:0e:
4f:9b:84:ce:8f:35:f0:93:82:b2:a3:d9:f8:4c:61:
03:fa:2b:7a:49:30:7a:e8:31:92:6a:db:4d:f1:55:
53:b6:6e:9d:b3:30:8b:3c:d0:e1:96:34:eb:e6:cb:
c7:fe:43:07:17:68:bf:b4:87:5d:08:f7:49:f2:43:
48:75:95:cc:cc:bd:2c:30:31:0e:35:69:c4:78:53:
e9:ff:b2:a7:d3:e9:2e:98:57:3a:da:cb:aa:12:1f:
0a:54:f9:f2:1c:68:95:ec:24:83:94:07:dc:03:f0:
f6:2a:24:82:0b:ff:98:ca:96:b1:57:3b:5e:1e:01:
33:9c:24:e5:1c:07:23:2e:00:79:19:d3:e5:91:14:
8c:aa:52:74:af:d6:f7:31:52:bb:7b:92:c8:a7:b6:
e9:28:3c:6d:88:d6:7a:db:32:b5:3f:0c:19:43:f8:
fb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:93:D7:10:61:6A:4E:DC:16:78:F8:DE:44:88:38:7C:60:37:8A:43
X509v3 Authority Key Identifier:
keyid:D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:5c:15:0d:4d:87:9e:a1:90:7a:ee:d4:cd:99:ce:73:6e:c5:
5b:f6:dc:c3:05:71:dc:c6:ca:d5:f2:0b:2f:f3:fb:56:31:a1:
e2:c8:e5:ac:88:0d:67:94:b6:72:48:2f:36:08:58:36:00:c0:
1b:db:00:6c:da:ca:1e:e7:b0:ce:33:b6:fa:67:15:eb:72:93:
4b:a8:06:cc:e7:e3:8f:86:fe:84:ca:f6:de:9c:39:c2:e5:17:
b1:ad:84:14:79:72:c5:7c:f0:bd:94:25:7b:84:84:a1:1d:25:
b4:14:4c:36:96:50:21:be:b9:75:8b:b7:c2:b9:9c:8e:6f:b2:
ea:23:5c:81:8f:d2:94:ad:64:8f:50:8f:19:cf:5a:dd:32:dd:
8b:fd:96:70:3b:d9:4f:cd:c7:f3:8e:a1:aa:76:10:3f:77:a0:
4e:13:3b:31:55:a3:61:51:f1:83:10:c0:02:04:2c:34:e2:dc:
b5:4f:08:81:27:d3:d9:55:46:05:0b:93:67:a3:fb:00:83:2c:
89:12:1a:bd:f7:0f:e9:4e:71:00:f4:f8:a8:5a:d4:c2:1f:c0:
82:1e:84:a4:e3:8e:b2:3d:91:9e:5a:15:0a:b0:87:37:af:2b:
5b:0f:2f:40:b4:05:17:53:e3:dd:6d:85:fb:2d:43:64:4e:1f:
d9:62:1b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 16:02:56 2025 by rpki-client