This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
File: g1KnNOghRPMixQtyik92WjPXIlY.mft (raw, json)
Hash identifier: TwzrrC4HzKCAnPAQsQ1mRn6bkBx8qAoygqoNXnHr6Mo=
Subject key identifier: 1E:A7:51:C4:92:B7:F1:19:8A:28:C0:D7:61:CB:1D:5E:6C:F2:C6:60
Authority key identifier: 83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
Certificate issuer: /CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256
Certificate serial: 0292
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
Manifest number: 0713
Signing time: Thu 18 Dec 2025 23:20:50 +0000
Manifest this update: Thu 18 Dec 2025 23:20:50 +0000
Manifest next update: Thu 25 Dec 2025 23:20:50 +0000
Files and hashes: 1: g1KnNOghRPMixQtyik92WjPXIlY.crl (hash: nyP23Ja4TNCILCZJJPmpUh/bDJnzvehH3aDNObyuQk8=)
2: 21E1440A1E7711EFB69BE070C4F9AE02.roa (hash: g9az2eJZ2fUas4ad3d/QH9wXCAIefnJD9ePsqv2jusw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl
rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917357E, serialNumber=8352A734E82144F322C50B728A4F765A33D72256
Validity
Not Before: Dec 18 23:20:50 2025 GMT
Not After : Dec 25 23:20:50 2025 GMT
Subject: CN=69448c52-62a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:92:57:ac:64:6c:a0:72:06:1d:50:be:c6:9b:
80:b5:1a:37:d1:34:cb:eb:0b:c6:e9:09:96:c6:6d:
a1:8b:8f:20:92:db:3b:f3:43:5d:9b:2a:23:74:a3:
11:28:ef:cc:80:0c:44:e8:37:e0:1a:58:12:8c:ca:
f2:4a:84:01:4f:3e:75:ae:ec:fe:63:4d:ad:b4:48:
ab:14:84:41:64:55:bc:02:4a:69:e0:d0:35:5b:64:
dc:01:bf:12:18:58:22:02:ae:0b:f4:40:1b:13:3b:
d8:35:b0:4c:d0:a6:b5:f9:18:b5:93:89:72:ae:4c:
a1:ee:19:6a:3e:67:6d:ed:06:c7:35:ba:b8:d7:24:
34:ee:0d:b9:7c:6e:24:d2:55:0d:c8:61:76:37:52:
17:ac:4f:c2:cd:84:e0:3b:11:c5:c6:f5:2d:0a:26:
33:fb:2f:78:64:4f:65:59:67:6b:e5:4c:9f:4c:c2:
9f:07:e0:36:9e:81:c7:7c:a1:b1:24:9f:95:13:84:
54:44:5d:4a:95:58:99:ca:b2:18:7e:15:46:d1:28:
b3:d9:2e:7f:73:96:8a:2f:35:91:69:91:62:07:69:
bb:56:0c:3f:79:3f:30:9d:a1:21:6b:45:29:5e:1c:
6b:28:64:78:f2:6e:7b:33:d4:94:db:d3:7f:c2:9c:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A7:51:C4:92:B7:F1:19:8A:28:C0:D7:61:CB:1D:5E:6C:F2:C6:60
X509v3 Authority Key Identifier:
keyid:83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:1c:b1:f8:ff:9d:49:3f:58:4c:7f:72:f0:ea:8d:23:93:42:
57:df:c3:5f:54:bb:b3:bc:e8:34:a0:8b:ab:49:f3:1b:28:80:
1c:58:b4:98:29:fb:7f:44:c7:fb:be:a7:b1:9d:5b:31:d3:6b:
4a:7f:fd:2c:41:81:d0:f8:1f:46:95:c1:77:fb:0c:b3:a6:ba:
81:04:46:6f:15:7e:1c:40:bd:51:38:e3:1b:af:d3:43:22:61:
44:e4:08:9d:8d:f9:65:f9:c5:f3:3a:4e:36:97:0b:79:40:a2:
a4:eb:08:5c:b5:ee:2f:2d:09:ec:32:f7:77:d4:7e:95:df:4c:
3e:23:9e:a6:21:ff:c7:eb:41:24:97:8c:72:88:7a:46:78:b3:
0a:7a:2a:02:b1:00:d2:7a:e8:06:1e:12:a9:fa:ed:a0:de:d5:
02:df:7f:5f:c5:0a:a2:42:37:65:85:d9:2a:8f:7d:59:ba:fc:
38:3c:8d:b3:7a:f8:38:a3:fd:cf:6b:31:71:98:89:74:c4:92:
3f:06:1b:0f:57:9b:d5:b1:57:49:7c:3c:14:10:1a:82:01:98:
86:80:98:5c:b2:b1:1b:82:c6:fa:6c:82:56:89:03:df:69:5c:
12:d1:2b:08:3e:27:05:da:e7:ff:5e:3b:34:75:b7:1f:c4:59:
7f:26:e7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:51:04 2025 by rpki-client