This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
File: Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft (raw, json)
Hash identifier: LO4vWDBZJw66j/kGCaCEDZDLdOm9yaOX355p9TmfsZM=
Subject key identifier: 4F:7B:5A:B8:47:A7:D4:D9:13:E7:52:D8:4D:43:E8:69:F0:3F:26:F1
Authority key identifier: 19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7
Certificate issuer: /CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7
Certificate serial: 0867
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
Manifest number: 0861
Signing time: Thu 18 Dec 2025 20:10:19 +0000
Manifest this update: Thu 18 Dec 2025 20:10:19 +0000
Manifest next update: Thu 25 Dec 2025 20:10:19 +0000
Files and hashes: 1: Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl (hash: iKn+UkR9t19AcTwOYrKu6VyOEsiA6GdM+vWi/vKiC0c=)
2: B3078DFAE1E411EAAD5D8545C4F9AE02.roa (hash: letKkI3J7GQM6enE4QxR/GGV62ebNvR+dZGy0HTaYqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl
rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2151 (0x867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91753AE, serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7
Validity
Not Before: Dec 18 20:10:19 2025 GMT
Not After : Dec 25 20:10:19 2025 GMT
Subject: CN=69445fab-edc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:3d:31:4d:77:fc:b7:70:b0:fa:fd:45:39:
9c:b8:09:64:ec:a7:5a:e5:1c:ab:98:8a:27:fe:02:
41:14:15:3d:f8:11:00:59:48:a6:7b:58:d8:73:d1:
7b:7f:53:d2:3f:81:ba:75:6c:06:48:1f:4c:f5:f6:
c4:59:3a:43:3d:64:99:47:96:e5:19:71:2d:ef:8a:
9f:c8:72:67:38:cd:30:b4:f5:80:7d:83:39:47:6e:
be:94:be:5b:cb:8e:63:6a:9e:28:8a:c6:5b:ea:7b:
40:be:71:9b:c7:1d:eb:9d:40:d0:f7:d9:a7:5b:40:
73:b1:c2:d4:ea:49:b4:75:df:8c:1c:f1:bf:7d:8b:
ad:be:d5:31:aa:52:9e:02:83:65:5b:34:ec:33:d0:
42:8a:65:7e:ab:d1:f6:75:df:a1:87:6a:fe:d0:64:
85:1b:6e:99:1b:33:36:3e:81:42:0f:2d:a7:71:ab:
2e:a5:51:b1:e9:c1:e7:11:d5:38:28:d5:2a:47:74:
24:02:8e:b2:95:cd:71:13:46:5f:31:60:a7:83:62:
ac:ad:18:7f:9a:3e:b6:a2:a8:34:4d:6c:d5:c6:7a:
98:68:30:97:5e:26:31:f7:82:db:18:a3:a3:86:ad:
2a:3e:0d:e6:6a:f1:7c:fe:3b:48:36:35:08:b6:f3:
f7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7B:5A:B8:47:A7:D4:D9:13:E7:52:D8:4D:43:E8:69:F0:3F:26:F1
X509v3 Authority Key Identifier:
keyid:19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4f:8b:51:c9:9e:8d:c6:6a:12:f6:ac:21:28:8e:4c:00:7d:
8e:0d:73:05:2f:61:5e:02:f6:76:7f:01:74:df:4f:b6:6e:4e:
bb:a8:05:d8:95:7e:b8:0c:6b:7c:53:09:27:de:b2:bd:b1:c1:
fa:a6:67:e1:a6:bd:f2:9f:6f:b2:38:e7:7e:80:25:37:7a:bd:
d3:1b:10:63:ef:29:f3:3a:3f:40:ab:41:dc:0b:18:f6:7f:d4:
ab:69:be:f9:a2:3d:7f:47:5a:8f:60:99:cd:03:da:b1:8c:b0:
7c:89:a2:13:8c:5a:37:a1:fe:57:eb:2a:b3:24:89:b1:3b:ed:
fb:a2:01:8b:e9:41:be:ff:37:c0:f7:bf:9b:11:37:81:a5:6a:
62:fa:34:81:7f:9f:4a:d7:45:11:04:76:71:ba:d5:e5:a2:4c:
58:85:c7:7d:d4:16:92:59:51:75:50:c7:ab:a4:fb:7d:b4:59:
91:32:65:c6:6d:1e:24:4f:e3:68:c4:5a:53:bb:1b:bb:b4:ae:
ab:df:38:11:78:06:8e:87:f2:5a:9d:d0:c3:53:58:61:87:b2:
75:26:04:ed:ec:58:47:5b:d5:8d:03:95:8f:ff:df:f9:8a:ab:
ec:11:88:2c:a0:07:3a:2e:51:4c:bb:62:6e:10:5b:e8:db:41:
2f:88:59:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:09 2025 by rpki-client