This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
File: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft (raw, json)
Hash identifier: RPa+Kzdu/PfNMdeRkFUW2inopdH918eH+lwwqYNQzoI=
Subject key identifier: A8:5C:5C:04:C1:A9:52:6B:18:86:A6:6B:81:EC:74:E4:A3:A7:C5:BC
Authority key identifier: 1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C
Certificate issuer: /CN=A917B4EE/serialNumber=1A4D314C1FD010622E87491CE4827B623966709C
Certificate serial: 0696
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
Manifest number: 0691
Signing time: Thu 18 Dec 2025 21:48:45 +0000
Manifest this update: Thu 18 Dec 2025 21:48:45 +0000
Manifest next update: Thu 25 Dec 2025 21:48:45 +0000
Files and hashes: 1: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl (hash: e7HavIJqbBs6aENfeGRWHisdvHE1G9v1ESDnFRggWec=)
2: 851D827C977511EBA99DCE72C4F9AE02.roa (hash: hQ/sXLdGqM267Zz0nlBpIRPhMJ+xIknpNjyonr+GXWA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl
rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 21:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1686 (0x696)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4EE, serialNumber=1A4D314C1FD010622E87491CE4827B623966709C
Validity
Not Before: Dec 18 21:48:45 2025 GMT
Not After : Dec 25 21:48:45 2025 GMT
Subject: CN=694476bd-c5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:48:74:9e:4b:5f:4d:c3:5c:11:9f:99:0a:
3e:3c:1c:6f:ed:48:b9:65:a2:7e:23:ac:56:58:fc:
0c:4a:ab:10:d2:4e:51:83:6c:b8:6a:0b:f6:47:30:
0d:24:b5:2f:72:68:72:58:06:00:97:ea:5e:01:4b:
8d:86:ac:d1:0c:cb:5a:dd:3a:86:0d:5b:87:8f:9f:
df:2c:73:a8:52:b6:9a:11:a3:72:87:8f:e5:4e:1e:
84:de:9b:67:38:ae:8b:7b:54:2e:ea:55:a4:64:c3:
f3:cb:48:a7:dc:73:78:ed:c1:de:d1:bd:d7:57:ed:
5b:50:99:11:ad:4c:9a:c9:0f:b1:ce:c9:08:56:8a:
ec:fb:9f:8b:d0:c0:73:b1:bf:5a:ec:75:4f:8c:a8:
5f:5d:a1:c1:9d:83:e4:23:15:b9:a8:27:fb:aa:9c:
16:8b:51:3c:53:cb:4a:10:98:48:30:ff:89:c5:32:
48:99:cf:78:74:13:79:c7:70:7f:f1:b7:dd:87:dd:
53:fe:49:51:d6:2f:a3:8c:4d:91:a4:98:27:b6:8e:
37:a3:4f:ca:63:fc:34:64:b7:45:94:d1:21:ac:aa:
06:cd:9f:61:8e:bd:03:6e:e0:a6:9c:f6:7d:e0:06:
e4:25:ea:9d:54:7d:fd:f7:1c:62:f2:e3:06:85:ca:
ad:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5C:5C:04:C1:A9:52:6B:18:86:A6:6B:81:EC:74:E4:A3:A7:C5:BC
X509v3 Authority Key Identifier:
keyid:1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:a4:b6:39:91:13:d8:21:87:cb:18:0d:ca:46:d8:d7:0d:3f:
78:3d:0a:8e:e2:b0:d6:a5:b4:2d:31:2e:03:46:10:5c:14:2f:
52:e5:72:6b:50:13:12:2c:33:c7:96:67:e2:2f:69:b9:48:5c:
62:73:26:fe:9e:08:33:9b:6c:95:35:25:7d:46:c7:6f:a5:fb:
d8:bb:30:48:38:d5:e1:4a:61:73:d4:9a:07:b2:09:a9:fe:b2:
0b:f1:37:13:6b:cb:a2:cb:b7:89:cd:2a:d1:e0:94:b0:94:c1:
e3:7a:27:53:3c:e0:b4:17:54:ff:dc:08:fd:81:ad:c4:d4:90:
fc:48:e1:32:d9:ee:dd:26:40:31:3a:cd:7f:ed:6d:f2:13:30:
c2:e4:f7:78:50:b8:a6:69:3b:4f:02:7c:1c:a6:9e:9f:6e:69:
68:a7:7f:2a:37:be:0f:96:48:e6:16:f5:5e:eb:94:cc:08:7d:
9b:ce:44:5d:e4:f7:1e:b1:42:e1:be:33:77:97:6e:47:a3:fd:
86:5c:da:2e:95:2d:9e:61:b3:3b:36:21:4f:e2:2e:ff:07:36:
81:57:ff:92:53:17:37:05:e5:39:74:63:75:3c:05:ce:b7:27:
92:81:b3:a3:d9:cd:d9:be:7f:24:5b:6e:74:67:0f:27:a2:cc:
ae:d7:c1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:02:57 2025 by rpki-client