This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft
File: gCfg71TQC2H3E28JcZv89MRTNAU.mft (raw, json)
Hash identifier: h6DhzZlVqduwx+dicG99lEiVtZzJbVyghDcPa9GJHpg=
Subject key identifier: 96:A0:68:6B:B9:BD:A0:02:04:8C:6A:A8:23:CB:51:47:C5:50:BA:15
Authority key identifier: 80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05
Certificate issuer: /CN=A9182CFC/serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405
Certificate serial: 3538
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft
Manifest number: 3528
Signing time: Thu 18 Dec 2025 14:26:44 +0000
Manifest this update: Thu 18 Dec 2025 14:26:44 +0000
Manifest next update: Thu 25 Dec 2025 14:26:44 +0000
Files and hashes: 1: gCfg71TQC2H3E28JcZv89MRTNAU.crl (hash: r6kZghmlnxMVO+n+opghpIXp4D25Gk5mqfqg55hPmwU=)
2: B305D4F4D4D911F0990CAE1CC4F9AE02.roa (hash: 3rMjBsa+hGT6tnwF5tmSEOO63Z0+yXyvvDuHyzu4Ing=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl
rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 14:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13624 (0x3538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182CFC, serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405
Validity
Not Before: Dec 18 14:26:44 2025 GMT
Not After : Dec 25 14:26:44 2025 GMT
Subject: CN=69440f24-a8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a1:73:63:2f:59:5f:12:45:3a:9e:d4:c4:c6:
49:eb:a1:fd:f8:66:20:7e:84:6f:c5:d6:1a:be:77:
f5:b8:61:5c:71:4c:df:ca:2e:ce:fd:60:f7:d4:c3:
b6:d2:1b:d6:39:e1:5b:05:92:82:47:d7:7e:20:4f:
e5:b2:30:a1:75:63:9e:d8:a9:35:61:c0:40:48:50:
95:cd:c1:0a:13:f4:4c:fc:92:73:9c:e5:cf:a0:d4:
66:8f:69:69:6a:09:3d:aa:cf:6a:cb:82:da:98:2a:
b0:6e:ae:88:de:4d:23:76:7e:21:e2:8c:f9:94:d3:
19:ac:30:9e:d7:1d:aa:d9:10:3a:b9:b9:3e:28:50:
57:af:86:67:4f:95:74:39:92:a8:41:1a:09:c4:d2:
fb:18:b6:45:16:89:b0:57:ca:62:c1:0d:bf:3d:f2:
91:62:af:47:00:9a:ec:aa:d6:34:8a:08:1f:04:3c:
40:27:9a:d2:ab:8f:6c:99:32:84:74:dc:08:ed:58:
00:aa:09:dc:82:6d:ba:7b:65:8d:6f:85:5b:2a:27:
9b:9a:4d:7e:8e:3a:89:e0:53:df:2d:bd:65:86:bf:
2b:5d:3e:d1:57:40:a6:4a:bf:3c:ef:49:fd:47:bf:
84:ff:c5:de:55:7f:81:a2:b2:e0:2a:0f:bb:a2:1f:
f5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A0:68:6B:B9:BD:A0:02:04:8C:6A:A8:23:CB:51:47:C5:50:BA:15
X509v3 Authority Key Identifier:
keyid:80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:b4:a6:0f:29:18:ef:61:ff:b5:07:48:4f:b5:91:de:f4:19:
ac:79:61:27:0b:62:25:04:0c:6f:6a:6d:71:22:31:9b:7b:27:
14:c8:3c:84:c6:ab:16:e6:c2:af:e1:a5:b1:83:5a:17:a9:bb:
37:5e:5b:18:f9:0d:3b:68:9c:a6:31:da:43:27:2c:45:9e:d3:
8b:1e:3b:6e:30:c7:41:8d:66:29:6b:4e:dd:5c:f2:03:3a:2e:
bf:19:1f:0d:45:0d:02:fe:5a:75:78:ef:fb:15:dc:3d:80:a3:
48:b9:37:be:e2:03:7a:b9:c4:8a:0e:da:43:17:91:98:a0:e9:
c4:86:6d:e5:af:49:be:87:6b:50:e6:28:51:9c:71:cb:c5:c8:
28:1f:db:13:ca:79:f9:a6:af:4b:e8:c5:8d:cb:7e:a4:e6:80:
6e:4d:82:05:c1:81:2c:e3:25:0c:f9:f3:45:80:79:ae:74:f2:
14:f4:67:13:23:d8:6f:e1:af:77:dd:df:ce:45:bc:21:f5:f8:
26:13:0b:65:18:ac:8b:1c:1d:d2:37:90:d4:a2:39:3e:0f:55:
86:f3:f4:0e:c8:b5:35:e2:f9:b8:84:9b:e4:e9:1e:ab:59:a3:
8a:2a:6d:37:b3:78:39:51:17:f7:de:d3:c0:d5:52:44:45:b5:
cf:12:87:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:57:29 2025 by rpki-client