This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
File: gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json)
Hash identifier: uIgUhe5TC1oD8rKJ1PMn5zbK67d+xJemPEiNPl2GX5Y=
Subject key identifier: AB:E3:ED:0C:BE:BD:31:12:EE:B4:56:AB:EF:9A:11:23:08:03:5C:6A
Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
Certificate issuer: /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Certificate serial: 0C62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
Manifest number: 0C4D
Signing time: Sat 20 Dec 2025 18:16:02 +0000
Manifest this update: Sat 20 Dec 2025 18:16:01 +0000
Manifest next update: Sat 27 Dec 2025 18:16:01 +0000
Files and hashes: 1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: dg3DyvCjZIVc26TS+GMe7qV3KEhIb4nZM2CH/iF0++Y=)
2: 13DE95F668FA11EFAE700D5FC4F9AE02.roa (hash: 5vimEGr3gRZLpfm5tFt/h59hECKoXGndHIqB7DGboHs=)
3: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: srW/OZ+gufuOrgwsN3TtzuEuYmynFy3l8AmOXmBxqp4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 18:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3170 (0xc62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Validity
Not Before: Dec 20 18:16:01 2025 GMT
Not After : Dec 27 18:16:01 2025 GMT
Subject: CN=6946e7e2-d9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:71:d6:07:ec:c8:c7:41:29:a6:7d:19:6d:57:
49:cf:a4:48:03:45:e5:56:d0:aa:89:68:38:cd:74:
c3:5a:2a:18:ff:40:b3:ce:88:ba:da:68:6e:40:c3:
dc:ef:ab:5d:72:bb:a9:1f:3d:97:2c:37:bf:b3:3e:
67:bf:dc:54:77:45:83:3a:89:b6:95:1b:83:d2:e3:
8c:49:51:7d:e9:f8:e3:0d:b4:56:a0:91:77:ef:75:
36:9f:f4:4c:6d:e4:38:a8:29:ec:35:09:d4:42:29:
4d:4f:e5:61:a5:ac:d9:ec:0a:b9:2c:9a:8d:b0:2e:
64:83:5b:d5:a9:2b:02:dd:7e:1c:c2:a4:b4:68:e9:
2a:6a:90:7a:a9:de:e8:8a:ec:bb:7d:be:c7:5d:a3:
cb:12:08:ed:29:b0:18:56:92:59:b0:0f:8a:02:3e:
2f:f1:36:6b:1b:57:95:9f:fe:f5:bb:6d:85:f6:df:
f5:e0:81:d1:51:49:07:f0:55:f6:3f:8d:59:f1:6c:
f2:29:7a:55:b1:2a:bc:03:b3:00:3c:42:5c:19:aa:
50:6b:36:a6:37:d3:b7:d0:4c:a1:aa:c2:e1:d2:d0:
47:e8:1a:ad:55:44:42:e7:15:41:15:41:d3:30:54:
86:80:36:91:ae:28:67:28:bf:72:25:2e:15:03:8f:
32:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E3:ED:0C:BE:BD:31:12:EE:B4:56:AB:EF:9A:11:23:08:03:5C:6A
X509v3 Authority Key Identifier:
keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:6a:16:7e:0d:d3:74:53:4e:97:4d:8f:38:c4:06:0e:6c:8d:
f1:59:d5:07:bb:73:57:c3:ce:aa:b3:98:dc:57:f2:4a:97:7f:
84:3f:ca:2b:4b:15:ee:67:ed:1d:1a:a5:32:f3:dd:bb:87:12:
d6:94:53:ab:54:41:8b:a5:c9:93:a5:5d:6a:ef:42:f8:b0:e0:
96:5e:bf:5b:fe:7d:f0:1d:33:23:60:af:aa:a4:74:2c:e5:72:
5a:2b:ed:56:d3:b0:83:12:02:2c:e0:44:21:8c:75:2b:d6:8a:
60:aa:c7:0a:18:8f:5f:55:d5:cb:b9:45:2a:40:af:0b:7e:29:
25:80:fe:ad:c7:d0:f2:15:b0:38:2a:da:8a:9c:8b:a2:c8:e1:
11:cc:26:a2:5a:08:2f:db:4b:f6:83:6a:3b:0c:54:48:7f:6d:
df:4d:e3:34:8e:7e:04:a3:37:cf:c5:39:ee:77:50:bc:7c:6c:
db:b4:5b:0d:6f:18:c9:53:e2:e2:fe:4b:fd:ad:5a:d6:da:cc:
dc:7f:27:a8:30:d5:aa:9f:9b:c0:3f:3e:23:e3:23:99:28:78:
74:af:35:89:49:a6:bb:74:ed:8a:1c:7b:84:41:56:f2:d7:09:
01:9e:b2:18:0a:f2:df:7f:47:b4:cf:97:55:6c:b8:8c:31:22:
87:a7:de:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 16:02:18 2025 by rpki-client