This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
File: Gv1CZeY9DL91I27ZaGrk8AFV_34.mft (raw, json)
Hash identifier: LKOqSQw9Fs2ShF0Z7mm4Pb0MQuXVQ0nvFAAwespS7PM=
Subject key identifier: 56:0A:4B:C0:33:61:62:09:C8:C3:C0:DF:9B:85:1F:FD:04:19:09:75
Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E
Certificate issuer: /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
Certificate serial: 1998
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
Manifest number: 1985
Signing time: Thu 18 Dec 2025 16:17:36 +0000
Manifest this update: Thu 18 Dec 2025 16:17:35 +0000
Manifest next update: Thu 25 Dec 2025 16:17:35 +0000
Files and hashes: 1: Gv1CZeY9DL91I27ZaGrk8AFV_34.crl (hash: mulrKve045oTvEZIUABeGzwUKbFCP9jh1tkqkXZ2UOU=)
2: FFE0F998101511EDA7D8F271C4F9AE02.roa (hash: RnL32mbH2nfGSeBF5CgeDIySAoSrBSDNFXrw7LKGyjA=)
3: EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa (hash: i9JFPAUn7PS/i/yxYDte5hNt2lU/GYfFJVKLS5WTzUc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl
rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 16:17:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6552 (0x1998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBA26, serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
Validity
Not Before: Dec 18 16:17:35 2025 GMT
Not After : Dec 25 16:17:35 2025 GMT
Subject: CN=69442920-41c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:15:ef:06:27:19:ee:ed:32:22:42:86:e5:
b9:e9:c2:76:3b:b4:95:5d:dc:35:13:ba:e0:7d:be:
1c:59:ee:57:db:33:6c:3a:8c:88:08:44:31:07:a8:
30:ee:15:60:97:d7:fd:bf:10:dc:49:ef:06:91:a6:
f4:cc:12:d8:8b:31:a6:3f:8e:e4:a3:d0:2f:54:37:
72:d4:bb:e9:c1:06:db:57:55:5d:f4:a9:fa:02:f9:
05:ee:74:a7:7b:57:e1:8b:64:fb:cf:68:6a:2c:01:
d6:42:9d:7e:89:63:1a:d3:de:dc:a7:11:13:74:b4:
1f:d4:c8:89:11:8d:73:6f:4b:8b:63:c9:06:0f:b4:
fb:a8:ea:c2:5c:3a:d3:bd:a0:f5:69:76:5d:85:18:
15:9d:48:49:a4:74:38:58:ae:d2:95:a7:48:33:91:
1f:dc:3c:54:b8:9f:2e:7b:a3:0b:bc:5c:98:76:f5:
be:65:de:63:a6:c4:39:db:84:11:5a:1f:c5:a5:fa:
03:0a:98:dc:9d:99:09:7b:3d:17:36:c9:3d:e2:3c:
ed:6a:a2:dd:13:4b:cc:be:34:99:34:42:fa:f5:a6:
7c:eb:9c:8a:58:78:62:b7:35:68:f6:b5:83:20:5d:
7b:c4:b9:b6:b6:1e:bd:69:62:9d:ad:ac:fa:6c:60:
20:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0A:4B:C0:33:61:62:09:C8:C3:C0:DF:9B:85:1F:FD:04:19:09:75
X509v3 Authority Key Identifier:
keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:48:e5:cb:8b:6e:bb:1c:0d:93:8f:29:14:fe:d6:c6:72:3a:
0d:69:3e:2d:22:e1:59:d3:94:5d:e0:18:60:bf:09:06:39:be:
99:ee:41:09:8e:0b:f7:89:2f:40:44:a7:d8:1b:06:29:98:30:
70:c6:cd:9b:e1:dd:77:f0:a9:44:83:53:7b:ed:a2:a1:40:e5:
13:64:db:76:45:9d:54:a0:ba:64:63:0f:e3:c6:79:76:bb:f5:
95:96:7d:9d:04:22:db:3f:d2:d7:32:74:d6:70:eb:2f:6f:98:
24:72:d2:13:82:56:db:3c:64:21:b2:bc:13:47:8e:5f:aa:e1:
79:3e:8e:1d:e5:63:f8:5a:49:af:d3:55:4a:99:78:9f:28:59:
69:f0:fc:75:8b:f8:d6:d6:b9:38:23:30:71:ef:2e:a5:41:05:
64:94:1e:c9:7d:07:7f:1a:61:9c:63:23:3f:c7:82:41:e5:c5:
4f:56:45:40:1e:5f:67:59:98:5a:21:ff:0c:b6:b1:37:f2:64:
5f:18:2b:61:b1:d9:f2:3e:03:a2:4e:b3:2e:86:89:e5:72:02:
7a:16:15:52:5e:5b:5d:7f:b0:68:a6:cd:f8:09:0a:50:d7:9f:
19:9c:86:b8:3a:94:91:d2:12:12:3c:d2:91:0b:2e:49:23:9d:
bc:92:da:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:13 2025 by rpki-client