This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
File: Gq0AphpkkECrUmoUK1173uWgHL8.mft (raw, json)
Hash identifier: AGWgK6+nPA0bSLngQn89I6vNabZoQ1w7SjoZv3WCuDM=
Subject key identifier: 87:2B:9C:54:1C:96:3A:38:BC:DA:BE:19:CA:44:B7:59:17:84:00:4C
Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
Certificate issuer: /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Certificate serial: 060F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
Manifest number: 05F4
Signing time: Fri 26 Dec 2025 22:06:07 +0000
Manifest this update: Fri 26 Dec 2025 22:06:07 +0000
Manifest next update: Fri 02 Jan 2026 22:06:07 +0000
Files and hashes: 1: Gq0AphpkkECrUmoUK1173uWgHL8.crl (hash: ZqoXmWssmacvbb/e7ssRHoyqjnNMwyVbLbMCmHLXnfU=)
2: 956B1C7AD81111EB8C3ACC5DC4F9AE02.roa (hash: X0T8ND86WJAL5iAS0HvTaodSJ+abJbUeYiv8L6Sgq7A=)
3: B3394AE0D7F511EB82D62F73C4F9AE02.roa (hash: SlHb/v+sm7TxxztSTjArtTh8kIfdevbbO+wHjL8M2no=)
4: B62A6E82D7F511EB82D62F73C4F9AE02.roa (hash: uAy+EH0oOVAkqikgbCloC8mmcK5Ft+q4cyTNy5UrDyI=)
5: 9659D3F6D81111EB8C3ACC5DC4F9AE02.roa (hash: NE5i1McZ5sD2fL9nEgN8GNUMBNGpPRPBv7rzXqPRphw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 22:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1551 (0x60f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Validity
Not Before: Dec 26 22:06:07 2025 GMT
Not After : Jan 2 22:06:07 2026 GMT
Subject: CN=694f06cf-de25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:18:95:8c:02:81:f3:15:f3:e9:40:90:4d:
bf:ef:50:8d:a4:66:ec:e0:77:e7:e7:03:6b:71:f1:
a0:ee:95:cf:9c:b5:0f:11:74:0e:ad:90:02:e0:bd:
07:0a:d0:2b:69:67:99:f7:51:0e:d0:0e:f8:cc:4c:
8e:f9:6c:6c:ea:64:a0:57:4a:e8:a8:3a:32:11:f7:
ad:d8:73:4c:fb:ff:f3:0c:ee:3c:6e:87:7f:01:1c:
56:af:87:87:11:20:49:ec:59:fb:ff:3d:92:22:ce:
de:16:c4:29:be:f2:da:35:5a:11:1a:e8:bd:b7:e3:
bf:6c:e8:88:78:49:d0:aa:62:2d:5d:89:45:d0:43:
b1:81:5c:62:b4:04:62:ce:5f:08:76:89:a2:6f:76:
cc:f3:34:07:1c:ec:47:87:a5:63:7d:b0:fa:33:97:
a1:24:52:f4:7a:9c:f5:fd:e5:b3:4a:2b:c3:e1:b3:
89:41:3e:11:c7:55:b8:19:35:3b:50:e7:0b:68:fe:
12:07:0c:02:33:5d:5b:a6:09:cb:e7:35:8f:17:6a:
8a:08:bc:21:a6:f1:b3:a9:b5:e8:e2:04:a8:b4:72:
62:45:6a:99:72:4e:e5:6c:60:68:85:ec:79:28:dc:
52:68:42:84:e1:9f:41:28:3c:af:fd:f2:c5:14:30:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2B:9C:54:1C:96:3A:38:BC:DA:BE:19:CA:44:B7:59:17:84:00:4C
X509v3 Authority Key Identifier:
keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b9:eb:7b:27:84:75:a1:7c:c4:9c:40:c4:1d:8f:69:3a:cb:
cb:b5:70:59:b2:ce:53:b2:e6:e1:5b:52:9e:d1:79:33:20:8c:
ae:03:1c:86:59:a4:99:45:4c:6a:25:2f:3b:9b:e7:84:40:79:
a3:3b:1a:d2:06:b0:7f:4d:eb:c3:5b:92:06:46:e0:c1:bf:cd:
be:7e:b3:11:ac:46:f8:ec:38:62:96:87:42:d7:4f:81:2b:6f:
ac:84:92:75:60:53:fd:68:e5:35:6c:30:2f:a8:09:d1:02:8f:
3a:a9:f6:eb:13:b1:f2:e6:c6:20:53:8b:73:c6:4e:82:fc:f5:
94:75:3f:a0:e8:6e:bc:bf:24:cc:27:e8:b5:d9:4c:f1:f1:bd:
2e:f5:0a:fb:cd:b8:02:d4:a2:aa:be:19:25:5c:7a:71:49:c1:
1a:ba:e4:94:8c:b8:9c:55:84:47:e5:13:2b:43:e7:4a:5a:9d:
a3:57:24:6e:25:d3:d8:57:19:7d:fe:00:42:18:c7:22:c2:d8:
60:0b:4d:7b:43:8d:a5:64:65:a1:f1:2c:40:43:7d:a2:c8:eb:
20:f8:76:a0:94:99:ea:70:f9:68:8c:39:f9:8b:9e:e6:24:5e:
2c:c5:84:8b:18:e6:c2:71:da:78:79:8d:95:05:04:63:70:f1:
b6:31:2a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 15:48:54 2025 by rpki-client