This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
File: GJZ9zbckqEpxcR5niqsdLnIhXWw.mft (raw, json)
Hash identifier: DQ7+X+gG8UB6l3flGrNWL7EwUdDHzheNo/jTimA6zPM=
Subject key identifier: 30:DA:F1:CD:C9:E0:98:FB:C9:98:6E:E5:23:79:EA:B8:F0:B3:D5:E0
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
Manifest number: 8D
Signing time: Sun 21 Dec 2025 05:46:33 +0000
Manifest this update: Sun 21 Dec 2025 05:46:33 +0000
Manifest next update: Sun 28 Dec 2025 05:46:33 +0000
Files and hashes: 1: GJZ9zbckqEpxcR5niqsdLnIhXWw.crl (hash: c2Z2rO9uoqlJ0jE7RnqYj4iNmb/y6MvpQF0fX194tbM=)
2: 349ACBB2450811F09650FF5FC4F9AE02.roa (hash: yHDrOZAHkb1aNlUdTrbId0x6TGNas51iB5olcDBHB+Q=)
3: 5E6EBAF64D0611F09396603CC4F9AE02.roa (hash: T7YSg4O6XdsHdCRu0Ytt2yzH0YgQZroHBRbYY6Lzb10=)
4: 17894A68318411F0BC1DD041C4F9AE02.roa (hash: BtSPkMAc6JmUbVgs04DwYummrrWRw2IMsZrBj4wxrVc=)
5: 37B448241F7811F0AC4FFF82C4F9AE02.roa (hash: rfQkg7k3FOtxE3QH+1b/dgEb3pjSHYuBHOu/Aw1ktps=)
6: 3408F1BA450811F09650FF5FC4F9AE02.roa (hash: bCkwnolEga96G4fQjLHTSTCqelRgfcxersU3tEYQQXA=)
7: 1879BE8A318411F0BC1DD041C4F9AE02.roa (hash: Z2oCf9VHu+Nlt7KaEbBkyqcl7gO+UQwxVS+M1hIhebk=)
8: 6896A446318411F0BBC4F91DC4F9AE02.roa (hash: Xrg0tE5OWYBtPUZ5NZncP6ifYaxEX/Vp4aRquzOzr2Y=)
9: 372E72941F7811F0AC4FFF82C4F9AE02.roa (hash: 77gNSThyGJ0AnlBE5SHj9Jhjf0hxCyKERlvCEcqZ/Gg=)
10: 1808A790318411F0BC1DD041C4F9AE02.roa (hash: flX3irYKlYgZGHT2kvpQWpKKvTykKg+AN7X91kuuF4c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 05:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Validity
Not Before: Dec 21 05:46:33 2025 GMT
Not After : Dec 28 05:46:33 2025 GMT
Subject: CN=694789b9-65ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:08:6c:e1:dd:5c:ef:19:d0:e7:9d:47:3d:79:
99:44:f3:1a:94:57:94:8a:e2:4f:da:94:ba:64:26:
54:2f:82:e5:76:a5:5a:ee:f8:5f:67:88:d0:62:e0:
2b:45:3b:09:90:67:12:bd:10:90:09:73:00:16:37:
73:c3:25:58:66:7a:2a:4b:66:c0:23:4b:7a:9c:d9:
c0:19:ea:a9:37:e1:20:69:29:ae:a3:3f:6e:d8:fa:
bb:7d:eb:c3:ad:25:85:52:a6:4c:6d:09:90:ba:6f:
e1:ce:65:7c:2c:5d:5c:d4:83:da:85:fd:67:c1:bc:
b2:3a:24:f5:3c:6a:2e:ba:81:29:29:3d:53:3b:23:
0c:a0:bc:49:70:74:c1:5e:40:c5:69:9d:32:45:db:
23:3d:43:f0:41:63:94:a9:c1:96:50:ed:1e:c6:f0:
d6:43:ac:85:3f:83:b5:79:93:90:eb:a7:90:29:13:
bd:4b:6a:85:7f:27:e9:ab:00:a7:bc:b8:2c:54:1f:
23:21:8c:c1:8c:7b:4d:42:39:bc:8d:68:1c:12:68:
e5:e1:ab:61:48:c2:91:fb:02:5c:36:fc:b1:b5:93:
c3:e8:1a:10:24:0c:d3:4a:50:02:54:66:48:a1:eb:
c6:64:c8:1a:58:d0:d6:04:24:b9:fb:75:81:7d:d6:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DA:F1:CD:C9:E0:98:FB:C9:98:6E:E5:23:79:EA:B8:F0:B3:D5:E0
X509v3 Authority Key Identifier:
keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:7c:d9:22:a2:96:33:46:72:75:5b:4f:ee:c8:c6:cb:91:63:
36:af:4a:51:62:f5:dc:97:11:a8:1a:2e:fb:3e:5a:b9:5d:7d:
70:4f:dc:40:ae:c6:a6:a4:3b:c9:92:79:71:b4:d9:54:76:4f:
cc:6a:18:64:ec:7c:2d:92:17:4f:93:d5:49:9c:2c:2f:b5:38:
34:d7:a9:d4:43:bb:73:25:33:2a:7c:f0:44:5d:98:d1:66:19:
e0:19:0b:bc:65:c0:08:87:10:4e:82:20:d8:4a:98:d1:36:3b:
58:83:bf:94:2c:e9:8f:87:fa:4c:24:86:c8:10:f2:4e:c0:5c:
aa:b2:a7:32:25:1e:07:e7:9c:33:4d:b7:d6:4d:91:5d:9f:5c:
8c:57:a2:59:da:8a:24:74:42:9a:7f:8d:10:2f:fe:9c:47:35:
c8:b0:20:a5:be:ac:ed:c7:9e:8b:52:a1:78:6a:e1:38:04:dd:
97:b0:08:74:a9:44:05:1f:a3:24:67:84:0b:2d:60:30:59:ef:
e5:3c:48:ae:51:94:29:07:0d:82:1c:5c:79:a4:2b:d5:c4:8e:
11:21:9c:f1:65:3a:cc:c5:cc:38:06:eb:5a:18:78:d4:25:19:
fc:4d:03:2d:71:bd:db:ec:4f:35:bd:1a:e9:49:c0:e6:b9:57:
89:65:7b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 03:33:14 2025 by rpki-client