This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft
File: anyGILARkTWk4pZxECAuepIQ_XY.mft (raw, json)
Hash identifier: Y2j+vdGP++R3aZ7ft0E9bLNRMqnCsXLAHk5G6x2RHz8=
Subject key identifier: A2:AB:D5:52:89:5C:DA:30:62:3A:F4:4D:E1:5D:5F:D2:6D:D0:FF:4D
Authority key identifier: 6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76
Certificate issuer: /CN=A91D2659/serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76
Certificate serial: 0D18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft
Manifest number: 0D11
Signing time: Thu 18 Dec 2025 17:49:09 +0000
Manifest this update: Thu 18 Dec 2025 17:49:09 +0000
Manifest next update: Thu 25 Dec 2025 17:49:09 +0000
Files and hashes: 1: anyGILARkTWk4pZxECAuepIQ_XY.crl (hash: MqxPNdBrKE9yTzndPier5fJQgQ8TDERp3zghMz4Oizg=)
2: 3ED2E738F0C511E9AD7DCC11C4F9AE02.roa (hash: Wr1nIVXklBpPXHRfvPiRNdEC8EzroDNqpMylbn6Uxs4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl
rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3352 (0xd18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2659, serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76
Validity
Not Before: Dec 18 17:49:09 2025 GMT
Not After : Dec 25 17:49:09 2025 GMT
Subject: CN=69443e95-aded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:6a:2a:92:05:c2:4a:12:c2:cb:5e:41:40:
8a:6e:c9:50:1e:17:8f:f3:86:4c:ba:dc:df:e7:5d:
a0:a1:47:cf:3d:2d:36:3f:e6:14:50:6e:19:c0:ff:
26:5b:09:c6:eb:ff:33:0f:2f:01:2a:57:41:b4:3f:
8e:67:64:0c:83:e0:a7:2d:1f:71:9f:01:79:99:18:
14:64:e8:22:e8:cf:94:30:8a:13:d7:a3:4e:fe:ef:
d1:06:a5:55:0e:c8:89:99:9d:aa:da:82:71:f9:8c:
ea:31:88:6f:27:ac:f8:54:70:44:e2:47:63:f3:b9:
38:e0:42:8b:97:7f:3c:3b:d3:fd:a3:81:a9:74:03:
6c:b0:90:dd:4a:aa:fc:64:82:99:42:55:4f:0f:4e:
70:5e:a7:67:de:26:9f:0a:f6:c3:2a:ac:f9:2e:03:
b9:2b:91:fb:90:c9:f2:5c:16:38:8c:28:61:03:72:
6b:4b:5b:36:88:bc:e9:b6:62:9e:75:b8:7d:65:f5:
9b:8c:48:5c:f4:3a:bc:86:9b:83:6c:d1:be:43:66:
1e:47:84:d0:1f:73:93:78:72:e7:4a:72:a1:f3:07:
8e:54:46:04:2c:cf:14:cb:d4:a1:87:df:b7:38:8e:
7b:18:93:6f:a7:33:6a:fe:ac:ef:51:45:be:c9:ca:
59:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AB:D5:52:89:5C:DA:30:62:3A:F4:4D:E1:5D:5F:D2:6D:D0:FF:4D
X509v3 Authority Key Identifier:
keyid:6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:3c:cd:f2:dd:df:41:b2:d9:01:eb:4b:a2:c4:5d:e7:b5:fa:
5c:f4:b7:f3:09:b6:82:93:ed:cd:a5:05:0d:e5:3e:06:c4:6a:
a6:bc:37:2a:9d:87:28:5d:2f:77:33:74:0d:19:10:07:3d:08:
3d:9d:cf:f8:52:06:bc:ad:f4:dd:44:ba:3b:d0:db:23:e1:c4:
e4:9c:16:29:58:01:ed:16:1b:43:fb:8c:9f:8b:dc:6f:c0:80:
4e:76:49:d7:cc:af:64:1a:e3:d2:b9:2e:25:30:c4:cf:ef:9b:
b3:7b:8f:81:37:44:14:e8:47:fb:d0:9b:7d:72:aa:17:d1:d2:
10:af:03:4f:d3:ee:5e:8d:2b:6f:26:e9:04:81:f1:b1:8f:00:
82:08:8e:2b:7b:f7:e1:7f:85:ca:41:1a:fa:27:89:30:d7:a1:
75:21:ff:2b:25:1e:5a:25:f9:f6:52:93:b4:56:2c:6d:30:d7:
96:cc:cf:98:cc:00:5b:d8:b8:e2:c9:d6:d0:72:08:59:93:9b:
35:27:8c:9b:b8:af:2e:0a:fa:aa:25:1b:03:0e:e5:e6:ce:fa:
a0:8d:12:da:61:c9:71:b2:64:e0:7b:fa:f0:16:52:a0:e9:b9:
1e:d7:92:b8:5a:ef:f1:ca:64:21:fc:92:ce:ea:da:13:b4:eb:
aa:07:19:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:15:59 2025 by rpki-client