This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
File: gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft (raw, json)
Hash identifier: 05Sn2j0mkonkdjU+178t5lnyaGEX1Rx1HwDTnT+slR0=
Subject key identifier: 22:C8:F6:7A:AE:62:E9:5F:B2:D0:DD:55:64:35:D8:8D:91:BD:E9:88
Authority key identifier: 80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB
Certificate issuer: /CN=A91D959F/serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
Certificate serial: 07E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
Manifest number: 07E0
Signing time: Thu 18 Dec 2025 20:39:45 +0000
Manifest this update: Thu 18 Dec 2025 20:39:44 +0000
Manifest next update: Thu 25 Dec 2025 20:39:44 +0000
Files and hashes: 1: gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl (hash: kuLyqRGVcsqVdBUWJ8H6MCjlu8anl56EnyJt004ntvE=)
2: F75AEA8A13F111EB950DBC4EC4F9AE02.roa (hash: +QmSQmsTCCd4yyTjh5mf70wyqAWPCaGTrX6lQ4meIO8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl
rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:39:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2022 (0x7e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D959F, serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
Validity
Not Before: Dec 18 20:39:44 2025 GMT
Not After : Dec 25 20:39:44 2025 GMT
Subject: CN=69446691-66b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:ce:e3:63:7c:25:a1:a7:4f:d1:af:45:b8:
73:fa:3a:59:c3:53:3b:76:62:be:08:17:e6:3b:90:
66:5b:27:c1:94:07:be:49:cd:fe:0f:eb:a6:2d:27:
22:ae:b2:8f:73:d6:04:c0:cb:8b:5d:76:46:01:60:
e9:84:e5:97:fb:be:b4:9b:a7:19:11:ce:20:6a:83:
87:7b:fe:53:92:40:7b:36:09:f5:af:97:2c:f6:ac:
9d:b6:af:89:b4:f7:ce:ec:30:cb:a6:c2:64:84:99:
4e:7a:00:80:46:1c:c9:97:f6:87:06:ef:95:31:55:
3f:6b:57:1e:8e:d0:5a:89:a8:dd:54:88:90:31:80:
5a:6a:9d:f2:02:6a:12:fd:e0:ee:16:37:9d:5f:ca:
92:59:61:b7:6f:11:37:6c:38:0f:a2:cd:23:3e:e5:
08:c7:dd:81:e4:0c:7f:c1:48:d4:9a:85:fe:cc:b7:
25:3b:42:4d:bb:25:b1:ec:e7:3b:a2:84:ef:66:8f:
c4:cb:37:58:c7:95:6b:57:43:15:55:f0:52:dc:16:
0e:3b:6c:96:3a:fb:bf:58:d3:e8:19:fe:b3:af:67:
f0:3b:03:f5:bc:35:60:7d:0d:82:3e:6f:f6:36:64:
e8:db:1b:33:c2:cf:fb:96:09:f5:b8:da:71:75:35:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C8:F6:7A:AE:62:E9:5F:B2:D0:DD:55:64:35:D8:8D:91:BD:E9:88
X509v3 Authority Key Identifier:
keyid:80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bc:38:c5:42:96:67:34:df:f2:05:38:ea:64:f4:3c:3a:f2:
58:ae:68:42:74:af:49:aa:4f:19:70:96:d9:2c:fd:7f:43:38:
7b:9d:c0:7f:ef:b9:a7:82:e5:e0:4c:35:8b:af:4a:6c:93:c4:
ad:ff:d8:eb:6f:df:c4:9f:a1:b9:2e:0c:13:6f:e8:28:67:72:
b2:85:91:24:8d:58:72:81:05:e1:26:45:fb:b2:62:76:81:36:
ea:2b:e2:ce:5b:70:a0:ba:10:c2:7f:86:ea:b9:15:96:ed:18:
a6:6e:22:9c:04:33:f9:73:f8:e3:fc:ef:d2:03:d8:27:49:4d:
f0:ed:ee:28:d0:ca:12:d1:98:4f:47:6a:4f:bc:c8:3a:d5:59:
d1:a7:06:49:2c:e1:17:a2:fa:9a:db:f6:59:9d:6b:2a:50:23:
f7:c9:5c:75:51:f3:02:7c:7e:b3:0e:b7:65:bb:ef:bc:3d:69:
2e:3d:2e:d6:6a:2f:32:ed:78:72:b3:ff:0e:66:4e:38:a6:bd:
10:04:d1:96:12:af:d1:57:cd:5f:dc:78:24:9b:d4:9d:96:9b:
90:ba:a7:37:80:bf:b4:ab:87:c4:58:e0:6b:7d:e5:9d:cc:7b:
6f:85:6d:07:a9:4a:83:e7:0c:60:b4:81:e4:70:43:01:6e:b2:
e4:89:ab:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:29:35 2025 by rpki-client