This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
File: G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft (raw, json)
Hash identifier: x6aden8NYSSkxXug2XdXpxGitAW9/LcRcddZFMWKbkg=
Subject key identifier: AF:AD:B7:11:7C:C6:2A:E2:DF:B4:87:29:F3:A6:50:2A:5C:09:90:B7
Authority key identifier: 1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40
Certificate issuer: /CN=A91DF352/serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40
Certificate serial: 71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
Manifest number: 70
Signing time: Tue 23 Dec 2025 05:45:35 +0000
Manifest this update: Tue 23 Dec 2025 05:45:35 +0000
Manifest next update: Tue 30 Dec 2025 05:45:35 +0000
Files and hashes: 1: G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl (hash: HZnGh/UDOAXVksWLg2X3u/nqqb+LkPfqU2DjzjSAMp4=)
2: BA3FE218315611F0951A037DC4F9AE02.roa (hash: qVVzOp455rcs6g+f/MmhYpdl/2N+Lt1OuCuyTK7KoGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl
rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF352, serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40
Validity
Not Before: Dec 23 05:45:35 2025 GMT
Not After : Dec 30 05:45:35 2025 GMT
Subject: CN=694a2c7f-9bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:73:c2:e6:fb:e4:58:7e:da:d3:d3:5f:ed:
86:1a:b6:50:fa:c5:54:03:fb:dc:0d:1f:39:e5:5b:
ed:65:53:eb:a1:c3:35:c8:93:4d:84:a7:c3:b4:e1:
56:8e:fd:73:f2:3c:ca:6f:22:07:b1:28:43:2e:19:
ea:c2:c6:12:f7:2b:bc:8e:7b:fd:e2:12:fb:2f:df:
94:bb:d7:e5:7e:50:92:2e:54:0e:7f:e5:55:8e:34:
63:52:75:af:d5:87:7c:27:1a:b4:3e:59:69:cc:88:
18:8d:8c:ae:fe:1d:77:08:0c:ae:7a:fa:3e:8e:ad:
31:28:6d:ff:45:15:15:8b:98:be:cf:25:36:a5:70:
29:69:38:d3:66:2e:fd:55:13:37:a5:57:84:92:33:
2e:d6:7b:65:1a:e9:22:66:55:db:bc:09:d5:23:75:
25:6a:fd:a7:ca:f9:65:c1:5c:1b:9e:fd:ae:96:d9:
45:10:58:5c:34:a2:ed:e4:04:49:b9:de:2f:64:1b:
5a:6d:e4:fa:4e:97:e6:68:80:5d:85:23:a2:3e:83:
ba:d6:2e:ef:cf:4d:d7:02:ed:d8:92:64:0e:d3:28:
3c:a3:c6:24:78:0a:f4:81:c6:56:04:1c:f8:90:2b:
ee:94:44:d9:0a:2b:8d:9d:04:07:54:6a:20:1d:9c:
1d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AD:B7:11:7C:C6:2A:E2:DF:B4:87:29:F3:A6:50:2A:5C:09:90:B7
X509v3 Authority Key Identifier:
keyid:1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:03:fc:bd:43:9c:73:bd:6b:05:1f:50:ba:51:79:2e:60:fb:
51:bc:b4:e0:03:61:ab:f2:a8:2e:fa:e5:9a:9e:a4:de:4c:42:
af:40:d7:f8:1c:a4:5d:30:55:a8:f0:a8:36:95:ab:3d:94:a5:
d0:39:a8:d4:a1:e9:ab:38:ff:71:b7:bf:00:b8:52:e4:0d:d7:
b6:d5:82:e1:ad:61:ee:f8:56:b5:2d:10:4c:c7:90:db:76:5f:
db:57:9d:e4:34:f5:14:50:46:cc:f1:b6:48:52:d1:40:b8:a4:
a9:60:29:8d:08:3f:7d:9a:61:8b:1b:0a:6f:36:1a:44:5c:2e:
28:66:9e:f4:fd:98:30:42:de:42:ed:83:78:39:86:f2:3c:82:
82:c7:2f:ce:15:c9:89:a6:40:35:87:0f:b1:36:59:81:9b:09:
bb:5c:a2:eb:ce:8c:c0:7a:ff:44:30:de:77:16:76:92:af:63:
08:b5:b2:7c:7d:66:7f:99:31:56:bd:ed:98:91:d6:04:18:e9:
4c:5d:3a:20:f9:e9:4d:46:05:3f:7b:a0:ac:4d:ca:78:fd:80:
1e:51:5e:c0:53:72:c0:85:a1:c3:3b:4c:ac:8e:26:66:bf:2e:
90:6b:a4:04:0c:d8:b1:e6:71:a6:b3:b4:3c:c8:8a:5d:a1:82:
97:89:37:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:41:21 2025 by rpki-client