This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
File: G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft (raw, json)
Hash identifier: U4yjqF3f2Q3iQwpYMfCAryDl0KPsXunjHseze5fhiTg=
Subject key identifier: 5B:8C:FB:DE:EB:AF:36:E2:5A:4A:ED:29:7B:CD:FB:50:7F:05:E3:F1
Authority key identifier: 1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40
Certificate issuer: /CN=A91DF352/serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
Manifest number: 73
Signing time: Mon 29 Dec 2025 05:51:44 +0000
Manifest this update: Mon 29 Dec 2025 05:51:43 +0000
Manifest next update: Mon 05 Jan 2026 05:51:43 +0000
Files and hashes: 1: G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl (hash: 6QdgNEhDSZNiT5/ycF35NShrwgnapioJ9uzLYyfG/2A=)
2: BA3FE218315611F0951A037DC4F9AE02.roa (hash: qVVzOp455rcs6g+f/MmhYpdl/2N+Lt1OuCuyTK7KoGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl
rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 05:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF352, serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40
Validity
Not Before: Dec 29 05:51:43 2025 GMT
Not After : Jan 5 05:51:43 2026 GMT
Subject: CN=695216ef-8c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f0:b0:d2:3e:ce:0c:31:1f:dd:c9:bb:6a:e0:
4f:e8:27:d1:9c:43:01:ca:20:86:1c:74:28:66:44:
10:49:c2:16:5c:6a:ee:47:19:b5:60:41:f9:7e:b0:
ff:eb:ac:43:36:5a:63:a9:90:ef:52:3e:76:67:7d:
57:cc:08:c5:19:c3:93:ec:01:2c:b7:d4:de:ef:28:
be:28:6b:38:7b:c4:2d:f7:2f:a2:fa:88:8c:d3:0c:
dd:47:83:1e:20:b3:b3:c4:95:f9:3d:05:d7:3b:f3:
40:87:22:1b:5d:f9:a7:81:29:c1:ef:dd:df:eb:91:
1b:a1:4c:df:80:67:73:eb:e6:e6:8a:51:9d:58:d3:
dd:76:f3:31:f7:b1:45:09:ab:3d:08:83:a5:17:d5:
6b:7c:07:86:8a:70:f0:fa:33:34:fe:a2:f9:c6:62:
ea:bd:e5:35:b4:b8:ab:2c:cf:78:e7:6d:0f:66:13:
e5:48:96:dc:8c:d0:b9:d4:47:6f:63:ef:97:11:8b:
b9:18:56:bc:f7:dd:f7:8f:4d:bd:87:8b:07:8f:15:
b5:fc:31:ec:dc:6f:4f:e9:23:71:0f:be:14:1b:e0:
74:40:be:3e:e9:d6:24:64:98:b7:c2:e4:a8:b4:1a:
0a:45:5e:0b:16:48:a0:f8:e1:c3:e6:75:73:c2:0a:
f6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8C:FB:DE:EB:AF:36:E2:5A:4A:ED:29:7B:CD:FB:50:7F:05:E3:F1
X509v3 Authority Key Identifier:
keyid:1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:db:fa:66:0e:c7:93:35:45:0e:27:c4:78:cb:c2:81:7d:cb:
b7:db:49:c5:2e:c8:3f:88:a4:e1:4c:2d:3e:b6:da:3e:85:bd:
05:fb:3f:f3:58:9f:32:9a:23:ce:43:3f:93:7c:dc:c3:0a:c9:
d2:e6:c0:58:e8:08:6a:75:8e:7f:3e:67:b5:e1:0e:cb:db:0d:
00:22:b7:14:3b:ca:ed:52:a9:a8:ae:96:3e:3a:84:5f:50:76:
4d:79:36:78:ca:81:c1:1d:67:a5:69:a4:59:02:0c:c0:4a:b3:
98:c0:fd:da:ed:ae:c8:ab:f3:9d:d3:99:aa:be:fa:b1:9f:be:
8d:c1:e0:89:54:66:b2:e9:5c:0e:bc:86:b2:6c:89:68:b6:bb:
45:4d:03:c6:73:54:49:bd:d7:83:e0:04:98:c2:cd:db:a8:a4:
ea:f7:12:58:bf:ac:e6:d3:fa:77:73:3f:b8:33:8d:6b:77:10:
0d:43:71:d8:a8:d8:00:0a:2a:22:00:86:c2:fc:e3:fc:61:6b:
50:c4:a1:af:c0:a2:8a:30:cf:b7:63:aa:22:a6:e6:58:d8:45:
75:b3:ff:01:58:e0:2c:a9:ed:30:8e:0f:30:b7:0a:d0:00:62:
2c:3e:9c:bf:a6:16:48:98:c1:84:15:7c:38:11:f2:4a:e9:09:
7a:38:ba:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 06:21:06 2025 by rpki-client