This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
File: GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json)
Hash identifier: KFwBh76TsIBK7+y+KwNxbhH38Zt2jpW4XRHtUJmqxAQ=
Subject key identifier: 6B:9F:77:F8:F5:C1:F4:4F:F1:4A:B1:7F:6C:D6:66:7E:A5:98:05:DA
Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Certificate serial: 0AA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
Manifest number: 0A98
Signing time: Sat 20 Dec 2025 19:16:41 +0000
Manifest this update: Sat 20 Dec 2025 19:16:40 +0000
Manifest next update: Sat 27 Dec 2025 19:16:40 +0000
Files and hashes: 1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: 7eMV+9cS7QnJ90LoeU5t7BoESer9plyryHtyP8e23rA=)
2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: 0KMFzCuGu1v0hK3kHcYTktNw8X2QSZsfmeH/owyGjh4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 19:16:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2722 (0xaa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Validity
Not Before: Dec 20 19:16:40 2025 GMT
Not After : Dec 27 19:16:40 2025 GMT
Subject: CN=6946f619-a498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f7:a4:7d:5e:20:80:06:ab:b5:d2:49:78:e1:
75:68:ca:56:23:f2:7d:e2:8f:55:15:79:a9:50:d4:
c3:96:dd:71:93:af:07:97:16:e2:3e:90:e0:de:84:
c6:4a:70:32:0e:98:43:d3:be:d9:89:23:df:57:93:
7f:35:72:76:7c:56:96:0e:bd:cb:1b:37:8e:aa:ba:
41:4e:84:fa:53:65:f0:15:70:b0:9b:2b:ff:20:73:
f4:c9:e4:87:2b:ee:40:2f:b7:32:c7:56:65:ab:97:
1d:fd:a2:90:65:c3:bd:59:25:04:94:5b:14:6e:fa:
2d:c1:94:e9:81:46:70:eb:92:bf:0f:fc:7d:34:7c:
ba:25:f3:6e:fe:93:d0:df:10:c7:d8:80:00:6a:06:
8c:3b:a0:f9:97:66:55:53:c1:2d:1b:a0:96:4e:76:
00:62:af:e7:dc:d5:ca:45:ea:1c:13:c0:c7:3c:c8:
1b:28:fb:04:36:ad:61:b3:69:f8:2e:59:1e:bb:3f:
9d:f1:d7:5d:1e:1b:da:1b:15:2c:38:7f:d9:07:7f:
b5:6d:65:28:b8:ec:ce:a0:05:70:ca:b4:ec:de:98:
33:6f:17:0e:ad:ef:c7:7c:fc:4d:18:4a:5f:6e:5c:
15:5a:7c:4a:0d:7b:91:12:a2:3c:fe:6a:c9:a0:e6:
fa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9F:77:F8:F5:C1:F4:4F:F1:4A:B1:7F:6C:D6:66:7E:A5:98:05:DA
X509v3 Authority Key Identifier:
keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:98:d0:c9:0e:12:67:03:10:3c:ee:1e:db:ec:6d:a0:36:35:
04:8e:92:80:61:08:13:4b:08:10:c7:0b:0b:db:56:0e:8d:13:
e0:f2:0a:52:bc:8b:33:61:92:45:5d:5a:8d:8d:57:43:e1:de:
58:69:cb:9c:71:6e:b4:43:e1:2b:6b:f4:2d:03:9d:92:66:d0:
be:f7:6f:af:b5:65:db:29:cc:b6:3f:51:ab:bc:b2:c2:97:81:
24:82:e4:ba:77:23:24:68:a5:79:f0:9a:36:9d:d2:76:e8:93:
df:de:f0:8b:50:e0:67:ed:ff:1d:7c:49:b7:31:ed:40:26:de:
5a:2b:f6:f9:36:03:4c:b9:ba:5c:44:19:b3:bd:fd:08:7b:08:
b3:eb:46:5f:0a:07:d9:c2:5c:a5:cf:d6:38:48:02:80:c5:1a:
37:de:a4:e8:18:9b:09:82:af:42:b6:50:47:e8:e9:de:a1:7f:
93:e0:51:51:54:f0:67:60:76:13:97:47:34:08:9a:6f:ac:43:
d1:6b:f9:86:7a:74:e9:a1:8d:3f:31:fe:e4:0f:a7:06:15:3d:
69:3c:aa:26:75:13:34:b3:6f:23:ab:21:64:20:57:ba:a2:5d:
24:f1:73:92:74:af:65:5a:87:5c:c9:64:9b:c0:ca:9a:a4:cc:
41:62:90:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:08:19 2025 by rpki-client