This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft
File: GHdbe2us8oHq7XjadoaGguUxsfA.mft (raw, json)
Hash identifier: 8mu2vm9dyu4wfD19TxHkT02tt9H6k7iLa8oU4CCGGAI=
Subject key identifier: 49:65:7F:F6:F5:A2:CE:3A:BD:8C:AA:0F:BF:ED:6A:A9:4A:C2:54:A7
Authority key identifier: 18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0
Certificate issuer: /CN=A9115A98/serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0
Certificate serial: 1084
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft
Manifest number: 107B
Signing time: Thu 04 Dec 2025 16:57:49 +0000
Manifest this update: Thu 04 Dec 2025 16:57:48 +0000
Manifest next update: Thu 11 Dec 2025 16:57:48 +0000
Files and hashes: 1: GHdbe2us8oHq7XjadoaGguUxsfA.crl (hash: +wK5zslQRxnnNj26ok+NnnbECz50UYG0Q1g3xlRlDJg=)
2: 6CE4307243AB11E98FAE6F0AC4F9AE02.roa (hash: bskjGki25S2tjkA4uEDOBCllOjX3cMsximD4ACjwrOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl
rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 16:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4228 (0x1084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115A98, serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0
Validity
Not Before: Dec 4 16:57:48 2025 GMT
Not After : Dec 11 16:57:48 2025 GMT
Subject: CN=6931bd8d-fd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c4:04:53:ea:a1:80:cb:c7:83:36:d0:2f:ad:
f6:6e:62:d6:61:5c:5a:87:dd:42:7a:97:86:3c:f2:
2d:9d:e9:34:ed:42:ff:2c:94:5d:36:46:6d:b0:fc:
ba:37:54:67:f6:aa:bc:c5:42:41:c7:49:db:0e:b0:
54:19:41:51:36:de:32:f9:84:97:c7:c8:55:2d:87:
80:7d:3c:02:68:af:75:ba:29:d6:8b:cc:6d:2b:6d:
c6:75:47:80:a7:d1:df:33:de:f4:1f:c3:bb:c4:ed:
64:dd:27:de:25:7a:e0:1b:60:2a:c6:f6:c5:b0:98:
5e:54:c7:78:bc:a7:00:84:03:bc:1f:61:72:93:f4:
db:3e:c8:5f:58:11:20:15:6b:4f:0b:16:56:fc:49:
3f:a0:d1:4a:86:36:ed:35:90:99:4c:fb:16:11:75:
3e:e8:e4:31:cd:de:9c:71:45:32:bd:17:9b:dc:70:
4b:91:05:5f:68:5c:81:83:53:0f:b3:65:d2:80:11:
10:8a:ca:ed:87:69:55:ef:00:30:a5:c5:85:3e:b1:
db:8a:81:8b:b5:78:97:55:df:d0:86:cd:ab:3c:31:
3d:d5:c0:22:db:cc:27:e3:cc:67:87:9c:63:9d:59:
c5:e1:bf:cd:48:ba:20:ff:5e:5f:da:7e:4e:7f:4f:
6d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:65:7F:F6:F5:A2:CE:3A:BD:8C:AA:0F:BF:ED:6A:A9:4A:C2:54:A7
X509v3 Authority Key Identifier:
keyid:18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:34:b2:c0:78:36:67:fc:dd:e9:f1:ac:da:53:0c:59:90:be:
9a:02:97:70:59:a7:54:b1:65:0a:ff:8c:32:f5:91:a7:af:18:
07:5d:ed:8f:b3:2e:d4:a4:39:d2:d0:12:23:5c:88:64:31:1a:
71:4c:43:56:ca:f3:ae:10:72:0c:d1:47:17:e8:e4:17:ca:eb:
53:36:e6:ff:51:b1:ac:b4:ed:d0:36:e4:57:e3:c5:84:7d:9a:
03:c8:2e:6c:d4:82:ad:e5:c2:76:ee:b7:6e:47:77:f8:9c:01:
c5:b1:82:f9:3f:5b:d2:a7:ec:2f:04:ce:51:16:4b:87:ea:da:
fe:5c:77:19:3e:79:b4:f2:70:f9:a1:d8:12:28:7b:c0:25:8a:
56:28:8f:b9:81:88:07:52:af:44:4f:97:9c:e6:2d:f5:98:c9:
d9:68:15:86:bb:0e:ea:5b:58:b8:ba:fd:b4:0b:6b:5c:6c:04:
66:2d:59:e3:56:70:50:21:08:34:04:c1:18:4a:f0:4c:90:ba:
3f:e7:5b:8d:4e:ce:97:a7:e1:35:52:20:5c:b7:c1:20:79:fa:
80:d0:74:de:73:d0:8a:86:89:29:ec:4f:56:2c:f3:67:c5:da:
55:3a:db:1e:25:d6:05:4d:79:bf:0f:2f:aa:b9:31:56:8a:58:
75:80:f9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:46:10 2025 by rpki-client