This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
File: gBcCvJze9z33Ob-31L0ve4iF4Hc.mft (raw, json)
Hash identifier: sbJWDc4gwYWg8KMcHk9Ck7RQ9EcAOHCJ1MXXyJf2ASw=
Subject key identifier: 69:BE:85:E7:58:AC:55:77:7C:FB:07:8A:96:3D:CD:29:05:14:9D:F0
Authority key identifier: 80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
Certificate issuer: /CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
Certificate serial: 04B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
Manifest number: 04A1
Signing time: Thu 04 Dec 2025 22:31:55 +0000
Manifest this update: Thu 04 Dec 2025 22:31:54 +0000
Manifest next update: Thu 11 Dec 2025 22:31:54 +0000
Files and hashes: 1: gBcCvJze9z33Ob-31L0ve4iF4Hc.crl (hash: NfujQ/seZ/s50jB9fQaLj21nXgeipvhID2x+fWZtFPU=)
2: 271F3E9CFFE011EDA35F8946C4F9AE02.roa (hash: fDZa3ruyI4VluhDMo0toVdiGueuR7vLetk94+XTO6ag=)
3: 86BADBF8013511EE81A9F21FC4F9AE02.roa (hash: q2J6Vm5zrUF4ahQrDqnBO1G7RZdDw9Ce2kW75/uOQB0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl
rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1200 (0x4b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124731, serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
Validity
Not Before: Dec 4 22:31:54 2025 GMT
Not After : Dec 11 22:31:54 2025 GMT
Subject: CN=69320bda-4bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f7:11:52:19:a9:b8:c0:72:53:74:98:e3:fc:
88:4c:c2:11:ed:54:e4:c4:d6:8c:19:0c:ad:bb:e8:
7f:82:c9:2b:c4:08:58:ae:0f:70:c7:4e:5d:6f:89:
b1:8b:31:b5:cf:4d:52:3a:b7:a0:da:e9:1b:ab:14:
37:53:12:61:2c:95:c2:0c:80:78:36:6a:72:d4:ad:
e6:99:63:c6:05:03:40:3c:ff:5d:66:dd:ac:18:45:
c8:fd:f2:4c:91:42:e0:ea:c6:88:33:82:83:33:57:
ed:71:ea:15:6d:2a:ff:51:b1:5e:61:47:4b:ef:0d:
a0:48:72:87:d7:a0:d3:54:97:9b:66:0a:a7:79:89:
30:7a:a2:c8:21:da:e9:fc:70:8f:e7:26:99:3a:6d:
4d:7c:1a:32:68:b9:6b:02:35:f9:5f:47:6f:b4:89:
a5:1c:91:89:b5:b6:c3:81:10:91:0d:4f:2b:2b:d2:
9b:23:18:1e:2a:a0:87:63:1b:f5:56:c3:1d:fb:70:
5a:c2:3f:ab:33:8f:2d:fd:0a:e4:0d:6d:45:d5:75:
3c:70:12:48:d1:59:0c:48:78:7f:d2:85:a3:3b:31:
b5:29:d1:7a:df:ad:38:92:70:8b:1c:47:83:21:a8:
28:aa:a3:c3:47:1b:1b:69:9a:62:46:5c:b2:f7:ea:
56:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BE:85:E7:58:AC:55:77:7C:FB:07:8A:96:3D:CD:29:05:14:9D:F0
X509v3 Authority Key Identifier:
keyid:80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a9:4e:2a:f3:c8:44:3b:62:5a:43:a0:3d:b9:0a:8f:a0:d4:
db:c9:02:88:c0:2a:fa:4c:8e:b4:bb:6d:be:cc:0f:2e:df:2b:
03:cf:6c:3b:c1:38:a0:ee:2e:52:a5:6c:2f:c8:fa:8e:b0:09:
da:ba:7e:18:4e:b4:92:e6:93:9a:7f:0f:7d:24:12:db:cb:1b:
d9:14:e2:0c:02:ee:9d:d7:4c:bc:30:7d:2c:21:5a:c2:88:c0:
2e:86:60:24:c8:8a:1c:4e:ea:16:7a:f1:d8:84:25:9f:81:c2:
a8:2a:0d:e8:7b:a6:bb:f4:0c:62:cb:e3:04:f7:94:11:30:3f:
0f:06:6f:cb:e8:73:84:d1:2f:c4:8e:5b:5a:50:58:25:04:03:
d4:a3:d9:e3:24:28:77:20:a8:42:50:1b:be:6e:a2:9d:33:9d:
97:b5:c0:02:f4:5e:ae:ed:69:3e:a2:f1:5e:b4:b6:f6:f6:e9:
5f:a9:97:98:cd:38:42:cf:0c:32:6e:a3:bb:84:5f:7d:4e:07:
4c:dc:02:e3:01:12:d9:1d:6c:22:32:87:fb:82:1c:98:de:ec:
38:48:96:dd:c2:49:e1:f3:6e:32:ac:09:21:bf:01:1c:11:49:
11:db:a5:4e:be:c9:b1:b6:0d:bc:d0:e9:12:37:9e:01:87:c3:
5e:1f:00:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:07:08 2025 by rpki-client