This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
File: gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json)
Hash identifier: w2/dOy14rbbNSBse1FPaTXz00K7GuE7ZwMat4qjXCR8=
Subject key identifier: D9:FA:A1:B8:4B:5A:C5:01:54:CE:05:61:3A:36:8D:6D:07:52:FE:A0
Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
Certificate issuer: /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Certificate serial: 01C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
Manifest number: 01C0
Signing time: Fri 05 Dec 2025 01:20:20 +0000
Manifest this update: Fri 05 Dec 2025 01:20:20 +0000
Manifest next update: Fri 12 Dec 2025 01:20:20 +0000
Files and hashes: 1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: kZca+8MKQYbaPSdt0qTagEW2TAtWHluG+3OKiqQICJc=)
2: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: mj1/gGJTxf89h4qoy3LQ2MkBeHSgOkUv4tA5AfZK7Do=)
3: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: tUVxJzysiR6t8MLO9ai96JsdVfMvMqOUKe7eGXkeEqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:20:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454 (0x1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Validity
Not Before: Dec 5 01:20:20 2025 GMT
Not After : Dec 12 01:20:20 2025 GMT
Subject: CN=69323354-a1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:12:4c:a1:0b:2c:2b:ed:d6:39:53:19:91:
f3:52:96:64:25:ae:c7:f4:0e:f7:b5:2b:e1:5b:e4:
69:30:2c:4b:f3:81:82:19:33:91:8f:dd:03:c7:7c:
86:90:00:ef:a8:f3:eb:12:11:f4:57:00:66:f5:10:
6d:68:f1:cf:7e:b9:ad:d8:0f:26:f5:a9:bd:b5:ad:
76:aa:75:3f:7e:28:a2:81:74:ea:9f:82:4b:c0:b6:
fe:51:30:69:b7:84:7c:f0:39:ff:85:4e:70:7b:9c:
c8:c6:f7:be:ff:bc:40:35:76:0a:ba:8a:30:22:29:
ff:b1:d2:c0:f9:81:69:f5:64:8e:a5:69:d0:d5:c2:
e7:e8:58:08:d1:c4:ad:69:22:0b:6f:0b:13:c2:b1:
50:af:87:86:2b:90:4e:88:08:b4:bd:cd:73:cd:9f:
93:32:70:cd:9d:74:b3:2a:0a:2b:07:29:92:44:b0:
52:c5:57:cb:da:8f:19:43:d1:52:1c:cc:e8:64:44:
95:39:fa:59:a0:5b:0b:aa:61:c0:3c:4f:f2:c4:b2:
01:c7:ef:ad:77:e8:2e:e3:d2:1f:5a:6e:57:9f:04:
ae:28:38:e7:b2:cb:8c:dd:fa:27:a5:d2:4c:f8:a5:
97:27:5b:28:f8:8c:a6:be:56:fd:1a:c9:9f:79:46:
7d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FA:A1:B8:4B:5A:C5:01:54:CE:05:61:3A:36:8D:6D:07:52:FE:A0
X509v3 Authority Key Identifier:
keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:51:d5:2e:27:0c:95:da:61:e7:57:c6:f5:77:f3:7e:5c:51:
5a:11:90:c0:0b:f5:83:9d:93:bd:3b:50:c4:a3:28:71:1f:04:
0f:79:e3:77:31:ec:08:09:a9:81:58:86:e6:eb:13:b8:39:61:
4c:43:84:7b:ac:70:bb:f6:40:63:b3:5d:0c:6c:ec:6b:b2:07:
5f:da:f5:d0:ae:4e:19:3d:17:f5:ab:91:b4:72:03:03:ba:68:
35:e9:9e:c6:e6:c5:c6:a9:5c:09:be:c1:f8:27:1b:f0:c4:00:
2a:9a:f1:a8:3a:a2:36:2e:ba:80:64:51:9b:86:74:83:59:1e:
05:4c:c4:1a:66:28:55:74:50:46:f8:6f:e9:af:a4:b8:62:c8:
0b:eb:d6:78:0c:25:52:c6:5b:11:3b:2a:e3:dc:de:7e:91:9e:
1a:cd:0b:83:7c:5a:48:f9:3e:18:44:6e:17:90:ae:26:76:8c:
b4:0a:bb:a9:1c:3f:7a:33:08:d7:5a:f2:8b:b5:32:0c:41:8b:
8a:cf:1e:55:3c:d8:d7:cb:42:d9:34:a7:67:38:36:00:0f:19:
34:2c:f8:e8:35:04:62:7c:f8:66:72:19:3e:dc:68:23:85:9e:
89:6b:6d:16:a5:62:44:3c:3a:d9:ec:d1:5c:71:2c:2b:8c:9b:
10:ed:ca:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:04:24 2025 by rpki-client