This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json)
Hash identifier: 02rGcx9D8dTtc6tBllhOnIdA7tR0q3u+lSlFkrlf91g=
Subject key identifier: 45:49:79:0A:2C:3C:27:DA:90:6C:48:75:76:B7:E1:DB:DA:48:B1:45
Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Certificate serial: 18BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
Manifest number: 18A1
Signing time: Thu 04 Dec 2025 16:10:30 +0000
Manifest this update: Thu 04 Dec 2025 16:10:29 +0000
Manifest next update: Thu 11 Dec 2025 16:10:29 +0000
Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: D3lSF9YYd0LdaiH46WiyJF5luPlDFiTtMeVjGQK1nIk=)
2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: QilVeNcrZMzdebQdu5lhKwqK5efz8FDEbIZ0Q0oTuqk=)
3: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: 2gFzBsEhEhcTbqin7FXKA5BqnV1mEmGbBayottd+FiM=)
4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: J1isGAaAC1N3wCHlklcmvvBBqBFgE12sIwzwgEuPOdA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 16:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6334 (0x18be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Validity
Not Before: Dec 4 16:10:29 2025 GMT
Not After : Dec 11 16:10:29 2025 GMT
Subject: CN=6931b276-bba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:80:b2:ef:29:2a:4d:6c:74:69:55:c4:a8:5a:
72:61:c7:55:42:29:e4:50:57:36:a2:72:18:24:b4:
dc:d9:82:0d:01:62:e8:4b:3b:d3:3c:ef:d1:a5:45:
d5:c9:45:66:df:aa:90:3b:28:a6:9e:1c:ea:75:dc:
9e:5b:36:71:31:34:c1:12:3c:de:a0:55:2a:1e:04:
00:4e:69:f0:98:c9:95:19:a6:24:bd:5b:14:ad:06:
cd:41:b2:5c:8e:cd:32:a8:e7:95:d8:df:34:32:3d:
d0:37:d1:d8:07:8c:39:05:3e:17:49:a3:41:ec:7b:
e4:f7:ad:5a:91:b8:47:a7:e7:3e:7a:74:2a:c0:b9:
1a:f7:24:81:c2:79:86:3a:72:29:07:af:dc:de:dd:
65:5b:40:7e:6d:bc:d7:80:bf:b8:b2:ed:a8:65:09:
eb:c3:5a:d1:ba:4e:43:f5:9e:21:b4:c5:61:a1:fb:
aa:d4:4a:58:20:a1:0a:05:20:62:86:b8:60:0c:ae:
9d:f0:cb:4b:e9:11:2d:f3:b9:17:f3:8d:0b:83:f8:
dd:71:e9:c7:01:76:2d:50:48:e6:07:02:bb:18:2c:
9d:76:19:95:74:a5:ef:97:6b:87:5c:91:74:8e:ea:
be:97:e9:dd:b5:04:af:27:7e:28:f6:93:60:f3:83:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:49:79:0A:2C:3C:27:DA:90:6C:48:75:76:B7:E1:DB:DA:48:B1:45
X509v3 Authority Key Identifier:
keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:40:7a:f5:c0:b7:01:c4:52:c8:23:f0:bc:90:86:fb:b7:46:
32:7a:01:1c:f8:61:77:6d:d0:4f:36:27:15:f1:66:4d:73:0e:
05:8f:4e:43:49:ad:94:b3:83:58:55:42:2d:d1:04:37:f4:bb:
d5:23:72:dd:d1:56:5f:fc:3c:64:33:f9:bb:b2:f2:de:c8:01:
5b:8a:7a:64:c3:ae:43:9a:cf:2f:b0:1e:0f:f2:b9:46:49:f3:
bb:4d:50:db:95:aa:d5:36:10:22:a0:71:cd:0d:20:7c:b4:37:
b9:75:1a:34:b5:79:40:60:65:2e:89:a7:bc:e4:1b:01:ee:1c:
ee:85:9c:98:81:c6:47:92:3e:05:06:7a:0f:f9:ed:0b:3f:a1:
92:d3:b3:8c:97:41:bd:68:6a:f5:0a:d3:a2:ea:93:d6:9e:5b:
8e:7e:63:c0:82:f2:60:c7:19:fd:47:e7:e3:81:f7:5e:85:17:
c6:fe:e2:f3:c9:bf:2d:3d:98:41:29:48:a4:74:6d:16:80:fb:
ce:8c:c1:f4:26:14:91:41:d0:fb:91:4b:4c:7d:b8:26:47:31:
8e:15:e8:0c:13:c6:a4:2d:49:bf:35:de:8b:c8:78:41:d3:cb:
f8:47:78:ee:fc:2c:6e:61:49:0d:03:ea:4b:fd:6c:1c:e7:2d:
f5:64:9d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:28:14 2025 by rpki-client