This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
File: gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft (raw, json)
Hash identifier: tyQWlxQw5z1xpQMh4i4XgdXHkJkUqxNRrmixpFhFhlQ=
Subject key identifier: B2:9F:FD:32:62:08:4B:22:40:26:10:24:D7:E1:E0:7E:FD:89:D4:26
Authority key identifier: 83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3
Certificate issuer: /CN=A9147049/serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3
Certificate serial: 6B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
Manifest number: 6A
Signing time: Fri 05 Dec 2025 04:49:46 +0000
Manifest this update: Fri 05 Dec 2025 04:49:45 +0000
Manifest next update: Fri 12 Dec 2025 04:49:45 +0000
Files and hashes: 1: gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl (hash: NXEQj5nT2llvBbZImPd21flswrD6ueXA/3RKpe2ptnI=)
2: 3195F9E62C6711F0B5DEE20CC4F9AE02.roa (hash: teBU/xY5fyCYlDvGRSOFgRvi80EiZfgHjGrIEnrk+fw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl
rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147049, serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3
Validity
Not Before: Dec 5 04:49:45 2025 GMT
Not After : Dec 12 04:49:45 2025 GMT
Subject: CN=69326469-22a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:d3:ef:bb:59:1e:ed:eb:21:9b:76:51:00:
ad:2a:ca:3c:53:a7:7a:f7:18:85:9c:f1:74:cc:75:
a0:f0:de:18:b4:d4:7b:dd:f0:09:40:e2:92:17:94:
ef:43:be:ae:75:aa:38:95:5d:e7:27:ea:eb:0a:9e:
89:9f:22:5d:2d:df:71:c6:2c:ea:71:4b:a0:4d:4f:
79:9e:62:12:eb:08:90:d6:c2:2a:fb:ca:74:43:51:
2a:6a:9a:73:52:4e:21:f8:c1:f9:34:4f:14:a4:3b:
ec:2e:00:43:f4:0d:f0:25:96:e8:00:41:bc:33:aa:
67:f1:f2:76:73:81:76:eb:42:b4:40:03:ec:7d:ba:
35:fc:0f:2b:36:ae:07:7e:c4:d5:5f:ed:14:1e:c9:
67:79:1f:47:45:97:f6:94:f5:09:6f:51:2d:b9:a0:
17:24:ca:ce:a0:28:7e:d1:7b:7f:63:f7:6b:26:ba:
e3:ef:d1:f1:d8:e7:a4:85:e0:b1:25:cc:4c:f3:f9:
61:f6:c3:f3:76:d6:1e:14:8b:f3:33:f4:17:8e:07:
97:5e:c7:ac:91:88:14:e5:e4:35:83:16:e1:bb:a7:
14:b9:3a:23:3d:b5:f4:07:f1:7a:4c:7d:35:f0:e2:
44:df:f9:a1:c0:67:cd:cf:90:2b:c9:9e:a3:c5:38:
02:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9F:FD:32:62:08:4B:22:40:26:10:24:D7:E1:E0:7E:FD:89:D4:26
X509v3 Authority Key Identifier:
keyid:83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:c0:73:63:85:fe:ae:6c:ff:fc:90:16:11:b0:5e:74:ee:9f:
20:3d:38:a3:95:cf:d0:c5:36:cc:71:4a:6a:20:cd:4c:97:1e:
65:a3:8f:5f:c3:0f:47:e5:85:9a:63:be:ba:12:c6:94:6c:5a:
c4:45:d0:78:49:c7:77:98:08:7e:16:bb:be:91:11:32:14:f3:
4f:b8:90:23:9a:a4:a2:b0:7b:63:90:ed:31:8e:99:cc:d6:9c:
aa:57:fc:f2:7d:ac:d9:39:32:c9:b7:5d:52:86:5f:53:74:0b:
ab:18:ee:53:e8:79:f6:0e:c7:bf:31:0e:ed:b9:c6:65:ff:bd:
e6:9a:68:55:eb:2c:12:4f:54:f0:79:fa:d9:cc:2b:97:f1:f8:
c9:a7:c4:b7:f7:c5:7b:e6:ad:99:89:ff:87:82:4e:64:7f:8d:
33:e9:36:c1:f3:14:a4:9b:1e:3d:71:18:d8:39:d4:65:a6:1d:
a9:1c:b6:1a:2c:9c:04:a3:23:b6:1b:d1:42:ec:3a:d9:8d:51:
31:c3:d9:f4:54:a1:0b:ec:2a:81:15:d0:67:c6:73:8e:9f:0e:
94:0d:55:5b:06:98:9a:c1:52:10:66:1c:29:07:fb:d4:ce:d7:
18:8f:bf:2a:ff:81:f7:bc:a0:99:d1:8c:9f:a0:5b:b9:be:8d:
3f:3d:d9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:53 2025 by rpki-client