This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft
File: GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft (raw, json)
Hash identifier: 4JcjRNSTVAXayKTxfnF5fMQUeoEN3Ua8DUyF9KWQ/p8=
Subject key identifier: C8:3F:4B:36:90:AD:6A:A0:0F:F0:3D:F4:7E:6B:20:DB:91:F3:A8:64
Authority key identifier: 1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56
Certificate issuer: /CN=A914E91C/serialNumber=1A6123075694B82218AA2FC76F615B4025596156
Certificate serial: 051D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft
Manifest number: 0518
Signing time: Sat 06 Dec 2025 22:20:02 +0000
Manifest this update: Sat 06 Dec 2025 22:20:01 +0000
Manifest next update: Sat 13 Dec 2025 22:20:01 +0000
Files and hashes: 1: GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl (hash: FcDhyHnPJurmzpTuCeKXUZLsktPw7D4dXeEn9O3Y1IQ=)
2: 9BC1C0762BD411EC81C16155C4F9AE02.roa (hash: a+Y61sonWEkeUKpiRdmPcvnEh5eS40fnFCOIgfk3fv8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl
rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1309 (0x51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E91C, serialNumber=1A6123075694B82218AA2FC76F615B4025596156
Validity
Not Before: Dec 6 22:20:01 2025 GMT
Not After : Dec 13 22:20:01 2025 GMT
Subject: CN=6934ac12-e879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:8b:41:d6:16:49:47:39:55:61:70:eb:ab:
ab:13:32:78:ad:ea:00:44:01:9a:94:57:00:fd:2a:
4a:51:da:4b:43:79:76:86:68:eb:5b:79:5d:57:ff:
b7:54:fb:d3:b8:95:2e:1a:39:26:46:98:86:fa:5b:
9d:0d:1c:32:50:d2:fe:22:19:8b:99:74:f2:2e:7e:
ff:56:8b:42:dd:33:3e:81:df:ed:b1:80:b1:d5:d9:
ec:44:c8:e6:31:cc:1d:b1:c5:8b:bb:a6:38:17:84:
ef:f7:0c:20:9c:38:d1:08:b2:da:ff:f2:25:db:8b:
44:16:03:8b:79:f3:cc:44:3a:42:b1:ee:8e:ed:1d:
a2:bb:ad:49:76:cb:59:1a:24:bc:bb:e2:a3:ec:1e:
af:1d:9b:ff:71:de:26:e9:a6:f8:0e:00:49:9e:d4:
ee:f3:ce:44:3b:39:27:11:bf:55:e3:87:18:0b:d8:
c1:ee:44:07:73:f1:24:6f:7a:a4:04:21:0f:9a:21:
0b:60:ed:7c:1f:5c:c4:23:21:e8:64:a6:d0:3c:ab:
90:b9:8b:a5:e4:ef:eb:be:11:36:b7:49:18:35:b0:
53:f2:0b:c0:2f:f4:3a:66:8f:99:a7:3d:4a:0d:5e:
d5:a4:cb:f8:bf:a2:e5:ef:1b:04:2c:39:c3:df:15:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3F:4B:36:90:AD:6A:A0:0F:F0:3D:F4:7E:6B:20:DB:91:F3:A8:64
X509v3 Authority Key Identifier:
keyid:1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:88:dd:0e:bd:46:7b:5c:2e:92:ff:84:93:03:27:40:c4:85:
54:67:1d:eb:40:ed:72:8c:16:99:be:b7:12:6a:2a:0a:3c:c6:
0a:c2:f1:9f:26:1e:19:54:9a:85:b0:ad:cc:bd:ab:3f:1f:b8:
4b:19:24:c1:ed:75:2d:af:16:81:46:aa:da:66:10:d3:12:9f:
db:ef:01:e8:af:6b:71:e3:08:d4:b9:89:79:d9:a2:91:4b:9f:
cb:cc:36:4a:01:fe:ec:1c:bc:8e:79:64:01:83:14:e7:e8:f9:
45:73:c4:f2:3d:06:91:0b:07:a6:4b:a1:94:c4:3f:61:ab:51:
66:dd:7f:3d:41:8f:93:ca:7b:da:d5:70:36:a3:ec:80:c3:37:
dd:82:53:a5:34:28:be:10:1d:87:54:8b:dc:de:09:f5:44:8f:
31:af:cd:0e:98:b7:7a:74:11:8c:d9:62:48:76:ce:03:cf:2c:
a5:b2:65:b0:91:e9:82:41:97:e1:bb:ba:42:a7:9b:6c:31:a5:
18:60:fe:26:3f:4f:b7:ca:a0:93:1b:ab:94:2c:4c:8c:71:90:
d2:66:47:26:17:bb:a1:e8:45:82:77:66:18:72:f8:b1:79:0c:
14:bd:dd:ed:1b:af:11:fa:bf:63:f4:fd:3c:15:e6:94:53:2e:
48:8f:58:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:57:44 2025 by rpki-client