This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json)
Hash identifier: CdLLQ6pngVqQw0ouy82OYwYzBDggEnZScEWws4Eo9ME=
Subject key identifier: A6:46:5D:93:5A:87:5B:3F:51:BB:A2:80:C2:DD:F5:19:B2:42:4F:30
Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Certificate serial: 03AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
Manifest number: 0398
Signing time: Thu 04 Dec 2025 23:11:46 +0000
Manifest this update: Thu 04 Dec 2025 23:11:45 +0000
Manifest next update: Thu 11 Dec 2025 23:11:45 +0000
Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: sT0eM1YmzS0srA/21OWwdEh1SB41hQXhJM5DdMCh2nQ=)
2: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: p0+cMHyUatjT2WLso8zM+Qkj3qxalubJRFVPjXCEC7c=)
3: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: AA5WeVvXVNFXQwzizIn+RSDzp541QHk6IiOY/0z6xeo=)
4: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: OVxLUiCstDCJM1i8OMKxBPVWt9kugvVdd+GEnlwY4Bo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939 (0x3ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Validity
Not Before: Dec 4 23:11:45 2025 GMT
Not After : Dec 11 23:11:45 2025 GMT
Subject: CN=69321532-1073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:f3:94:40:b0:49:ee:a4:4e:f7:bd:33:3b:
38:0b:5f:19:3b:ce:a5:62:19:01:b9:54:a0:24:ad:
07:ec:6f:16:7f:a9:da:d5:45:03:e2:89:93:e0:76:
0b:74:e2:fc:93:bc:32:b3:70:d3:f3:3b:14:b2:14:
f2:5b:97:84:f5:c7:7b:35:ac:bd:3d:82:2f:56:3d:
39:8d:e5:00:a9:8b:3d:d1:7d:f2:c1:bf:07:84:70:
b8:ec:ce:16:cd:df:ce:b0:9c:2b:5b:39:b8:48:95:
ba:fe:fe:d8:3c:97:7e:12:3b:40:e5:93:aa:06:1b:
82:7d:46:11:c9:45:47:2a:ea:97:fe:8c:e6:a3:0d:
c6:31:a7:f1:ac:7b:98:ae:06:0c:f2:15:10:54:a8:
e4:0e:fe:e9:6b:7c:7b:cb:7c:03:4e:b0:48:b1:2c:
d2:bb:97:ad:f6:43:7a:1a:df:f9:42:59:1d:96:f5:
e6:d7:57:a7:4c:47:54:74:39:52:3b:81:2d:5a:3c:
6f:57:d2:b1:9f:80:48:f8:64:c8:63:3f:e7:14:e2:
d8:a0:ec:d0:16:64:26:66:55:8e:99:3f:cd:7b:68:
0b:4f:0a:54:2d:05:39:95:1b:02:8e:3a:c7:d4:cf:
8d:9d:99:02:f4:f9:d9:7a:7b:d1:a9:64:e9:bc:a3:
95:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:46:5D:93:5A:87:5B:3F:51:BB:A2:80:C2:DD:F5:19:B2:42:4F:30
X509v3 Authority Key Identifier:
keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:21:5e:f8:25:20:b4:0e:40:cb:0a:98:4c:71:fe:d0:8a:62:
64:7e:1b:3d:e5:93:81:9f:9c:bc:23:aa:1d:ed:93:b1:57:df:
b6:8e:b6:44:e1:b0:f9:f2:80:0e:ca:40:1e:cb:88:c1:5e:3f:
ca:03:55:19:74:1e:61:dc:6a:dc:fb:4d:b2:e7:82:9a:58:21:
be:19:36:3f:b5:f7:84:fc:64:25:8d:30:91:0f:fd:6f:d9:7b:
10:22:9c:98:9c:3d:b5:9f:a1:9f:a7:75:3d:d3:8a:32:87:48:
bd:95:11:02:87:dc:91:e4:87:52:e0:46:4f:0f:d1:05:68:2d:
96:df:64:0b:88:76:e8:db:ab:75:2c:03:e1:e7:59:63:8c:d1:
e5:a9:f9:b6:71:6f:92:be:c9:c2:1c:df:93:34:1b:da:2c:e6:
ab:1b:7d:0d:0c:d4:b2:5c:c4:ef:87:81:c8:63:66:1d:fc:51:
21:d0:1d:b8:4a:8e:aa:10:4f:d3:97:33:c9:4f:30:8c:ea:98:
be:7c:c5:21:bc:3a:35:28:96:27:58:bd:37:2c:54:bb:04:d1:
f0:92:ad:d8:4d:c5:f3:b8:01:58:82:6e:7b:00:90:06:f7:55:
49:d6:78:cc:2f:3f:5c:98:9d:33:b8:52:75:c2:95:2b:f3:ed:
2b:32:b5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:23 2025 by rpki-client