This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
File: gJ7_H3gZuBdR8XerWv7YK8wypWk.mft (raw, json)
Hash identifier: 3YCOlqnn5NVXcZN2ZPAWTobNfEfkUts76hSSZpSW/DY=
Subject key identifier: EC:C2:4F:75:6C:80:EC:95:3A:08:A5:FB:BD:23:3E:13:E4:8A:C3:BE
Authority key identifier: 80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69
Certificate issuer: /CN=A9158028/serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
Certificate serial: 0679
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
Manifest number: 0673
Signing time: Thu 04 Dec 2025 21:19:48 +0000
Manifest this update: Thu 04 Dec 2025 21:19:48 +0000
Manifest next update: Thu 11 Dec 2025 21:19:48 +0000
Files and hashes: 1: gJ7_H3gZuBdR8XerWv7YK8wypWk.crl (hash: s8nvJXzO6m4j5oKwuGLFhsfT61e43bdPDsciszbTcS0=)
2: 687D7178B85D11EBB2E17F26C4F9AE02.roa (hash: +tI56XBeGW4f/ZvoEb+YONcyvmeUooJFS+xtnAK+AuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl
rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:19:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1657 (0x679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158028, serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
Validity
Not Before: Dec 4 21:19:48 2025 GMT
Not After : Dec 11 21:19:48 2025 GMT
Subject: CN=6931faf4-e152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bf:8a:32:55:7d:a5:d5:ed:36:2e:1b:58:2f:
50:9d:8b:da:8b:6d:44:ee:92:11:9c:58:a3:57:48:
cc:fe:36:b7:c6:95:de:ca:84:36:e9:c4:d1:34:0a:
b2:dc:eb:4f:32:6c:c3:24:3e:4d:88:ee:1c:1a:70:
c9:7b:3b:73:a2:aa:7a:ba:5d:83:6d:e1:c8:86:ff:
cc:8f:ce:c5:0b:81:c8:4b:5b:42:1e:c3:ba:23:e5:
00:3a:f2:45:4d:66:31:79:b3:d3:94:88:f1:f4:4c:
b8:66:67:98:ef:5c:9b:3c:46:2e:04:12:dd:76:6b:
57:36:c8:0c:06:b1:88:cc:d6:0a:3f:4c:14:81:72:
93:d7:a4:23:90:3d:a2:4d:91:54:14:e8:86:c7:39:
56:d7:b6:b7:23:e3:fe:9c:e2:e8:8f:46:e9:db:03:
8a:c2:c6:b2:12:f8:61:8b:9e:4e:96:70:0e:16:4e:
d0:98:ee:9a:f9:38:c4:ba:ef:dd:b6:33:49:0c:c3:
86:11:a8:53:17:ca:f0:26:02:b3:a1:d8:5e:fb:16:
93:36:fa:c3:6d:c2:91:0b:2b:32:4e:cc:32:ac:3c:
f2:57:bb:3f:43:ab:15:98:b3:70:69:35:0b:6b:9f:
50:ff:fa:9b:17:be:17:87:24:b6:77:ef:8c:ec:2f:
e1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C2:4F:75:6C:80:EC:95:3A:08:A5:FB:BD:23:3E:13:E4:8A:C3:BE
X509v3 Authority Key Identifier:
keyid:80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:5e:b3:e4:6c:4c:3e:15:19:fc:5b:08:27:eb:29:d6:f3:c1:
d0:cb:ad:78:dc:d8:9f:02:18:a1:81:a5:40:85:c5:f2:e6:a9:
4b:51:bc:73:df:b8:5e:c5:54:40:64:7a:16:9c:f3:d7:37:df:
75:e8:0c:a7:7b:7c:40:ea:9c:42:9e:49:99:7e:ea:13:8d:73:
85:43:48:2e:63:c9:d1:53:9c:d5:80:2a:a3:72:0c:8d:d2:cd:
fd:cf:7a:42:05:9c:a4:14:ed:38:20:01:93:02:76:88:b7:4f:
59:c7:6a:c5:8e:ff:4c:55:56:5b:e2:63:69:f1:13:38:6f:30:
00:0f:e5:ee:d6:87:27:53:8a:07:7a:fa:fa:20:8c:f9:17:e7:
4c:7b:74:11:51:af:82:1b:69:6e:19:5f:5a:d8:a5:a1:70:35:
48:7d:e9:12:5d:60:23:56:96:ed:44:7f:12:bf:16:80:a0:ac:
70:44:a5:f2:b1:bc:52:4e:b7:de:b5:03:7b:f7:c5:c4:d7:35:
ec:55:d8:e2:7f:78:69:45:69:62:16:c0:f9:ca:39:f4:1a:21:
c3:8b:ae:92:af:b4:54:31:fb:d9:73:50:41:9c:36:8e:4b:3c:
bc:30:fc:0f:14:2b:ee:ee:d6:e1:c8:94:bc:84:7c:2c:30:a2:
16:9e:70:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:11:45 2025 by rpki-client