This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
File: -_gSoLmqiu1iGHbIkgH_8QQytpc.mft (raw, json)
Hash identifier: urUe4HvkMYLWUWRlJT/6zWwY8a5ZtOoOcA1B2EAHXec=
Subject key identifier: 32:7A:B5:A8:B0:79:2C:5B:DE:E5:5E:DA:D7:94:61:13:9B:81:E1:AC
Authority key identifier: FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97
Certificate issuer: /CN=A915A330/serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
Manifest number: 84
Signing time: Fri 05 Dec 2025 04:35:35 +0000
Manifest this update: Fri 05 Dec 2025 04:35:35 +0000
Manifest next update: Fri 12 Dec 2025 04:35:35 +0000
Files and hashes: 1: -_gSoLmqiu1iGHbIkgH_8QQytpc.crl (hash: aGcv7O+vhaJ04LZmTBF5MFKlCEyFY2rVzdRhwNnGrbU=)
2: 5F2F693A061211F0BA5A2029C4F9AE02.roa (hash: ti/+dlDrn7n64hxfzOvr4hnKhT6sYm889q99u/P1yZw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl
rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A330, serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697
Validity
Not Before: Dec 5 04:35:35 2025 GMT
Not After : Dec 12 04:35:35 2025 GMT
Subject: CN=69326117-3054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:21:ea:05:0c:b5:08:a2:2f:19:aa:c0:ad:73:
89:03:db:85:eb:e3:99:f8:39:62:ad:f9:8c:5b:c1:
fc:72:19:41:41:1e:5c:93:2d:4c:91:4e:78:11:be:
d8:80:a7:00:90:e2:57:bd:e2:21:34:1d:c9:c5:e3:
37:c0:0f:ac:b9:54:2e:75:85:01:c4:0d:94:a4:40:
4a:1f:bb:11:e0:35:7c:37:83:bb:69:05:11:77:e7:
0e:a6:fb:28:91:81:3f:a8:23:46:a1:a9:ff:d0:ff:
94:ea:d6:fc:58:62:8e:d5:a9:8e:4f:33:3a:b1:33:
77:74:54:aa:5e:13:b7:87:83:73:8f:0e:e8:f6:b6:
02:93:d2:08:2d:7c:48:be:3a:ea:25:79:ba:d5:f6:
d9:ad:b5:ee:e5:9a:f1:57:c9:77:6f:17:92:96:11:
eb:f6:84:c0:50:d5:98:d6:81:d2:2c:94:d9:60:76:
9d:4f:42:6e:f1:c9:41:d2:53:27:76:d8:2a:ea:73:
1b:a0:c4:24:37:d9:fe:20:61:93:77:79:3f:11:f8:
e0:0c:82:ef:6d:a4:c0:6c:4a:c7:c2:d5:72:70:36:
53:f7:2e:d9:a5:3b:0a:29:18:3a:79:a3:a1:96:66:
34:36:4f:2f:d8:6f:ef:74:a5:07:88:8e:a0:71:c7:
ba:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7A:B5:A8:B0:79:2C:5B:DE:E5:5E:DA:D7:94:61:13:9B:81:E1:AC
X509v3 Authority Key Identifier:
keyid:FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b3:96:47:14:2e:97:ce:90:93:b4:10:e5:bb:fa:62:92:6d:
5c:95:63:19:4f:8a:aa:83:94:d4:a1:c9:f8:4e:46:d1:58:2c:
3e:3a:32:af:c5:c6:57:00:0e:4c:fc:cd:96:fc:11:db:de:02:
06:3a:54:b5:37:92:9b:43:f5:bb:b4:e2:be:92:f7:33:5a:50:
cc:00:bc:06:56:fb:17:64:81:66:c3:e9:f9:f1:4f:82:e6:89:
b6:e9:18:a6:73:9b:16:06:ea:7a:7c:09:c5:2d:39:ab:2f:ad:
b0:3d:ed:d7:03:fe:b3:97:4b:66:63:d8:ff:c4:ed:ea:59:39:
2f:e2:df:ba:d4:b0:35:21:dd:03:77:5f:63:2f:2c:29:6b:9a:
fb:1e:e7:95:21:da:4b:4f:3b:d1:35:97:f1:94:7d:e8:bf:c2:
2a:a2:a4:be:0e:f4:1f:01:52:86:bb:f6:95:7a:c6:08:52:28:
b8:51:48:a0:04:58:f2:ca:51:51:9a:50:af:41:2d:7e:70:10:
ca:c7:c4:e2:e4:1c:e3:71:d0:d4:43:06:a8:a1:40:de:aa:0d:
ed:27:6b:f1:f9:8a:06:38:b1:21:de:ea:b7:9b:88:fb:2b:d0:
1a:b1:ef:10:d7:1f:69:30:0a:ba:e0:54:b0:e5:37:dd:b7:60:
c2:89:f9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:47:48 2025 by rpki-client