This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft
File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json)
Hash identifier: KSmQTi5PnOaKlicsgvnDT0VUyzbkx2KQtudM37wpFrE=
Subject key identifier: 57:DA:F2:11:4C:2C:B7:A8:EF:00:0D:9A:55:E6:99:4B:CC:23:D1:4B
Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47
Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
Certificate serial: 0897
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft
Manifest number: 0856
Signing time: Sat 06 Dec 2025 19:51:27 +0000
Manifest this update: Sat 06 Dec 2025 19:51:26 +0000
Manifest next update: Sat 13 Dec 2025 19:51:26 +0000
Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: UGtBvitof7Q2pGLAuEYIbkIJ99e1xoo2EJ68giA13FY=)
2: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: AKMar7M+pQ4y6XoQFhZVW0JujFvWAFeIi5OqHavhpXY=)
3: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: q8NO+KLP5CuELgICWVCpo8gcxUyHjK7jNGZWSmFkgjE=)
4: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: blrAgl3fjG1pjrvf4Xs1bBFsczydDh5kF9/bkGOAsSQ=)
5: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: kCdoRWjX7vh3I5Nidiix3CmYE03MKnq+oXPvSl8Xnds=)
6: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: e0wK1EfjjzOwAebCT+bRt55wU2Y1pEBpk2uJbmvJGI8=)
7: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: QIJzT5GapeGSiWUEH6w75YrO1W7X/FkG1tF+eQj92Fk=)
8: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: Y77Vm4FDvzInxKFqdlF/vRWJ/K3yltYPE+Pe0UH2y2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl
rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2199 (0x897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
Validity
Not Before: Dec 6 19:51:26 2025 GMT
Not After : Dec 13 19:51:26 2025 GMT
Subject: CN=6934893e-596a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8e:80:3f:25:a9:a0:26:eb:7b:f1:7a:ab:6b:
ce:d3:de:23:8c:f6:5b:85:a2:5d:f7:35:26:18:2c:
72:db:af:74:10:e9:60:df:4d:8c:5f:85:31:59:5d:
e1:84:9a:11:8e:07:40:55:bb:a0:6e:f5:68:d2:d3:
f4:5e:b0:bc:65:76:c5:81:e1:34:b8:d1:1c:4e:53:
e6:6d:1f:3b:4d:79:13:47:e7:fb:54:d2:cc:f6:fa:
2d:de:7b:9e:f4:1f:00:3d:06:de:f7:01:39:49:7b:
aa:a1:97:76:32:6c:20:9d:02:96:fe:d7:0d:ac:dd:
26:22:f2:1f:d1:20:d2:ed:54:f1:f3:00:7d:cb:80:
82:d4:1e:9f:b6:80:53:27:38:d3:65:58:ad:5f:a6:
8b:c3:12:97:5d:ac:9f:f3:42:f9:5e:55:23:af:f4:
d0:32:42:20:6c:b3:17:99:1c:7b:64:c0:76:3c:7c:
94:63:96:e3:4e:33:32:a1:1b:87:40:93:c8:44:d2:
4a:54:3c:b1:17:b7:95:09:c6:10:42:8f:7d:53:9e:
d4:60:b5:0c:0f:65:70:0e:32:c1:6e:eb:0a:67:fd:
61:24:bf:fa:ea:4c:48:02:68:3b:1b:76:3c:82:bb:
64:92:d6:e5:66:93:96:6c:bb:fe:6f:ea:1a:99:90:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DA:F2:11:4C:2C:B7:A8:EF:00:0D:9A:55:E6:99:4B:CC:23:D1:4B
X509v3 Authority Key Identifier:
keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:fd:bb:3b:08:f4:e9:90:73:c4:9c:ec:42:20:33:84:6b:74:
7d:12:24:89:82:6d:a0:af:ef:73:3b:1d:c3:f8:8c:cb:5f:d2:
12:f3:d2:98:35:64:7a:06:d6:09:34:fb:26:bd:ca:16:33:f5:
38:36:41:db:5a:6c:1e:ec:2f:1f:ed:ac:c6:a9:ea:db:2c:a7:
9a:f1:b5:65:04:c9:95:1e:ac:13:93:44:0b:61:b9:c3:6c:dc:
82:f6:b4:b7:2f:72:f3:3a:48:ac:4e:91:d2:9a:5b:ac:c0:22:
db:c8:ee:13:57:f3:9b:71:47:37:47:f7:60:3f:44:69:b0:00:
23:d8:6e:9d:96:16:60:5b:31:51:c2:d2:2c:09:6f:75:cb:22:
cd:a4:40:f0:d2:7b:e9:7f:b5:60:2a:9d:bf:28:20:e5:b9:0c:
32:95:9d:9e:ad:80:c7:a8:50:e2:75:f4:0f:4e:b0:4e:d1:29:
d0:bd:74:27:80:bf:1a:4e:af:ff:f4:e3:8b:69:b1:17:9a:91:
94:51:16:c0:5a:b8:50:37:8d:90:ed:d2:6f:af:fc:39:0d:d2:
37:bb:b5:8e:c5:c1:61:5e:a3:d0:3c:5f:8d:d0:3f:6f:a4:17:
4e:6e:ae:1a:d1:fa:05:3e:0f:78:f4:72:b2:82:2f:87:48:00:
0b:ab:34:74
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB
NzhCNzhDNDcwHhcNMjUxMjA2MTk1MTI2WhcNMjUxMjEzMTk1MTI2WjAYMRYwFAYD
VQQDEw02OTM0ODkzZS01OTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4o6APyWpoCbre/F6q2vO094jjPZbhaJd9zUmGCxy2690EOlg302MX4UxWV3h
hJoRjgdAVbugbvVo0tP0XrC8ZXbFgeE0uNEcTlPmbR87TXkTR+f7VNLM9vot3nue
9B8APQbe9wE5SXuqoZd2MmwgnQKW/tcNrN0mIvIf0SDS7VTx8wB9y4CC1B6ftoBT
JzjTZVitX6aLwxKXXayf80L5XlUjr/TQMkIgbLMXmRx7ZMB2PHyUY5bjTjMyoRuH
QJPIRNJKVDyxF7eVCcYQQo99U57UYLUMD2VwDjLBbusKZ/1hJL/66kxIAmg7G3Y8
grtkktblZpOWbLv+b+oamZDmzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfa8hFM
LLeo7wANmlXmmUvMI9FLMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC
NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq
RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4
QndYVnF6ODN2d0duaTNqRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCB/bs7CPTpkHPEnOxCIDOEa3R9EiSJgm2gr+9zOx3D+IzLX9IS89KY
NWR6BtYJNPsmvcoWM/U4NkHbWmwe7C8f7azGqerbLKea8bVlBMmVHqwTk0QLYbnD
bNyC9rS3L3LzOkisTpHSmluswCLbyO4TV/ObcUc3R/dgP0RpsAAj2G6dlhZgWzFR
wtIsCW91yyLNpEDw0nvpf7VgKp2/KCDluQwylZ2erYDHqFDidfQPTrBO0SnQvXQn
gL8aTq//9OOLabEXmpGUURbAWrhQN42Q7dJvr/w5DdI3u7WOxcFhXqPQPF+N0D9v
pBdObq4a0foFPg949HKygi+HSAALqzR0
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:08:29 2025 by rpki-client