This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json)
Hash identifier: sflvpDvvbpORoq5UH33V4g01n6uKaeO2HLl3fgAAbZQ=
Subject key identifier: 3F:1E:A2:80:60:51:19:B5:71:68:53:F5:0F:41:39:93:55:CF:57:78
Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A
Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A
Certificate serial: 0564
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
Manifest number: 0555
Signing time: Thu 04 Dec 2025 22:06:16 +0000
Manifest this update: Thu 04 Dec 2025 22:06:16 +0000
Manifest next update: Thu 11 Dec 2025 22:06:16 +0000
Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: tSafSRmy1sXja+1cfLq/C1+08M8w4quKy52AX+eoXpE=)
2: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: 1qOnTV46N1waQtQ9X47A8DgcQV4uyBkcfnz65a0/6wE=)
3: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: IhF3xpRX9OoLW4rm4Xp59CrFWa/bSzisaDG59ePuZ74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl
rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:06:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1380 (0x564)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A
Validity
Not Before: Dec 4 22:06:16 2025 GMT
Not After : Dec 11 22:06:16 2025 GMT
Subject: CN=693205d8-9497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:1d:ca:60:84:e8:8b:5c:da:50:81:f5:e0:
38:e4:b9:4d:b1:e2:b3:06:4c:2e:5a:19:12:01:b7:
d8:3c:dd:a9:bd:d1:08:72:39:93:88:1b:73:5f:ea:
b3:c0:23:c1:cc:1e:92:ae:2c:61:fd:eb:35:3c:ab:
69:41:eb:8b:9c:ee:c8:f6:f4:72:17:0c:84:b8:73:
36:61:bf:74:c7:e0:a6:49:13:d6:7c:4e:a6:84:e1:
c4:5a:da:ed:bc:d5:60:b2:3f:f5:5d:6b:94:fa:9b:
96:f6:07:02:2a:15:c5:7a:29:fc:b1:38:66:80:4f:
82:c1:c7:d5:20:50:96:87:5e:f2:7f:a8:98:1f:45:
bb:71:d3:82:5d:6c:d8:ee:03:4d:7a:1b:94:1f:30:
aa:7b:c8:82:7f:5a:1d:78:5d:32:bb:66:b5:5f:44:
f3:1f:43:c4:75:36:b7:d4:9c:4a:a8:d8:d8:01:59:
ac:67:bf:56:fb:82:1f:e3:77:ad:02:7f:b3:4f:0f:
a6:2f:84:d5:d6:99:e3:62:00:36:22:a0:ed:11:11:
cb:b6:e5:a7:1c:86:c0:9c:fc:bf:1e:3b:6f:51:6c:
0c:b3:cf:d5:77:b4:28:6d:bf:59:a1:4b:63:2d:72:
50:8d:37:ae:1d:9c:4f:5b:02:b9:35:4b:c6:42:81:
9a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1E:A2:80:60:51:19:B5:71:68:53:F5:0F:41:39:93:55:CF:57:78
X509v3 Authority Key Identifier:
keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:51:8b:8e:35:4f:41:ba:aa:09:c0:20:62:21:fd:e2:fd:ee:
46:fa:1c:de:d1:f7:3c:68:b5:72:5e:5c:60:c7:0a:c5:5a:ed:
ba:ab:e6:fb:b8:1f:23:57:d9:c2:72:30:6d:78:dd:c4:e0:1e:
e8:1b:14:8a:90:7a:ba:f3:f2:09:f4:1f:c6:73:c6:ef:fd:19:
58:b8:bd:4e:47:44:5c:95:a6:b7:e0:6a:1e:0e:1d:b1:48:67:
d3:70:c5:9f:d9:81:8b:61:d6:18:22:e8:ee:19:07:93:56:f3:
46:03:af:65:3e:b5:2f:76:22:da:f4:44:31:f5:ee:31:60:8b:
59:f6:db:36:96:73:e4:e8:3e:fa:f8:9b:a3:5d:7a:5d:c7:04:
b1:93:9f:14:f9:e1:a4:aa:a0:79:19:ca:69:df:6a:9d:16:0e:
5e:09:61:77:29:db:60:f2:8c:9c:73:cf:65:07:f6:dd:2d:c8:
84:a0:56:a7:1c:82:f8:34:ff:c5:29:a2:01:f5:58:7e:40:a1:
69:86:33:13:aa:52:e5:48:c0:56:ce:53:7e:fa:e7:5d:6c:eb:
bd:1b:da:27:e3:d8:b1:f2:6d:97:59:62:a4:09:98:bc:88:eb:
47:9a:fc:4c:fd:68:68:3c:89:3a:2e:f7:da:f3:47:86:20:58:
f4:9f:ff:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:58 2025 by rpki-client