This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
File: Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft (raw, json)
Hash identifier: a9kwLD95RlKylCLqcXdyj+Nrm45sTrfNkUnT4c+LjtI=
Subject key identifier: AF:09:00:F0:29:C5:B2:EB:2F:96:9B:D4:93:FB:9A:4E:1B:C5:CD:F3
Authority key identifier: 19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7
Certificate issuer: /CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7
Certificate serial: 0861
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
Manifest number: 085B
Signing time: Sat 06 Dec 2025 19:47:38 +0000
Manifest this update: Sat 06 Dec 2025 19:47:38 +0000
Manifest next update: Sat 13 Dec 2025 19:47:38 +0000
Files and hashes: 1: Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl (hash: ZSpj6qcv3q1lbTdnXKGIpWjByHAi+H4pd7zji34VKqw=)
2: B3078DFAE1E411EAAD5D8545C4F9AE02.roa (hash: letKkI3J7GQM6enE4QxR/GGV62ebNvR+dZGy0HTaYqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl
rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2145 (0x861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91753AE, serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7
Validity
Not Before: Dec 6 19:47:38 2025 GMT
Not After : Dec 13 19:47:38 2025 GMT
Subject: CN=6934885a-76d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:83:df:a1:6e:11:a3:95:a8:7e:e7:cc:ad:
ab:17:5a:00:58:43:b4:c3:17:8a:13:04:46:71:7a:
99:12:28:d9:ed:46:d6:0e:ce:bd:af:a7:12:0c:eb:
94:28:57:1c:2c:15:71:50:38:fe:df:d6:15:f3:5e:
43:a7:f9:3b:f2:c0:4b:8f:07:f1:12:b9:7a:3d:3e:
ed:09:5f:6b:8e:38:28:be:89:37:be:c4:45:a6:44:
41:b9:d2:78:76:da:2f:89:97:e9:c2:e6:05:a0:a0:
8b:c1:ec:21:15:84:3e:65:45:0f:8c:13:e3:77:b6:
07:21:dc:7e:c9:7d:54:4b:43:e9:4e:8a:0b:68:10:
ae:5c:f0:1b:c6:9a:9c:e6:89:f7:06:f6:ae:ad:b4:
0e:cb:02:f2:37:4a:d9:46:0a:95:e9:a6:73:ea:a5:
41:18:cb:b0:ba:78:cb:91:29:73:03:d0:c6:1e:99:
13:00:07:f4:da:c3:f6:c3:c1:f8:94:e0:3c:6a:20:
77:90:27:71:28:02:6f:97:47:7f:e0:12:fe:0c:db:
32:ca:b1:7a:d7:19:42:8a:f2:ac:34:2b:9a:f3:54:
dc:4d:e9:f5:f7:79:90:b7:b0:02:e8:93:89:c3:a2:
81:25:71:6a:70:7c:e1:3a:20:b5:22:c2:14:5a:e9:
df:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:09:00:F0:29:C5:B2:EB:2F:96:9B:D4:93:FB:9A:4E:1B:C5:CD:F3
X509v3 Authority Key Identifier:
keyid:19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:c6:8d:73:52:b1:96:a1:b0:24:0d:8a:bc:7c:26:e0:fe:06:
c3:2b:00:01:a7:7e:cd:82:40:6f:a0:a3:5b:52:82:46:9c:e0:
36:a6:bb:60:f3:62:54:7f:d2:2d:b4:7e:40:85:6f:f9:e3:70:
b8:ac:14:80:a5:6a:92:96:b0:98:c8:2b:2a:aa:0a:c2:2b:b8:
e0:7d:ee:ef:51:f6:d7:03:4c:11:93:57:71:b6:1f:79:99:6d:
3f:40:18:30:b2:70:5b:ba:5a:62:08:14:1a:91:d3:ee:09:c1:
e9:18:4e:a6:35:24:16:dd:64:eb:3d:cc:ed:65:cb:1d:c4:a7:
29:16:a5:0e:f0:08:85:9b:cd:7f:3f:d4:df:63:25:f5:37:c4:
95:8c:ee:c0:fc:fe:5f:f5:c4:dd:3e:24:17:fb:6c:dd:e0:58:
8c:44:bc:8e:c7:64:9a:dc:79:a4:99:5e:b9:e6:f9:64:d8:bf:
8d:ca:cf:35:be:8c:d9:1e:a4:02:15:9d:51:f7:64:6c:05:e4:
38:67:90:3c:6f:11:b7:42:6c:49:18:99:89:af:9c:9e:cc:ef:
1b:72:8e:7b:32:db:06:a6:e0:b8:f1:a3:b4:9a:ca:fb:dc:ba:
fb:86:7c:62:e6:df:c7:69:ca:65:db:15:38:6b:4a:70:06:4a:
54:74:ac:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:32:22 2025 by rpki-client