This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
File: g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft (raw, json)
Hash identifier: jm75sLzD6YlGu21Q/t3SRTv+yWR1AAs85gc97ZNP3js=
Subject key identifier: F0:AF:1E:6F:99:69:E1:D8:D4:42:23:AE:AC:97:40:64:6F:D2:AC:CE
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial: 07AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
Manifest number: 0722
Signing time: Thu 04 Dec 2025 21:13:39 +0000
Manifest this update: Thu 04 Dec 2025 21:13:38 +0000
Manifest next update: Thu 11 Dec 2025 21:13:38 +0000
Files and hashes: 1: g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl (hash: 85PMtCarDHvTzaMDCjuZhw3Pdz/YAyCRB52/tdEeqCk=)
2: 756E0BBCEAE711EE88CD8641C4F9AE02.roa (hash: AIYT1vtMWjn+gqf3bfo7gJUDe3tZqbxGWI5bPkWziTI=)
3: CF2E103080E011F08E83DE46C4F9AE02.roa (hash: Y6JO5fQI73bFQr5WyCjc2Hk/eYd4ilGqwT2WOKBxnQ8=)
4: E700770280E011F0B1480C47C4F9AE02.roa (hash: QaG5/R6IEIVOIwkDTpG/SoihFaVnKZgGmAPTZkd0p/I=)
5: 993EAAD4522911EFA600C035C4F9AE02.roa (hash: FzKAZQfiNEIYTCeHngxWX8UUMPxm6y5RIZ18Vk8J8K4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:13:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1963 (0x7ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Validity
Not Before: Dec 4 21:13:38 2025 GMT
Not After : Dec 11 21:13:38 2025 GMT
Subject: CN=6931f982-ebcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:dc:09:b1:6e:02:36:b1:b5:62:6d:36:3a:
05:3d:cc:db:9c:27:91:81:50:71:4b:d4:d5:5e:29:
c2:8b:1a:b6:27:7b:ae:3d:ed:5d:b2:60:3d:3c:50:
26:00:d4:43:ba:96:43:1a:22:39:4e:d3:c7:c3:5c:
91:7f:af:10:c2:bf:12:02:8e:80:8f:9a:ca:ac:cd:
c5:22:35:88:a9:a5:9c:f3:a1:4d:7a:f4:24:52:96:
1a:e8:db:40:88:b5:e3:00:42:69:af:b0:5e:7e:5b:
a7:fb:ca:54:16:c0:bd:7e:19:45:5c:67:6a:1a:56:
cd:10:e1:ef:70:b1:29:7e:77:fa:d9:bc:24:6e:65:
62:8b:49:0a:08:6c:a4:c3:87:14:3a:c7:90:12:f8:
27:ef:ab:87:4d:09:10:ff:54:67:7a:83:ba:68:58:
97:f9:5f:e4:70:d3:89:c7:79:77:cc:14:aa:9d:55:
ef:c2:05:77:ad:b9:fc:d8:73:9a:0a:ca:fe:d9:da:
f7:7f:06:c1:e4:6d:6f:bc:59:c4:29:95:91:9e:ec:
96:c2:2b:8a:de:f3:25:47:fd:02:6b:a5:bd:ea:7d:
f6:79:54:af:e3:c1:51:1b:c4:d6:b7:b7:28:95:8e:
89:a5:8d:33:25:90:3f:31:d0:f2:a9:1f:30:ae:71:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AF:1E:6F:99:69:E1:D8:D4:42:23:AE:AC:97:40:64:6F:D2:AC:CE
X509v3 Authority Key Identifier:
keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:86:7f:bf:f3:60:50:62:72:21:b7:68:54:f7:cf:a9:1e:ce:
44:f2:2b:28:37:ad:46:25:42:e2:5b:8f:f9:eb:84:3e:0e:ce:
78:b8:64:05:80:53:51:c0:21:3d:12:de:14:5d:58:f2:61:79:
4a:38:6d:5d:b8:e3:cc:37:f0:77:c6:6b:0f:d9:1e:62:c2:7c:
29:d7:da:04:ad:76:6c:07:18:80:34:56:5b:99:5b:6e:a3:a3:
68:3c:c0:72:35:50:7e:27:be:99:2b:fd:bc:11:77:bb:15:1d:
e2:d1:0f:be:d3:8b:e7:9d:87:dd:fa:03:c0:02:38:d8:03:96:
04:f7:2d:a7:ad:f0:02:e8:85:21:28:96:9b:9f:fb:4d:40:54:
9c:42:7d:0d:52:87:99:e2:87:02:ad:17:b3:90:e6:18:16:cc:
e4:7a:e9:3e:78:7d:9d:91:94:de:14:2f:5b:87:30:74:65:23:
e2:dc:a0:0d:e8:6f:80:94:04:76:cd:3c:ce:70:11:3f:77:d5:
b5:9e:d5:41:b0:1a:6b:2d:96:06:96:fc:b4:ca:d0:0c:d8:63:
ef:7d:a4:3d:aa:c8:14:f8:a6:af:fb:70:a9:49:17:03:ee:e2:
96:5e:99:df:b9:d7:97:a8:8d:ca:9b:fd:a3:c0:9f:6a:1a:3c:
b7:be:23:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:52:10 2025 by rpki-client