This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
File: GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft (raw, json)
Hash identifier: s3D/pfYXCZngmSLNKCS40AhF/D3esFRXeY7VreqYgFk=
Subject key identifier: 76:B0:6A:AB:AD:64:9D:B1:FD:76:B0:ED:6D:B6:AB:F1:0E:EE:1F:5A
Authority key identifier: 19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA
Certificate issuer: /CN=A917B83F/serialNumber=1980355299B6C2237B4235000F723597BFEB33DA
Certificate serial: 1549
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
Manifest number: 153E
Signing time: Sat 06 Dec 2025 16:22:04 +0000
Manifest this update: Sat 06 Dec 2025 16:22:03 +0000
Manifest next update: Sat 13 Dec 2025 16:22:03 +0000
Files and hashes: 1: GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl (hash: DrH/UD6p2Ecy5tMqG8iGK2I+zVE7xn0iOSZxw7erUnE=)
2: 0964A56EF35511E8AC1ECA17C4F9AE02.roa (hash: 73TnPaYse5Jq88UH3d/+sChGvcrApkf6vCKZhwuKess=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl
rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5449 (0x1549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B83F, serialNumber=1980355299B6C2237B4235000F723597BFEB33DA
Validity
Not Before: Dec 6 16:22:03 2025 GMT
Not After : Dec 13 16:22:03 2025 GMT
Subject: CN=6934582b-e968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c8:0e:72:f6:40:d9:e7:22:8a:69:ab:0f:e2:
11:b4:1a:fd:f3:69:43:41:0e:0d:f1:a5:a0:c9:c8:
4d:d4:90:3d:eb:78:c1:0e:70:37:4c:31:36:46:41:
3f:29:7d:ac:6b:c9:b2:36:9a:da:f5:5a:99:f0:8f:
78:6b:f2:58:8d:70:3a:f6:dd:50:6b:e5:9a:ea:e6:
ca:e0:e7:bd:3d:dd:b0:63:10:02:3c:e0:b7:94:d1:
93:a2:9b:c0:74:6e:67:47:93:c6:42:5e:c9:43:86:
b9:61:53:7e:20:1c:b4:67:8d:db:4a:5a:43:da:45:
f2:52:de:d3:c2:55:23:50:93:e0:94:2f:0d:2f:dd:
4f:77:36:16:51:f5:74:40:4c:ec:37:5f:b6:15:21:
ee:28:72:61:ae:5b:2c:61:3a:85:2c:40:b7:5a:84:
05:e8:f3:5e:92:48:c2:44:96:e2:0a:b1:5d:c9:31:
b1:1f:c0:8c:7c:c2:08:d6:ef:f9:b6:2c:33:a6:ab:
61:9f:43:9f:3f:ba:0b:db:78:0c:28:6f:2c:0a:3e:
c9:b3:2c:fd:4d:52:19:d4:80:07:81:f4:78:5b:92:
1a:d5:d4:8c:00:1f:ef:a4:22:aa:95:70:4f:b0:54:
76:bf:27:e8:9c:79:8f:40:b1:1a:49:80:e8:ca:2b:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B0:6A:AB:AD:64:9D:B1:FD:76:B0:ED:6D:B6:AB:F1:0E:EE:1F:5A
X509v3 Authority Key Identifier:
keyid:19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bb:70:38:d4:23:74:3a:b7:84:84:d3:cc:56:e1:2d:c6:eb:
fe:d0:5a:85:b3:49:dc:d5:df:2d:1e:7e:ff:3a:64:7e:e7:7c:
30:a4:96:1a:78:60:4b:64:ef:4a:48:35:21:48:1b:17:83:90:
f9:29:bb:63:14:c3:ab:86:62:9d:b8:54:98:dd:c0:f1:22:17:
b0:79:6e:b0:77:8e:fe:f9:bf:90:cf:20:aa:85:c0:98:be:45:
84:0f:39:00:fb:02:0a:e1:cd:69:86:02:55:0f:45:69:ca:62:
31:cd:8b:d3:7f:21:49:cc:78:61:f9:db:d9:b0:cf:cf:64:9a:
23:1f:eb:d7:8d:26:a1:e7:1c:0d:88:e5:3c:e6:4f:87:63:de:
c9:b5:d9:2b:e0:b6:89:33:02:cd:df:70:52:40:f3:fc:1d:83:
98:c6:00:4e:4b:48:3d:f5:d1:36:84:13:4c:02:5c:68:e2:15:
67:63:c3:e9:dd:92:95:0a:a5:c9:3f:93:9e:df:51:94:6b:24:
0c:a9:7b:e7:62:61:04:70:99:dd:98:97:f2:2d:b8:51:4c:4e:
02:dc:ce:ed:98:7d:e5:e7:f2:2d:68:2a:0f:c5:8b:32:9d:a9:
af:d7:aa:22:a0:7a:2d:fd:aa:dd:89:4f:5d:24:4a:43:57:37:
94:04:0c:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I4M0YxMTAvBgNVBAUTKDE5ODAzNTUyOTlCNkMyMjM3QjQyMzUwMDBGNzIzNTk3
QkZFQjMzREEwHhcNMjUxMjA2MTYyMjAzWhcNMjUxMjEzMTYyMjAzWjAYMRYwFAYD
VQQDEw02OTM0NTgyYi1lOTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzcgOcvZA2eciimmrD+IRtBr982lDQQ4N8aWgychN1JA963jBDnA3TDE2RkE/
KX2sa8myNpra9VqZ8I94a/JYjXA69t1Qa+Wa6ubK4Oe9Pd2wYxACPOC3lNGTopvA
dG5nR5PGQl7JQ4a5YVN+IBy0Z43bSlpD2kXyUt7TwlUjUJPglC8NL91PdzYWUfV0
QEzsN1+2FSHuKHJhrlssYTqFLEC3WoQF6PNekkjCRJbiCrFdyTGxH8CMfMII1u/5
tiwzpqthn0OfP7oL23gMKG8sCj7Jsyz9TVIZ1IAHgfR4W5Ia1dSMAB/vpCKqlXBP
sFR2vyfonHmPQLEaSYDoyitB1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHawaqut
ZJ2x/Xaw7W22q/EO7h9aMB8GA1UdIwQYMBaAFBmANVKZtsIje0I1AA9yNZe/6zPa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjgzRi8zREIzREJFQTU1
NEYxMUU4OUJDMkU4NTdDNEY5QUUwMi9HWUExVXBtMndpTjdRalVBRDNJMWw3X3JN
OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dZQTFVcG0yd2lON1FqVUFEM0kxbDdfck05by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjgzRi8zREIzREJFQTU1NEYxMUU4OUJDMkU4NTdDNEY5QUUwMi9HWUExVXBtMndp
TjdRalVBRDNJMWw3X3JNOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAKu3A41CN0OreEhNPMVuEtxuv+0FqFs0nc1d8tHn7/OmR+53wwpJYa
eGBLZO9KSDUhSBsXg5D5KbtjFMOrhmKduFSY3cDxIheweW6wd47++b+QzyCqhcCY
vkWEDzkA+wIK4c1phgJVD0VpymIxzYvTfyFJzHhh+dvZsM/PZJojH+vXjSah5xwN
iOU85k+HY97Jtdkr4LaJMwLN33BSQPP8HYOYxgBOS0g99dE2hBNMAlxo4hVnY8Pp
3ZKVCqXJP5Oe31GUayQMqXvnYmEEcJndmJfyLbhRTE4C3M7tmH3l5/ItaCoPxYsy
namv16oioHot/ardiU9dJEpDVzeUBAyO
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:25:46 2025 by rpki-client