This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
File: gaZX6qx1VMq3oaKI9bP-7dilzEs.mft (raw, json)
Hash identifier: 4o4s0l0QMNv8dTjpZChXKBtRmog1/OTlh+hI06+MS2o=
Subject key identifier: B5:74:51:20:AC:94:D5:83:4D:37:D6:0B:8F:64:D2:52:DA:EE:6D:65
Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
Certificate issuer: /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
Manifest number: 55
Signing time: Sun 07 Dec 2025 03:06:18 +0000
Manifest this update: Sun 07 Dec 2025 03:06:17 +0000
Manifest next update: Sun 14 Dec 2025 03:06:17 +0000
Files and hashes: 1: gaZX6qx1VMq3oaKI9bP-7dilzEs.crl (hash: qf6I2yxLnrv3moA/WwX3u9rS0CxZX6eVAMxxjP74i28=)
2: A78653B2561F11F09624D128C4F9AE02.roa (hash: v13B1iQ4hhFI0k63jpGnWfr1WzzOqwI0W1kZRI7DnNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Validity
Not Before: Dec 7 03:06:17 2025 GMT
Not After : Dec 14 03:06:17 2025 GMT
Subject: CN=6934ef29-8e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:e3:46:f3:91:72:ff:e4:e8:a0:70:4c:3d:
1b:62:dd:81:9f:c5:a6:19:f5:20:b6:91:70:95:db:
66:3a:53:f5:da:d3:b0:14:ef:69:e2:d0:4a:b9:a1:
5f:21:fd:bc:8e:84:98:57:70:e2:91:6e:0e:bd:7f:
a5:50:a3:fd:f8:f2:7b:fa:54:33:7a:d0:3b:78:ee:
06:a2:2f:32:88:32:4d:ba:fe:55:a4:9c:6c:76:30:
b1:c4:41:25:56:72:2f:93:6a:85:70:7b:60:ed:6e:
eb:c8:d5:19:4d:1b:2f:da:28:31:fc:cd:67:f7:46:
61:1f:27:28:42:61:ba:2c:b8:22:ca:de:17:8b:fd:
e7:f8:df:ae:4f:4d:aa:92:f2:24:f0:d0:bc:02:62:
e9:9a:e4:f0:b0:8c:ab:1f:a2:2b:0e:ab:9a:60:4f:
2a:02:93:83:ca:32:31:ff:1e:9f:58:93:f9:56:57:
37:d5:06:d3:84:a1:6f:bc:4a:1a:2c:b9:19:73:68:
9e:ab:ef:2b:b1:d3:95:16:b5:57:b7:d7:88:48:00:
23:af:9c:ac:46:0f:7c:72:34:48:f9:2b:64:82:1c:
d2:fc:be:07:26:71:24:87:99:e7:01:f2:86:ec:04:
3c:fc:6c:65:9b:2b:b5:39:9f:dd:4f:54:b4:1b:16:
31:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:74:51:20:AC:94:D5:83:4D:37:D6:0B:8F:64:D2:52:DA:EE:6D:65
X509v3 Authority Key Identifier:
keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:41:e1:08:29:fc:64:b7:11:b7:0b:ae:c9:d2:a7:9f:ed:cf:
90:f4:0c:4e:6d:70:d9:66:35:4b:12:c3:1e:e7:81:8c:5b:a6:
2b:fd:7f:83:eb:66:63:e2:c4:4b:e1:a3:35:1c:1b:3f:76:31:
8e:9f:ed:3d:eb:99:aa:97:0a:02:e9:4f:b4:d4:e7:2a:83:60:
2d:c3:09:33:60:7d:ce:bd:31:4a:db:ab:fe:ca:ed:95:d8:3d:
cf:d1:8c:cb:55:cb:0c:f3:19:53:11:4f:8a:90:21:d5:32:88:
cf:3c:dd:14:30:52:6e:f2:ac:dd:a3:82:44:b7:83:c9:ea:7e:
3c:14:c2:c9:51:12:1d:ab:b6:87:a6:5e:42:22:b8:01:d4:2f:
2d:6b:9a:00:61:20:5a:79:98:1d:71:70:13:62:cd:eb:8c:ff:
ef:0d:82:dc:f6:e8:c0:c5:9e:a1:12:d5:c2:f2:8c:46:b2:2c:
04:8e:e9:d7:b2:c6:75:4a:3c:3c:fb:41:16:62:28:de:b1:22:
25:cc:7f:ce:4e:0d:15:00:b6:be:d9:a8:72:15:80:c6:4c:e0:
6b:fd:66:91:02:a1:a0:d4:71:2a:94:56:9d:1e:d9:94:bd:2f:
1a:f4:d6:31:85:9a:c5:8c:41:1b:19:85:6c:73:f1:75:38:40:
8a:b2:7a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:32:30 2025 by rpki-client