This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
File: -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json)
Hash identifier: khYvwKW5GYiP6mNOQKIxT0Jv3IxHP0wAlfx3A7zQW0Q=
Subject key identifier: 82:45:83:29:40:60:7B:FF:12:0C:74:44:8B:7B:9C:42:F2:DD:76:72
Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Certificate serial: 05B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
Manifest number: 059D
Signing time: Thu 04 Dec 2025 21:55:03 +0000
Manifest this update: Thu 04 Dec 2025 21:55:02 +0000
Manifest next update: Thu 11 Dec 2025 21:55:02 +0000
Files and hashes: 1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: GgyHXUlWvg8chKXWsaa+rq+M3ppnMim6en0rLwhs6Po=)
2: 6DC7671CBB0311F0BAA3F480C4F9AE02.roa (hash: IXjsC1Gn8YS8EVHrHIvkv8PnIK6AM47wRbwZW8rBBL0=)
3: 52A1A77A6ECF11F0B2785815C4F9AE02.roa (hash: ZDRfk70st2kL6l3vbu2GItPWm8/EuvkzaT+2ep7EeqM=)
4: D62399042D1E11EE8C614E3EC4F9AE02.roa (hash: dy7HlTozJjIKYVnOC7Ac5E0oRz65i8VQkjJrYKePISw=)
5: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: KP27oWwshi1ZI1hZNDH63RAAkLv0dKJvlvJEGsDjzKs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1461 (0x5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Validity
Not Before: Dec 4 21:55:02 2025 GMT
Not After : Dec 11 21:55:02 2025 GMT
Subject: CN=69320337-c80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:41:4c:54:68:22:f6:9e:bf:32:66:f2:ce:
28:5f:29:9d:53:ac:b5:8e:89:0b:c4:45:80:77:a0:
de:46:d2:bf:26:ba:e9:be:46:31:10:94:4b:5e:62:
f3:9d:5f:d4:3c:01:3c:c2:eb:af:ee:8c:3a:06:86:
25:4d:db:f4:c2:7f:85:4d:9c:08:60:4c:9a:ef:28:
05:d9:fd:4b:a4:fc:40:df:49:95:9b:59:8f:73:14:
7d:37:99:04:08:40:9e:2d:cf:49:dc:ef:bd:ed:5e:
e7:99:47:65:67:ba:a7:c4:99:ba:75:90:19:5c:3e:
fa:e2:b0:9a:1f:c3:4c:1f:d0:cd:43:34:8c:32:e1:
07:0b:f1:68:dd:3e:3e:a9:b3:c0:08:9b:bb:f1:d7:
a9:96:4a:04:e4:10:b7:c0:1f:2d:d5:80:93:b2:b4:
b5:37:16:25:2d:8f:95:d3:c0:01:fc:19:7f:bc:43:
e0:91:7a:93:e3:af:20:39:28:a7:a5:0f:a7:d7:26:
04:8c:d8:7d:5b:66:0e:65:26:d5:1d:6e:d4:eb:ca:
e1:e9:9d:c2:bd:ce:9c:0c:44:81:93:87:b0:96:dc:
b1:4d:79:36:42:98:ee:a5:32:34:08:f7:ce:96:eb:
38:bf:87:2d:02:d2:04:d7:4e:6b:2b:cf:73:f1:3d:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:45:83:29:40:60:7B:FF:12:0C:74:44:8B:7B:9C:42:F2:DD:76:72
X509v3 Authority Key Identifier:
keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:19:fc:53:f4:5a:b6:63:78:56:c9:33:e4:df:3a:d3:04:04:
d2:b0:a2:51:c2:24:4a:14:97:75:19:ce:da:17:97:ae:e4:cb:
90:45:10:d9:5e:53:82:0e:8b:d7:68:07:98:a2:a3:fb:9f:2e:
90:e6:77:b4:8e:ea:a1:19:e9:9e:89:de:14:f7:76:19:5d:e7:
a3:6d:76:04:ae:c0:a5:09:5a:ac:a3:d3:b9:68:12:1c:ce:64:
91:00:ff:73:ca:ea:83:ae:ff:70:be:89:07:47:f7:b9:b3:3a:
28:ba:41:30:2a:30:de:32:9b:cf:1c:e2:4d:00:b5:85:04:bd:
54:38:df:36:10:db:ed:26:16:bd:f3:fe:75:00:c1:3d:33:9e:
83:f9:3a:88:ea:be:70:dc:de:4b:91:e1:93:31:b6:0d:a9:5e:
d6:d1:7e:3e:97:d2:b3:24:67:6e:bd:20:a9:16:96:22:bb:00:
ad:11:87:1b:84:fb:2e:91:7b:12:c1:93:bd:89:3b:4e:cd:83:
7d:33:79:53:70:47:5b:fd:d4:95:48:b1:72:c4:b9:27:77:f5:
57:00:74:cd:cc:c7:69:0e:c9:fd:61:da:d2:c7:bb:52:24:e0:
92:fd:e7:87:9e:57:af:6e:b3:dd:51:a8:2c:28:82:bc:d9:35:
f2:9d:44:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUzRDMxMTAvBgNVBAUTKEZBMDQ1QzYzMDJCODczRTg4MzY1RkE5QTAyMTQ5OUI0
RjNDNTg2ODgwHhcNMjUxMjA0MjE1NTAyWhcNMjUxMjExMjE1NTAyWjAYMRYwFAYD
VQQDEw02OTMyMDMzNy1jODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsZBBTFRoIvaevzJm8s4oXymdU6y1jokLxEWAd6DeRtK/JrrpvkYxEJRLXmLz
nV/UPAE8wuuv7ow6BoYlTdv0wn+FTZwIYEya7ygF2f1LpPxA30mVm1mPcxR9N5kE
CECeLc9J3O+97V7nmUdlZ7qnxJm6dZAZXD764rCaH8NMH9DNQzSMMuEHC/Fo3T4+
qbPACJu78deplkoE5BC3wB8t1YCTsrS1NxYlLY+V08AB/Bl/vEPgkXqT468gOSin
pQ+n1yYEjNh9W2YOZSbVHW7U68rh6Z3Cvc6cDESBk4ewltyxTXk2QpjupTI0CPfO
lus4v4ctAtIE105rK89z8T0m7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJFgylA
YHv/Egx0RIt7nELy3XZyMB8GA1UdIwQYMBaAFPoEXGMCuHPog2X6mgIUmbTzxYaI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82RUMwRTM2ODAw
MEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMtaURaZnFhQWhTWnRQUEZo
b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1nUmNZd0s0Yy1pRFpmcWFBaFNadFBQRmhvZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTNEMy82RUMwRTM2ODAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMt
aURaZnFhQWhTWnRQUEZob2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBbGfxT9Fq2Y3hWyTPk3zrTBATSsKJRwiRKFJd1Gc7aF5eu5MuQRRDZ
XlOCDovXaAeYoqP7ny6Q5ne0juqhGemeid4U93YZXeejbXYErsClCVqso9O5aBIc
zmSRAP9zyuqDrv9wvokHR/e5szooukEwKjDeMpvPHOJNALWFBL1UON82ENvtJha9
8/51AME9M56D+TqI6r5w3N5LkeGTMbYNqV7W0X4+l9KzJGduvSCpFpYiuwCtEYcb
hPsukXsSwZO9iTtOzYN9M3lTcEdb/dSVSLFyxLknd/VXAHTNzMdpDsn9YdrSx7tS
JOCS/eeHnlevbrPdUagsKIK82TXynUT0
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:24:47 2025 by rpki-client