This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
File: GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft (raw, json)
Hash identifier: 6TXtU23QchTtUwRXq+U8VHPEKyObTQ2pWEO4NTiW/wY=
Subject key identifier: F5:14:AF:DC:8F:62:3F:A9:E9:C3:BD:FC:8F:06:DD:C8:C5:B8:AB:CA
Authority key identifier: 19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9
Certificate issuer: /CN=A918842E/serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
Manifest number: 4C
Signing time: Fri 05 Dec 2025 05:09:37 +0000
Manifest this update: Fri 05 Dec 2025 05:09:36 +0000
Manifest next update: Fri 12 Dec 2025 05:09:36 +0000
Files and hashes: 1: GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl (hash: EHVHpSqmPOKFcaliSYKfzNocncYzGZJOEIie3CGemX8=)
2: 51D222025DEF11F08A4EA06FC4F9AE02.roa (hash: jbmHjCRldQebtcE9n4Zv2veO89dDLab7PzgfvTloAZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl
rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:09:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918842E, serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9
Validity
Not Before: Dec 5 05:09:36 2025 GMT
Not After : Dec 12 05:09:36 2025 GMT
Subject: CN=69326911-4102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:46:70:bb:f8:44:a4:c7:a2:43:68:53:5f:
2b:cf:21:09:87:41:a2:8b:ad:40:cb:dc:89:30:4b:
ac:72:8f:45:6b:eb:fa:da:63:a4:96:5d:15:3f:7b:
b0:fc:55:2c:a3:85:98:dc:9e:32:3e:65:3d:09:5a:
88:5a:18:96:d5:3b:8b:cc:9c:0b:ee:f8:c4:fa:e3:
fd:43:0a:8e:6d:8d:8c:c7:5a:f0:9f:6d:25:7b:60:
fe:51:7c:82:c1:69:eb:87:9e:8b:e6:b1:27:5c:27:
b6:eb:3e:da:9e:ad:c2:be:c2:92:1d:8d:12:96:26:
65:2a:07:db:82:f6:5c:89:91:94:10:2a:dd:e3:fa:
22:fd:68:12:5c:91:02:d4:1d:3e:f9:f9:d1:fd:d5:
40:32:8e:9d:41:39:83:86:41:9c:4f:7f:e7:9a:ed:
0d:6a:fa:19:41:1e:ee:b3:8a:9f:e2:9b:c7:9c:c3:
04:9b:36:f7:7a:99:c8:8b:9b:7b:68:f8:07:37:d3:
50:26:99:aa:29:0e:f1:b2:59:a2:24:ee:f3:76:04:
b2:67:91:b0:4d:05:aa:c8:f0:d3:ed:f9:9e:63:ab:
b4:a3:85:04:6b:3a:92:01:e6:0b:ad:12:75:2e:a3:
e9:08:ee:45:a2:b9:5f:7d:ad:42:fb:bf:51:29:eb:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:14:AF:DC:8F:62:3F:A9:E9:C3:BD:FC:8F:06:DD:C8:C5:B8:AB:CA
X509v3 Authority Key Identifier:
keyid:19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8b:89:2e:f8:ac:a3:83:5f:7b:8d:04:21:c8:8a:76:89:8d:
08:35:b9:48:8f:1b:22:cc:8c:93:25:fa:e7:2e:a0:4a:6c:31:
2f:49:ec:ba:e0:67:f8:4e:26:52:a5:85:d6:83:5f:c3:c9:ab:
cd:70:16:f9:42:00:ce:35:b3:9d:47:aa:5f:36:db:66:5c:50:
b5:15:5f:ac:7c:57:2c:eb:e5:2c:33:38:de:ed:5f:14:79:dd:
f7:3d:72:14:e4:79:a5:64:ef:4e:4c:c0:83:f6:e9:96:e0:46:
24:2b:a7:fa:b0:11:14:ac:bf:92:d7:d6:3e:76:ac:a7:f0:4e:
3b:ef:ea:cd:d5:5d:cb:20:57:75:46:cd:27:b0:9c:1c:0a:9a:
db:ef:60:bb:f3:73:3e:e7:c9:78:f9:c6:c1:fe:2e:67:25:ff:
13:48:c9:85:25:90:52:c7:f6:54:48:7d:70:ca:20:f2:5c:90:
15:8e:25:d8:55:42:1d:80:76:ce:16:47:8c:a5:78:20:05:44:
93:40:14:86:59:f8:70:bd:8b:b3:ea:8e:a7:27:0e:4c:1c:d5:
ec:5e:2f:72:c6:ca:44:85:ce:ca:af:86:4f:36:34:e4:87:04:
07:64:14:f2:b3:b9:b6:28:62:d0:e9:ea:46:3a:8a:62:a4:fa:
07:3b:f1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:53:05 2025 by rpki-client