This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
File: gH5oiqUL0-OL4xtdTE4GCATrFdw.mft (raw, json)
Hash identifier: bsps+Mu2VsXXp7bCq3QnEjvAm5PfwFbZ+73TkOqH0aQ=
Subject key identifier: 72:9F:CF:83:F4:90:F0:26:56:B2:E4:1B:FC:8F:09:08:9B:A8:22:9B
Authority key identifier: 80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
Certificate issuer: /CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
Manifest number: C9
Signing time: Fri 05 Dec 2025 03:50:34 +0000
Manifest this update: Fri 05 Dec 2025 03:50:33 +0000
Manifest next update: Fri 12 Dec 2025 03:50:33 +0000
Files and hashes: 1: gH5oiqUL0-OL4xtdTE4GCATrFdw.crl (hash: 5ex2jrCvWuEx5R36SksQ1SlAtW+xKRqqp8nvYrVvtOY=)
2: EF63DB0EA26B11EF8F077C3FC4F9AE02.roa (hash: iLpw/uJbge7uZ/WmLMuhiuh6b3ClTayyECZNu36JGVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:50:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F0E2, serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Validity
Not Before: Dec 5 03:50:33 2025 GMT
Not After : Dec 12 03:50:33 2025 GMT
Subject: CN=6932568a-1185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:da:d2:0a:3f:82:1e:4b:8e:c9:6b:fe:b1:4e:
24:59:26:90:30:04:1b:03:4c:8f:ec:28:0a:e9:fd:
7a:8b:59:7c:27:f5:32:92:26:37:bb:11:34:0f:57:
b8:f8:f3:b0:b6:15:3c:af:b8:e3:02:02:a4:32:60:
50:c5:06:d3:9b:02:44:b3:0a:e4:a6:5a:44:c8:f4:
ec:98:5c:5e:ea:71:0d:b7:19:f1:69:cf:64:a5:90:
f8:41:5a:51:31:6d:79:92:a9:01:57:ba:19:05:21:
a6:6e:01:2d:52:7e:c2:8b:dc:14:fc:d1:0a:c0:cc:
5e:cc:57:16:f6:29:c7:42:5a:65:1a:6e:28:e9:0d:
0e:33:a1:5f:9c:00:7e:2c:d2:eb:4c:b0:a9:17:94:
02:81:30:89:1f:bd:be:74:8c:ba:44:d0:52:9b:b1:
7f:42:66:33:5a:d5:6e:2e:d4:de:61:d9:0b:89:68:
39:27:89:40:7a:4c:34:57:45:4d:61:b0:b4:66:5a:
56:2a:03:05:fb:ba:05:2b:8a:18:d4:ad:cf:52:bd:
04:83:df:00:41:5e:33:e8:cf:c6:3c:46:ed:7a:6c:
c4:f8:af:0d:60:86:cf:dd:71:73:be:41:c9:a0:96:
56:70:d9:dc:57:ed:e3:d8:03:ad:94:bd:e3:ab:98:
5a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9F:CF:83:F4:90:F0:26:56:B2:E4:1B:FC:8F:09:08:9B:A8:22:9B
X509v3 Authority Key Identifier:
keyid:80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8e:5e:09:49:82:7b:5e:8d:91:50:a0:06:5f:bf:fc:8c:fe:
e3:fe:ce:87:63:93:0c:ea:30:23:55:94:dd:44:ea:dc:64:b9:
f2:2a:73:a2:00:02:c8:4a:e9:16:2a:c5:a0:07:09:bf:72:32:
dc:26:c8:e2:54:c5:51:fb:35:2c:26:05:b3:9e:d3:3c:2e:3e:
de:db:e3:4d:a8:af:68:e3:6f:19:a1:09:b2:37:46:ff:bc:41:
d8:8c:ca:1e:19:be:6e:72:b3:c7:35:37:8e:4b:ac:a3:5f:f3:
31:ae:96:10:a5:36:34:75:51:bf:b9:98:94:e5:be:62:73:82:
82:a7:dd:85:30:aa:38:54:0a:1d:68:32:26:c8:a1:e8:6e:d2:
8a:e0:81:3a:39:1f:8a:e3:d1:78:2e:a3:2f:46:58:ae:74:3e:
ab:ad:9a:6d:b8:65:48:99:c1:e7:e5:c9:7e:40:64:6c:a5:0d:
f7:74:c5:9f:da:9d:31:61:a2:3b:86:25:7c:e6:0d:70:1a:13:
84:56:35:78:6d:79:ce:3a:4a:03:eb:01:87:ff:fd:81:4a:ba:
0a:d9:1b:df:db:6b:f8:95:c7:cf:f7:8a:45:93:f1:9f:56:c1:
89:d7:33:ad:c3:e7:24:50:83:b3:76:58:78:b2:8f:0c:42:5a:
7a:fb:04:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:28:16 2025 by rpki-client