This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
File: ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json)
Hash identifier: kTe6J5ngYVy0wgGRFg5r9JuQ9iQYbhH4NCSVWorsAJ0=
Subject key identifier: D1:10:3A:8E:C9:37:90:BC:F5:D0:7C:5C:06:93:AA:A0:07:15:B0:E9
Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6
Certificate issuer: /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6
Certificate serial: 0235
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
Manifest number: 022F
Signing time: Sun 07 Dec 2025 00:31:54 +0000
Manifest this update: Sun 07 Dec 2025 00:31:53 +0000
Manifest next update: Sun 14 Dec 2025 00:31:53 +0000
Files and hashes: 1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: +6+JgoPAH65dTZ7JAy30y8+LVYKdNBCcBXvzRt21jHU=)
2: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: MMkdhzYrtB2EaUzaUeaUoWgtYA29GMYgRCaFiVCPSo0=)
3: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: dCssZ98YqQlWBb/mCVwsQnrI9ONxqFmsNypt7KWWLSU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl
rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6
Validity
Not Before: Dec 7 00:31:53 2025 GMT
Not After : Dec 14 00:31:53 2025 GMT
Subject: CN=6934caf9-9a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:dd:82:d5:02:c3:fa:cd:5f:9c:29:25:60:
82:99:bc:fb:6a:43:e2:39:be:ac:b8:a1:87:64:84:
56:ff:1b:90:af:43:9e:fd:7a:c8:23:ad:1a:47:95:
e0:a5:8f:06:38:67:cd:a9:7c:03:d7:b6:8b:69:a2:
55:07:62:84:02:59:e6:c8:cf:5b:d9:59:e7:6d:e9:
ba:d4:e3:bf:62:e5:66:10:68:64:59:cd:6d:5f:33:
86:54:17:85:a1:29:d9:54:bb:16:9f:e9:93:ec:e9:
ce:20:93:08:d0:42:42:22:31:83:4f:50:d6:c7:f7:
86:ab:b1:c8:b2:5f:5f:79:32:21:37:e6:8d:a8:a1:
d9:62:e4:49:45:0a:2d:e0:99:c3:32:1b:d9:a5:44:
84:73:1c:dd:27:ac:13:20:84:30:6f:8d:bf:7d:8f:
65:ed:c4:7a:3d:fd:25:b7:de:c7:6a:92:83:d1:01:
c1:25:1d:16:c6:9c:78:6b:89:40:9b:d9:20:58:ce:
80:00:fa:f3:d4:1d:d8:d2:4c:3d:18:ab:68:8a:cb:
c7:9d:91:e0:7e:a6:16:9c:d4:db:e4:e3:26:2b:e0:
0c:c7:b0:b2:77:57:09:b0:d0:cf:87:14:33:fa:4a:
f7:c6:93:6b:2c:94:61:78:2e:54:b8:9a:e4:75:3c:
70:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:10:3A:8E:C9:37:90:BC:F5:D0:7C:5C:06:93:AA:A0:07:15:B0:E9
X509v3 Authority Key Identifier:
keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:67:8e:fd:9f:0c:a1:bf:a1:81:87:2d:15:90:69:be:70:84:
cc:39:99:ca:9e:2d:d5:47:3e:78:52:22:9c:c2:17:95:aa:db:
af:1a:20:24:90:a7:6a:62:75:fa:9a:ae:df:c7:f8:4e:ec:dd:
16:27:e5:72:f9:fd:bc:cb:59:b2:a3:93:6a:ef:6a:ad:66:7d:
fa:24:ed:cf:cd:96:9a:21:36:e5:37:60:d1:f4:2c:92:7a:2d:
30:1b:79:37:bc:64:71:c7:48:bc:86:c7:77:05:1a:40:51:49:
c8:d8:e8:27:68:23:26:4b:74:cf:d8:3f:43:d7:b9:9f:64:e4:
56:34:9f:28:3e:c6:e4:5a:15:02:e4:4c:a9:7b:49:94:18:e4:
9a:89:a9:00:02:ce:70:c6:3c:f8:3f:e9:4c:e8:a7:0a:09:93:
da:4e:91:90:a8:3f:4f:77:0d:99:dd:8e:b9:d1:13:3b:7a:e0:
4d:1d:cd:8a:3d:c6:df:b8:cf:16:96:60:0d:79:74:e6:98:86:
0b:48:74:7e:73:c9:cf:67:30:2d:0a:8e:d1:cf:e8:fe:f8:8e:
53:24:02:a1:9e:c2:eb:b1:a3:08:61:82:68:24:2a:51:f9:82:
1c:69:fd:a4:37:a2:f6:44:c4:98:63:90:18:9a:c2:31:3f:a4:
cb:95:96:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:39:40 2025 by rpki-client