This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.mft
File: g_H_6dM06H_0zXVY3e81L-bfIGk.mft (raw, json)
Hash identifier: V8Mb8ba7tdI27f1KAermlY6m0Ys8IUeqwAvQh+poH5Y=
Subject key identifier: 4A:94:2C:21:65:3D:93:63:30:CE:FF:FE:25:F9:43:D4:26:64:AF:C1
Authority key identifier: 83:F1:FF:E9:D3:34:E8:7F:F4:CD:75:58:DD:EF:35:2F:E6:DF:20:69
Certificate issuer: /CN=A919DFFA/serialNumber=83F1FFE9D334E87FF4CD7558DDEF352FE6DF2069
Certificate serial: 08BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_H_6dM06H_0zXVY3e81L-bfIGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.mft
Manifest number: 08A3
Signing time: Thu 04 Dec 2025 19:41:57 +0000
Manifest this update: Thu 04 Dec 2025 19:41:56 +0000
Manifest next update: Thu 11 Dec 2025 19:41:56 +0000
Files and hashes: 1: g_H_6dM06H_0zXVY3e81L-bfIGk.crl (hash: mPdlWdEUsSXNrbm5GxuylRWO90a1TDA3CgGcaqn1X0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.crl
rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_H_6dM06H_0zXVY3e81L-bfIGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:41:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2235 (0x8bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DFFA, serialNumber=83F1FFE9D334E87FF4CD7558DDEF352FE6DF2069
Validity
Not Before: Dec 4 19:41:56 2025 GMT
Not After : Dec 11 19:41:56 2025 GMT
Subject: CN=6931e404-e22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:34:f4:67:70:8a:db:8e:56:45:af:2b:63:34:
01:57:23:7e:8f:dd:c2:b6:59:d6:b6:23:2d:74:93:
22:ac:c4:bf:ec:d4:9a:8d:20:8a:aa:aa:71:7c:60:
a5:02:3f:fb:5f:e9:21:06:fc:d4:05:e2:7d:0d:6f:
a2:e6:89:0b:88:c1:9c:bd:ec:4c:1f:11:79:3e:e8:
b4:dd:55:87:c6:b0:53:b8:ed:df:1e:b5:d6:2b:c3:
c3:fb:ec:bd:99:e1:bb:89:59:b3:e0:9a:72:b4:cb:
4e:42:cd:5f:5d:06:16:18:9a:be:e3:a2:00:4c:74:
7a:b7:d6:6f:cf:5d:ff:27:ae:24:55:d8:91:ae:cd:
33:c6:ff:c3:9c:1e:58:3a:ca:e3:fc:ad:27:72:d9:
3e:32:69:a5:e5:3b:82:17:dd:59:5b:a9:7e:d0:00:
0b:56:4d:72:e1:a2:1e:e8:17:80:6e:7f:87:8d:c4:
d4:7a:16:03:1c:68:b2:04:f1:ad:1c:e4:a0:f0:fc:
0e:9a:90:d4:c7:ce:7f:f5:70:95:55:50:fc:09:69:
75:cf:d6:af:c5:20:ea:63:44:a8:af:4b:11:10:7a:
5c:f0:8e:52:c9:6e:d1:8a:86:a5:c1:15:42:f0:dc:
7c:51:29:56:c2:dd:0a:8f:28:35:93:a1:ba:78:76:
17:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:94:2C:21:65:3D:93:63:30:CE:FF:FE:25:F9:43:D4:26:64:AF:C1
X509v3 Authority Key Identifier:
keyid:83:F1:FF:E9:D3:34:E8:7F:F4:CD:75:58:DD:EF:35:2F:E6:DF:20:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_H_6dM06H_0zXVY3e81L-bfIGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:73:34:ec:cc:71:47:0b:0a:8d:df:aa:53:fc:07:99:d6:01:
28:73:d8:f6:70:fa:6b:15:82:f9:3b:43:6e:a1:27:44:5f:ab:
2f:07:0d:dd:33:03:0d:ff:fb:2a:3d:c3:ad:31:fa:13:ea:6a:
59:fd:b7:4d:74:c1:f8:17:19:05:8c:36:32:77:98:17:dc:a4:
cf:a1:d1:83:4f:af:09:47:b0:4d:b6:4c:26:b0:f9:dc:28:e1:
1c:cb:f6:64:d7:75:a0:99:68:bb:5e:d7:64:b1:bd:46:62:3b:
43:21:85:6f:29:41:c9:c3:c6:ec:f2:12:6c:91:85:27:e0:49:
83:8d:b5:16:73:8b:56:c1:1c:54:56:c6:bc:7d:0b:76:59:69:
42:34:bb:3c:4f:c8:2a:88:7e:77:85:14:6e:4d:2b:92:34:fe:
03:1a:9a:46:61:de:53:59:3e:60:6a:20:8d:73:35:65:89:4d:
fa:cd:9c:0d:a0:7f:91:b3:0e:52:0c:69:0e:78:f9:46:45:7c:
ef:9b:36:85:8f:34:63:e8:d3:88:63:7e:c5:5d:7f:9d:9c:c5:
c7:59:76:45:81:49:23:50:22:ba:44:6a:db:89:cb:24:b7:a4:
88:45:eb:d6:bc:fe:90:ee:8c:84:2d:4b:f3:e6:39:f1:41:d0:
21:14:f1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:20:58 2025 by rpki-client