This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
File: glI0BAdpP4vHwTIlP0BsBORndvY.mft (raw, json)
Hash identifier: rMiSTsrJGR+6F2MyjrTsGF+C37ktYKZA9F7hCaMZ2q4=
Subject key identifier: 94:81:FE:AE:99:DF:FB:A5:AC:7E:B5:D0:B8:41:C5:2A:D3:34:59:58
Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
Certificate issuer: /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Certificate serial: 0255
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
Manifest number: 024E
Signing time: Fri 05 Dec 2025 00:04:23 +0000
Manifest this update: Fri 05 Dec 2025 00:04:23 +0000
Manifest next update: Fri 12 Dec 2025 00:04:23 +0000
Files and hashes: 1: glI0BAdpP4vHwTIlP0BsBORndvY.crl (hash: Z3E+M0C+ZW9eMqUtCwG+qGYCcKri56kCMtMy2tmQlJo=)
2: 81055570A5C611F09009BB3EC4F9AE02.roa (hash: xUB5DKXsTfrAbKycpb1RdFbgULYORlNEi/ZjsO+ThHM=)
3: 5382BB6AA5C611F0900E7F3EC4F9AE02.roa (hash: +F3Yx2THIPF6j23PtMP7M18kfvkZfsgfMjQvz9d74hQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl
rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Validity
Not Before: Dec 5 00:04:23 2025 GMT
Not After : Dec 12 00:04:23 2025 GMT
Subject: CN=69322187-cd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:33:bc:db:19:1d:8d:d5:e0:9f:ab:18:81:
dd:c8:d9:e2:d4:dd:a5:be:53:36:7a:a4:ff:20:be:
d5:53:07:42:a3:ac:a8:95:27:06:45:17:56:c6:ef:
6c:39:5f:98:dd:76:b9:20:cf:d5:e6:45:4d:e3:b1:
5f:29:50:65:14:df:a3:0f:9b:cb:84:aa:55:e3:67:
a2:2d:a6:82:cc:cb:28:5c:1c:ac:89:9a:a6:a1:a8:
57:21:82:05:b4:19:da:cc:57:bc:ea:c9:d8:d6:7f:
13:88:28:2e:a9:0d:00:b3:9c:f5:88:a3:65:06:a1:
95:9f:1f:81:a9:da:56:46:c9:0b:77:d6:10:0d:29:
1e:55:8b:00:bd:31:e7:94:df:d8:08:a7:03:31:d7:
39:6a:76:6e:85:ac:ea:fc:55:8c:5a:b4:9e:e1:19:
20:26:df:0e:aa:a2:2e:e7:b2:34:b4:b5:31:2d:ee:
cb:34:a2:ae:70:37:46:b4:d8:82:53:3a:d3:0c:40:
00:04:2e:94:dc:dd:e0:0b:0a:57:57:58:35:19:48:
98:9f:eb:2d:d0:a1:2f:cd:36:67:8d:d3:84:3a:53:
9c:f9:24:e1:93:d4:82:61:3d:87:71:fd:31:30:b7:
f6:85:59:74:12:32:e8:86:8a:3f:d9:2b:08:57:4a:
1a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:81:FE:AE:99:DF:FB:A5:AC:7E:B5:D0:B8:41:C5:2A:D3:34:59:58
X509v3 Authority Key Identifier:
keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:aa:73:cc:b5:55:dd:3b:da:90:7b:f4:12:dc:f1:07:94:58:
33:50:b3:46:ea:c2:1e:a9:ae:eb:59:c2:61:cf:9b:8b:85:a0:
98:9c:7a:d4:dc:6b:37:e7:9d:34:c6:55:b1:b7:a5:e9:f4:ca:
43:b5:e8:b1:95:8f:65:b8:12:26:07:01:41:a9:2c:19:fd:ab:
78:a4:08:7c:57:c6:f4:1b:a9:c1:82:56:bc:e1:5d:eb:48:3b:
ce:5a:45:19:34:62:0a:6a:ed:17:04:1c:d2:21:bf:02:b6:e6:
b0:c3:b7:f6:5e:2b:fd:90:aa:e0:d1:ff:1c:1c:b5:53:d4:65:
5a:0f:29:6d:b0:ca:43:02:6b:56:80:ff:1c:68:bf:3e:23:1c:
ce:d9:e8:fa:44:ce:47:f6:90:09:c2:40:7e:4d:bc:5f:c8:45:
7e:cc:4f:25:36:97:1a:5a:e5:fc:63:c0:62:98:e0:76:fb:29:
1b:45:bc:58:85:72:2f:ca:f8:62:b7:06:a9:6e:8c:0a:d8:f0:
76:77:3f:21:46:bd:66:7d:18:f6:0e:fb:f4:48:eb:07:cb:8e:
32:d0:98:c6:80:3f:f6:94:84:e6:27:44:5c:40:bc:19:eb:51:
52:4d:0e:12:93:60:1b:26:02:e0:23:cc:4e:2d:d6:52:53:71:
9a:33:9d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:34 2025 by rpki-client