This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
File: GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft (raw, json)
Hash identifier: 3PoGcbHIZkutmKS4fqj2lnfC6uXRgIqoD919KHb7uME=
Subject key identifier: EB:03:FC:6D:2C:35:CC:73:20:0A:67:6D:16:AD:D8:69:53:85:56:AE
Authority key identifier: 1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D
Certificate issuer: /CN=A91B0720/serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
Certificate serial: 0436
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
Manifest number: 0409
Signing time: Thu 04 Dec 2025 23:02:19 +0000
Manifest this update: Thu 04 Dec 2025 23:02:18 +0000
Manifest next update: Thu 11 Dec 2025 23:02:18 +0000
Files and hashes: 1: GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl (hash: yca/X1C1zt6deXQTIFoCO/oLoY2VQgtsP5Oeqqyl9/U=)
2: 3D3FCB5EC8F911EFA0603266C4F9AE02.roa (hash: 8BJmRiErzxldmGuPcVm3YUprnJm+HfKbTIGSnCrNI1I=)
3: F0223A56C8F711EFB2542D5FC4F9AE02.roa (hash: 56+jMhrwrBRvzV5zRD4LOd1TD+rLYKpQCMVw5apHuys=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl
rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1078 (0x436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0720, serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
Validity
Not Before: Dec 4 23:02:18 2025 GMT
Not After : Dec 11 23:02:18 2025 GMT
Subject: CN=693212fb-ec2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:8a:da:0a:2e:28:cf:d9:c3:d0:63:3b:38:
4e:93:f2:63:70:91:78:92:fc:11:1a:bd:e7:3b:41:
e8:e8:98:a8:38:c8:0f:7c:c3:56:d5:7b:95:68:a7:
de:31:ea:eb:88:5c:e6:29:f9:7c:9f:8e:0c:5c:ae:
b6:23:8e:85:1c:9c:41:79:3b:64:40:e2:6a:ee:bb:
e1:db:f0:41:ea:3a:17:3a:a0:54:58:07:ee:e1:2a:
db:b0:93:46:ac:28:57:87:de:05:72:fc:08:c3:bc:
18:1e:8b:4b:09:54:49:a7:19:12:1e:71:ea:d2:d0:
21:d9:ec:bc:c8:14:53:b0:e5:f5:27:59:fb:4f:41:
92:8d:df:29:cd:6f:a8:0f:80:65:62:ee:59:32:c6:
c0:40:a9:7d:80:de:6a:ea:9d:c7:41:41:b1:ca:7d:
c1:c3:e8:3d:75:07:ad:73:7e:87:a5:e8:ec:87:2c:
19:67:6f:3b:af:64:df:7d:84:3b:61:e1:70:dd:d1:
5f:8d:5f:1b:d8:23:00:37:0f:72:cb:49:98:e6:2b:
f7:3c:d6:e6:45:94:7b:03:d9:4e:5b:2c:68:42:73:
99:76:be:b6:58:e1:6a:45:10:c4:72:4e:bb:2a:37:
ca:3c:52:a8:fd:5d:99:a7:0b:9e:7c:19:d0:21:62:
dc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:03:FC:6D:2C:35:CC:73:20:0A:67:6D:16:AD:D8:69:53:85:56:AE
X509v3 Authority Key Identifier:
keyid:1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9d:bb:a2:5c:7c:52:e3:33:9e:23:9d:88:94:12:1d:57:0e:
86:e8:94:4b:99:ce:ba:fd:68:df:05:ff:d7:c3:00:e1:cf:fa:
11:f3:13:eb:b6:86:bc:14:5e:40:16:95:1e:09:ac:6c:a5:cc:
73:e0:40:3a:14:a7:93:27:04:1b:d8:21:cb:fe:6d:02:df:b3:
f7:dc:a5:0c:5f:f2:5f:28:31:c0:bb:b7:15:26:af:eb:f7:87:
68:0b:18:b9:fb:97:ca:71:aa:1a:a9:97:0e:08:65:56:ab:67:
d4:a6:d9:0e:ca:03:91:78:86:66:09:9f:d9:c3:8f:11:47:67:
ba:f1:4f:79:b9:08:1b:14:44:e0:a9:09:ea:58:e2:45:4c:87:
90:a0:24:55:1a:9f:d1:d2:a3:f5:02:0e:86:70:9b:94:2a:1c:
0d:de:aa:a5:aa:33:58:37:3d:47:27:96:53:c9:d1:46:08:2f:
be:ed:bd:63:6b:42:34:d9:27:03:69:27:54:03:df:d3:b6:8c:
79:88:12:37:82:ab:e2:bd:fc:7a:11:46:88:3a:52:e6:d7:91:
d4:f6:11:2a:95:70:cf:f4:39:6b:5c:87:54:d0:4f:f3:a1:1c:
17:f1:b1:e2:df:3f:b2:aa:27:5c:8e:c5:74:f7:42:4e:c4:72:
3f:cb:70:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:07 2025 by rpki-client