This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
File: gHwED6kB5dhpWmU03mbD1qC_vMU.mft (raw, json)
Hash identifier: sEbbSHnj4PYI3RAie+4xi0vik11ZNajmkuWmdnJJQP0=
Subject key identifier: 36:C6:3F:4C:6E:A0:5B:13:3E:DF:D5:67:39:5A:08:5D:BB:1C:9D:8C
Authority key identifier: 80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5
Certificate issuer: /CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5
Certificate serial: 012E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
Manifest number: 0128
Signing time: Fri 05 Dec 2025 02:45:46 +0000
Manifest this update: Fri 05 Dec 2025 02:45:46 +0000
Manifest next update: Fri 12 Dec 2025 02:45:46 +0000
Files and hashes: 1: gHwED6kB5dhpWmU03mbD1qC_vMU.crl (hash: gjnHBhPg3L6bkGo0UXv9Xe2u8tH+D2Ze/myxjo498pE=)
2: 7D9F83FE10FA11EFADBBC431C4F9AE02.roa (hash: kRUKk6YhznpQLf70+sbW+4rHruxwNLVLHD+xyjgrv/8=)
3: A697738410FA11EF9A068536C4F9AE02.roa (hash: GgKSSa0DZkr/DMOZ+SWiE+267xJNKIhRXUimhakcIXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl
rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:45:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC3F1, serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5
Validity
Not Before: Dec 5 02:45:46 2025 GMT
Not After : Dec 12 02:45:46 2025 GMT
Subject: CN=6932475a-1dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:9c:5a:16:f8:bb:6f:ff:67:99:e2:99:90:
7f:f2:e5:36:cf:73:14:ab:c3:fd:83:aa:d7:42:2a:
0e:5f:a2:08:e3:62:64:2a:6c:ed:e1:1d:b6:48:94:
51:12:a8:e3:c7:19:02:89:d7:7d:f1:bf:91:29:5d:
b1:b3:f6:64:8b:eb:df:82:a0:aa:fe:d2:8c:e4:29:
7a:f0:75:99:7a:7b:e2:2f:3c:19:99:d0:1a:81:6b:
b7:ed:4c:63:0f:4d:e0:a3:fd:eb:42:0f:e3:5e:73:
f9:56:7d:96:c7:dc:4b:71:86:11:91:e6:33:08:30:
0f:bc:64:77:ee:01:89:cd:24:5b:df:e7:26:93:8e:
77:c3:3e:fc:47:bc:92:98:3e:6d:5e:60:f2:54:36:
cf:75:a4:4f:a2:83:02:9b:78:91:d9:cb:5c:9f:68:
13:29:a0:43:84:40:6f:7b:28:1e:ea:84:a9:ed:59:
c5:37:15:1a:5f:7d:0a:e8:7e:21:d5:40:5e:da:df:
60:33:52:f0:e9:d8:27:ab:e7:bb:5e:8b:25:b2:87:
15:9e:6d:19:8f:85:6a:c6:6c:8e:d7:2f:01:7c:74:
60:90:56:bc:5b:c0:5d:c8:d9:be:01:bd:67:15:05:
16:50:ac:1a:cc:2e:9b:c8:c6:73:0a:22:45:02:d9:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C6:3F:4C:6E:A0:5B:13:3E:DF:D5:67:39:5A:08:5D:BB:1C:9D:8C
X509v3 Authority Key Identifier:
keyid:80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:c9:cd:ae:41:90:33:6a:53:ce:df:98:3a:e9:cf:b8:4e:ac:
cc:14:67:05:99:08:be:a9:15:7c:c7:d3:f3:fc:59:74:2a:cb:
e9:0f:46:3b:b0:d5:60:49:d0:18:dc:0d:a5:3a:e4:e0:c5:90:
5d:40:d8:da:1f:bd:cc:8a:04:dc:58:a6:46:56:09:0e:89:ba:
8f:94:1e:5a:f9:5b:de:d4:0d:59:ee:35:9a:c9:71:2d:26:74:
d5:77:8a:3b:98:6a:3a:76:d8:5d:71:60:7c:6c:ae:27:f9:07:
dc:79:2d:f8:c7:0e:f8:eb:95:61:3b:cb:d1:0f:0d:34:96:a3:
66:7b:5e:50:54:52:75:04:2a:55:71:ee:a6:e3:7c:e4:e5:1b:
57:d0:0e:f1:c2:27:f9:eb:a3:ad:7c:bf:5c:0a:6a:90:67:7c:
34:dd:4e:4e:f7:47:b9:40:3d:40:be:ac:ff:28:00:1f:7f:22:
58:6c:cc:ed:1b:16:1d:3e:89:e4:4b:3d:59:e8:fe:5a:8a:a6:
99:f6:f1:e9:31:82:b4:0b:7e:56:f3:a5:bf:6b:8f:90:6f:87:
50:91:dc:b3:ae:80:d3:33:ae:5a:a1:50:92:10:cc:d9:76:1d:
2b:ef:2b:dd:5a:1d:d2:60:74:bf:51:c6:84:44:59:30:2b:a0:
04:10:15:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:19:08 2025 by rpki-client