This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
File: G1Zt71944xm_wNFADedV4mSoK7w.mft (raw, json)
Hash identifier: hNOQNN1/3ToaIpsolQBaNbh6VmtnL0SeDcMpIG2hS5A=
Subject key identifier: AF:1F:C7:D3:85:4C:A5:86:EC:87:B8:46:E2:E5:1D:0F:67:48:AE:AB
Authority key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Certificate issuer: /CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Certificate serial: 0946
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
Manifest number: 0934
Signing time: Thu 04 Dec 2025 19:24:58 +0000
Manifest this update: Thu 04 Dec 2025 19:24:57 +0000
Manifest next update: Thu 11 Dec 2025 19:24:57 +0000
Files and hashes: 1: G1Zt71944xm_wNFADedV4mSoK7w.crl (hash: VdcA0LNWTn336N0v4e/S7kqVWqyu1xwowRwmNVBNkGU=)
2: 28D36892B09411EAA964465EC4F9AE02.roa (hash: UfAX/Fj0JrJleqfsMcMBvDOpsY+oWvOczsjEMDPs474=)
3: 2979BC38B09411EAA964465EC4F9AE02.roa (hash: NUYwvd8XbnzOJ3mNMJWywPbsBYEeOEcLsau7uMQ+orY=)
4: AB659244056211EBAE3DBC4CC4F9AE02.roa (hash: Ptv1d6l4zCzsDfAGIqW3ARxnruAqZbwm3s5WFQRyBpQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2374 (0x946)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C20AB, serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Validity
Not Before: Dec 4 19:24:57 2025 GMT
Not After : Dec 11 19:24:57 2025 GMT
Subject: CN=6931e00a-fd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:d3:6a:24:6b:bf:e5:35:e0:c6:a1:45:32:
bd:9c:68:dd:da:41:96:50:72:19:aa:1a:88:51:cb:
e2:e0:0f:ae:74:96:b1:dc:c1:14:35:c7:69:96:25:
be:e7:c5:e0:22:86:13:05:70:8a:ce:12:c4:f5:0b:
da:1f:25:e6:da:ff:53:c1:f3:94:8f:07:b6:5e:33:
70:b3:db:2e:2f:d3:e6:63:79:8b:74:92:b4:66:bd:
16:61:ec:bd:ad:ed:c4:86:d2:53:2f:ff:28:5e:f8:
8f:0e:0e:77:6c:84:cf:c9:c7:67:1f:0e:23:46:ba:
99:f6:71:e5:4c:c2:55:45:e1:6f:5e:50:6d:5d:ff:
a3:98:70:29:77:52:01:85:9c:66:f9:ee:7f:d4:b1:
b4:cc:fd:7c:39:68:45:45:7b:8f:03:8c:1e:ed:f8:
81:ec:4b:54:31:e2:16:23:c7:66:4a:8f:f6:60:6a:
95:7f:90:5e:a0:f8:07:39:97:54:35:36:43:74:e1:
38:c7:ec:91:3c:36:33:c1:5d:63:2e:57:6f:f6:f0:
49:b7:80:e3:6c:95:69:25:46:bd:13:66:31:31:bf:
02:c0:6b:93:2d:27:6e:fb:cc:fc:e4:d8:4f:a1:a0:
56:ce:d0:08:b6:dd:76:dc:91:0d:c1:13:12:a5:19:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1F:C7:D3:85:4C:A5:86:EC:87:B8:46:E2:E5:1D:0F:67:48:AE:AB
X509v3 Authority Key Identifier:
keyid:1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:43:7f:e5:62:5f:47:b5:b9:00:bd:a5:41:c6:a2:58:f0:fe:
f9:c6:a0:c1:3f:70:fd:68:cf:f9:b7:1b:1d:f4:f3:46:6b:fa:
34:b2:04:84:ae:16:94:56:96:e2:10:56:57:fb:76:00:e3:78:
32:4d:9e:f3:83:c8:72:a0:8d:17:dc:8d:9d:dd:e0:af:07:05:
0a:51:91:d2:98:0d:f7:e6:7d:c8:42:0c:21:30:42:72:65:e4:
c8:c4:76:3a:ee:31:80:99:b7:ed:30:d4:e5:a5:75:7f:80:62:
ab:cc:e1:f4:ae:a0:47:dc:b7:a1:e5:74:39:32:64:11:10:4a:
bb:98:b1:1a:65:45:34:2d:be:bd:cb:31:f0:a1:a3:a6:b3:4c:
c5:a4:15:b9:e8:15:25:68:22:d4:c7:73:ee:a3:2f:d9:df:89:
30:fd:a2:9f:7b:6b:24:3f:d2:7e:46:cf:bb:8b:d9:98:01:7f:
96:2d:33:76:b5:d3:95:52:2b:7f:55:8d:92:31:a0:12:38:56:
07:4e:0c:24:7d:a9:46:47:96:e5:3c:d0:ef:ca:02:d2:a0:c3:
ba:f2:4b:5d:1d:af:17:c4:ff:1d:9b:72:c3:b8:6f:a3:d3:69:
f3:9e:68:1a:6d:9d:06:50:59:fe:21:ac:dc:2d:0a:bb:20:dd:
79:27:4e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:30:01 2025 by rpki-client