This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft
File: gaOMiwlmciXuBPc67PoJWQ0fQUw.mft (raw, json)
Hash identifier: wWrDhjYZyEOM8wVcIVEWhdo4JS3DvuiP4ruYSTi6BFc=
Subject key identifier: E3:BB:4E:19:3A:66:3E:1C:64:F3:38:AA:EC:B8:54:02:42:2E:6B:50
Authority key identifier: 81:A3:8C:8B:09:66:72:25:EE:04:F7:3A:EC:FA:09:59:0D:1F:41:4C
Certificate issuer: /CN=A91CE35F/serialNumber=81A38C8B09667225EE04F73AECFA09590D1F414C
Certificate serial: 031F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft
Manifest number: 0316
Signing time: Thu 04 Dec 2025 23:31:54 +0000
Manifest this update: Thu 04 Dec 2025 23:31:53 +0000
Manifest next update: Thu 11 Dec 2025 23:31:53 +0000
Files and hashes: 1: gaOMiwlmciXuBPc67PoJWQ0fQUw.crl (hash: 0+dRtgcV0i9IhsByzMGdoAiVf6MqgpdnCGJyJJAK+Wo=)
2: 3785A958EF4711EF906AD167C4F9AE02.roa (hash: Xop4pF7LmPiWj4qFmNK9jXxRuc+SVOdI5Rsywj/dhPQ=)
3: 464B4494F7D911EF8EA69265C4F9AE02.roa (hash: kw7ZHY1axLvj55a+YPxHpHPEy1diN3j6tF6SRdvVlY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.crl
rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 799 (0x31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE35F, serialNumber=81A38C8B09667225EE04F73AECFA09590D1F414C
Validity
Not Before: Dec 4 23:31:53 2025 GMT
Not After : Dec 11 23:31:53 2025 GMT
Subject: CN=693219e9-ae47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:09:99:2f:9a:68:21:71:e1:d8:26:ed:ec:
53:34:dc:e4:ad:db:f4:2f:9f:03:0e:43:5d:54:85:
fa:40:f8:b5:68:12:5a:34:4b:a4:73:c8:f8:5b:53:
cc:83:66:d7:e3:ea:25:ff:04:e8:c1:ea:73:67:ed:
4a:89:cd:59:38:da:8b:2b:4a:42:57:11:d5:92:85:
b5:81:01:de:02:4f:74:74:d0:ad:0f:4b:9f:4b:a9:
87:a0:34:02:3c:59:17:da:8f:69:e0:44:6e:69:7b:
c8:27:d6:94:df:78:6f:f6:d9:a8:85:ae:71:2d:a2:
87:d9:d5:73:66:dd:a3:60:6f:8f:12:d3:cf:6e:fd:
7e:db:09:a3:c5:07:f0:1e:de:73:d8:f1:f8:bf:53:
16:08:6c:0e:d4:fc:91:05:63:88:d4:e5:a8:1f:cd:
84:a3:b6:84:ea:53:0c:e2:be:a1:59:c6:6c:6d:1f:
58:85:2c:09:be:54:12:56:b8:f8:81:fb:1f:c2:2e:
d5:55:ea:4f:a2:df:95:1f:d5:22:bc:c8:5b:88:84:
f3:eb:d0:fb:c6:97:f4:07:44:4a:83:fc:77:e8:c7:
af:8a:45:d7:ec:c7:9f:32:ac:f8:6e:eb:b5:8f:c3:
06:d3:60:dc:2d:be:50:9f:80:c6:04:a6:2f:a9:63:
e3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BB:4E:19:3A:66:3E:1C:64:F3:38:AA:EC:B8:54:02:42:2E:6B:50
X509v3 Authority Key Identifier:
keyid:81:A3:8C:8B:09:66:72:25:EE:04:F7:3A:EC:FA:09:59:0D:1F:41:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dc:d2:4b:29:6b:f8:e8:95:16:9c:1e:58:4b:ed:eb:99:c5:
a7:33:44:18:55:ef:dc:9f:66:b7:67:76:ab:89:b2:7f:46:79:
73:af:5f:d6:b0:ab:f5:db:5e:06:a3:63:2a:cf:8b:74:6a:79:
fc:fb:1f:59:fb:70:63:d5:9b:53:cd:04:0a:a3:b4:9e:c4:22:
da:0c:60:94:20:8a:45:f7:0a:f4:49:24:62:77:a6:18:d9:4e:
d6:9a:20:4d:8e:04:94:68:37:8c:b7:bd:64:16:3f:e2:43:af:
01:c4:5e:92:bf:85:07:96:7a:ee:8d:14:d4:17:08:49:a3:03:
a2:18:bd:dc:f1:bc:a0:3a:d4:d8:b9:0d:b8:6a:fd:a2:f2:b7:
23:d0:c6:e5:51:22:92:bb:71:72:c5:48:fc:0c:00:99:a0:45:
aa:51:5b:99:3f:90:43:e2:ef:fa:6d:26:5a:80:a5:a7:7a:e4:
9c:33:0a:19:b1:04:7e:3b:e9:a9:56:89:ea:8f:1b:7b:1f:70:
26:5d:ca:6f:1c:02:2f:c3:32:e3:6d:a2:d5:52:70:86:6a:07:
3a:5a:b3:25:d6:14:e6:db:39:5c:89:5e:54:43:95:28:c6:33:
81:6e:23:ac:1f:5b:a2:13:b9:65:3f:a2:9b:cb:4b:84:57:3e:
e7:6d:95:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:20:57 2025 by rpki-client