This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft
File: GumvOruKc-8m-TT5izpsq5UXrKY.mft (raw, json)
Hash identifier: oWd/8CsDCKp987NmCPjbpO7sMnLrOpmIOdlTD+bAgCA=
Subject key identifier: 11:1B:AB:36:7E:74:BB:CE:78:CE:1E:70:CF:63:5A:E8:4F:5A:B4:C1
Authority key identifier: 1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6
Certificate issuer: /CN=A91D194C/serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6
Certificate serial: 0227
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft
Manifest number: 0223
Signing time: Sun 07 Dec 2025 00:38:09 +0000
Manifest this update: Sun 07 Dec 2025 00:38:08 +0000
Manifest next update: Sun 14 Dec 2025 00:38:08 +0000
Files and hashes: 1: GumvOruKc-8m-TT5izpsq5UXrKY.crl (hash: pxLECV1dKOO+49qHDOIPbHNrUA2358R/jCOCFisPy8s=)
2: 7370EDA48A8D11ED942E6F74C4F9AE02.roa (hash: ZsCxHaQ7s0gEoQ1Y8qF+doxJ6vZnHqWDBkgsvdeKdhk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl
rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D194C, serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6
Validity
Not Before: Dec 7 00:38:08 2025 GMT
Not After : Dec 14 00:38:08 2025 GMT
Subject: CN=6934cc70-7777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:d3:fc:4a:c6:ae:ca:a0:44:01:9f:e5:b6:
6b:14:e3:4b:24:17:1c:85:cf:78:72:3b:83:3e:33:
49:25:33:cb:fd:c5:7a:79:72:bc:a5:0b:b2:f0:7f:
0e:6b:65:70:72:45:5e:c6:f8:05:46:5e:29:ce:57:
50:5e:4a:b3:fe:62:3d:57:7c:e7:34:47:0e:14:b2:
8e:d1:f1:80:aa:99:ab:2d:5a:70:5e:dc:76:e0:aa:
9b:f6:74:dd:d2:90:74:98:ec:5a:46:6e:2e:82:96:
93:0c:fc:09:b6:28:cf:3d:81:81:77:f1:1b:6d:58:
86:ae:5e:0d:6f:1a:0f:bc:97:40:7b:cb:28:8b:a9:
2a:76:c5:aa:cb:f5:19:6a:a6:93:ff:2a:41:3c:1e:
16:85:d7:e3:73:1a:e3:b6:df:e9:71:72:80:a9:cf:
80:a2:c9:d9:9f:1a:8c:2c:c3:c8:84:13:ed:84:01:
16:66:7c:d8:d7:fb:19:e3:24:43:d8:17:54:93:19:
4c:f2:e5:7b:ef:8b:9d:0b:7d:8b:1c:22:82:0a:15:
70:65:37:33:05:b3:d2:74:5a:52:27:56:a1:0a:0a:
e1:59:a5:7d:1d:43:7a:2e:96:31:17:9c:4f:03:d6:
70:d4:ab:e7:bd:b5:34:c8:b6:11:0b:47:0a:20:c6:
18:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1B:AB:36:7E:74:BB:CE:78:CE:1E:70:CF:63:5A:E8:4F:5A:B4:C1
X509v3 Authority Key Identifier:
keyid:1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:eb:e0:92:72:aa:23:46:1f:f2:f0:b4:64:3b:dc:93:81:c0:
f3:13:7b:61:05:bb:00:b8:cd:de:7c:fc:1a:07:8f:0f:62:0a:
55:0e:aa:46:ac:9b:40:76:bf:77:53:13:31:0e:dd:67:21:a8:
03:b8:9a:d3:fd:e5:5f:e9:f7:9e:b6:62:53:2f:f6:ab:be:f9:
a2:b8:ea:61:55:ae:87:83:49:bf:dc:f0:7c:09:4e:53:64:04:
67:4b:f7:98:68:06:d9:d7:8a:77:1d:0d:0b:c8:d7:ea:be:04:
65:c3:92:73:d8:f6:0e:2d:e0:3a:61:b7:b9:7f:b0:16:57:57:
66:45:c9:be:32:80:22:d7:5c:d8:8d:fe:52:61:02:a7:4b:c4:
a2:da:63:9d:4d:b1:5f:da:91:7b:31:38:ee:69:4d:46:5c:80:
af:20:67:88:7f:4e:9a:80:01:31:3c:a1:c6:21:ad:f0:fa:70:
51:23:8b:08:f8:f3:bb:ee:7e:e5:48:d3:f4:1e:46:9c:05:dd:
d8:d6:a3:e7:6e:96:0c:d9:ca:c8:91:60:2c:57:f4:94:36:d8:
f6:0e:f9:2a:3d:cb:c2:43:52:0f:10:a1:fe:b3:a9:40:b0:49:
8f:6d:88:de:fa:a4:d3:95:be:35:b9:a4:e5:14:5e:5c:49:0c:
47:8e:19:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:30:13 2025 by rpki-client