This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
File: Gu-1HeyOsHlip15FnOIQp0ABBPs.mft (raw, json)
Hash identifier: NX02Ov6cYie4rpDgY1A88p/2NzssZbp/2nr15rRT3vU=
Subject key identifier: D4:2D:2B:B4:DB:0D:C2:83:C5:D2:87:9B:87:CA:FC:5E:3D:84:E7:30
Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB
Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB
Certificate serial: 34FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
Manifest number: 34EE
Signing time: Sat 06 Dec 2025 14:36:48 +0000
Manifest this update: Sat 06 Dec 2025 14:36:48 +0000
Manifest next update: Sat 13 Dec 2025 14:36:48 +0000
Files and hashes: 1: Gu-1HeyOsHlip15FnOIQp0ABBPs.crl (hash: iXPGGMe5Ca/3PBc8g1gQCshEA4nikRWUzqOC9B514S8=)
2: 232E8BFEFEA411EDBC673B4BC4F9AE02.roa (hash: f0s5M+jY8Uq/Wkuq+EBQtTt5fdf658GNQxqS9tNI1Ho=)
3: 229F27ACFEA411EDBC673B4BC4F9AE02.roa (hash: XxjtUd/hL+kIKHkOi4rgqBJdsfuyYhtMzuXgGEu/n3U=)
4: 220E32CEFEA411EDBC673B4BC4F9AE02.roa (hash: amc5JKgDCW0FwP7fqve5MmmvPdX66HObowu8LFy8/hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl
rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:36:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13562 (0x34fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3DAE, serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB
Validity
Not Before: Dec 6 14:36:48 2025 GMT
Not After : Dec 13 14:36:48 2025 GMT
Subject: CN=69343f80-7fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:58:26:be:89:e7:3b:b5:b5:36:26:ce:58:cd:
5b:95:57:b1:7f:32:f5:e2:1f:b6:38:f2:2c:30:d1:
97:c6:53:52:fc:ae:8b:36:4d:a6:b7:54:4e:cd:0a:
8d:e5:fc:09:1a:a6:51:f6:f8:78:98:ff:75:3b:5a:
89:fa:a9:cd:28:e9:f0:5b:55:b6:e7:a3:a0:f3:e5:
28:12:07:57:fd:e9:90:1b:7c:52:8f:33:6d:9d:05:
ea:ba:2c:a5:10:5a:dd:9a:da:ef:12:97:42:38:d3:
19:dc:e0:66:ce:df:ce:59:01:af:36:32:c4:38:d7:
9e:ac:a8:a5:f0:93:76:00:cd:4d:b9:40:f9:8c:81:
5b:7a:17:8b:62:ed:fd:4b:ff:c2:bd:e7:c1:77:ff:
5c:bd:be:f3:41:54:1b:37:41:7f:1a:4a:86:fb:d8:
3c:33:e9:be:2c:e2:9e:dc:33:91:8b:cc:d0:d6:90:
a7:8e:91:43:83:ca:b2:be:1e:3f:17:35:09:5a:89:
67:eb:e2:a1:72:20:47:dc:61:de:99:9c:4c:31:39:
22:95:82:e4:98:c5:62:06:ca:38:ff:ca:4c:02:19:
a3:71:a2:78:d1:9f:63:ab:70:34:3b:35:ff:68:af:
e0:da:fb:0e:ab:a1:c8:a8:99:c8:04:9e:3e:8e:29:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2D:2B:B4:DB:0D:C2:83:C5:D2:87:9B:87:CA:FC:5E:3D:84:E7:30
X509v3 Authority Key Identifier:
keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:59:dd:e3:b2:7d:ee:72:c6:a1:15:f3:73:b9:09:21:d6:e4:
3a:6b:65:37:38:f2:c0:5f:34:0a:9b:a8:16:e4:b8:fb:e6:30:
77:a0:75:63:b2:ab:a9:9d:c9:9a:70:95:fc:68:2c:4f:f9:e9:
53:fa:33:d4:67:d1:9d:66:ea:e9:14:66:6d:33:e9:b5:61:dd:
a7:75:fa:c8:8d:68:9d:dd:7d:14:e0:6b:42:73:f0:84:08:5b:
ca:9d:80:24:c4:9b:9b:c1:1e:9d:6d:d4:a2:cd:ec:a8:bb:71:
25:f0:f3:ac:3f:3f:7c:d3:48:94:b3:d1:99:39:fa:82:12:79:
3b:c5:bf:6c:42:be:1d:07:5a:0d:2c:ad:f5:e5:18:7f:25:6b:
c4:73:e9:36:ad:61:4b:4f:a4:0a:74:39:0d:e7:b3:4d:99:75:
9f:fc:b8:82:23:3a:11:bf:64:ae:42:da:a4:45:00:57:73:b9:
f3:4c:0c:c4:44:44:ab:22:86:bc:f9:67:09:2d:f7:a5:1c:b9:
89:ab:e7:2e:71:d1:fd:25:8a:5c:f7:5f:ae:44:b8:e8:ea:26:
7b:0d:e8:00:5e:8c:f4:7d:c6:c9:c4:fe:dd:d5:7f:97:fd:c0:
cf:a9:0e:2c:07:c7:33:d8:e5:73:6f:f9:8b:2a:2e:0a:a0:92:
c6:b4:6a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:11:47 2025 by rpki-client