This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
File: gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft (raw, json)
Hash identifier: jaa2Yo53WP7wRqpPzVJGdn5WQA6W/AF0kbnnNeQuCeU=
Subject key identifier: 58:18:98:66:4C:2B:57:E9:62:55:FB:2F:79:4C:53:51:0B:30:9D:C2
Authority key identifier: 80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB
Certificate issuer: /CN=A91D959F/serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
Certificate serial: 07DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
Manifest number: 07D9
Signing time: Thu 04 Dec 2025 20:13:27 +0000
Manifest this update: Thu 04 Dec 2025 20:13:27 +0000
Manifest next update: Thu 11 Dec 2025 20:13:27 +0000
Files and hashes: 1: gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl (hash: tegefwdLEHW1CD3mPr22x2XbHrX7FZFShVng7gQedrw=)
2: F75AEA8A13F111EB950DBC4EC4F9AE02.roa (hash: +QmSQmsTCCd4yyTjh5mf70wyqAWPCaGTrX6lQ4meIO8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl
rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2015 (0x7df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D959F, serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
Validity
Not Before: Dec 4 20:13:27 2025 GMT
Not After : Dec 11 20:13:27 2025 GMT
Subject: CN=6931eb67-fbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2e:0b:e3:b6:be:3c:11:6d:71:50:1a:a3:a7:
1c:da:cb:b1:2b:60:92:a3:8f:81:b0:39:33:07:e2:
b8:0d:77:5f:4d:0e:32:0c:42:0a:05:6c:2e:7e:1d:
39:f8:3f:23:78:16:f0:f0:98:8c:af:5f:50:eb:ff:
0b:70:c0:3b:2e:73:fa:97:c2:8f:1e:67:4c:58:f9:
25:8b:f0:9e:56:b1:85:56:f0:05:3b:73:03:64:ca:
7a:ba:68:f0:69:89:6d:ce:de:54:53:47:37:cb:d1:
59:c7:89:fd:39:d8:6e:58:34:72:cf:f4:6c:bf:f6:
a3:96:e5:d1:60:e7:7a:cf:71:75:8d:99:2b:38:d4:
b3:28:30:0a:51:bb:31:a9:30:5f:34:e5:36:74:95:
b9:7f:e1:99:1b:df:7f:1d:89:b1:85:92:4b:e0:f2:
11:6a:06:47:7f:65:36:4a:67:06:38:ff:73:91:01:
f6:15:46:b7:3f:d3:69:99:31:94:61:ff:64:a8:e3:
77:bc:bb:90:15:d8:71:d3:58:69:c6:86:e8:eb:a9:
fd:70:33:45:59:f9:d2:f9:f7:48:9b:a9:39:e9:8a:
13:2f:4d:7e:33:cd:1a:df:14:2c:3b:83:7c:e0:ae:
f1:f9:b0:29:86:fe:75:8e:7f:8e:c0:22:9b:59:63:
6d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:18:98:66:4C:2B:57:E9:62:55:FB:2F:79:4C:53:51:0B:30:9D:C2
X509v3 Authority Key Identifier:
keyid:80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4f:4c:a9:5c:c0:13:2f:02:56:89:9f:a2:43:26:5a:42:74:
95:a0:d6:c5:94:e7:97:c3:a8:c1:e6:fb:67:12:51:e7:7b:77:
3d:bc:52:4e:5f:22:88:5c:2d:4c:d6:0a:f2:ef:1f:b8:63:9c:
97:e2:b1:2a:6e:d6:61:7b:f8:1a:88:70:47:99:ba:ac:af:69:
cb:16:f1:49:49:6c:c2:b4:b7:21:c9:d4:27:76:25:c3:d6:c7:
e2:83:9c:88:e0:4b:a2:f2:42:a2:5f:c7:24:f5:e9:e0:c7:b7:
07:1a:68:e3:e7:9d:0b:ef:4e:85:ec:23:9c:36:4b:b5:7e:09:
a8:2d:f5:07:c3:ae:a9:24:db:eb:1a:fe:90:cd:b0:d0:65:1b:
ee:ff:d3:fb:05:a9:5e:aa:d3:b3:5c:77:4d:25:db:63:1c:51:
ec:13:99:d9:29:64:0f:9b:61:5e:18:aa:cf:89:2c:42:b4:92:
ac:73:20:d6:bc:2c:24:dd:81:d2:24:b3:d4:92:a1:65:8f:19:
64:ec:3c:10:88:91:c7:11:10:56:1e:89:1c:93:e1:68:23:f3:
d6:13:96:88:b5:4f:e2:3c:10:4c:46:e4:08:21:82:b2:99:5e:
97:96:d2:cb:ce:4f:03:ea:03:66:e8:0d:2d:72:25:a9:1a:e6:
28:e1:69:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDk1OUYxMTAvBgNVBAUTKDgwODQwMTcyM0MyRTQxODQ1NkFGOUEwRkIyNUY4QzMy
MUM0OTcwQ0IwHhcNMjUxMjA0MjAxMzI3WhcNMjUxMjExMjAxMzI3WjAYMRYwFAYD
VQQDEw02OTMxZWI2Ny1mYmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5S4L47a+PBFtcVAao6cc2suxK2CSo4+BsDkzB+K4DXdfTQ4yDEIKBWwufh05
+D8jeBbw8JiMr19Q6/8LcMA7LnP6l8KPHmdMWPkli/CeVrGFVvAFO3MDZMp6umjw
aYltzt5UU0c3y9FZx4n9OdhuWDRyz/Rsv/ajluXRYOd6z3F1jZkrONSzKDAKUbsx
qTBfNOU2dJW5f+GZG99/HYmxhZJL4PIRagZHf2U2SmcGOP9zkQH2FUa3P9NpmTGU
Yf9kqON3vLuQFdhx01hpxobo66n9cDNFWfnS+fdIm6k56YoTL01+M80a3xQsO4N8
4K7x+bAphv51jn+OwCKbWWNtmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgYmGZM
K1fpYlX7L3lMU1ELMJ3CMB8GA1UdIwQYMBaAFICEAXI8LkGEVq+aD7JfjDIcSXDL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTU5Ri8wNjgxMDBFQTEz
RjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZUldyNW9Qc2wtTU1oeEpj
TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dJUUJjand1UVlSV3I1b1BzbC1NTWh4SmNNcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OTU5Ri8wNjgxMDBFQTEzRjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZ
UldyNW9Qc2wtTU1oeEpjTXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCNT0ypXMATLwJWiZ+iQyZaQnSVoNbFlOeXw6jB5vtnElHne3c9vFJO
XyKIXC1M1gry7x+4Y5yX4rEqbtZhe/gaiHBHmbqsr2nLFvFJSWzCtLchydQndiXD
1sfig5yI4Eui8kKiX8ck9engx7cHGmjj550L706F7COcNku1fgmoLfUHw66pJNvr
Gv6QzbDQZRvu/9P7BaleqtOzXHdNJdtjHFHsE5nZKWQPm2FeGKrPiSxCtJKscyDW
vCwk3YHSJLPUkqFljxlk7DwQiJHHERBWHokck+FoI/PWE5aItU/iPBBMRuQIIYKy
mV6XltLLzk8D6gNm6A0tciWpGuYo4Wm1
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:40:11 2025 by rpki-client