This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
File: GlXbYnoqLksmZy7g4ddRL4ZBToM.mft (raw, json)
Hash identifier: AaLTEPoUpQuV68V1iW/eikMBaNk8kz/3kD0+IQC2BVE=
Subject key identifier: 45:5D:B7:5D:AF:9B:84:22:3F:74:96:F1:5D:AE:27:ED:82:19:25:4E
Authority key identifier: 1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83
Certificate issuer: /CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83
Certificate serial: 351A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
Manifest number: 3504
Signing time: Thu 04 Dec 2025 14:32:39 +0000
Manifest this update: Thu 04 Dec 2025 14:32:39 +0000
Manifest next update: Thu 11 Dec 2025 14:32:39 +0000
Files and hashes: 1: GlXbYnoqLksmZy7g4ddRL4ZBToM.crl (hash: 8sAWwXcBJV8ZGbfp49XHoQk75f8aHH98/NlUbTUjyd0=)
2: AB9A0D320D6011EDA50DFA25C4F9AE02.roa (hash: 24BjWAqe2qRsQURE8DMBPNk7l6vHhbx1QB6qiJta7cs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl
rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 14:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13594 (0x351a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA898, serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83
Validity
Not Before: Dec 4 14:32:39 2025 GMT
Not After : Dec 11 14:32:39 2025 GMT
Subject: CN=69319b87-115d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:1a:fa:4b:41:ab:b7:39:a3:97:9a:c4:79:
a8:3d:4f:50:42:b4:e0:67:1e:26:9b:bc:4b:60:15:
5c:58:f2:55:ef:78:01:4a:56:da:eb:f5:8f:93:06:
37:89:f7:f4:55:8a:0d:61:8a:93:af:6e:64:63:1d:
76:16:bb:cd:2f:2b:d7:57:82:18:0a:ab:00:53:6b:
7e:1f:e3:09:01:32:4e:37:33:a7:cc:8f:de:3b:c2:
3f:89:4a:ad:73:7f:7e:68:e3:62:7b:b7:5d:87:15:
e5:bb:1b:5f:f2:71:2a:41:bf:d5:0d:14:2d:5e:e0:
68:aa:4b:6b:c4:85:b9:16:2a:56:c8:87:11:32:37:
e7:e2:c4:32:f9:9d:c5:24:ac:96:ed:58:c0:bc:56:
94:99:16:2a:5d:93:62:69:5d:a9:21:e6:05:18:26:
b1:64:3f:22:aa:92:a0:f9:e9:66:fd:1b:ec:7c:f6:
dc:c9:db:ee:80:a8:1f:e8:5c:a5:24:c0:b9:c7:6b:
28:01:ed:84:ee:23:0b:73:3e:56:0a:2e:6c:00:fe:
bd:54:f4:53:f5:c4:25:74:b6:3e:2b:65:93:9e:d5:
dd:24:e5:c8:58:5b:99:c9:fb:fe:4e:25:da:e3:f2:
f5:c6:10:30:a1:37:00:de:4b:38:47:ab:b7:3b:7c:
d0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5D:B7:5D:AF:9B:84:22:3F:74:96:F1:5D:AE:27:ED:82:19:25:4E
X509v3 Authority Key Identifier:
keyid:1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4c:8f:f8:fc:28:50:42:08:84:01:bb:53:9d:5e:5b:f7:83:
38:6e:1d:12:91:41:25:7f:3f:67:31:90:4f:dc:d8:61:09:84:
7a:71:5e:e2:04:97:d1:6c:51:00:f8:de:f8:00:a7:06:4d:1d:
59:7d:e1:58:05:d6:73:8d:86:14:d9:8a:ec:d7:04:22:a3:69:
f9:da:48:e3:f1:e2:7f:6e:ff:0a:af:52:59:46:c5:af:ff:d9:
db:57:28:a7:76:c8:a0:af:a4:c4:09:37:6f:3e:bb:8c:6e:ee:
ee:8f:a2:5f:8c:2a:48:56:b5:d3:5b:f4:7d:47:7e:e9:89:e0:
0a:c9:6f:79:68:9a:85:6b:b8:b2:ae:46:29:c7:be:7a:a7:2e:
b9:20:48:ad:3e:95:0e:b6:21:e6:a5:26:70:1f:17:11:5a:53:
20:38:be:d8:27:10:8d:19:55:60:d2:90:b6:8f:5e:22:f6:fb:
de:fa:ee:ed:16:1b:e3:33:a0:00:39:2d:95:48:ad:94:9e:87:
cc:c3:e1:48:2d:22:32:45:62:71:86:f4:0f:bf:66:d5:ea:b2:
ce:f4:f1:63:bc:db:f9:45:e8:a2:a0:81:8b:b9:8f:4c:f2:eb:
a1:d8:60:33:9d:b9:aa:d6:23:a1:6d:ad:88:09:4b:70:fc:ed:
8f:fd:0d:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REE4OTgxMTAvBgNVBAUTKDFBNTVEQjYyN0EyQTJFNEIyNjY3MkVFMEUxRDc1MTJG
ODY0MTRFODMwHhcNMjUxMjA0MTQzMjM5WhcNMjUxMjExMTQzMjM5WjAYMRYwFAYD
VQQDEw02OTMxOWI4Ny0xMTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsn4a+ktBq7c5o5eaxHmoPU9QQrTgZx4mm7xLYBVcWPJV73gBSlba6/WPkwY3
iff0VYoNYYqTr25kYx12FrvNLyvXV4IYCqsAU2t+H+MJATJONzOnzI/eO8I/iUqt
c39+aONie7ddhxXluxtf8nEqQb/VDRQtXuBoqktrxIW5FipWyIcRMjfn4sQy+Z3F
JKyW7VjAvFaUmRYqXZNiaV2pIeYFGCaxZD8iqpKg+elm/RvsfPbcydvugKgf6Fyl
JMC5x2soAe2E7iMLcz5WCi5sAP69VPRT9cQldLY+K2WTntXdJOXIWFuZyfv+TiXa
4/L1xhAwoTcA3ks4R6u3O3zQ8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVdt12v
m4QiP3SW8V2uJ+2CGSVOMB8GA1UdIwQYMBaAFBpV22J6Ki5LJmcu4OHXUS+GQU6D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC82OUFEQzE5RTFE
OEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxrc21aeTdnNGRkUkw0WkJU
b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dsWGJZbm9xTGtzbVp5N2c0ZGRSTDRaQlRvTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTg5OC82OUFEQzE5RTFEOEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxr
c21aeTdnNGRkUkw0WkJUb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCOTI/4/ChQQgiEAbtTnV5b94M4bh0SkUElfz9nMZBP3NhhCYR6cV7i
BJfRbFEA+N74AKcGTR1ZfeFYBdZzjYYU2Yrs1wQio2n52kjj8eJ/bv8Kr1JZRsWv
/9nbVyindsigr6TECTdvPruMbu7uj6JfjCpIVrXTW/R9R37pieAKyW95aJqFa7iy
rkYpx756py65IEitPpUOtiHmpSZwHxcRWlMgOL7YJxCNGVVg0pC2j14i9vve+u7t
FhvjM6AAOS2VSK2UnofMw+FILSIyRWJxhvQPv2bV6rLO9PFjvNv5ReiioIGLuY9M
8uuh2GAznbmq1iOhba2ICUtw/O2P/Q2y
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:53:00 2025 by rpki-client