This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
File: G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft (raw, json)
Hash identifier: 8usIXHyVbQCs7yrwlRqEZqi/mwYvvNBzQWIM+Sf582Q=
Subject key identifier: 1D:0E:AF:26:04:7B:A4:A9:C1:B9:FD:E5:4E:EA:97:4C:62:42:4E:96
Authority key identifier: 1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40
Certificate issuer: /CN=A91DF352/serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40
Certificate serial: 68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
Manifest number: 67
Signing time: Fri 05 Dec 2025 04:51:36 +0000
Manifest this update: Fri 05 Dec 2025 04:51:35 +0000
Manifest next update: Fri 12 Dec 2025 04:51:35 +0000
Files and hashes: 1: G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl (hash: Rh73IrQAJXKDMZi2BLkm3gWwWC5O3eYtFuDJN3LruM4=)
2: BA3FE218315611F0951A037DC4F9AE02.roa (hash: qVVzOp455rcs6g+f/MmhYpdl/2N+Lt1OuCuyTK7KoGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl
rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF352, serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40
Validity
Not Before: Dec 5 04:51:35 2025 GMT
Not After : Dec 12 04:51:35 2025 GMT
Subject: CN=693264d8-28a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:92:d1:92:9e:d8:a7:43:3a:8b:7f:73:0f:
69:37:e8:4b:e1:77:c5:80:b5:2c:da:0d:06:a9:a3:
e0:15:c7:68:11:b7:5f:8f:1f:ed:d6:07:ae:a5:14:
df:1e:f8:95:d0:a5:8b:31:33:d4:56:8e:11:c7:c6:
84:df:73:45:85:22:5d:0e:73:ce:9d:a4:8f:1c:7a:
1c:04:59:6a:94:83:72:a3:80:44:f0:71:44:79:1e:
ff:02:55:4f:bd:2b:e9:48:bd:79:2f:6f:83:26:89:
56:aa:10:03:00:d5:4d:a3:7c:ef:64:40:8a:8d:85:
9f:6b:2e:0a:e3:6a:4a:82:9b:da:7c:f8:3e:3b:06:
0c:24:4b:d6:44:a4:f1:6c:5d:28:a3:b5:7a:e5:4a:
28:ea:b1:d6:09:4e:9d:32:b8:1e:c9:d4:a8:54:b8:
1b:09:ae:0e:01:ed:18:48:eb:cb:0a:7f:20:61:89:
18:2f:03:7f:d6:7e:2e:70:b2:15:cc:1d:73:6d:9a:
4c:b8:03:db:3f:bd:f5:ef:28:e9:a8:8f:e2:96:d8:
07:0e:f3:65:68:e5:b8:d5:ae:16:c7:c4:5c:5f:10:
38:c8:09:66:0a:ac:33:0a:a7:25:85:8f:0d:32:20:
c1:2f:f5:e6:81:6e:41:93:3d:d4:74:09:63:e0:d5:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0E:AF:26:04:7B:A4:A9:C1:B9:FD:E5:4E:EA:97:4C:62:42:4E:96
X509v3 Authority Key Identifier:
keyid:1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:23:02:79:d0:6b:63:9b:7b:08:f2:5c:8c:43:24:94:89:50:
cf:14:34:5e:bb:37:34:d5:78:11:dc:3e:4e:86:d3:fc:be:ab:
e8:7e:79:17:c9:93:6c:44:c2:0d:b6:11:41:bd:7e:24:98:81:
e7:45:40:99:ec:80:8d:87:de:c0:a4:00:26:9b:a9:32:5d:87:
42:f7:f7:92:17:a2:fa:d5:b2:e7:93:3a:77:56:60:d6:57:75:
91:e9:bc:8a:9e:85:43:5e:fc:4e:79:03:2d:7d:16:e2:65:9d:
d0:bf:4d:d1:26:49:ea:31:09:dd:6c:fd:a2:37:11:bc:5a:ed:
04:ff:4a:61:7a:28:18:0d:ac:70:13:4b:4e:b9:49:56:5c:1f:
95:d3:54:76:0a:c8:c0:7a:fc:ca:d8:8a:d8:98:d1:90:99:c6:
a0:25:40:ae:fc:3a:72:b7:cf:80:26:a3:88:ab:d3:b5:b5:2c:
c2:45:22:76:e9:3f:20:8b:b6:e6:27:ae:48:ed:8b:55:4a:b3:
48:80:75:42:32:16:ad:f4:75:a3:1e:40:af:1a:a1:13:09:d4:
44:46:75:99:06:20:59:c0:d6:c9:8c:19:72:a3:08:de:9f:58:
59:e3:31:ee:a3:59:8c:0e:e2:8c:79:1d:09:33:23:2a:86:98:
c2:9a:10:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:24:56 2025 by rpki-client