This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
File: gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft (raw, json)
Hash identifier: 2y1aHX0FD/2vNMZ0WLIKLVqtOfr9vVAgL7pUn7RPu9k=
Subject key identifier: BF:77:F8:F0:FB:39:F9:B6:AB:5A:9D:79:F9:3D:15:E4:38:24:1B:7F
Authority key identifier: 82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04
Certificate issuer: /CN=A91EA0F7/serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04
Certificate serial: 6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
Manifest number: 5A
Signing time: Fri 05 Dec 2025 05:19:19 +0000
Manifest this update: Fri 05 Dec 2025 05:19:18 +0000
Manifest next update: Fri 12 Dec 2025 05:19:18 +0000
Files and hashes: 1: gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl (hash: N19w2Km9RbxNnj5Ck+5+28TU+GQV9A66TXyrwYG3958=)
2: 8A9CF2DEB4D311F0A84CEE1EC4F9AE02.roa (hash: S8iQ1WKz3ZWJ+bpf44oizB2yWlxKeDlDls7es6li9nw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl
rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA0F7, serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04
Validity
Not Before: Dec 5 05:19:18 2025 GMT
Not After : Dec 12 05:19:18 2025 GMT
Subject: CN=69326b57-c099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:23:c3:1d:3c:b4:54:54:80:61:0a:48:c0:
83:0b:1b:11:cb:03:6f:9f:c7:e4:06:39:21:fd:3d:
1d:b1:14:7f:52:0f:a0:65:39:3d:dd:84:e4:60:b4:
a5:3d:e5:c5:13:66:8c:e2:e7:07:24:4c:56:bb:80:
90:a4:8f:79:ad:e7:76:95:ba:04:b7:88:79:2b:e9:
fa:e4:02:64:e1:aa:eb:db:fe:4c:68:31:3c:ef:3b:
75:30:fd:6e:94:58:a1:62:13:32:1d:92:df:04:3a:
02:8b:c2:67:91:8e:8d:83:64:8a:03:d2:00:34:4b:
4e:50:f5:b1:1f:b5:96:69:54:d6:35:02:0d:b2:1e:
01:26:ec:f0:82:1f:5b:47:d0:40:f2:a2:7a:8d:a6:
80:20:a6:c1:6e:cb:a8:8f:07:a4:d5:a5:1b:b8:7d:
b9:2f:20:9c:9d:7d:bf:0a:32:bc:23:7d:71:15:79:
d5:2b:c8:47:9d:d3:9b:81:96:63:74:a4:c1:d2:d1:
15:ec:e2:7a:45:b4:95:48:9c:4f:4d:ec:a0:58:be:
88:ac:49:9e:55:8e:41:60:17:05:18:72:f3:27:07:
c4:f5:4b:a8:12:3e:50:e9:02:17:15:55:ac:9f:86:
b9:93:45:f7:46:b7:cf:6f:11:e2:39:76:0f:5d:37:
43:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:77:F8:F0:FB:39:F9:B6:AB:5A:9D:79:F9:3D:15:E4:38:24:1B:7F
X509v3 Authority Key Identifier:
keyid:82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:8a:cf:10:b6:01:60:27:a5:8c:46:44:49:f2:29:c2:9d:cb:
32:b8:cb:cc:ce:5e:95:b1:23:70:3b:de:44:bb:cb:a7:48:30:
dd:23:74:5a:4d:fb:ab:4c:91:b0:a0:e0:b6:f6:c2:c0:cf:9f:
ce:c2:07:cd:3b:ee:d1:73:a8:f1:53:62:85:c9:59:a2:40:f5:
b6:2d:18:3f:ae:3a:ad:8c:a0:72:38:7e:0a:45:da:05:ca:f1:
44:68:e2:f0:f0:bb:89:78:d2:84:5d:42:aa:25:07:0c:19:05:
06:18:e6:9e:8e:34:fe:fe:c3:0c:b6:2f:20:ec:d2:33:16:a2:
b9:96:c5:56:9c:26:04:5d:3b:b2:23:a8:f8:6d:09:39:b9:a6:
75:35:db:22:02:53:2b:f7:35:08:42:3b:b3:53:f3:72:dc:4a:
d0:6a:18:a7:e3:ff:21:bd:88:f0:18:56:fb:87:97:fd:4a:77:
c3:f9:bf:76:de:89:52:44:0a:69:1e:17:5d:b2:49:83:7f:44:
5a:51:c2:d1:31:ba:aa:00:f7:a3:ba:8a:fe:ac:a3:50:e4:6b:
bc:93:8d:21:0e:41:7d:b5:70:fc:b5:bd:c5:29:ee:ea:77:21:
fb:ca:07:48:b0:32:a5:98:e8:43:c2:8a:30:6b:59:aa:e4:31:
d4:0d:5a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:25 2025 by rpki-client