This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft
File: Ga4x-VSBe65iCMNyEQi46P-LP7w.mft (raw, json)
Hash identifier: U26yxnjJEp+339Plvb62c+qSx8OsyOFsO4OOHFWjn0g=
Subject key identifier: 8A:CD:04:A6:C6:3F:15:81:92:DE:0F:EF:FB:31:19:7F:2C:53:3A:3B
Authority key identifier: 19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC
Certificate issuer: /CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC
Certificate serial: 0494
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft
Manifest number: 048E
Signing time: Thu 04 Dec 2025 22:34:35 +0000
Manifest this update: Thu 04 Dec 2025 22:34:34 +0000
Manifest next update: Thu 11 Dec 2025 22:34:34 +0000
Files and hashes: 1: Ga4x-VSBe65iCMNyEQi46P-LP7w.crl (hash: j96N1APoiGyMpTB6+hifXnKxSth+gXE73a9XkKZxwaE=)
2: A87BC510622E11EC92E1870CC4F9AE02.roa (hash: 1DZcNpDHzzTtCr5+Y6ZKGblRfHTeQUJGW1MQDytyGms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl
rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1172 (0x494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEB30, serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC
Validity
Not Before: Dec 4 22:34:34 2025 GMT
Not After : Dec 11 22:34:34 2025 GMT
Subject: CN=69320c7b-171a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:39:9d:d3:6f:27:cd:8e:0b:f1:45:3a:f7:
6f:7a:47:dd:e2:c2:b6:33:1a:a9:c0:9a:8d:b3:9f:
2c:5d:dc:ef:36:43:69:29:53:b6:af:0a:fc:f7:2f:
c8:8f:c0:1e:cb:ed:69:fb:fa:5a:f4:8b:92:5a:03:
c7:a2:68:9c:0c:41:8f:3a:a5:25:23:ea:90:1d:9a:
af:df:30:f8:94:60:6f:4c:87:ff:29:c1:fc:b7:0e:
74:b4:9f:d5:d6:e7:d8:a8:5b:e7:e5:12:4d:20:22:
f0:2f:9b:1d:8c:7e:6f:ef:ad:a8:ba:62:e4:49:2e:
86:86:c1:9f:e6:88:bf:9c:47:d3:88:26:eb:f2:c4:
8e:c2:0f:b9:c3:fa:98:ad:ae:bc:a0:98:74:0c:ed:
11:dd:18:12:18:0e:0e:40:d6:b7:ec:89:d9:e4:2f:
00:ed:a2:34:cc:0a:cb:c1:bb:4f:2f:75:af:81:45:
f8:e8:3b:fc:a0:0f:f4:28:f2:3f:eb:c0:44:59:09:
01:54:91:11:9d:f5:af:b5:a8:68:d6:37:43:b4:77:
e8:a3:71:42:14:bb:c0:4a:24:cd:e3:43:72:93:45:
04:89:3a:60:c9:69:5e:fa:45:98:9e:c9:62:9c:2f:
4e:0c:b2:31:df:f0:8a:92:f6:bc:aa:85:77:fc:f7:
e2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CD:04:A6:C6:3F:15:81:92:DE:0F:EF:FB:31:19:7F:2C:53:3A:3B
X509v3 Authority Key Identifier:
keyid:19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dd:fc:57:3b:89:a3:4b:7f:31:24:bf:fc:d1:89:db:f1:22:d5:
38:30:c8:2a:8d:19:ca:82:d1:ed:ed:0f:9e:04:3e:3b:24:73:
7b:ca:01:89:38:c4:02:68:dd:ee:17:b0:0a:59:c6:f0:46:61:
78:03:9a:91:b4:3b:6f:ac:01:e2:c1:59:52:b4:cc:00:db:a0:
54:d0:99:ad:b7:4f:1a:ca:6f:77:c7:00:26:4e:96:55:b8:5c:
e2:78:35:7f:b1:dc:98:44:27:35:e1:06:c0:5f:1e:9d:b3:b4:
12:36:07:41:84:38:d3:29:f2:82:ba:58:22:4a:bc:13:c3:03:
69:b5:49:b2:1a:30:1f:2b:d7:21:df:ba:38:d1:b8:0f:f1:06:
70:a4:77:02:ee:bd:f7:aa:b9:e5:18:d1:3b:56:51:70:05:de:
36:dd:83:85:79:9a:4e:d8:ec:8d:db:69:a1:62:5d:6e:11:b9:
05:56:04:63:c3:1b:f2:60:7e:23:6d:8a:59:9a:94:88:9b:c6:
ef:86:3c:b1:4d:a5:22:ec:1c:79:de:f9:ee:8b:6b:f8:c0:e2:
30:67:31:63:92:88:7f:a7:8e:28:13:0e:ac:0a:a1:20:e3:04:
25:99:30:63:99:8c:fa:e8:f5:21:c3:2a:7b:64:71:c5:71:07:
f5:a2:c7:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVCMzAxMTAvBgNVBAUTKDE5QUUzMUY5NTQ4MTdCQUU2MjA4QzM3MjExMDhCOEU4
RkY4QjNGQkMwHhcNMjUxMjA0MjIzNDM0WhcNMjUxMjExMjIzNDM0WjAYMRYwFAYD
VQQDEw02OTMyMGM3Yi0xNzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArOI5ndNvJ82OC/FFOvdvekfd4sK2MxqpwJqNs58sXdzvNkNpKVO2rwr89y/I
j8Aey+1p+/pa9IuSWgPHomicDEGPOqUlI+qQHZqv3zD4lGBvTIf/KcH8tw50tJ/V
1ufYqFvn5RJNICLwL5sdjH5v762oumLkSS6GhsGf5oi/nEfTiCbr8sSOwg+5w/qY
ra68oJh0DO0R3RgSGA4OQNa37InZ5C8A7aI0zArLwbtPL3WvgUX46Dv8oA/0KPI/
68BEWQkBVJERnfWvtaho1jdDtHfoo3FCFLvASiTN40Nyk0UEiTpgyWle+kWYnsli
nC9ODLIx3/CKkva8qoV3/Pfi3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrNBKbG
PxWBkt4P7/sxGX8sUzo7MB8GA1UdIwQYMBaAFBmuMflUgXuuYgjDchEIuOj/iz+8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUIzMC85RENFQjYzODYy
MkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2NWlDTU55RVFpNDZQLUxQ
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dhNHgtVlNCZTY1aUNNTnlFUWk0NlAtTFA3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RUIzMC85RENFQjYzODYyMkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2
NWlDTU55RVFpNDZQLUxQN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDd/Fc7iaNLfzEkv/zRidvxItU4MMgqjRnKgtHt7Q+eBD47JHN7ygGJ
OMQCaN3uF7AKWcbwRmF4A5qRtDtvrAHiwVlStMwA26BU0Jmtt08aym93xwAmTpZV
uFzieDV/sdyYRCc14QbAXx6ds7QSNgdBhDjTKfKCulgiSrwTwwNptUmyGjAfK9ch
37o40bgP8QZwpHcC7r33qrnlGNE7VlFwBd423YOFeZpO2OyN22mhYl1uEbkFVgRj
wxvyYH4jbYpZmpSIm8bvhjyxTaUi7Bx53vnui2v4wOIwZzFjkoh/p44oEw6sCqEg
4wQlmTBjmYz66PUhwyp7ZHHFcQf1oseI
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:21:40 2025 by rpki-client