This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
File: 1p-GUNl6UkwplFPMtI13tOZf3yI.mft (raw, json)
Hash identifier: mSiMmE1RpN0gYtYQIqpoS0Uov/wZLU8Plm3ZfkW8IBg=
Subject key identifier: 23:0A:6D:54:4A:99:85:12:44:23:7D:0C:25:57:77:F3:37:1B:4C:90
Authority key identifier: D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22
Certificate issuer: /CN=A91F0695/serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
Manifest number: 016E
Signing time: Fri 05 Dec 2025 02:04:04 +0000
Manifest this update: Fri 05 Dec 2025 02:04:04 +0000
Manifest next update: Fri 12 Dec 2025 02:04:04 +0000
Files and hashes: 1: 1p-GUNl6UkwplFPMtI13tOZf3yI.crl (hash: LJpR+dI2pOIJn2jn0eBT4hm1uwjb8j3bk8XjUgxHakQ=)
2: D1054582A0C111EEA54E2F0BC4F9AE02.roa (hash: LiqmtbZL/k65yoRZh2qeTmSOnyQ0Qghej6NC1OoEsfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl
rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0695, serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22
Validity
Not Before: Dec 5 02:04:04 2025 GMT
Not After : Dec 12 02:04:04 2025 GMT
Subject: CN=69323d94-bb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:1d:cb:62:70:47:47:4c:de:3a:16:9d:f8:
6c:27:11:af:24:6f:2a:72:4c:d0:22:b5:50:2f:8a:
58:8a:9d:44:38:25:11:f8:f2:8e:01:a2:28:81:74:
91:ec:cc:91:f7:43:55:6c:8f:c0:09:21:64:fd:2d:
ca:3a:34:4c:6d:37:bf:7d:ca:01:97:5d:28:89:be:
6a:eb:08:00:ee:d8:7f:d4:42:5e:b8:a8:7f:f0:43:
09:d5:51:48:22:a2:c4:0b:db:5b:b7:df:27:70:da:
f7:34:f5:33:85:23:ea:5e:d2:bf:54:9e:6d:7c:71:
2e:b4:ba:49:db:80:7d:12:0a:0e:7e:7a:f6:17:3b:
89:6a:b9:ad:4b:07:41:ce:68:7f:7b:bb:c9:fa:04:
46:36:40:57:78:51:15:31:a5:a8:86:49:69:8b:f2:
96:1e:72:a0:ac:94:ed:17:4f:22:67:b0:0d:83:47:
2e:2d:6e:b1:68:da:c3:66:89:04:66:73:bb:53:a3:
6c:3d:b3:50:8d:2f:28:38:63:e0:63:97:b0:44:36:
2d:89:32:f9:7c:2e:fd:ea:06:e3:78:70:9c:3a:cc:
8e:ac:6e:d4:a5:97:ce:e7:60:73:86:91:7c:83:31:
45:3b:b6:c9:63:5b:50:4b:d0:3b:a4:f3:51:9c:e6:
6a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0A:6D:54:4A:99:85:12:44:23:7D:0C:25:57:77:F3:37:1B:4C:90
X509v3 Authority Key Identifier:
keyid:D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:7b:c4:1f:62:01:af:cf:e5:48:b1:03:1e:6a:40:b5:60:b5:
05:14:2e:75:4f:03:9e:fe:40:f1:e3:5a:09:e1:12:55:c6:93:
b9:31:de:65:ca:23:1d:cb:00:0b:e4:a8:ab:1e:3d:8b:b2:8f:
b1:d2:a3:cc:f1:4d:c5:4f:81:57:c5:50:38:cb:26:2f:b2:8d:
07:22:94:04:a7:42:0a:5d:73:70:09:40:0d:a2:3d:96:87:10:
78:67:36:62:9e:bc:09:82:9a:09:51:75:48:60:66:b2:f4:0a:
92:02:76:19:df:f6:fa:6f:1d:b5:fc:1c:4d:f8:4b:e3:5d:ee:
38:8d:20:3d:9a:83:ee:9a:12:2c:5a:0a:86:91:fd:70:06:ed:
ac:35:be:da:c7:57:3e:7d:99:45:28:22:21:d8:c3:92:f6:7e:
32:ee:d5:3e:50:97:7a:71:5f:f0:b1:40:dd:56:b8:82:88:54:
1f:8f:00:a1:1e:e6:a9:7f:6e:70:c1:6d:55:e7:20:f6:15:41:
6a:ca:6e:c2:05:3f:9d:a6:cf:78:25:52:5c:44:7f:af:aa:cd:
96:5d:86:bf:92:2d:f3:a3:15:8e:25:f8:12:8d:36:af:be:53:
d3:59:de:8b:e1:c4:ed:92:8f:af:61:27:69:84:c8:42:18:57:
24:42:d4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:26:07 2025 by rpki-client