This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
File: gUM6Y8LXXQAyVSxCbENTPsrINRU.mft (raw, json)
Hash identifier: nCJuEmAY2XhN7l4kDKGOZUtCieNx5qT4oIrkvfwBEd4=
Subject key identifier: 41:AE:BA:F3:1A:D6:90:73:2B:1C:23:A0:95:3B:D9:90:71:F3:9F:8C
Authority key identifier: 81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15
Certificate issuer: /CN=A91F1AF5/serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
Certificate serial: 0781
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
Manifest number: 077C
Signing time: Sat 06 Dec 2025 20:34:31 +0000
Manifest this update: Sat 06 Dec 2025 20:34:31 +0000
Manifest next update: Sat 13 Dec 2025 20:34:31 +0000
Files and hashes: 1: gUM6Y8LXXQAyVSxCbENTPsrINRU.crl (hash: eL9CppMEm9l41NMLI1RD561LbhzrhdxFGDuOJ7vqs34=)
2: DDFEB10C385E11EB8E85F467C4F9AE02.roa (hash: vYc0h4qvjuE88FDf7yqk3rmrIjWt9VABoOzgwIDoM5I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl
rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:34:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1921 (0x781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1AF5, serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
Validity
Not Before: Dec 6 20:34:31 2025 GMT
Not After : Dec 13 20:34:31 2025 GMT
Subject: CN=69349357-f59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:b5:33:73:05:fe:c7:0d:93:09:e9:06:1f:
a7:73:71:55:13:8a:8f:f9:76:26:7f:8a:32:75:b4:
12:b5:c4:df:4d:8c:0b:c4:60:95:26:5e:4a:3b:f7:
6e:2b:a4:14:fe:12:b1:41:20:0d:10:e7:5c:ae:fd:
89:1c:cd:15:4f:40:04:c2:24:d9:c2:36:78:c9:0c:
cf:6f:d0:66:4a:c4:e1:c7:7a:f9:0c:7c:72:53:84:
14:6c:58:27:ae:4a:21:cc:4e:c5:35:4c:af:21:08:
01:a9:3c:49:1a:e9:20:25:98:9d:72:a1:68:b2:a0:
97:e9:04:05:1a:17:aa:a7:bf:fb:b8:80:af:4c:0e:
19:dc:df:a5:03:85:16:f7:6d:6c:56:2d:76:b4:5d:
54:9b:ea:69:53:31:f8:67:e1:02:a6:8f:0b:8f:38:
12:c8:51:81:76:29:d5:70:08:a0:35:e7:1e:eb:b4:
17:05:b0:a0:ee:d9:b3:cf:1a:0b:f0:2f:03:ef:10:
53:62:c5:a2:4a:13:b5:86:ac:ec:29:3a:71:fa:43:
55:44:31:92:98:11:42:4a:87:17:27:ac:87:60:2b:
6e:88:85:96:fb:5d:91:93:a1:f7:e3:8b:f4:cb:97:
cc:15:3f:23:b0:91:01:8c:f7:0a:1a:79:ff:06:35:
ee:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AE:BA:F3:1A:D6:90:73:2B:1C:23:A0:95:3B:D9:90:71:F3:9F:8C
X509v3 Authority Key Identifier:
keyid:81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:db:d6:61:3b:fc:12:66:59:5d:b3:1e:19:34:0a:1d:c4:6d:
d1:b3:bf:3a:7c:5e:43:a9:67:8a:ae:0d:85:b2:c3:5e:cb:ca:
55:dd:96:c9:7a:91:38:a7:15:14:86:b3:81:16:b6:12:7e:17:
4f:42:c0:b4:a6:8f:f8:70:30:d0:de:77:e0:2d:f5:af:0f:cf:
17:d5:42:30:37:f9:d1:fe:6c:59:71:75:2f:a8:f9:bb:ad:24:
93:9c:6f:c7:91:7b:78:a3:06:8d:cf:9d:1c:ec:b0:ea:0f:fc:
7a:9e:9c:3f:92:ad:43:64:7b:7c:86:d9:8f:91:c1:e2:2f:cf:
37:56:f9:fb:b8:3e:2f:cf:61:24:bb:d4:92:fe:05:db:bc:cb:
07:d5:83:c2:f1:e3:43:76:fb:b9:35:e5:ef:dd:5c:1c:98:df:
b1:fe:75:5b:a4:d6:c4:e4:18:c3:27:b2:cc:8f:68:d8:f3:0a:
9a:b0:54:79:d1:1c:13:cf:3a:34:e4:20:8d:55:b1:87:93:21:
4c:a4:5b:d9:dd:5f:29:97:f9:6d:8a:46:d1:16:55:4f:f0:14:
f0:55:f5:ee:70:3d:ce:e1:60:0b:b9:e8:26:8e:f9:3e:e6:21:
fc:4a:57:17:59:f0:cd:25:ae:b4:4b:f0:8a:5a:3f:26:a4:7d:
71:93:72:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:48:12 2025 by rpki-client