This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft
File: GI72_1fx9ftPqwqu2qktYE8nVTA.mft (raw, json)
Hash identifier: BOn33LJp/b5CWXpXv3xhNUGfox8WXlJ1aJ+T8QeTdr0=
Subject key identifier: 8E:07:07:D4:91:11:FA:08:90:9E:6B:15:17:23:C1:20:38:D6:53:2D
Authority key identifier: 18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30
Certificate issuer: /CN=A91FEC1E/serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft
Manifest number: 67
Signing time: Sun 07 Dec 2025 05:03:51 +0000
Manifest this update: Sun 07 Dec 2025 05:03:50 +0000
Manifest next update: Sun 14 Dec 2025 05:03:50 +0000
Files and hashes: 1: GI72_1fx9ftPqwqu2qktYE8nVTA.crl (hash: LlE3Zl30i9eCmxZ5Mgu2DonOd/+AVo2AWyzBafbN/Rk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl
rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 05:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEC1E, serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530
Validity
Not Before: Dec 7 05:03:50 2025 GMT
Not After : Dec 14 05:03:50 2025 GMT
Subject: CN=69350ab7-4195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:5c:e5:aa:15:9e:c5:7f:e4:34:e4:e6:e9:
2f:5c:77:17:7a:56:36:ca:b5:c1:5d:db:fa:f3:f8:
71:f2:a5:8c:7d:9c:d6:f4:9d:e4:cd:e6:f7:2a:77:
d8:3c:8a:98:00:56:6f:2d:51:5e:18:a0:eb:98:67:
fe:fe:e8:a4:08:a7:ae:26:98:56:4e:9a:a5:67:bf:
f2:b3:a2:f8:d6:c8:11:27:c2:1e:31:d1:23:b3:77:
70:80:d2:5d:c9:1a:ec:93:1d:e5:74:cc:21:52:35:
d9:4a:c1:a2:23:02:83:67:58:bd:b2:13:a5:a8:e2:
15:86:f1:5a:92:ce:a9:52:de:b3:10:7c:25:50:a7:
5f:b8:d0:52:23:76:ea:1b:86:36:e1:48:07:b7:3b:
93:db:68:1e:4b:e8:6d:3c:4b:90:c4:4d:ce:80:bf:
b8:36:c6:d4:06:7e:d2:43:4d:bc:e4:ae:c6:f1:3f:
26:f3:9c:43:ef:56:f4:c8:96:79:c3:43:ef:c7:27:
28:d5:14:0b:22:b8:fb:72:b2:1d:79:e9:33:83:90:
fb:68:e8:10:4b:13:21:f0:30:90:3d:4d:74:45:b6:
9c:e6:f6:dc:4b:31:e1:5d:ae:0d:79:57:b4:f8:15:
0d:31:42:63:79:21:55:a1:2b:3b:e9:1e:c1:48:0e:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:07:07:D4:91:11:FA:08:90:9E:6B:15:17:23:C1:20:38:D6:53:2D
X509v3 Authority Key Identifier:
keyid:18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:ed:a8:46:76:d3:c1:8e:bd:d9:47:6f:9b:d6:d5:82:97:8a:
c4:de:29:94:58:b0:7d:f0:4b:13:d6:a8:9c:e6:3f:c4:fd:6b:
9c:bf:f7:55:ba:df:af:b7:af:b0:e6:ea:70:72:08:1e:14:e1:
f4:3e:b3:03:ab:90:c2:7b:fa:49:ad:90:17:9b:dc:9d:93:fd:
19:73:c7:bf:50:af:99:e6:ed:06:cb:7b:30:33:f6:89:5c:99:
10:e2:1f:6e:ec:c4:b2:4b:fc:ae:ff:3b:17:2d:67:d8:3d:80:
d4:18:a8:00:d0:19:8d:77:f2:ea:8a:e2:c2:f9:46:d2:50:a6:
63:c4:81:a9:26:4c:4c:0a:2b:a7:fc:64:00:52:51:bd:2e:4c:
8e:d8:26:d2:4b:58:3a:8e:66:40:25:df:29:af:77:95:48:50:
23:7a:0a:11:cb:46:f0:1e:0a:88:99:9e:fc:d9:3d:f7:a0:a5:
89:6a:73:2b:c7:af:67:16:cf:7c:13:68:70:ef:1b:58:51:e5:
5c:24:d1:7e:42:c8:41:57:75:1b:d4:d2:6b:39:69:34:c9:33:
35:18:4d:c9:94:2d:be:56:31:54:f2:bd:06:64:b0:94:b4:00:
d2:f0:6d:1c:62:bb:02:e7:28:f2:8a:b9:03:ef:f8:9b:71:9d:
dd:2d:ba:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:10:59 2025 by rpki-client