This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
File: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft (raw, json)
Hash identifier: r8nqZVAn59uZtyNx/iCvlXQc4Hpb9wQVNWLq9Zhahow=
Subject key identifier: 98:D1:F1:E3:DA:30:D3:E3:7A:DA:16:3D:F4:D6:6B:C1:3E:5D:D7:AB
Authority key identifier: 1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90
Certificate issuer: /CN=A9110A69/serialNumber=1B6E3292C835654E491492E5584CF993F05BD990
Certificate serial: 0C33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
Manifest number: 0C2C
Signing time: Sat 24 Jan 2026 18:20:00 +0000
Manifest this update: Sat 24 Jan 2026 18:20:00 +0000
Manifest next update: Sat 31 Jan 2026 18:20:00 +0000
Files and hashes: 1: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl (hash: pybhGYiYpLDME9scQcthURBQLQS3U2J3yEjrGTw9q5g=)
2: 1407117C216311EA90D74C52C4F9AE02.roa (hash: 8seskI/5/VQRZazAh70N9kr0X5I8gYV92db2rNZfLeE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl
rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3123 (0xc33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110A69, serialNumber=1B6E3292C835654E491492E5584CF993F05BD990
Validity
Not Before: Jan 24 18:20:00 2026 GMT
Not After : Jan 31 18:20:00 2026 GMT
Subject: CN=69750d50-8d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b5:00:a2:ad:a7:78:8d:93:3c:77:2f:00:ef:
47:c3:22:2f:b8:dd:e9:81:03:5e:57:b2:2e:02:88:
d7:1d:b8:0c:cf:6d:91:26:4a:74:42:96:d1:23:06:
b1:9a:6e:32:16:3c:51:ea:54:c1:f0:98:f9:8c:c4:
f9:cc:ae:a9:d9:18:fb:19:69:ef:78:8d:97:34:51:
6d:6e:14:42:c6:7e:b3:c6:b0:be:9e:e0:1f:32:fb:
a2:61:4e:6a:59:f7:16:8d:8e:f0:2e:3b:60:1d:84:
68:7b:29:60:7c:92:7f:27:92:28:8c:4b:f2:a6:38:
a1:5d:14:73:0c:2c:23:27:8b:89:0b:87:39:aa:c9:
b7:6e:f6:53:49:1e:5a:28:32:3e:8b:1e:a9:b4:19:
84:cd:5c:98:2f:60:8f:65:fa:01:98:f5:11:94:18:
d0:01:44:21:29:3c:18:60:19:c1:19:bc:55:3d:0b:
9a:38:75:fc:52:ba:e5:3c:3a:a2:1a:28:87:28:79:
38:38:49:51:3c:d0:90:b8:30:a1:f7:c0:e0:d0:fd:
d9:75:64:26:51:a2:18:bb:2a:c5:39:2f:43:01:14:
d0:44:e9:39:7c:b7:39:c7:5f:e8:aa:4e:63:7f:10:
05:8f:cd:d5:3a:a8:42:04:4d:f6:a5:db:ef:9c:b8:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D1:F1:E3:DA:30:D3:E3:7A:DA:16:3D:F4:D6:6B:C1:3E:5D:D7:AB
X509v3 Authority Key Identifier:
keyid:1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:5a:fb:82:d1:9a:79:15:61:77:a9:09:ff:0d:19:b8:1d:4f:
24:7f:9f:58:e0:45:d5:56:ad:53:7a:17:08:da:e2:f7:4e:44:
b0:42:1c:45:c4:1c:13:6c:09:80:4a:75:af:85:e4:7b:92:0f:
e2:b7:07:3f:1a:8f:59:ec:65:e3:23:35:27:56:dc:f4:94:30:
2f:a1:66:45:69:b0:65:93:6b:4f:c5:99:22:c7:07:c0:c6:ac:
bd:b7:1e:e4:bc:a0:a2:8c:d4:53:62:3a:c6:d2:21:37:99:0f:
82:b5:22:e7:e8:5a:55:a2:a7:c0:63:e5:6a:56:05:31:a0:6e:
38:c6:e2:ff:af:6f:84:3d:3f:e2:28:b5:58:77:a3:ea:37:94:
9c:21:39:49:19:4a:fd:3f:06:bf:e1:77:38:09:53:5c:81:6d:
2e:27:fc:41:eb:7b:85:00:aa:c1:2c:ef:0f:62:4e:81:ce:d2:
e7:2c:29:e4:da:bb:90:b4:2c:69:a2:15:ae:49:12:34:c6:76:
c1:f8:35:c4:d1:6d:31:99:e9:61:b4:bf:fc:75:e1:39:39:3a:
7f:1a:e1:10:51:cc:19:a8:d5:bd:03:74:c0:7f:e3:27:c8:95:
49:2a:be:73:cd:42:55:d8:1e:d0:bc:54:d2:b7:02:3b:0c:96:
e8:34:28:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MTBBNjkxMTAvBgNVBAUTKDFCNkUzMjkyQzgzNTY1NEU0OTE0OTJFNTU4NENGOTkz
RjA1QkQ5OTAwHhcNMjYwMTI0MTgyMDAwWhcNMjYwMTMxMTgyMDAwWjAYMRYwFAYD
VQQDDA02OTc1MGQ1MC04ZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2rUAoq2neI2TPHcvAO9HwyIvuN3pgQNeV7IuAojXHbgMz22RJkp0QpbRIwax
mm4yFjxR6lTB8Jj5jMT5zK6p2Rj7GWnveI2XNFFtbhRCxn6zxrC+nuAfMvuiYU5q
WfcWjY7wLjtgHYRoeylgfJJ/J5IojEvypjihXRRzDCwjJ4uJC4c5qsm3bvZTSR5a
KDI+ix6ptBmEzVyYL2CPZfoBmPURlBjQAUQhKTwYYBnBGbxVPQuaOHX8UrrlPDqi
GiiHKHk4OElRPNCQuDCh98Dg0P3ZdWQmUaIYuyrFOS9DARTQROk5fLc5x1/oqk5j
fxAFj83VOqhCBE32pdvvnLivqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjR8ePa
MNPjetoWPfTWa8E+XderMB8GA1UdIwQYMBaAFBtuMpLINWVOSRSS5VhM+ZPwW9mQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEE2OS9FM0FCRDA0MjIx
NDExMUVBQkRGNjc3NjlDNEY5QUUwMi9HMjR5a3NnMVpVNUpGSkxsV0V6NWtfQmIy
WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0cyNHlrc2cxWlU1SkZKTGxXRXo1a19CYjJaQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEE2OS9FM0FCRDA0MjIxNDExMUVBQkRGNjc3NjlDNEY5QUUwMi9HMjR5a3NnMVpV
NUpGSkxsV0V6NWtfQmIyWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDPWvuC0Zp5FWF3qQn/DRm4HU8kf59Y4EXVVq1TehcI2uL3TkSwQhxF
xBwTbAmASnWvheR7kg/itwc/Go9Z7GXjIzUnVtz0lDAvoWZFabBlk2tPxZkixwfA
xqy9tx7kvKCijNRTYjrG0iE3mQ+CtSLn6FpVoqfAY+VqVgUxoG44xuL/r2+EPT/i
KLVYd6PqN5ScITlJGUr9Pwa/4Xc4CVNcgW0uJ/xB63uFAKrBLO8PYk6BztLnLCnk
2ruQtCxpohWuSRI0xnbB+DXE0W0xmelhtL/8deE5OTp/GuEQUcwZqNW9A3TAf+Mn
yJVJKr5zzUJV2B7QvFTStwI7DJboNCjt
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:16:29 2026 by rpki-client