This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft
File: GhpArZOkpDB-1yZNR9JSyvYt7_0.mft (raw, json)
Hash identifier: wKR6Rz+kMkBt0MSoPO1cwyWUw2nXk0EQfQvirUpBIVU=
Subject key identifier: 27:35:3D:36:D3:0F:1C:28:4B:5A:FF:A0:07:AE:1F:C0:02:10:60:CC
Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Certificate serial: 0D80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft
Manifest number: 0D2A
Signing time: Sat 24 Jan 2026 17:56:58 +0000
Manifest this update: Sat 24 Jan 2026 17:56:58 +0000
Manifest next update: Sat 31 Jan 2026 17:56:58 +0000
Files and hashes: 1: GhpArZOkpDB-1yZNR9JSyvYt7_0.crl (hash: XkJc7GOIyWOiTt2TPvOJFU1SdJB+ur5AU+/sHJvfJH8=)
2: E4243712ED6E11F097BA5186596F56BC.roa (hash: AdADyeuKbvrKTEq03B4ZjusjzlWvsX8Lbm8MnAnQaec=)
3: 566800AE193C11F094773636C4F9AE02.roa (hash: x5Q7IFWOHg2tUDOM+TNLmmJ3sU4DrJntxSwPcYFFFRU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:56:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3456 (0xd80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Validity
Not Before: Jan 24 17:56:58 2026 GMT
Not After : Jan 31 17:56:58 2026 GMT
Subject: CN=697507ea-22f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cc:cb:dc:e4:a6:73:86:73:1d:57:a8:c9:89:
5c:c5:0c:e5:24:82:f2:b5:f8:f5:c3:6b:29:02:0d:
63:49:45:c8:f6:31:a5:df:88:22:87:dc:84:08:c5:
97:f7:51:b9:71:85:56:f8:e3:6f:21:7d:e4:fa:5c:
0d:12:7c:72:3f:fb:f2:68:cc:78:63:06:1b:72:cc:
60:c4:10:63:af:07:db:31:c1:88:3e:f7:e1:50:0c:
84:59:26:6f:6b:0b:35:64:44:cc:ec:90:13:dc:09:
a4:78:79:f6:26:11:14:96:8c:e3:d4:47:a4:93:92:
87:cf:f0:50:79:d4:97:ce:c1:5b:a3:96:c2:f9:c1:
ce:0f:93:02:57:7f:33:9a:8a:42:f3:78:38:b4:a3:
e5:2a:ef:83:6a:ba:3f:a6:a0:ff:fc:38:60:76:5b:
d2:4e:52:62:0d:1c:7f:d0:b2:fa:48:34:52:af:00:
8a:62:64:73:ac:24:68:67:9f:c6:0c:a3:26:98:bc:
d8:e7:f6:a3:d8:c2:af:7b:70:45:85:34:cf:13:98:
9b:f9:92:5b:53:14:23:2f:ee:e8:7f:8c:9c:eb:9b:
1e:2c:72:6a:ba:20:76:25:4a:2c:f5:ca:fc:ae:17:
9d:f5:66:14:b8:03:3f:41:41:a2:15:32:8f:ce:52:
2e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:35:3D:36:D3:0F:1C:28:4B:5A:FF:A0:07:AE:1F:C0:02:10:60:CC
X509v3 Authority Key Identifier:
keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:53:14:68:08:a4:d0:8b:46:a9:cf:4f:f6:93:ec:4a:7f:67:
42:8d:20:b2:49:4e:4c:29:1b:af:04:76:5c:92:e1:3e:08:3d:
b5:d4:77:b3:81:e3:d3:50:f6:4a:89:a1:68:6c:80:88:87:6d:
eb:dc:33:c4:51:23:d7:45:a8:63:b5:03:b6:ce:52:3d:9a:b4:
33:06:a2:e6:4c:e3:a7:8d:82:91:6f:c7:e4:2e:35:5a:e7:7f:
40:19:4a:d0:9f:f3:0e:84:29:f9:6d:42:3e:98:22:9e:dc:30:
c7:d9:dc:48:1b:46:a4:9b:6a:62:dc:93:3f:f3:e6:a1:eb:70:
20:f8:f1:af:c5:27:a9:ef:e6:92:66:58:32:12:d8:bd:fe:2a:
74:79:0f:4f:7e:10:df:0e:95:a5:31:ba:3c:88:d7:ba:0e:cc:
0a:2d:31:44:99:b1:05:62:32:27:31:d8:77:3a:af:39:6b:69:
30:5a:66:f8:93:40:70:3f:c7:ff:9d:7c:de:29:12:d3:88:f4:
53:1a:26:21:e0:a8:66:51:fd:67:2c:72:cc:4b:cf:e1:20:1d:
14:1f:c1:a2:f1:7a:3d:17:9f:8c:81:e6:2d:09:ba:05:c9:5c:
32:c3:ba:5d:93:cb:d5:59:65:e4:c6:c0:e4:d4:6d:65:19:71:
40:fb:11:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUQ3NUMxMTAvBgNVBAUTKDFBMUE0MEFEOTNBNEE0MzA3RUQ3MjY0RDQ3RDI1MkNB
RjYyREVGRkQwHhcNMjYwMTI0MTc1NjU4WhcNMjYwMTMxMTc1NjU4WjAYMRYwFAYD
VQQDDA02OTc1MDdlYS0yMmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA38zL3OSmc4ZzHVeoyYlcxQzlJILytfj1w2spAg1jSUXI9jGl34gih9yECMWX
91G5cYVW+ONvIX3k+lwNEnxyP/vyaMx4YwYbcsxgxBBjrwfbMcGIPvfhUAyEWSZv
aws1ZETM7JAT3AmkeHn2JhEUlozj1Eekk5KHz/BQedSXzsFbo5bC+cHOD5MCV38z
mopC83g4tKPlKu+Daro/pqD//DhgdlvSTlJiDRx/0LL6SDRSrwCKYmRzrCRoZ5/G
DKMmmLzY5/aj2MKve3BFhTTPE5ib+ZJbUxQjL+7of4yc65seLHJquiB2JUos9cr8
rhed9WYUuAM/QUGiFTKPzlIuzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCc1PTbT
DxwoS1r/oAeuH8ACEGDMMB8GA1UdIwQYMBaAFBoaQK2TpKQwftcmTUfSUsr2Le/9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDc1Qy8yQkM1RkQ0MDA2
QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BEQi0xeVpOUjlKU3l2WXQ3
XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0docEFyWk9rcERCLTF5Wk5SOUpTeXZZdDdfMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RDc1Qy8yQkM1RkQ0MDA2QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BE
Qi0xeVpOUjlKU3l2WXQ3XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAlUxRoCKTQi0apz0/2k+xKf2dCjSCySU5MKRuvBHZckuE+CD211Hez
gePTUPZKiaFobICIh23r3DPEUSPXRahjtQO2zlI9mrQzBqLmTOOnjYKRb8fkLjVa
539AGUrQn/MOhCn5bUI+mCKe3DDH2dxIG0akm2pi3JM/8+ah63Ag+PGvxSep7+aS
ZlgyEti9/ip0eQ9PfhDfDpWlMbo8iNe6DswKLTFEmbEFYjInMdh3Oq85a2kwWmb4
k0BwP8f/nXzeKRLTiPRTGiYh4KhmUf1nLHLMS8/hIB0UH8Gi8Xo9F5+MgeYtCboF
yVwyw7pdk8vVWWXkxsDk1G1lGXFA+xG7
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:59 2026 by rpki-client