This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
File: gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json)
Hash identifier: DLWwAhjnL6UJZU2NVBqogibND9aV2denj5WoQjJ1xZg=
Subject key identifier: 9D:D9:7F:35:8E:B5:78:06:2F:D7:93:CD:20:F6:29:D6:FC:EF:83:2D
Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65
Certificate issuer: /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065
Certificate serial: 026A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
Manifest number: 0266
Signing time: Sun 25 Jan 2026 00:48:55 +0000
Manifest this update: Sun 25 Jan 2026 00:48:54 +0000
Manifest next update: Sun 01 Feb 2026 00:48:54 +0000
Files and hashes: 1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: 0+bvljvFms6eviVCLrNI15gwFvpXRg0cTemDHvHxrRE=)
2: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: /HJseqaXYqKNU4JSpgFfB6yF7Shuw95sDH+Hz1X2J8o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl
rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 618 (0x26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DED4, serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065
Validity
Not Before: Jan 25 00:48:54 2026 GMT
Not After : Feb 1 00:48:54 2026 GMT
Subject: CN=69756877-4383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:17:a8:ae:5b:5e:bf:fd:da:31:f8:de:e5:
32:71:18:d4:c7:0f:b6:9e:fb:5a:2d:78:a4:d7:10:
f5:5d:dd:b4:7f:a1:9a:8a:d3:ae:85:c9:24:5a:f9:
0e:5f:c6:d0:7f:4b:d7:29:d4:f2:82:73:c4:22:48:
b3:86:5e:58:6c:32:67:1a:99:db:ea:a2:ca:9b:83:
33:0d:10:56:b5:cd:0d:e5:f9:a9:df:32:87:01:87:
6b:29:69:96:90:c8:d1:a7:5d:6f:ce:f3:60:cd:34:
6c:45:50:ca:69:1d:58:ea:e7:6e:8b:7d:08:04:7d:
d6:b8:b4:75:98:e7:b3:e4:aa:1f:41:10:08:92:3d:
fc:1e:20:4b:eb:3e:14:b5:a1:08:b5:39:28:b8:b7:
48:26:89:58:6f:47:d4:cc:8d:67:65:50:e1:8d:80:
bf:0b:75:6d:b9:50:f2:49:04:4d:d2:42:9b:35:ee:
71:2b:6d:b4:dd:0e:b2:b4:96:80:7d:35:47:a3:77:
ce:5e:d3:1d:c1:40:17:78:e5:ec:e9:0a:c2:46:61:
af:01:64:3b:08:f4:6e:a8:1a:e7:20:46:c6:fe:8b:
10:fd:07:a1:01:bf:20:0b:f0:c2:90:46:de:a9:34:
74:c7:77:da:c3:24:a5:a4:26:b4:82:85:07:1b:d2:
10:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D9:7F:35:8E:B5:78:06:2F:D7:93:CD:20:F6:29:D6:FC:EF:83:2D
X509v3 Authority Key Identifier:
keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:20:37:82:b2:28:91:e1:ad:f9:d2:da:cf:59:a1:c8:7d:4a:
03:de:11:bb:37:14:85:11:b8:d5:e0:a0:d9:cb:5f:fd:7b:32:
07:ae:23:3b:10:52:78:e7:cd:09:6c:7c:7e:ce:3c:22:85:dd:
98:9c:f0:a5:b6:14:27:5a:53:d5:6c:22:ea:48:aa:08:ca:30:
ed:f8:17:fc:f7:03:fa:a5:7b:ae:5e:fb:71:f2:cd:d3:d7:c6:
b9:bc:07:26:ae:ab:e8:cf:98:45:c6:92:3a:5a:57:9a:d2:d0:
ef:4b:58:54:7f:b8:e9:2b:bd:87:1c:ae:31:29:67:bf:22:29:
b1:88:f9:44:37:e4:f2:df:be:e5:dd:0e:12:fd:c6:93:a6:97:
14:6c:31:db:15:5b:b1:fd:5f:53:c5:c8:be:ec:f0:1b:f1:33:
70:d2:c0:9f:40:bf:7f:2b:70:80:d2:ca:31:26:85:90:ad:f6:
83:a4:0d:91:b4:eb:30:ac:e3:89:0a:d5:b6:02:01:04:b9:80:
f0:40:9b:d2:d0:83:63:a6:1e:c8:f9:30:60:8c:4c:e8:4e:49:
5d:07:02:32:f8:bb:68:c2:ef:62:21:ce:65:3d:4f:af:40:ef:
04:c3:81:88:28:39:df:e0:7f:44:17:b8:8f:e9:ae:a9:4a:54:
0e:62:b7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:00:02 2026 by rpki-client