This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft
File: g1sFZ9k-rArjJOofFrPDnLGzOI4.mft (raw, json)
Hash identifier: 9+ZSX3gfTO2x8aT1M0YSy38oPnh08bAW8rEqtzMliBA=
Subject key identifier: B5:86:43:41:87:C8:3C:46:78:D2:B1:3F:5C:6A:A8:43:B3:8E:7F:E2
Authority key identifier: 83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E
Certificate issuer: /CN=A911F5B7/serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E
Certificate serial: 0B42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft
Manifest number: 0D36
Signing time: Sat 24 Jan 2026 18:46:34 +0000
Manifest this update: Sat 24 Jan 2026 18:46:33 +0000
Manifest next update: Sat 31 Jan 2026 18:46:33 +0000
Files and hashes: 1: g1sFZ9k-rArjJOofFrPDnLGzOI4.crl (hash: NXyColjz6i9/KEFu6sCVaFA+LugGAeGlcblJae3fzjs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl
rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:46:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2882 (0xb42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F5B7, serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E
Validity
Not Before: Jan 24 18:46:33 2026 GMT
Not After : Jan 31 18:46:33 2026 GMT
Subject: CN=6975138a-edc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:1c:6b:90:0d:55:31:d7:9d:37:28:78:80:
49:62:60:02:62:33:8a:c3:b8:2e:93:98:f1:69:d2:
45:9b:17:45:12:70:05:9b:c1:ff:a5:42:8b:1d:65:
c7:19:2d:8f:0e:7f:1b:b4:1e:7a:f1:24:ca:ea:d5:
54:a2:45:a0:bb:c4:83:b3:82:3f:03:56:66:42:85:
4a:09:e0:c5:4f:98:af:39:af:a6:d6:95:91:4b:a0:
2f:be:54:35:aa:69:c1:a7:bf:4f:32:a3:47:e9:94:
de:4f:99:d8:d7:c3:98:8c:80:24:ae:40:4c:68:b5:
e8:f0:d0:ef:11:1c:3a:08:da:69:c6:4b:03:a6:c9:
1a:d9:5b:fd:b6:43:1b:a5:b5:c9:74:d8:45:f7:c5:
58:c7:10:d2:8e:b2:52:f9:85:8a:d3:79:e9:12:e0:
64:51:c8:85:a3:6d:a8:c3:18:b8:24:f0:47:1a:ce:
30:33:54:66:ee:8d:4a:58:e9:53:ff:b7:16:b1:30:
40:78:10:80:12:36:96:91:7d:10:67:f7:96:d9:b9:
c9:3a:93:ef:1e:68:04:be:f0:39:4f:64:d7:27:d6:
f8:63:9b:bc:c6:41:43:03:d7:e6:66:51:ee:1c:1b:
d9:b9:ba:11:16:f2:7c:41:c5:d8:2c:2b:ec:57:a2:
aa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:86:43:41:87:C8:3C:46:78:D2:B1:3F:5C:6A:A8:43:B3:8E:7F:E2
X509v3 Authority Key Identifier:
keyid:83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d8:27:a0:2f:0a:6f:6d:ca:2f:07:4e:2b:74:c3:84:44:dc:
ee:a4:b6:e5:80:14:a8:ec:ec:c8:eb:bb:24:26:c3:0d:7e:98:
72:15:6a:1c:30:86:7b:e1:1b:41:5d:d8:ed:7c:8e:c3:8c:48:
41:04:27:be:02:67:3d:58:02:cb:85:7d:d9:02:05:71:d1:1b:
2a:19:b0:d4:b1:02:27:05:62:b2:c4:94:59:f0:24:79:4b:fb:
d9:73:db:4b:cf:1b:49:d7:5c:73:6a:88:5b:c8:c0:4a:f8:16:
b5:b9:8f:95:f7:f6:10:4a:cf:d8:55:0f:c4:8e:41:94:da:c2:
fc:6e:30:04:16:07:0f:50:f8:37:4f:fb:0c:bd:11:9f:35:60:
75:76:3c:69:c6:e7:e1:97:9a:18:21:84:e1:fd:a4:3b:36:21:
fa:4c:9a:87:79:7d:7a:c8:1c:d0:46:f7:b2:a9:4b:a1:b4:ab:
4a:7f:d0:72:25:1e:44:96:17:e2:a3:89:df:5d:f3:4a:f0:d6:
a9:c7:8f:83:c3:da:c2:d5:77:06:43:77:fa:0b:a6:58:3f:76:
79:8c:ed:50:c2:0d:68:fb:3f:16:60:a0:d6:27:8c:47:9b:81:
d1:b0:f3:bf:7e:1e:28:bd:16:6b:d3:61:9e:50:98:97:b7:05:
20:7a:b4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:32 2026 by rpki-client