This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
File: GagF0CaVVoPz_uVj-Oagonjwv3E.mft (raw, json)
Hash identifier: cGARJdy93XK6Vubm9R22J661i8kIJFk8gis0H/+oBZw=
Subject key identifier: 79:2A:A9:E9:4F:43:02:92:E7:0B:71:34:A1:40:A3:48:2B:3D:58:57
Authority key identifier: 19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71
Certificate issuer: /CN=A912111B/serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71
Certificate serial: 06D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
Manifest number: 06D2
Signing time: Sat 24 Jan 2026 21:27:09 +0000
Manifest this update: Sat 24 Jan 2026 21:27:08 +0000
Manifest next update: Sat 31 Jan 2026 21:27:08 +0000
Files and hashes: 1: GagF0CaVVoPz_uVj-Oagonjwv3E.crl (hash: +Z/SB/rz8S1Ad8fBQ2VtC1Tv86wvlGjI0ed5F5A/CTU=)
2: 6D3057FC85F511EBB5C36F09C4F9AE02.roa (hash: j+dLoRV+1O81d7fGrVAaKGQRyaLFal/pTYtw+D6AbWA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl
rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1752 (0x6d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912111B, serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71
Validity
Not Before: Jan 24 21:27:08 2026 GMT
Not After : Jan 31 21:27:08 2026 GMT
Subject: CN=6975392d-0a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:f3:28:f9:2c:f9:25:69:f1:06:55:db:b4:
a3:81:f5:d8:d9:c3:bc:19:fe:45:03:99:81:78:3a:
d8:9f:05:2d:5e:80:44:51:55:0d:00:4d:1d:06:ed:
96:dd:3e:8b:28:b7:dd:62:8a:d9:93:f4:7e:32:d4:
54:b5:cf:ba:99:00:c7:da:73:d8:26:5f:34:a7:6d:
f8:11:3b:5a:bc:7f:d5:32:61:64:ba:5f:e2:55:b2:
dd:e7:34:3a:80:3f:36:41:0a:d0:fa:95:84:19:ad:
73:71:38:42:b5:e6:26:d9:f3:3f:52:da:b2:b7:9e:
10:c0:09:30:d4:f2:72:d1:bb:a4:28:c0:0c:82:75:
b6:a4:b2:65:ee:52:a1:07:89:8e:ea:30:56:2d:90:
b3:82:c0:89:7e:ab:4f:68:ff:21:09:e6:72:e6:e6:
52:9f:9e:5a:7f:3e:e2:13:bd:47:7a:17:72:cf:78:
c2:44:cd:04:9d:35:c8:ac:7c:6b:8e:ee:6f:67:68:
0e:d0:dd:ed:c5:a0:ec:b1:e3:64:ef:67:ad:fc:25:
f9:96:5b:9e:ed:19:5a:d9:4a:a1:f7:58:ac:9a:58:
55:7e:05:2a:98:e3:0d:85:11:c2:29:06:d6:40:5a:
87:dd:ae:2a:f8:67:4f:f8:04:b7:f3:84:71:e0:81:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2A:A9:E9:4F:43:02:92:E7:0B:71:34:A1:40:A3:48:2B:3D:58:57
X509v3 Authority Key Identifier:
keyid:19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:25:e2:56:58:45:4e:f5:c4:54:27:7f:1e:e9:68:79:a7:a2:
7c:27:d9:49:69:74:8e:fc:95:83:14:19:3d:9c:01:1f:a6:fa:
44:84:3f:51:d5:7f:05:9a:f5:f2:35:6d:e6:e8:ab:bc:16:ca:
84:39:1c:3a:a6:52:5a:cb:58:92:f9:a5:f9:7d:ab:60:15:d3:
c9:86:4f:e8:43:eb:5f:6b:57:de:03:a5:3a:0c:a1:03:5b:04:
72:fd:49:7d:7f:a8:f2:05:ba:b5:3b:1d:ef:29:e2:94:2a:c5:
9a:e5:17:92:3c:3b:bf:ca:15:53:67:76:e6:94:5e:27:59:08:
ce:5e:1c:dd:8a:b0:5f:80:4d:b9:df:98:5d:de:80:02:07:55:
a5:61:0e:52:07:26:11:06:66:dd:c2:24:8e:a6:6d:4a:21:3b:
aa:f1:84:c5:31:93:ad:61:13:cd:fe:20:10:e2:3e:be:f0:87:
02:89:6d:70:67:ca:2f:15:bd:c6:42:03:e3:5a:46:14:f0:57:
e8:ab:6c:9f:33:6f:65:db:19:40:08:ce:33:91:1f:5f:03:8c:
1c:9e:49:4e:ac:2e:6f:0c:c6:6c:ce:fe:ed:60:1b:d6:72:8b:
09:34:e5:89:83:e2:01:32:05:3d:6f:e7:f5:32:a0:0f:29:b5:
1a:dc:bb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:42 2026 by rpki-client