This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
File: gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft (raw, json)
Hash identifier: yM2oEBgQCLj5/8fsjCxkCQRw7zeQNLcuop3ymqQRP+U=
Subject key identifier: 16:3C:A6:93:C0:E8:C1:3C:4E:56:10:99:32:A9:CD:46:B1:54:91:EC
Authority key identifier: 80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54
Certificate issuer: /CN=A9146EB7/serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254
Certificate serial: 8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
Manifest number: 8B
Signing time: Fri 23 Jan 2026 05:38:34 +0000
Manifest this update: Fri 23 Jan 2026 05:38:34 +0000
Manifest next update: Fri 30 Jan 2026 05:38:34 +0000
Files and hashes: 1: gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl (hash: +4ZJ/QyEnj83sROxzN9Uoc4lEHyZia9PtZtWst5q9QQ=)
2: 04FD874E1FDF11F094B3136AC4F9AE02.roa (hash: 1VVixJvC9Ao+Yu3/0+4xin/rpRbqJh0O4hx1E0p4fGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl
rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 05:38:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146EB7, serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254
Validity
Not Before: Jan 23 05:38:34 2026 GMT
Not After : Jan 30 05:38:34 2026 GMT
Subject: CN=6973095a-ef20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:77:29:74:de:08:35:46:77:78:83:7c:6b:
16:78:55:9e:47:37:71:ae:a6:78:18:79:a6:e3:9e:
4c:85:af:b6:95:d9:c4:8b:31:00:ae:c9:2a:38:c0:
01:af:d5:96:fa:51:e5:29:41:8b:bc:b8:a0:14:35:
46:f3:01:cd:09:87:58:7e:b2:37:ca:05:cb:6d:99:
45:85:fe:14:74:a1:ea:dd:19:1b:ea:41:c8:63:3e:
38:0d:a1:ea:74:69:4e:72:62:68:9b:94:55:92:96:
c8:c2:eb:08:6f:74:c8:44:54:3f:59:71:d4:a9:a5:
4b:d6:d5:06:25:84:50:6a:f1:d2:d0:ed:0e:6d:4f:
10:c6:d6:89:09:5d:7d:72:32:7f:b1:3c:c8:c3:db:
6a:85:a7:11:43:c6:ec:4a:90:b1:75:ff:93:eb:28:
b7:77:f7:87:39:e0:0a:9e:c4:0c:59:e6:bc:0a:df:
46:d6:e6:ec:d4:26:48:78:69:08:a3:86:bb:b3:a9:
af:22:92:3f:6d:5c:cd:5f:10:88:02:12:3b:a7:39:
47:e1:73:ee:e5:59:b6:46:72:cb:5a:7b:19:55:b2:
e1:8b:1c:b5:cf:05:80:39:d5:6b:01:32:b8:e7:15:
6f:55:aa:88:31:fa:d1:a0:ab:be:06:df:3e:0e:16:
0a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3C:A6:93:C0:E8:C1:3C:4E:56:10:99:32:A9:CD:46:B1:54:91:EC
X509v3 Authority Key Identifier:
keyid:80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f4:98:bb:32:ae:57:d1:e8:4f:d7:c6:1e:19:8e:c1:fb:96:
ca:89:7f:b5:2a:07:e3:2e:0c:18:36:eb:f0:bd:54:d4:df:3e:
75:9a:49:b9:e0:72:a3:5c:79:43:14:a8:26:52:35:84:ab:dd:
a2:a3:ea:cf:d6:95:4b:c7:90:71:91:38:b3:28:87:25:23:36:
8c:ea:62:52:a9:f5:30:6a:8f:6f:9d:9a:17:f8:80:44:fa:13:
fd:be:af:0f:68:92:af:76:2e:b1:31:d7:f0:b4:c6:5e:9f:a9:
91:b9:5e:d7:ac:6e:d4:9f:3f:48:28:eb:fc:78:78:b7:11:1c:
f9:14:63:2b:60:96:97:d4:84:a6:ff:c9:af:0e:ad:e2:64:29:
ba:85:89:29:9f:7d:8f:4f:4c:66:39:c7:99:c5:cf:46:1a:7d:
82:5e:4e:b1:d1:1b:fe:4f:ba:34:a5:3b:a1:4b:3f:1b:14:36:
71:ef:1a:cc:c8:6e:4e:12:6c:f0:8c:a7:49:07:ab:a9:4f:c7:
c2:1f:a6:f9:e9:2d:c6:5d:41:f0:af:5c:31:e5:e6:0c:c4:4c:
99:e2:80:9c:3b:4d:0d:52:6b:a1:27:72:7b:6d:36:ab:a3:46:
74:eb:8f:ad:aa:2f:bd:14:15:68:a1:a3:59:f4:ff:2f:58:72:
00:16:24:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:31:18 2026 by rpki-client