This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
File: gJ7_H3gZuBdR8XerWv7YK8wypWk.mft (raw, json)
Hash identifier: 6HJCFRKYdzy7dA1HbujKBb7zPrrj2EnRuHuSNi2mdY8=
Subject key identifier: 4A:21:10:09:35:95:BB:CC:5F:C7:49:22:E2:42:A4:59:5B:FE:50:83
Authority key identifier: 80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69
Certificate issuer: /CN=A9158028/serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
Certificate serial: 0693
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
Manifest number: 068D
Signing time: Sat 24 Jan 2026 21:45:41 +0000
Manifest this update: Sat 24 Jan 2026 21:45:41 +0000
Manifest next update: Sat 31 Jan 2026 21:45:41 +0000
Files and hashes: 1: gJ7_H3gZuBdR8XerWv7YK8wypWk.crl (hash: js51amDeji3h2lo1+WRxV5ZZuTWd5E7bdb5DUDBdbXg=)
2: 687D7178B85D11EBB2E17F26C4F9AE02.roa (hash: +tI56XBeGW4f/ZvoEb+YONcyvmeUooJFS+xtnAK+AuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl
rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1683 (0x693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158028, serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
Validity
Not Before: Jan 24 21:45:41 2026 GMT
Not After : Jan 31 21:45:41 2026 GMT
Subject: CN=69753d85-aeb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:d2:40:7b:47:63:99:38:33:93:f7:b1:02:
64:0c:ca:98:72:66:27:f9:5f:2a:21:3b:85:c1:e3:
08:20:01:2e:2c:64:6b:c9:f5:0a:11:c0:6c:a6:e1:
3d:2d:32:e4:79:1d:f5:30:dd:f0:a9:98:d0:13:4b:
2b:59:3c:9c:b3:44:26:ba:5c:1c:69:85:a6:a7:05:
c4:f4:29:42:ac:53:d6:8e:3c:97:53:b1:fb:91:ec:
54:fe:36:dc:8c:e7:51:74:0f:24:1d:35:41:af:dc:
e0:8f:43:1d:ce:a8:73:79:cb:96:ed:f1:2f:69:18:
9f:64:11:b7:eb:77:b5:79:4e:13:ca:db:41:15:99:
9a:8e:c7:5b:53:c4:a2:2d:02:f9:b5:10:eb:b4:78:
1f:b3:33:d5:bb:34:19:7f:9e:1c:06:a7:d3:27:0b:
9f:b4:b9:11:65:58:fe:21:7e:1a:7d:ba:cc:6d:a9:
e2:1a:df:c5:8f:c8:70:48:e1:01:b8:ed:c6:f0:03:
bc:a3:0f:e8:5e:44:ee:f8:02:41:52:ca:6e:04:2e:
3a:ff:4d:17:97:3f:57:76:a2:4c:14:cd:03:ed:1d:
a3:b6:4a:49:a6:a3:3f:34:f0:3a:fb:c2:1d:00:2a:
20:23:0e:ae:92:28:2f:79:fe:33:58:d0:8b:ba:90:
a6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:21:10:09:35:95:BB:CC:5F:C7:49:22:E2:42:A4:59:5B:FE:50:83
X509v3 Authority Key Identifier:
keyid:80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b8:87:d1:c6:a4:d4:65:76:15:30:2a:ba:68:be:b4:88:37:
83:df:ea:6a:2d:36:fc:38:6a:da:57:a0:48:0f:74:18:d7:ca:
ae:3e:5b:3a:4c:c2:70:80:57:e7:6d:dc:e0:fe:9d:6b:16:21:
45:de:fe:94:97:26:2e:44:f9:8d:33:3c:a2:6c:ea:6e:09:fe:
41:4c:95:a0:2c:df:90:ce:f5:9f:c1:13:0a:5b:9d:d1:1f:7d:
39:b1:a6:4c:31:1b:98:b6:12:73:1d:03:50:55:c3:09:a7:2f:
1f:ac:e5:d3:2f:63:64:81:f3:c5:41:e8:6b:1a:1c:cf:a1:2f:
0b:12:a8:5c:8a:f8:54:90:72:9e:c0:59:bd:1b:28:ea:20:ad:
41:8d:aa:f1:2f:2a:2f:ce:d9:18:8d:76:e5:4a:67:99:45:95:
8d:68:54:e9:db:b7:82:9a:00:64:83:40:ba:4d:e6:2b:79:e3:
10:ff:03:44:b5:8f:71:48:0e:82:75:d2:69:85:09:17:7d:b7:
d2:95:bc:73:db:35:ed:db:84:f9:9b:c5:be:bd:48:dc:46:56:
e1:5e:33:8c:6e:7b:77:23:fa:6a:7d:f4:66:7f:4e:bb:4d:07:
bd:8f:be:3d:ba:84:b3:a3:b3:98:a3:22:06:f9:8d:c4:ee:3c:
19:50:2c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:35:44 2026 by rpki-client