This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
File: GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft (raw, json)
Hash identifier: 5oX0L5lX7cfrtUzDqsXd7QufZiX7gZoYkAeCj/853Kc=
Subject key identifier: E9:7D:FD:A3:D0:83:66:19:32:55:3C:45:32:D7:AE:8B:BE:AA:8C:06
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Certificate issuer: /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial: 0550
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
Manifest number: 04EB
Signing time: Sat 24 Jan 2026 23:09:26 +0000
Manifest this update: Sat 24 Jan 2026 23:09:26 +0000
Manifest next update: Sat 31 Jan 2026 23:09:26 +0000
Files and hashes: 1: GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl (hash: E5vuH3t5YuJ4/BOA2g7npMdu+UtRpWmmCyuI2QQ8p8Q=)
2: 4472E7B85B6011F0A2E8311CC4F9AE02.roa (hash: 9o7EsH+iPgvkXQNFFp/VVrhEZvYWAqIPo/P6jCxkWl0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:09:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1360 (0x550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91618BC, serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Validity
Not Before: Jan 24 23:09:26 2026 GMT
Not After : Jan 31 23:09:26 2026 GMT
Subject: CN=69755126-640c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:60:51:07:10:48:fd:00:9c:ff:26:92:57:
8e:29:b5:59:dc:99:94:88:3c:fd:4c:ed:26:9a:30:
34:c2:f0:27:ca:3f:11:3f:26:5e:5d:d5:b9:43:67:
41:05:23:b4:84:36:53:a8:54:ac:2d:d1:af:3a:5d:
ed:d0:bb:74:9e:e5:f8:9d:33:73:05:db:0b:75:23:
3a:ca:63:4f:6e:b7:a5:43:55:fc:0c:60:f8:5a:31:
98:ba:12:e5:26:b3:e7:b1:08:e3:26:c2:5d:fd:1a:
35:3d:93:fb:d8:c5:07:e3:f9:06:57:1e:e4:85:8d:
41:86:25:78:81:34:a6:c8:76:f5:18:98:55:54:11:
83:f9:c6:bb:bd:d8:fc:44:7d:1f:fa:01:8c:09:71:
6f:55:aa:47:3e:46:4f:72:87:b0:ac:89:a6:1d:1a:
cf:ef:68:65:30:ba:05:b8:48:b2:e3:fc:76:e5:61:
cb:b1:4d:aa:17:22:a3:af:c7:7d:60:67:b8:53:08:
2d:ca:89:b4:80:85:58:d7:2d:19:0a:80:b3:2d:f6:
b8:a4:16:85:96:fe:6f:63:97:42:68:68:27:a6:b5:
ec:d4:51:31:07:48:18:34:4b:c1:b4:c0:18:58:6b:
84:1f:a9:e0:ee:08:15:e9:90:75:e2:df:f2:65:d0:
e1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7D:FD:A3:D0:83:66:19:32:55:3C:45:32:D7:AE:8B:BE:AA:8C:06
X509v3 Authority Key Identifier:
keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d0:fc:96:aa:23:ac:14:2e:00:db:63:dc:2c:be:18:07:a3:
67:27:c9:75:7a:11:fa:5e:f2:c7:75:d8:2a:e2:93:29:32:c4:
51:1e:f5:30:20:1a:87:96:42:8b:46:3f:aa:44:f7:9c:e4:01:
ac:55:88:54:82:e3:3e:69:ba:5b:2f:6e:c4:f3:57:e9:f2:7d:
4f:c1:52:27:96:37:a3:b0:62:96:e0:76:be:05:d5:60:33:3a:
cc:7a:71:9f:81:ae:16:f1:d8:de:de:47:0c:73:3b:1f:63:90:
fd:56:88:78:39:21:1f:18:f4:f1:3b:9b:d0:5f:ad:90:36:47:
e6:28:de:d2:73:ce:ca:81:15:56:35:9c:35:e4:4d:54:84:cc:
95:ce:5c:c1:cc:04:d0:91:3e:88:cf:03:25:20:b9:7a:f9:31:
89:56:48:21:17:68:24:55:5e:d2:91:13:3e:f4:d5:d7:5d:de:
b3:3b:0e:56:b6:4b:e6:a1:02:ed:0b:4f:a6:40:6f:db:e8:72:
45:f3:23:7d:2c:e5:7e:eb:bc:e1:bb:1d:b8:1a:7e:e7:42:ac:
b2:0a:60:22:ef:e9:e8:2d:50:5d:fb:b6:37:b8:80:d4:ca:3b:
47:0d:c5:91:2f:ab:7e:2a:26:50:de:2f:b7:ce:e7:c3:b5:36:
87:61:52:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:13:36 2026 by rpki-client