This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
File: Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft (raw, json)
Hash identifier: En0ncmiF6vzSv8rnE6POHkZPz+Z69Ms+bDkI6xRZTKQ=
Subject key identifier: 50:83:D0:1A:35:4E:A8:D2:98:E6:42:6D:9D:E7:99:F2:66:44:B7:5C
Authority key identifier: 19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7
Certificate issuer: /CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7
Certificate serial: 087A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
Manifest number: 0874
Signing time: Sat 24 Jan 2026 20:00:28 +0000
Manifest this update: Sat 24 Jan 2026 20:00:27 +0000
Manifest next update: Sat 31 Jan 2026 20:00:27 +0000
Files and hashes: 1: Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl (hash: dqdc7nRK8nd0C8CAR4/5sQEIu/IGk4TmYetEMKeYCyQ=)
2: B3078DFAE1E411EAAD5D8545C4F9AE02.roa (hash: letKkI3J7GQM6enE4QxR/GGV62ebNvR+dZGy0HTaYqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl
rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2170 (0x87a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91753AE, serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7
Validity
Not Before: Jan 24 20:00:27 2026 GMT
Not After : Jan 31 20:00:27 2026 GMT
Subject: CN=697524db-b0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:bf:ca:ed:32:b1:2a:3f:b3:a9:f7:3a:ac:
c6:c3:84:78:30:08:e5:92:ce:fa:e2:11:5d:4a:38:
9f:24:7d:30:87:e6:38:03:fe:b0:38:2e:7c:57:05:
f0:a6:a9:9d:56:32:80:dd:52:e4:1b:da:e7:66:cb:
8a:c9:ea:51:41:3d:16:d4:73:de:29:03:3e:ee:40:
bd:63:61:40:49:18:54:ba:dd:e8:4d:02:1f:e3:b1:
22:cc:c5:01:79:a8:87:40:a9:3a:8a:0d:bd:b7:f1:
36:ed:4c:5a:9e:60:57:2e:09:1a:00:8a:a7:6b:d5:
ca:6c:ca:b6:93:88:3e:ec:29:2e:e1:53:7f:22:a5:
f4:c8:88:02:7b:72:65:cc:53:ca:dd:eb:c4:d4:47:
42:b5:46:5c:86:e8:c9:ca:04:f2:43:5b:15:48:a8:
0a:13:1c:ef:86:e1:42:67:01:5b:6d:98:73:02:5a:
7f:df:cb:d0:09:2c:01:f0:52:05:9b:2a:55:bb:26:
56:f0:0d:06:cb:a6:37:bf:e7:26:ee:39:01:5d:e4:
dd:30:c0:46:cf:c4:07:8f:9d:21:42:bd:a7:7a:c0:
fc:21:e7:b5:a6:dd:f9:ec:fb:3f:e2:af:e9:e2:b6:
5c:2f:49:a0:ab:5c:42:c4:5a:8c:28:79:62:e0:a2:
a1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:83:D0:1A:35:4E:A8:D2:98:E6:42:6D:9D:E7:99:F2:66:44:B7:5C
X509v3 Authority Key Identifier:
keyid:19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:cb:52:a9:7a:2b:5a:0e:7e:0e:d5:f6:91:78:3a:e1:99:a2:
42:29:4b:c5:cc:a8:a5:97:36:a7:f4:c5:06:bc:c0:f5:8a:cc:
2e:17:8f:24:a2:03:e8:65:3b:62:0c:7e:5f:b2:30:ed:58:a7:
a6:5a:a7:71:d9:89:79:91:5f:91:d1:fe:1f:23:51:76:7c:96:
de:82:33:a8:cd:ff:7f:6a:00:ad:c9:09:0e:5c:8f:79:45:5d:
28:78:51:cc:c8:18:7a:2e:a7:58:14:ef:fd:b2:f8:ac:3b:be:
e2:12:7e:f6:0e:99:07:a6:c0:15:ee:60:4f:02:10:fe:0d:d1:
e0:85:12:2c:bf:83:d9:9a:fb:b2:5d:7e:bc:60:e5:88:b8:cc:
08:91:ce:bd:a6:b4:93:cb:7f:bc:fb:d6:af:a1:2e:92:36:0c:
84:a7:ff:56:9c:4c:af:dd:c0:81:7d:b4:4b:47:fc:5a:52:3b:
bf:01:2c:96:82:7f:c5:39:af:05:7f:74:d1:f7:af:1b:d0:e4:
3b:0c:53:57:f9:b9:a9:98:80:f8:60:c2:c4:d7:59:7b:51:a5:
54:ba:a7:e2:ee:9e:4b:1c:ab:c7:83:dc:02:88:2b:c0:56:4e:
c2:df:ac:e6:31:ae:12:c0:73:7e:f4:2c:a4:5c:c8:9a:83:2b:
cc:14:23:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:19:32 2026 by rpki-client