This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
File: GxesPclsojRSUCPv02J-ks2IR0g.mft (raw, json)
Hash identifier: 4//u98uQ1BC0L72R1NF/RPn0MV+ymbT1QPISXZ0ceJc=
Subject key identifier: 52:0F:0D:66:96:8F:E1:E7:A1:C5:26:5D:12:5D:DF:D8:D1:B3:5E:A0
Authority key identifier: 1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48
Certificate issuer: /CN=A917DBF2/serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748
Certificate serial: 1DB1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
Manifest number: 1D72
Signing time: Sat 24 Jan 2026 15:56:28 +0000
Manifest this update: Sat 24 Jan 2026 15:56:28 +0000
Manifest next update: Sat 31 Jan 2026 15:56:28 +0000
Files and hashes: 1: GxesPclsojRSUCPv02J-ks2IR0g.crl (hash: gdb3DpRy7JUNMx2Kl9NP+baF1y8MYhVyf7LRixawAKU=)
2: 4E2669F4FF3B11EB910E8847C4F9AE02.roa (hash: RxEjxFNvI0DOGeP3888S1tn030BuNHUdNfLt3di15l4=)
3: 8A1AF86E94BC11EC9E49DB41C4F9AE02.roa (hash: n6ab3BTwAcpH4LegBC83qaXuTY61rSuzXQeixKGRCQ8=)
4: 89654CDAB83B11EFAA80DD09C4F9AE02.roa (hash: wZqrfI6axJ6OhiwV+iuxvLbJgC05OEzm0nCXJ1L7s34=)
5: C154DA14E85C11EBA2171A25C4F9AE02.roa (hash: ZoYRtsKN6J+JTMHnmtPtNWovLxxrXzjOLNI6FTTDrJk=)
6: 907B9B20E8AD11EBAA895D0AC4F9AE02.roa (hash: Yy12wxP/cM0LLNtHiB2aLkhSaVEMx94WCa7jMCYf9WM=)
7: C2EECBA0E85C11EBA2171A25C4F9AE02.roa (hash: i8SkLvPy/XtXc4ZuxfbQ0jMccOT4jPJgyB/aqJ2e6A0=)
8: 4D609E86FF3B11EB910E8847C4F9AE02.roa (hash: IlNlaUUrIO5psWG9zVe/2cJLa9A72orRKr8ki0wRJ+c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl
rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7601 (0x1db1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DBF2, serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748
Validity
Not Before: Jan 24 15:56:28 2026 GMT
Not After : Jan 31 15:56:28 2026 GMT
Subject: CN=6974ebac-7811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7a:9e:9d:db:bc:13:a0:a3:d1:b2:80:f7:23:
0d:ea:96:2c:1b:cf:c4:48:c6:20:aa:dc:f1:83:48:
fd:ba:62:65:89:62:2f:ad:f9:89:d6:0f:3f:6e:a1:
72:67:5d:66:9d:72:ac:83:e3:81:02:b4:a2:ab:4a:
35:4f:df:b3:d1:09:97:03:bc:83:c5:9f:92:ec:93:
13:39:72:d6:68:87:2e:90:bf:bb:9a:93:00:a7:91:
00:18:a8:31:28:12:b7:1d:1b:7c:32:6a:7d:86:de:
1d:fc:da:1b:c3:cd:9e:cd:b0:d5:a9:e5:4a:35:64:
f1:58:e6:a8:bd:68:58:ff:43:8d:8d:01:29:bd:6f:
85:ae:f8:c9:d7:5b:f9:9a:1a:de:85:16:da:fa:6a:
3d:bd:1c:d5:27:9b:a4:b7:de:4c:7b:89:df:b0:4a:
2f:a1:6a:f5:6a:52:ac:24:7e:ef:ac:23:37:85:be:
c3:60:ff:07:19:2c:a1:2c:1d:97:dc:75:94:99:2d:
8d:bc:d8:2d:0d:22:d8:06:fe:aa:04:53:1c:ac:da:
fa:b5:66:1a:e0:9c:31:af:5e:e7:ac:89:5f:b4:2c:
57:2e:90:74:de:9b:b1:87:23:89:6b:d4:b7:60:18:
b4:70:80:a8:e5:c0:65:52:a8:ee:41:7c:0a:d4:45:
cc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0F:0D:66:96:8F:E1:E7:A1:C5:26:5D:12:5D:DF:D8:D1:B3:5E:A0
X509v3 Authority Key Identifier:
keyid:1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:58:46:db:db:56:a7:33:ab:e4:14:93:00:f6:e8:3e:69:fa:
45:ba:38:54:a7:e9:56:64:f6:23:04:02:01:74:fd:61:76:ae:
f5:03:49:31:71:fa:88:59:b2:ae:1c:e1:7b:a2:eb:fe:11:d8:
96:44:d6:a2:cf:4d:96:9b:85:46:f4:9c:58:61:38:83:1c:b1:
a1:22:b5:f9:d5:a3:78:c3:65:eb:67:63:cb:5d:6b:cd:a4:ad:
44:61:39:a1:e3:c4:d4:36:01:c8:03:5e:03:47:ff:37:c8:c8:
91:3a:2c:74:49:4c:32:87:1f:89:ea:c0:44:91:31:7c:9f:41:
bb:fd:0d:7f:c3:89:e6:d2:ad:58:57:e0:8a:e5:0c:a5:2c:56:
13:f8:be:59:f4:9e:d0:bc:93:e7:fa:be:f5:5e:ce:e8:80:ae:
ec:3f:41:5c:4d:d2:2b:69:af:2a:ca:c8:68:75:07:19:7b:cc:
88:1a:18:53:df:d2:fd:80:d3:58:c6:24:2a:8d:d7:91:86:3b:
a9:c0:97:3e:93:31:75:e6:9d:15:fe:e3:76:50:6c:b1:80:3c:
de:ad:68:04:9e:38:ee:47:f9:43:3f:93:3f:b6:79:0f:54:c8:
ab:e9:b2:09:78:3b:d0:ba:9d:41:1a:78:a5:3a:e2:8d:b1:d0:
53:ad:9c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:07 2026 by rpki-client