This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
File: Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json)
Hash identifier: qM0/GoaN878MKTTEfleMCzXJ9gbLyGqPPT9p+a7ALM4=
Subject key identifier: FE:D8:A1:78:7E:F3:E4:8D:9A:B1:9B:69:4A:B5:A4:12:DC:E0:1E:A4
Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4
Certificate issuer: /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
Manifest number: 020A
Signing time: Sun 25 Jan 2026 01:39:34 +0000
Manifest this update: Sun 25 Jan 2026 01:39:34 +0000
Manifest next update: Sun 01 Feb 2026 01:39:34 +0000
Files and hashes: 1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: RvxrQczlUlSu/TKWB9F8fYcYUY9BC84fdPrD+z7eZLg=)
2: 952F87FAEBDA11F082D0705C6C6F56BC.roa (hash: io0ecjEN2RzxSv5iuJw4fnOPjwrnvut5d2KzE1GcZUc=)
3: 59ADC606EBDA11F0868F86546C6F56BC.roa (hash: ONcczDIIfK3yhm1H64UIKDcxoQLX5CkoZ0+RbpZl65o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl
rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
Validity
Not Before: Jan 25 01:39:34 2026 GMT
Not After : Feb 1 01:39:34 2026 GMT
Subject: CN=69757456-b30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:32:98:7b:76:e7:1e:7e:40:2c:b1:85:22:eb:
71:f6:89:f9:c5:1b:22:85:cc:67:ff:23:3e:d2:58:
0d:26:20:b2:fb:1d:80:76:24:d0:f4:57:64:c3:ae:
7e:6d:4a:fd:d6:49:3b:1a:75:91:b9:58:5f:bb:b3:
30:5b:c1:e7:9d:f9:cd:24:bd:9d:78:c0:7c:f9:3f:
6c:c7:27:48:fe:97:19:55:20:03:71:65:cc:7e:59:
95:95:3b:4d:01:cb:26:f3:6b:5d:57:1d:f9:5c:2d:
b5:23:be:f6:b2:d7:68:30:96:35:06:7d:94:92:44:
3d:79:e2:90:5a:c5:19:bb:c0:ce:ef:5b:ad:b3:af:
bb:27:4a:39:28:76:d7:b8:b5:af:f3:26:79:e6:a7:
41:30:4a:19:74:72:20:86:3c:5f:b5:13:66:4d:98:
47:d2:96:ce:95:96:20:86:76:09:7a:fd:83:2b:99:
68:a7:6c:01:d5:cb:66:bf:ab:7b:b4:7a:60:3f:08:
49:a2:3e:70:63:7c:ca:36:d6:76:d6:f1:31:1c:00:
42:f2:dc:3c:a8:e1:26:96:89:fe:3f:0e:cb:38:88:
e7:de:a7:99:b9:22:e1:29:82:a1:f7:6d:d5:14:5f:
52:6d:4e:22:ea:ab:f0:22:e3:72:be:03:e1:52:db:
e2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D8:A1:78:7E:F3:E4:8D:9A:B1:9B:69:4A:B5:A4:12:DC:E0:1E:A4
X509v3 Authority Key Identifier:
keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:9a:73:c2:d9:ff:e7:fe:87:5e:06:f6:22:a7:d5:e9:bd:e4:
da:d4:ff:06:8a:c6:c3:90:c9:99:63:86:51:9a:70:1b:f3:c6:
2b:9e:b4:c7:75:a6:e0:ba:9e:6c:44:cf:14:85:77:fd:ff:e0:
95:de:65:5b:d9:68:1d:47:15:9f:18:91:b3:80:97:fc:08:3d:
ab:28:f8:1f:32:53:d4:cd:61:bb:09:9d:1a:90:05:5c:cc:3d:
84:f4:cd:3d:5f:66:ec:cc:3a:d2:8a:f4:59:d8:39:e8:87:03:
f3:4d:ff:7e:0f:08:b6:db:d6:a0:70:bf:89:4e:0f:d3:b7:21:
69:28:14:20:42:84:35:27:6f:d5:e1:17:01:f7:08:9b:32:c2:
d3:ab:fc:c6:e3:a0:51:d4:c4:c8:62:f2:bf:a6:a4:0a:cf:f2:
4f:e1:46:c4:52:6f:36:29:07:0e:ab:e2:da:aa:4a:e9:b6:7a:
e9:e9:c4:cb:84:0b:c0:43:d0:2f:7b:dc:97:4b:8d:05:75:13:
aa:0e:f7:10:90:b8:93:d5:89:0d:fd:30:8b:4a:f1:c4:cd:29:
5d:a7:11:c4:00:0f:0e:35:75:a2:ba:97:63:20:f7:92:62:23:
cc:86:03:55:38:fc:4a:b0:41:17:a6:27:88:7e:5b:cd:5a:a3:
62:01:bf:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U5NTExMTAvBgNVBAUTKDFBMEY3ODZGMTFCOEUxN0Q0NURFMUVEQ0U2MUUxNjAw
REQ0OTMwQTQwHhcNMjYwMTI1MDEzOTM0WhcNMjYwMjAxMDEzOTM0WjAYMRYwFAYD
VQQDDA02OTc1NzQ1Ni1iMzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAgjKYe3bnHn5ALLGFIutx9on5xRsihcxn/yM+0lgNJiCy+x2AdiTQ9Fdkw65+
bUr91kk7GnWRuVhfu7MwW8HnnfnNJL2deMB8+T9sxydI/pcZVSADcWXMflmVlTtN
Acsm82tdVx35XC21I772stdoMJY1Bn2UkkQ9eeKQWsUZu8DO71uts6+7J0o5KHbX
uLWv8yZ55qdBMEoZdHIghjxftRNmTZhH0pbOlZYghnYJev2DK5lop2wB1ctmv6t7
tHpgPwhJoj5wY3zKNtZ21vExHABC8tw8qOEmlon+Pw7LOIjn3qeZuSLhKYKh923V
FF9SbU4i6qvwIuNyvgPhUtvi+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7YoXh+
8+SNmrGbaUq1pBLc4B6kMB8GA1UdIwQYMBaAFBoPeG8RuOF9Rd4e3OYeFgDdSTCk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk1MS82RjQ5Qjk5MkRC
NzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRYMUYzaDdjNWg0V0FOMUpN
S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dnOTRieEc0NFgxRjNoN2M1aDRXQU4xSk1LUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTk1MS82RjQ5Qjk5MkRCNzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRY
MUYzaDdjNWg0V0FOMUpNS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCmnPC2f/n/odeBvYip9XpveTa1P8GisbDkMmZY4ZRmnAb88YrnrTH
dabgup5sRM8UhXf9/+CV3mVb2WgdRxWfGJGzgJf8CD2rKPgfMlPUzWG7CZ0akAVc
zD2E9M09X2bszDrSivRZ2DnohwPzTf9+Dwi229agcL+JTg/TtyFpKBQgQoQ1J2/V
4RcB9wibMsLTq/zG46BR1MTIYvK/pqQKz/JP4UbEUm82KQcOq+Laqkrptnrp6cTL
hAvAQ9Ave9yXS40FdROqDvcQkLiT1YkN/TCLSvHEzSldpxHEAA8ONXWiupdjIPeS
YiPMhgNVOPxKsEEXpieIflvNWqNiAb8Q
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:27 2026 by rpki-client