This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
File: GHkad7eTMW9ffev2Atp8TmnIvGs.mft (raw, json)
Hash identifier: yzw6D0TY29St2eEk39j9p5dYqX+iV/yWa2UiUFh2098=
Subject key identifier: 04:12:FB:B7:4F:2C:FF:00:10:EC:66:32:CC:1F:03:C7:52:BD:03:8D
Authority key identifier: 18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B
Certificate issuer: /CN=A9185259/serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
Manifest number: 3C
Signing time: Fri 23 Jan 2026 06:28:06 +0000
Manifest this update: Fri 23 Jan 2026 06:28:06 +0000
Manifest next update: Fri 30 Jan 2026 06:28:06 +0000
Files and hashes: 1: GHkad7eTMW9ffev2Atp8TmnIvGs.crl (hash: mYmUYb+8tQT/HqB+v2w55zRUodEkgJ+sJxjG74evpOk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl
rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:28:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185259, serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
Validity
Not Before: Jan 23 06:28:06 2026 GMT
Not After : Jan 30 06:28:06 2026 GMT
Subject: CN=697314f6-237b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:e2:02:74:41:a8:e9:65:63:49:93:d1:45:
04:84:06:cd:ab:21:b5:3b:79:ed:c0:81:26:41:4c:
1f:7e:48:d6:34:d5:41:6a:a3:a7:b4:d9:ca:b8:9e:
32:ae:31:e2:73:ef:a5:ab:b8:52:06:cf:e5:de:ed:
45:48:4f:cc:7c:42:b5:68:da:24:02:93:e7:46:a8:
ae:e3:75:3c:2a:5a:f6:59:67:9b:27:cb:d2:47:df:
db:2d:93:80:d1:7f:5a:c2:e5:a5:cf:6e:74:ab:54:
5e:32:4b:01:8a:74:65:11:e0:48:f1:4a:e9:bf:4f:
a7:b5:4d:93:aa:de:8e:dd:48:af:19:e6:db:cf:3a:
6d:a1:2e:7b:05:c4:c8:05:1a:33:a3:be:8e:30:7b:
e8:19:5a:fa:01:28:02:82:c5:17:90:a6:80:fa:34:
9d:19:30:e5:0a:e0:73:34:b7:cd:85:0c:aa:9c:39:
c8:6c:f7:4a:cb:75:6a:84:06:38:c0:4f:e5:f6:e0:
d3:54:db:c8:ef:2d:bd:4c:c2:8a:11:c5:5a:38:81:
21:ad:c9:29:b8:a1:92:ac:93:13:e9:3a:f9:9d:f2:
00:42:13:e2:23:03:a4:94:7f:ce:ea:e5:87:6e:df:
d2:e6:d7:de:67:de:eb:07:06:ac:ff:c9:57:30:ec:
fd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:12:FB:B7:4F:2C:FF:00:10:EC:66:32:CC:1F:03:C7:52:BD:03:8D
X509v3 Authority Key Identifier:
keyid:18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:03:ec:ea:9a:cc:51:0c:62:40:79:1a:ff:a7:83:7b:47:73:
df:52:52:fe:ee:47:ed:bc:02:5a:b6:c9:e5:99:85:e4:63:ac:
b6:9a:90:c1:82:b7:ee:cf:5a:dc:c5:b6:a5:86:3b:92:82:11:
6c:54:42:54:fa:30:1e:9b:db:6e:b3:81:44:ad:5b:28:9d:bc:
41:34:89:be:23:11:64:50:d4:eb:8b:69:2d:7b:f4:52:a0:8c:
7a:0d:ea:40:98:67:b0:1c:bc:7e:38:2e:5a:79:f4:27:38:52:
39:90:1a:1e:77:3e:c7:e0:87:ac:6a:95:f3:a8:47:10:c0:6b:
df:46:15:91:e1:c9:0a:29:01:0e:91:ea:e3:ad:16:a6:23:16:
f3:78:2e:fd:d6:a0:d0:78:98:36:ac:6c:72:d7:f8:ec:ff:13:
9a:b9:cc:16:51:2e:45:36:45:83:ba:17:6d:73:8a:64:e1:e9:
c7:8a:8f:d5:58:de:2c:79:57:92:d1:05:ae:91:6e:08:03:d8:
ee:3c:cd:4d:11:6d:c0:9e:fd:1b:5e:33:2e:4b:b2:38:a8:00:
9c:96:e6:bc:97:ad:3e:55:fa:a5:ae:7c:fe:dc:f5:59:53:26:
0f:de:86:1d:81:28:3c:52:94:67:de:e4:39:99:ce:88:ea:76:
f8:4f:73:97
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NTI1OTExMC8GA1UEBRMoMTg3OTFBNzdCNzkzMzE2RjVGN0RFQkY2MDJEQTdDNEU2
OUM4QkM2QjAeFw0yNjAxMjMwNjI4MDZaFw0yNjAxMzAwNjI4MDZaMBgxFjAUBgNV
BAMMDTY5NzMxNGY2LTIzN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4ZuICdEGo6WVjSZPRRQSEBs2rIbU7ee3AgSZBTB9+SNY01UFqo6e02cq4njKu
MeJz76WruFIGz+Xe7UVIT8x8QrVo2iQCk+dGqK7jdTwqWvZZZ5sny9JH39stk4DR
f1rC5aXPbnSrVF4ySwGKdGUR4EjxSum/T6e1TZOq3o7dSK8Z5tvPOm2hLnsFxMgF
GjOjvo4we+gZWvoBKAKCxReQpoD6NJ0ZMOUK4HM0t82FDKqcOchs90rLdWqEBjjA
T+X24NNU28jvLb1MwooRxVo4gSGtySm4oZKskxPpOvmd8gBCE+IjA6SUf87q5Ydu
39Lm195n3usHBqz/yVcw7P2RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBBL7t08s
/wAQ7GYyzB8Dx1K9A40wHwYDVR0jBBgwFoAUGHkad7eTMW9ffev2Atp8TmnIvGsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1MjU5LzA4NEY5MjU2OUNG
OTExRjA4ODEyREUxRUM0RjlBRTAyL0dIa2FkN2VUTVc5ZmZldjJBdHA4VG1uSXZH
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvR0hrYWQ3ZVRNVzlmZmV2MkF0cDhUbW5JdkdzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1
MjU5LzA4NEY5MjU2OUNGOTExRjA4ODEyREUxRUM0RjlBRTAyL0dIa2FkN2VUTVc5
ZmZldjJBdHA4VG1uSXZHcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAMID7OqazFEMYkB5Gv+ng3tHc99SUv7uR+28Alq2yeWZheRjrLaakMGC
t+7PWtzFtqWGO5KCEWxUQlT6MB6b226zgUStWyidvEE0ib4jEWRQ1OuLaS179FKg
jHoN6kCYZ7AcvH44Llp59Cc4UjmQGh53Psfgh6xqlfOoRxDAa99GFZHhyQopAQ6R
6uOtFqYjFvN4Lv3WoNB4mDasbHLX+Oz/E5q5zBZRLkU2RYO6F21zimTh6ceKj9VY
3ix5V5LRBa6RbggD2O48zU0RbcCe/RteMy5LsjioAJyW5ryXrT5V+qWufP7c9VlT
Jg/ehh2BKDxSlGfe5DmZzojqdvhPc5c=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:44:44 2026 by rpki-client