This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
File: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft (raw, json)
Hash identifier: WdV3AWw0qhxZUlQ+Kf0+yH22cjog0IU313IJ7DbjWdw=
Subject key identifier: 6B:A1:A0:1A:F3:A8:39:C7:F4:25:F7:FA:66:89:C7:8F:5F:42:9A:4C
Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
Certificate issuer: /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Certificate serial: 030D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
Manifest number: 02FB
Signing time: Sun 25 Jan 2026 00:28:53 +0000
Manifest this update: Sun 25 Jan 2026 00:28:53 +0000
Manifest next update: Sun 01 Feb 2026 00:28:53 +0000
Files and hashes: 1: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl (hash: L+jKyAvaItNc8t5ok5miBla+fDs9KFjIaIKucdWVdio=)
2: CF0D85CEFE5211EFA5AB8F82C4F9AE02.roa (hash: gpdjBjddXDySP7XwpO7PUD9YoIqfcH1r8H5PmyuUxoY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 781 (0x30d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187F7E, serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Validity
Not Before: Jan 25 00:28:53 2026 GMT
Not After : Feb 1 00:28:53 2026 GMT
Subject: CN=697563c5-1ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:4e:38:53:f6:af:0a:b4:fe:80:6f:55:c5:
c1:ca:f2:1e:30:a8:2a:a8:2c:ea:5a:18:ec:06:0c:
14:04:80:a2:e7:ed:38:92:a5:e1:db:4e:4d:b2:72:
c2:6b:f2:e7:02:67:47:72:fb:3c:05:f1:a0:32:64:
1c:42:02:11:77:13:8c:8c:b9:73:06:35:da:3c:68:
81:81:93:ae:97:1c:99:4f:47:f9:5f:f0:ed:99:6d:
a7:5a:e3:17:77:8d:82:57:3b:01:16:d0:82:fa:40:
f3:c1:b3:ac:e4:3d:b0:dc:52:77:50:bd:d1:e9:ed:
89:7a:0b:57:bf:c3:aa:85:ca:24:43:fe:bf:82:03:
cf:84:a7:b1:47:f8:08:66:a3:3c:b0:e1:45:cd:27:
e8:06:ca:bd:75:a2:d8:6d:ab:25:d7:f3:9e:ad:43:
9b:19:28:fe:6a:d1:5a:de:89:3b:81:bd:7b:d1:56:
b2:27:15:0a:20:f0:66:1c:36:97:43:00:28:a5:a3:
bf:fd:ff:cb:7e:e0:21:82:be:64:ec:32:48:c8:8c:
fb:e4:fb:4d:d5:4c:7c:9d:7a:a7:ed:9c:58:f0:55:
b3:8f:7d:c2:43:58:5a:14:01:c3:0b:da:0a:5e:5b:
42:3c:6f:81:9d:5f:23:cb:2a:1d:26:e8:6f:7e:13:
8b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A1:A0:1A:F3:A8:39:C7:F4:25:F7:FA:66:89:C7:8F:5F:42:9A:4C
X509v3 Authority Key Identifier:
keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:d8:aa:da:0d:69:90:be:60:1d:7a:6f:27:22:f0:f2:3f:0e:
2a:a6:ee:f4:f5:82:a4:ed:d4:ac:f9:2a:d8:52:cd:9d:e1:df:
71:04:49:d9:30:8e:15:d8:e7:4a:49:78:b5:de:4a:eb:19:4d:
56:1e:07:d1:c0:40:3e:d2:a2:8f:ed:9c:03:8d:f2:5a:c4:2f:
55:ee:c0:ae:2d:20:71:99:ad:6e:21:a5:aa:f1:dd:35:05:e5:
1b:fc:20:70:a9:50:7a:04:78:37:ab:28:64:8c:c3:0d:df:68:
4c:6b:b1:11:ab:19:a5:ec:27:ba:a2:f3:7f:da:55:c1:7f:7f:
71:ae:27:aa:a3:05:01:b2:65:4b:50:d8:d0:ca:a1:67:be:01:
99:a4:5d:10:ca:c7:37:27:96:ac:86:36:67:27:ef:32:2a:c5:
1c:4b:59:66:f9:bc:d0:54:22:fd:9d:15:e6:b8:19:a4:7b:9f:
71:65:3c:8c:28:92:b0:7d:66:3e:22:ea:03:c2:43:84:44:7d:
d1:bf:be:89:30:0a:0f:ef:17:7e:81:84:1f:5b:b7:47:9b:70:
1b:79:d3:71:07:2d:a5:3c:9c:8b:bd:a7:95:92:64:08:f0:ce:
d0:54:df:ec:d4:c6:da:da:50:4e:95:74:b9:8c:b3:bb:2b:3a:
50:ce:40:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:09:57 2026 by rpki-client