This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
File: GWhCPtbSSViApWptsCvGcpjF5oY.mft (raw, json)
Hash identifier: YRH2CEtJGUckzl/N7rGVO96P/G8TJIHGeAKrRvxmHQY=
Subject key identifier: 95:D6:90:BB:54:C7:D0:B2:00:45:08:52:76:DD:92:E9:8E:E9:71:04
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
Certificate issuer: /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Certificate serial: 10EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
Manifest number: 10D4
Signing time: Sat 24 Jan 2026 17:02:07 +0000
Manifest this update: Sat 24 Jan 2026 17:02:06 +0000
Manifest next update: Sat 31 Jan 2026 17:02:06 +0000
Files and hashes: 1: GWhCPtbSSViApWptsCvGcpjF5oY.crl (hash: VWkopev2ju36Enx2WqmUVwFx3ONzXqcH2zWx3/CBXDo=)
2: D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (hash: EHJm/HiHyHS2wDLaVYk3k6uReoau+etZZWwlwm0AUaM=)
3: 2884888A717011E99BA2FB3DC4F9AE02.roa (hash: vyuDgVud8VeU+L1s3GBCpzmY/+n8YurORFgDE2x/P9Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4334 (0x10ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Validity
Not Before: Jan 24 17:02:06 2026 GMT
Not After : Jan 31 17:02:06 2026 GMT
Subject: CN=6974fb0e-2ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6a:6e:0b:a5:0a:3f:98:da:2f:28:6d:db:7c:
d9:ce:c0:2f:4a:b5:75:26:9f:fa:03:1b:ca:4d:97:
a3:be:d9:cd:81:a0:14:63:cb:60:0c:87:af:08:4c:
59:db:b9:58:0c:ef:b9:23:d1:1e:4a:84:7b:de:53:
73:da:0e:b5:0a:82:c0:63:af:68:27:be:4a:11:cf:
10:5c:f8:f9:2b:1c:bc:16:09:19:90:78:00:9b:ff:
7a:2c:ff:9f:5d:ee:97:e9:b3:d1:d1:35:65:de:2b:
1e:56:03:f3:0b:69:f7:4b:c4:ae:94:fc:45:d6:22:
81:30:07:0e:55:64:24:7c:ac:58:03:40:6f:10:59:
c9:08:79:79:7e:eb:e3:b4:29:a2:2e:54:f8:46:77:
0f:a3:7b:b3:be:58:74:ab:23:bf:92:56:0f:31:90:
9f:5f:08:4c:90:34:4f:41:e7:14:7d:6c:5e:19:ed:
27:c1:7d:1f:f0:1d:ff:ae:b6:16:37:31:33:37:67:
3d:30:8c:30:8f:b3:8a:29:44:fc:6f:bb:cd:4f:fc:
5c:db:36:0a:7b:47:10:89:65:bf:14:19:15:fb:11:
df:62:78:8e:35:c6:3c:0b:78:2c:01:07:07:12:d1:
d1:5e:d4:22:92:4a:3f:c1:54:21:c4:9a:d1:69:14:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D6:90:BB:54:C7:D0:B2:00:45:08:52:76:DD:92:E9:8E:E9:71:04
X509v3 Authority Key Identifier:
keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f5:a8:9f:04:5e:7d:c8:10:18:94:c5:8f:74:a2:d7:e5:c0:
d1:98:6f:59:0e:22:84:26:ff:90:0b:fe:cc:a9:bd:04:99:e9:
e1:04:0a:fa:a7:9e:36:91:bd:50:3f:38:49:c2:c6:20:f3:ed:
b6:3b:cc:de:8d:4f:98:ee:1a:57:e4:53:4c:8b:b7:0a:05:e3:
fa:21:e2:d1:eb:85:f7:1d:e9:57:98:ac:ec:05:1b:be:28:13:
e9:b2:3f:6e:45:7b:0d:1d:ad:e0:67:97:12:b4:60:e9:39:29:
62:ba:1e:28:c4:2b:42:37:7d:4d:cb:0c:e7:44:6d:16:de:ac:
d4:13:b6:8e:b1:da:41:50:e5:60:f6:7c:da:3c:66:a3:59:af:
e2:45:67:f4:66:5f:84:ee:81:67:65:f9:5e:9b:a5:30:24:10:
5d:ad:1f:46:a1:d3:bf:5f:13:48:de:1a:8e:8e:4f:eb:c2:a1:
63:2c:52:92:c7:b9:99:b9:bb:ac:6d:6e:0d:e7:e6:7c:95:8d:
15:12:6a:16:90:3d:42:6a:1d:38:ec:57:9e:4c:77:83:70:1e:
00:7b:d1:2a:71:55:b4:9e:a2:32:4f:f5:f8:83:86:47:f0:fc:
f5:21:f6:e8:3a:b6:72:dd:87:69:00:d2:fa:4d:90:c2:96:e7:
9c:f9:a6:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQzQTkxMTAvBgNVBAUTKDE5Njg0MjNFRDZEMjQ5NTg4MEE1NkE2REIwMkJDNjcy
OThDNUU2ODYwHhcNMjYwMTI0MTcwMjA2WhcNMjYwMTMxMTcwMjA2WjAYMRYwFAYD
VQQDDA02OTc0ZmIwZS0yY2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA22puC6UKP5jaLyht23zZzsAvSrV1Jp/6AxvKTZejvtnNgaAUY8tgDIevCExZ
27lYDO+5I9EeSoR73lNz2g61CoLAY69oJ75KEc8QXPj5Kxy8FgkZkHgAm/96LP+f
Xe6X6bPR0TVl3iseVgPzC2n3S8SulPxF1iKBMAcOVWQkfKxYA0BvEFnJCHl5fuvj
tCmiLlT4RncPo3uzvlh0qyO/klYPMZCfXwhMkDRPQecUfWxeGe0nwX0f8B3/rrYW
NzEzN2c9MIwwj7OKKUT8b7vNT/xc2zYKe0cQiWW/FBkV+xHfYniONcY8C3gsAQcH
EtHRXtQikko/wVQhxJrRaRRovwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXWkLtU
x9CyAEUIUnbdkumO6XEEMB8GA1UdIwQYMBaAFBloQj7W0klYgKVqbbArxnKYxeaG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDNBOS9CQjdGRkI4RTNB
OTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NWaUFwV3B0c0N2R2NwakY1
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dXaENQdGJTU1ZpQXBXcHRzQ3ZHY3BqRjVvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDNBOS9CQjdGRkI4RTNBOTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NW
aUFwV3B0c0N2R2NwakY1b1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC39aifBF59yBAYlMWPdKLX5cDRmG9ZDiKEJv+QC/7Mqb0EmenhBAr6
p542kb1QPzhJwsYg8+22O8zejU+Y7hpX5FNMi7cKBeP6IeLR64X3HelXmKzsBRu+
KBPpsj9uRXsNHa3gZ5cStGDpOSliuh4oxCtCN31NywznRG0W3qzUE7aOsdpBUOVg
9nzaPGajWa/iRWf0Zl+E7oFnZflem6UwJBBdrR9GodO/XxNI3hqOjk/rwqFjLFKS
x7mZubusbW4N5+Z8lY0VEmoWkD1Cah047FeeTHeDcB4Ae9EqcVW0nqIyT/X4g4ZH
8Pz1IfboOrZy3YdpANL6TZDCluec+aay
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:49:14 2026 by rpki-client