This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
File: gH5oiqUL0-OL4xtdTE4GCATrFdw.mft (raw, json)
Hash identifier: NMLqnWKWVR5DEvRmnd4cUER433zfaaxtvrCghUQTcfE=
Subject key identifier: 4B:80:45:BC:C5:96:59:F8:D0:01:39:79:24:57:C8:78:0A:6F:2B:ED
Authority key identifier: 80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
Certificate issuer: /CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Certificate serial: E6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
Manifest number: E3
Signing time: Sun 25 Jan 2026 04:44:55 +0000
Manifest this update: Sun 25 Jan 2026 04:44:55 +0000
Manifest next update: Sun 01 Feb 2026 04:44:55 +0000
Files and hashes: 1: gH5oiqUL0-OL4xtdTE4GCATrFdw.crl (hash: 8iDc4D3edHPBwrH76emGITPGSqlUHFRpk5DoqUlWcQY=)
2: EF63DB0EA26B11EF8F077C3FC4F9AE02.roa (hash: iLpw/uJbge7uZ/WmLMuhiuh6b3ClTayyECZNu36JGVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F0E2, serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Validity
Not Before: Jan 25 04:44:55 2026 GMT
Not After : Feb 1 04:44:55 2026 GMT
Subject: CN=69759fc7-befe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:6b:95:f8:a4:c4:04:ab:b0:dd:92:20:e6:
62:63:43:ba:21:cf:d2:ac:96:fb:76:b4:7c:c6:d8:
50:2b:81:60:67:c5:3f:44:1f:f1:35:a9:6f:a1:0f:
38:68:1d:32:c6:46:02:74:a5:44:c5:33:70:f5:07:
d0:66:56:c0:a3:c4:a6:fb:1f:b9:50:7b:4c:e7:1d:
bf:ed:16:c8:f3:b3:02:8a:8f:e1:e3:60:14:c3:ec:
71:aa:c6:4a:11:33:e1:9e:f1:f8:be:7b:ae:4c:40:
c5:3e:88:05:5f:9c:aa:91:cd:96:7a:8f:0c:1c:5f:
17:13:a7:53:a8:d1:66:52:5a:55:09:77:99:ec:c6:
68:ab:31:60:a8:dd:6a:ca:3c:51:57:19:33:b1:49:
44:de:0b:4f:1f:53:59:53:a1:a5:0c:31:8f:c6:0a:
73:e4:1e:69:f8:13:ee:1f:d6:60:2c:3f:27:0b:38:
5f:f7:4a:6d:c3:c1:bd:ea:d7:1e:6a:7f:df:46:28:
4f:28:35:38:d6:54:94:6a:26:7f:96:62:4b:c2:1b:
3f:68:ae:29:3d:dc:0e:ef:d7:a0:f8:20:fd:5d:8e:
54:a1:bb:18:b6:04:0c:60:08:05:d9:c0:5c:5e:ee:
72:20:12:8e:2e:a0:7a:83:d9:c8:68:fc:90:01:27:
f5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:80:45:BC:C5:96:59:F8:D0:01:39:79:24:57:C8:78:0A:6F:2B:ED
X509v3 Authority Key Identifier:
keyid:80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:47:25:cd:53:7d:03:db:5c:7e:8c:20:a8:62:44:ed:19:cd:
99:12:90:e5:5d:da:8b:f1:ca:f9:45:d3:73:9e:16:c6:86:af:
ff:87:5c:29:26:01:91:9c:f7:0f:7c:f0:a9:c1:4d:cb:14:4f:
78:26:9e:94:ec:49:ca:8a:f7:c0:10:7a:05:35:23:ca:39:f8:
e9:a6:1d:d0:d0:46:9f:53:3d:7d:3a:0e:40:cb:ba:20:bf:19:
39:48:c6:06:a6:4d:f0:63:49:1e:7f:8e:38:20:55:c6:9e:c4:
d6:f5:74:87:b5:1a:8e:5d:5b:16:03:78:0c:fb:f2:f8:a9:1a:
96:ea:4e:d0:ee:3a:52:3e:72:5b:f1:e8:0d:37:7d:2a:d0:e1:
4f:04:b3:e2:28:97:2c:b0:54:05:07:ab:ac:0c:4c:ea:6b:55:
be:ae:fc:75:68:79:be:e9:0b:e7:85:50:a7:a3:d3:7a:ab:71:
be:c2:97:ad:bf:df:b8:75:8e:2b:da:33:99:62:3a:c4:a1:76:
f2:74:20:74:63:6b:cd:48:2d:27:89:8e:45:fa:68:f2:9c:18:
2a:61:e9:ba:14:6a:17:74:81:9c:35:5c:df:40:7b:ff:4d:a8:
6d:fa:4f:7d:91:34:16:c2:86:79:2f:06:e5:3a:dc:b9:04:f5:
cc:ca:0f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:53:55 2026 by rpki-client