This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft
File: GF_2ZH4elndQE3e1UVR5uelGEGc.mft (raw, json)
Hash identifier: uvS0HarqtqYaOZt2BGpZqpavdbhy5o9U51rpuQWELsA=
Subject key identifier: CB:46:3D:81:DB:D8:A5:25:03:56:02:E6:E2:83:06:9C:C2:71:9A:91
Authority key identifier: 18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67
Certificate issuer: /CN=A9193C85/serialNumber=185FF6647E1E9677501377B5515479B9E9461067
Certificate serial: 120E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft
Manifest number: 1202
Signing time: Sat 24 Jan 2026 16:52:45 +0000
Manifest this update: Sat 24 Jan 2026 16:52:45 +0000
Manifest next update: Sat 31 Jan 2026 16:52:45 +0000
Files and hashes: 1: GF_2ZH4elndQE3e1UVR5uelGEGc.crl (hash: PsjPPU60zodmUG5Qzx/9bgai1yNIGdQS27A0W2IRLeI=)
2: A1E87910832A11ECA409521EC4F9AE02.roa (hash: xYDqnqdst+l+d2xUst0ExZqgZXxkDEzycJdTuNx9ikg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl
rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4622 (0x120e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193C85, serialNumber=185FF6647E1E9677501377B5515479B9E9461067
Validity
Not Before: Jan 24 16:52:45 2026 GMT
Not After : Jan 31 16:52:45 2026 GMT
Subject: CN=6974f8dd-e1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:82:51:1a:aa:f3:f0:3e:16:30:f7:2c:e8:
66:07:cd:2e:b6:81:6c:a9:80:d0:12:47:17:9f:cb:
5f:e1:0d:4e:22:59:83:cb:b3:18:c3:84:8c:e1:10:
c7:fd:8c:03:54:4e:2b:88:30:fe:81:d1:7d:60:33:
e6:84:5b:ba:18:12:dc:1f:2f:27:ce:6d:96:52:c9:
e0:db:04:7f:5e:03:75:82:b3:76:3a:f5:d7:96:a1:
6f:2a:fc:51:61:d7:72:89:04:30:4d:f9:c3:63:55:
7f:40:91:f3:b5:ba:68:bb:9d:63:9f:80:2e:a5:82:
af:51:89:d8:47:87:77:20:86:3d:29:22:09:08:e9:
16:bb:60:0d:fe:41:62:4a:76:d8:5c:a1:c5:bd:d2:
e7:21:5b:1e:7f:55:34:29:60:f8:12:e5:f2:ad:2d:
40:af:37:a0:c2:b8:29:ef:e8:5e:a8:27:f7:2e:d8:
56:86:e6:46:1b:b4:19:20:62:8c:96:99:9a:06:b6:
13:8e:9b:08:24:8c:7e:fa:6f:95:21:e4:bb:7d:ec:
d2:a8:09:7a:55:65:26:ca:6f:5d:0e:ac:8f:04:c1:
e5:76:07:b3:99:a1:6e:1e:90:a8:e2:08:98:9b:e1:
d5:ec:90:3b:5d:76:83:a3:6a:d8:92:54:6d:17:a0:
f3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:46:3D:81:DB:D8:A5:25:03:56:02:E6:E2:83:06:9C:C2:71:9A:91
X509v3 Authority Key Identifier:
keyid:18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d4:a6:31:0a:83:56:0d:f4:cb:97:8b:35:37:ad:b4:c7:99:
cd:cc:7c:fe:56:53:93:f6:70:ff:e6:9f:95:c3:47:57:35:b6:
c7:ab:34:28:b3:64:29:d8:70:e3:66:38:00:cc:d7:7c:1d:4b:
f8:7f:8f:94:6d:d9:bc:21:f9:43:42:f0:99:78:6d:36:a8:5c:
09:a0:9e:7b:3d:04:f4:da:0a:b6:b2:0a:31:db:3f:69:c2:ee:
04:01:0b:aa:d9:df:3c:1a:9c:c5:d0:c4:13:f1:fa:99:0a:ae:
c7:e4:d2:bd:1c:f5:9a:e1:7a:f5:dd:a5:ae:32:6a:fe:37:aa:
59:c0:9e:96:1a:f3:be:4b:55:bf:71:50:b2:11:83:0f:b8:6d:
c0:67:b5:e4:87:4d:35:d6:48:eb:2c:cc:43:7d:c7:5f:0e:88:
ff:0e:75:84:3f:52:72:cf:82:b4:26:ec:6e:77:d6:7e:44:00:
b7:c3:11:f1:52:79:f9:bd:e6:e0:db:b7:cd:e5:8d:16:a3:37:
05:51:51:d3:1c:b3:2e:e5:12:1a:d0:c0:07:f4:4a:e7:e6:fe:
b4:03:06:26:5f:a9:89:c7:fd:be:5f:b1:c8:a7:01:f8:08:e6:
27:cf:ee:2e:0d:5c:10:8b:dd:8f:fd:6c:3c:5c:6a:ce:42:b4:
c1:b0:cb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:50:47 2026 by rpki-client