This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
File: GQQ80InJeU-nj0WlTqtfK26Rju4.mft (raw, json)
Hash identifier: IHe6z73ZrujdB3GSLl1/WI/vRW4e6HJB//HdW1TXKKo=
Subject key identifier: 86:C5:06:35:6C:0D:EB:2E:68:4F:38:6D:57:A3:8C:30:75:82:D4:CD
Authority key identifier: 19:04:3C:D0:89:C9:79:4F:A7:8F:45:A5:4E:AB:5F:2B:6E:91:8E:EE
Certificate issuer: /CN=A91A57AA/serialNumber=19043CD089C9794FA78F45A54EAB5F2B6E918EEE
Certificate serial: 01FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
Manifest number: 01F8
Signing time: Fri 23 Jan 2026 01:40:59 +0000
Manifest this update: Fri 23 Jan 2026 01:40:59 +0000
Manifest next update: Fri 30 Jan 2026 01:40:59 +0000
Files and hashes: 1: GQQ80InJeU-nj0WlTqtfK26Rju4.crl (hash: T54f1kOpTmo9pHnQExuYA9la8SiSvDq+5iFbksc2uc0=)
2: DFC9BF30F14E11ED992E1316C4F9AE02.roa (hash: PzV7dQ/Ntjwe4VwuBgo5nWo9sWxiEDa03H8RbyLVUfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.crl
rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 01:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507 (0x1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A57AA, serialNumber=19043CD089C9794FA78F45A54EAB5F2B6E918EEE
Validity
Not Before: Jan 23 01:40:59 2026 GMT
Not After : Jan 30 01:40:59 2026 GMT
Subject: CN=6972d1ab-59bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:d3:f2:63:fc:02:b5:56:fd:02:71:3c:4f:
72:33:52:cc:80:5c:91:78:2b:50:1d:9f:6d:35:36:
34:fc:cc:4d:5b:b1:6f:06:09:39:59:b5:b6:f1:a6:
bd:4b:34:70:7b:de:a4:7f:56:00:b8:d2:5b:55:7c:
ca:43:cc:73:42:e2:33:aa:20:75:87:a6:b2:c7:6b:
b2:81:ec:ca:9a:1d:85:33:29:b2:34:32:42:1e:c3:
8e:ac:ca:03:dd:65:0a:41:d9:16:7a:e7:99:e6:4f:
20:f2:82:83:0a:a0:7f:f1:38:5a:f7:7d:22:d3:cf:
0e:56:ad:ce:9e:c0:60:5a:45:df:98:b8:59:56:f6:
ec:d3:9c:35:f1:f5:1c:bf:e2:69:f1:2d:7c:81:6b:
6f:91:ef:8a:9d:8a:6e:60:3b:77:f8:36:2a:e3:c8:
46:4f:46:bf:f6:89:09:fe:e3:79:03:23:b4:be:fa:
ce:ca:87:43:d5:64:0b:90:d2:6d:e3:4b:ec:ae:d7:
31:e0:a4:c3:c3:b1:51:21:d6:20:18:e0:bb:a0:4a:
d3:b5:0a:00:2f:10:a7:f8:22:76:bc:90:5e:82:94:
7a:ad:b2:b9:5d:1b:52:b3:b3:9e:bd:9c:d0:e6:ca:
7a:82:f9:cc:56:f5:cd:3e:e8:eb:90:b0:f0:a4:f8:
f0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C5:06:35:6C:0D:EB:2E:68:4F:38:6D:57:A3:8C:30:75:82:D4:CD
X509v3 Authority Key Identifier:
keyid:19:04:3C:D0:89:C9:79:4F:A7:8F:45:A5:4E:AB:5F:2B:6E:91:8E:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:54:fa:6e:68:99:86:3a:9a:02:9c:67:f0:47:d2:50:93:8c:
3f:b3:86:a5:19:11:30:a9:e2:d4:b5:69:73:9a:f1:95:ee:a4:
71:f3:dc:ea:cb:b2:75:6c:8c:bc:aa:68:19:06:f1:bd:9f:e7:
45:12:35:e3:01:83:d8:82:5d:e4:8b:75:89:10:d9:ec:5a:5f:
5e:d3:e6:64:13:c1:4f:38:9c:a3:33:29:60:a2:9c:84:3d:ff:
d9:26:a6:9f:dc:59:2d:29:f1:b5:9e:7f:0d:25:05:cc:b2:a9:
66:50:66:13:ef:8d:e3:d3:55:0b:35:44:65:cf:d8:c7:5a:ee:
1e:fb:55:41:eb:80:27:e8:8d:7b:bf:8f:72:4e:6d:c5:5b:7d:
1f:7a:55:cb:ab:88:fd:e0:a8:cc:94:29:84:9c:7f:f5:fb:14:
5e:1d:7d:0b:bf:5c:6d:4d:65:ea:75:39:3e:95:24:50:c3:fd:
26:e6:62:9f:a1:49:1f:9c:5b:cf:fc:e2:0c:fb:34:9e:f6:93:
69:23:62:d4:c9:1a:b1:0b:0b:58:ce:a1:af:33:5c:e4:f6:9f:
67:db:d1:ea:a7:63:a3:d0:cd:ed:76:ed:d9:ab:d8:c3:a9:5e:
db:cf:0c:a9:66:91:53:56:f0:3d:77:32:ed:88:23:28:e5:c0:
0a:6a:61:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:46 2026 by rpki-client