This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
File: GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft (raw, json)
Hash identifier: WZfHJzVhcrY1asVTYhtmNXWngVPcNylnuatYx4qGNYg=
Subject key identifier: 25:57:27:83:AF:6B:E3:74:EF:6B:15:07:3C:84:E4:DD:03:39:0A:4A
Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
Certificate issuer: /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Certificate serial: 02EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
Manifest number: 02E7
Signing time: Sun 25 Jan 2026 00:29:19 +0000
Manifest this update: Sun 25 Jan 2026 00:29:18 +0000
Manifest next update: Sun 01 Feb 2026 00:29:18 +0000
Files and hashes: 1: GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl (hash: 3RpGoSFNj4nXRdzN1mMN+cdp/pfuJe5f2KUE34w8dBo=)
2: DD1FEE48C77311EEA5076E2CC4F9AE02.roa (hash: e8WAY0Y3CoS5+B8mQdHDLApUCt8COdKCwX61EjEYzJk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 748 (0x2ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Validity
Not Before: Jan 25 00:29:18 2026 GMT
Not After : Feb 1 00:29:18 2026 GMT
Subject: CN=697563df-e65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:40:ec:8c:7d:44:f5:6b:f8:da:99:6d:2c:8b:
80:fb:41:23:13:5c:e4:92:a3:d5:d7:d6:0c:df:bb:
ee:0e:36:62:92:4e:ab:99:f1:81:59:f6:ae:f5:4e:
c4:a9:de:9e:b5:6c:a8:1a:26:62:9a:3b:5a:6b:d6:
08:71:a8:da:44:dd:98:e6:7a:d1:94:df:1f:93:dc:
6b:e6:14:63:1b:45:04:d0:b6:35:f7:b8:b1:44:66:
cc:e4:4d:d1:00:d0:11:9a:aa:31:11:03:b0:a5:0d:
26:42:44:12:88:88:2c:c2:05:d3:91:87:43:b1:8f:
b3:9f:1c:48:2b:78:2c:bb:30:58:ba:53:c5:27:d9:
51:86:c4:d1:2b:94:27:8f:16:d9:45:94:19:70:10:
d6:a4:e4:93:1e:2f:a3:54:b3:e4:11:17:50:72:61:
97:b3:91:91:3d:c0:d2:7f:59:d9:f2:87:d2:20:96:
b5:0c:37:3e:b2:83:3a:41:ec:49:e7:6d:51:5c:8f:
3a:28:67:ae:7a:94:45:0b:20:42:4e:3d:d3:3a:86:
71:be:80:1f:53:c2:8b:ec:76:01:9b:ba:b9:c1:25:
d7:58:fb:1d:b6:34:52:b3:ed:36:a0:3f:39:20:f3:
a6:e3:05:38:03:71:5a:5d:e0:02:05:34:dd:36:e5:
1b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:57:27:83:AF:6B:E3:74:EF:6B:15:07:3C:84:E4:DD:03:39:0A:4A
X509v3 Authority Key Identifier:
keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:e7:e7:43:0d:bb:4e:c2:cd:9f:0b:c5:eb:0a:fd:1f:14:2c:
0b:8c:af:3d:0a:39:fc:5f:79:86:42:06:31:ad:34:4c:2a:e5:
fd:97:49:33:7a:63:84:b9:06:1b:b7:9b:81:88:92:35:47:5e:
24:4c:d8:f6:18:7e:f1:6b:69:fa:fe:55:b1:ea:ef:a3:99:ef:
e5:57:50:cf:87:32:7f:30:46:27:63:8c:87:53:c1:76:cf:65:
fb:fe:0c:3a:52:b4:cd:c3:2c:ea:f6:cf:5f:a8:07:5c:39:de:
20:db:1a:81:80:4a:72:57:eb:c2:83:22:6d:06:bf:fa:45:10:
fe:33:0d:c6:c1:a4:20:92:9f:dc:84:51:5f:5f:ea:25:91:ec:
44:7d:79:48:fa:a1:c6:26:d8:34:4e:34:ad:27:34:71:cf:e9:
47:4b:06:91:52:17:08:4d:54:5a:d4:13:6a:f0:41:de:44:54:
43:82:eb:d9:ea:6c:af:88:50:a5:bc:11:55:66:9c:ad:85:03:
c7:ab:57:f7:b3:cd:9b:88:d3:77:92:43:e4:22:fe:fc:d7:2c:
98:f5:f1:22:a0:fc:f6:53:48:b0:8d:8c:a5:03:c2:75:4a:dc:
63:2e:80:db:c0:d9:53:4a:4a:97:16:b5:7d:ac:33:ae:4d:da:
dc:c3:40:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:32:33 2026 by rpki-client