This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
File: gHwED6kB5dhpWmU03mbD1qC_vMU.mft (raw, json)
Hash identifier: cMZaGbt0SV+s2juZFVTo+OQhynKoOR+lXEiCsJmaj/Y=
Subject key identifier: 19:2D:97:07:3C:A8:D6:67:F9:BA:93:F3:6D:45:07:4C:7E:74:53:9F
Authority key identifier: 80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5
Certificate issuer: /CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
Manifest number: 0142
Signing time: Sun 25 Jan 2026 03:38:10 +0000
Manifest this update: Sun 25 Jan 2026 03:38:09 +0000
Manifest next update: Sun 01 Feb 2026 03:38:09 +0000
Files and hashes: 1: gHwED6kB5dhpWmU03mbD1qC_vMU.crl (hash: HP7P6z9qzRDOkDeL6pgrf3dleWCAF+RiEo6rGn+JPxQ=)
2: A697738410FA11EF9A068536C4F9AE02.roa (hash: GgKSSa0DZkr/DMOZ+SWiE+267xJNKIhRXUimhakcIXw=)
3: 7D9F83FE10FA11EFADBBC431C4F9AE02.roa (hash: kRUKk6YhznpQLf70+sbW+4rHruxwNLVLHD+xyjgrv/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl
rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC3F1, serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5
Validity
Not Before: Jan 25 03:38:09 2026 GMT
Not After : Feb 1 03:38:09 2026 GMT
Subject: CN=69759022-64e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:e6:33:c6:d1:9c:a7:3a:e3:ac:14:6e:e3:
38:03:c7:b4:04:18:e9:5a:6f:90:a6:da:84:b8:d9:
7e:27:f2:ca:50:98:20:4a:77:de:b1:0c:f5:c9:10:
8d:92:68:38:bd:e5:33:1f:a7:ab:c9:26:73:35:2b:
aa:0a:b4:20:cb:d2:74:db:f8:cb:d8:8c:d5:0a:3a:
df:7f:7b:65:27:df:74:6d:87:c4:88:ea:fb:7d:4e:
95:c9:31:9a:22:79:d0:b4:d9:a5:5e:7e:d3:6e:3a:
ce:0b:c2:6e:c6:8f:50:74:bc:d9:15:94:5d:14:15:
10:95:b2:93:e6:bb:9c:f1:f0:d0:3e:3f:de:4e:4f:
69:4f:b9:97:f1:b1:cd:b7:ca:94:85:35:7f:84:72:
9d:90:52:37:f5:dd:53:c9:5e:84:a0:91:38:ef:c8:
b5:e7:33:3a:c9:89:13:e4:b6:31:80:a6:72:a1:a7:
2e:83:c6:6b:0d:22:e3:d4:f3:78:9d:87:c7:de:26:
27:96:f6:11:1e:5a:d1:9c:ee:09:00:28:2c:1e:dc:
f6:f5:9b:5f:d6:ce:9f:48:be:29:e7:bb:02:af:d1:
e3:f8:f4:8f:3e:55:91:11:1b:2e:d3:4a:1e:81:73:
89:70:86:95:c3:f8:a6:99:9b:82:4b:70:83:69:e6:
57:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2D:97:07:3C:A8:D6:67:F9:BA:93:F3:6D:45:07:4C:7E:74:53:9F
X509v3 Authority Key Identifier:
keyid:80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:05:b4:d7:a3:99:99:18:91:42:c7:67:90:cc:b2:0b:0a:97:
40:20:13:ca:1d:43:c6:b0:fa:8d:8b:5c:df:1f:7e:b7:e8:41:
60:dd:6c:de:e7:d4:65:a1:67:c5:1d:8e:e5:ad:f4:3d:23:44:
2f:61:fd:6d:f4:c8:65:88:28:45:47:45:43:4c:0b:58:87:91:
c7:eb:e5:ce:26:83:fc:7c:bd:d8:f9:d8:1c:50:c9:f0:63:1a:
a9:b0:80:f4:5c:8a:70:99:e0:25:ad:54:2d:f6:26:88:12:2e:
a1:a1:39:3f:f1:e5:38:8a:ce:8e:53:c3:7f:ea:7b:2e:b7:ee:
80:86:25:ea:80:fb:c8:70:ec:12:48:04:1b:62:10:9e:a7:24:
99:b7:b8:39:07:14:9c:44:15:14:33:d8:6e:27:75:1b:d0:1f:
fc:cc:b7:a1:b2:19:36:6f:1b:b8:7e:68:ff:4a:6e:73:00:57:
d2:12:18:f1:a8:16:72:bd:86:99:ea:78:9b:e8:3c:ff:8c:05:
83:1a:96:b8:60:c8:03:bb:b1:ad:01:07:72:4c:c3:61:50:1a:
3a:37:a7:af:bc:90:9f:12:da:a2:e5:9d:cc:d4:62:c2:4e:93:
ab:17:f1:45:f6:f5:ee:84:cd:5a:e9:cd:9f:49:b5:3b:04:c4:
80:26:5b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:35:38 2026 by rpki-client