This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
File: gtgYhh3Upw93CNIF5LiehRTKH2w.mft (raw, json)
Hash identifier: OAkc48KVipV/zR5FLZShWLVyRR5WBIBXdttq8sjGsq4=
Subject key identifier: 92:D2:B5:3D:12:BD:E6:5C:4A:C4:D9:AF:E5:90:3C:2B:92:F2:17:5E
Authority key identifier: 82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C
Certificate issuer: /CN=A91C9A8D/serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
Manifest number: 0513
Signing time: Sat 24 Jan 2026 23:24:25 +0000
Manifest this update: Sat 24 Jan 2026 23:24:25 +0000
Manifest next update: Sat 31 Jan 2026 23:24:25 +0000
Files and hashes: 1: gtgYhh3Upw93CNIF5LiehRTKH2w.crl (hash: XIosdFMLiE0eriBLdiBjfXZIJd6+01m336QZU1p8uYA=)
2: D2A57AD8DDF111EF969ABC1CC4F9AE02.roa (hash: O1MkwGdKDfVHdsOhHQrlU/aFTqc21EnEwMBW12Asebg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl
rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9A8D, serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C
Validity
Not Before: Jan 24 23:24:25 2026 GMT
Not After : Jan 31 23:24:25 2026 GMT
Subject: CN=697554a9-c7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:6f:78:fa:26:46:fe:5c:2b:8b:50:c6:e9:
cc:25:24:4c:49:ae:e8:9b:29:a3:db:b7:85:bf:61:
25:86:32:1c:e2:cd:cd:7f:3a:aa:b2:e2:08:82:d0:
34:2e:06:0a:e4:50:f8:97:c2:79:c4:e3:ab:14:1d:
2b:86:ff:69:0a:63:c0:e9:12:05:62:c3:aa:eb:d3:
f8:89:70:71:08:c8:27:ce:0e:3f:6a:99:d5:f6:c0:
33:0c:be:4d:d1:b7:a3:5f:01:bd:17:2b:be:4e:bc:
28:f0:19:97:33:6c:bf:b3:37:7a:26:85:ab:cc:e4:
17:cc:7c:4b:58:2c:20:07:ef:f4:b6:b7:60:90:97:
c3:19:76:60:ec:10:40:e2:f2:5a:72:2d:23:d9:f9:
b1:33:4f:f4:b0:9d:ee:1e:80:0d:c5:75:64:fc:39:
4a:2e:e8:a1:36:ba:1b:11:7a:65:b9:1a:f8:71:e0:
46:f1:dc:0b:62:9d:a1:d8:1d:03:03:79:32:05:a0:
76:ae:8e:a4:60:f0:9b:b7:d1:b4:11:a2:71:79:b0:
72:2d:5c:bd:3a:dc:c0:2e:73:68:2a:a4:a6:a4:36:
3d:5f:9a:77:f7:fc:8b:54:87:d8:0d:a9:8f:b8:3a:
5f:33:22:ec:a5:2e:64:4b:16:9d:e4:95:06:1d:07:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D2:B5:3D:12:BD:E6:5C:4A:C4:D9:AF:E5:90:3C:2B:92:F2:17:5E
X509v3 Authority Key Identifier:
keyid:82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:b5:9c:a1:e4:0a:ab:5d:93:c6:f5:cb:0d:e5:08:97:0d:32:
a6:54:2c:63:d7:c5:03:a2:58:18:0b:8e:5f:57:7b:d7:b8:5f:
c2:74:c8:f0:73:0b:ea:af:38:c6:95:21:6b:98:80:e7:65:b3:
49:a6:1b:96:10:f3:85:9e:e8:53:12:65:71:fd:5c:ba:2b:05:
ca:83:a6:70:ce:33:a5:e0:da:ab:84:90:ce:83:fb:81:ec:a3:
5b:56:ec:41:d4:a3:51:44:0d:76:c5:74:cc:77:9b:e0:5b:6c:
2e:37:0e:1b:2c:36:44:da:08:21:fe:59:68:1d:38:6a:5b:c1:
46:2e:88:a0:43:b6:ee:08:0f:92:e5:d7:44:7d:f0:7c:98:00:
6f:b1:c0:85:b5:f0:75:76:05:a3:08:d9:34:3b:81:5b:b2:85:
9b:cd:66:5e:7f:f7:f8:60:75:9b:11:4f:7a:41:c3:72:bb:4f:
ac:36:fb:43:c8:66:6a:dd:1a:56:d1:0f:28:63:56:e9:4a:98:
a4:15:67:51:2d:bc:3d:34:f2:d2:e5:a2:14:19:e7:77:ec:4a:
50:02:ba:b9:c0:e0:22:cb:86:c4:fb:32:c0:27:97:0a:9b:b3:
a0:c3:bd:41:3d:8c:75:d5:12:76:e1:29:bd:62:28:24:75:a6:
2e:69:28:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:07:45 2026 by rpki-client