This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft
File: g4L2GIxKbdZpVNVxij2cz5uL-JU.mft (raw, json)
Hash identifier: pMlolsQ1H7Y7dkG+utvrBPfbr3ESGrA15r8vePEyD6Q=
Subject key identifier: 97:E8:72:00:BF:6B:66:09:3B:09:99:19:9F:C1:D2:ED:3B:61:AB:D3
Authority key identifier: 83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95
Certificate issuer: /CN=A91CB8BA/serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895
Certificate serial: 085F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft
Manifest number: 0858
Signing time: Sat 24 Jan 2026 19:40:18 +0000
Manifest this update: Sat 24 Jan 2026 19:40:17 +0000
Manifest next update: Sat 31 Jan 2026 19:40:17 +0000
Files and hashes: 1: g4L2GIxKbdZpVNVxij2cz5uL-JU.crl (hash: AP7oXHnfmtSZPE7x4UYxWH6fDNtwjtxlrSazIrFPdxI=)
2: 21B96F2E7BC911EBABCF472DC4F9AE02.roa (hash: NqIb0O8e2GCcDz67+/QlLTVfXxW0NeRvUXG1KEKM7SI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl
rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143 (0x85f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8BA, serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895
Validity
Not Before: Jan 24 19:40:17 2026 GMT
Not After : Jan 31 19:40:17 2026 GMT
Subject: CN=69752022-6bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:97:58:80:06:c7:54:d0:6c:c6:39:71:94:
ed:ca:e3:fd:df:14:cc:4c:b5:bf:79:2c:f6:93:1f:
05:d6:66:76:03:62:eb:21:7f:3f:a6:a6:a3:62:df:
33:c4:d7:c2:56:91:89:8f:26:23:65:8b:47:e0:e1:
7a:5f:fe:29:16:39:69:55:4c:b4:c2:12:06:22:20:
d6:84:7e:8b:e7:a1:d4:59:bb:31:a3:73:0b:01:f7:
67:a9:11:24:61:1c:1c:72:36:7b:41:6a:d5:3d:04:
a4:7c:c5:40:8a:a9:48:92:7e:71:db:be:ea:01:df:
f3:86:cb:f6:f6:5d:fa:4a:4d:f4:7b:81:03:d3:1c:
5b:22:4c:0c:39:d5:56:60:ef:f5:d5:96:97:b8:84:
a3:57:e4:2a:80:7a:21:0b:07:bc:32:dd:32:64:9f:
f7:7f:41:6c:f0:ff:8d:18:01:f4:a6:ae:52:c4:1a:
09:af:9d:ad:ba:41:c2:b9:f6:9a:f6:10:13:8f:23:
dd:4b:de:ce:4f:08:1a:02:9e:b1:5d:89:09:b2:65:
08:67:5a:15:f3:ef:7c:ab:d9:29:c7:0b:af:05:fa:
45:a4:30:0c:65:bb:82:a3:d5:86:5d:d7:db:57:fc:
58:6e:e5:f3:23:2b:da:d9:ba:78:94:87:68:2b:87:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E8:72:00:BF:6B:66:09:3B:09:99:19:9F:C1:D2:ED:3B:61:AB:D3
X509v3 Authority Key Identifier:
keyid:83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9d:09:c7:93:0e:b6:e0:4f:0b:9e:f7:c9:52:43:a2:68:c3:
26:69:0e:01:f9:f1:7e:a2:2c:c3:91:8b:11:34:f8:03:a8:5d:
8e:8a:b2:9a:de:23:85:6f:15:a3:f0:cf:47:07:2a:6f:60:e9:
f1:c0:b4:68:49:22:86:81:7b:f1:94:69:54:15:f4:9f:c9:df:
21:b4:33:12:46:19:fa:9d:cd:51:69:33:63:ea:9f:53:1f:a0:
a7:5f:fe:1e:1c:0e:96:de:e3:fc:97:c9:25:6b:18:d5:c3:dd:
88:2f:1a:79:25:91:f9:d3:e8:40:69:a2:24:a9:6c:b7:29:b5:
50:bb:d6:3b:c3:be:23:3b:a6:96:53:d1:f9:8c:a8:3b:19:33:
3e:40:28:17:54:ea:34:44:21:23:ac:5f:c5:3b:02:33:49:04:
ab:43:ca:84:c0:2b:dd:4f:a6:95:a0:30:a2:c3:5d:24:86:9a:
3d:93:b0:1b:2b:e5:eb:78:a9:10:fb:b2:31:83:e6:56:d8:0b:
45:06:2f:99:97:eb:41:fc:22:c3:26:a8:e9:8f:b9:67:e7:ea:
55:38:d5:ca:c9:6f:0e:10:33:4d:74:6e:b8:01:6c:4f:da:e2:
f4:72:17:bc:a3:57:63:dd:8b:84:7e:63:a7:b6:f8:c9:84:75:
d6:bb:6a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:09:44 2026 by rpki-client