This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
File: gOknW25uvGrXWF12r7akALUULD8.mft (raw, json)
Hash identifier: Ey6Aeto5aPce9on19WC+5YmVJl+NlSVIVs8d8/28c+s=
Subject key identifier: 10:4B:43:2C:74:87:06:54:02:66:B9:93:26:AE:48:EF:E0:D4:B7:6F
Authority key identifier: 80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
Certificate issuer: /CN=A91D313B/serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
Manifest number: 011D
Signing time: Sun 25 Jan 2026 04:02:43 +0000
Manifest this update: Sun 25 Jan 2026 04:02:43 +0000
Manifest next update: Sun 01 Feb 2026 04:02:43 +0000
Files and hashes: 1: gOknW25uvGrXWF12r7akALUULD8.crl (hash: rHdj3Ads0Wup1N46UjXpKihap04TCw4U9nLK6zy2kD0=)
2: 3446813047DC11EFA05E932EC4F9AE02.roa (hash: jzoVyxuaF8H22GAKHFkN3U0Almymg0ldFygN98Pdkkc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl
rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D313B, serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
Validity
Not Before: Jan 25 04:02:43 2026 GMT
Not After : Feb 1 04:02:43 2026 GMT
Subject: CN=697595e3-ef05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8b:28:c0:c3:3e:cb:38:49:d3:d1:8a:2c:e3:
f7:8c:fd:e9:97:49:8d:d6:0e:d7:52:88:4e:88:4a:
a6:2b:75:14:4d:cc:48:44:fc:71:ab:97:79:ba:10:
28:1e:51:6e:c5:0a:a3:61:c4:e7:1b:6a:fd:dc:6c:
db:aa:3c:4d:83:09:87:24:7b:1b:bf:bc:95:47:9d:
e9:af:91:74:d4:21:ab:c3:04:4a:80:15:3f:29:67:
a1:40:43:d9:ee:50:9d:13:b9:95:fd:cf:aa:13:fb:
73:3e:30:a0:d5:eb:9a:30:68:55:fe:bb:93:34:37:
63:18:da:d9:69:7b:3b:83:67:8f:b4:a3:84:5c:4f:
cd:ef:12:f3:28:7e:b5:c2:b9:7f:fd:40:2a:1b:df:
a2:57:35:7d:4a:11:3a:82:ed:05:01:b3:d3:83:c9:
2d:22:a7:57:41:5b:84:e1:76:4d:bd:4c:96:3a:d3:
b2:a9:b2:38:7c:6a:28:1e:0b:25:fc:9a:b4:47:9c:
c3:90:92:6d:ce:39:e5:04:5e:8c:cd:70:33:03:1c:
ac:6e:a1:f3:a9:b8:0c:e7:aa:49:5b:a2:73:d7:d5:
8e:ad:b1:50:55:cd:1f:cd:83:db:ca:83:f2:0e:83:
55:38:64:2f:cb:dd:7a:67:4e:56:bd:d2:03:d4:39:
5a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4B:43:2C:74:87:06:54:02:66:B9:93:26:AE:48:EF:E0:D4:B7:6F
X509v3 Authority Key Identifier:
keyid:80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:7a:5b:1a:3c:64:01:1f:fa:28:de:96:e8:9f:8d:58:b4:cf:
7d:c2:66:0f:30:dd:d3:af:b9:a6:0b:9b:1f:a1:9a:10:35:08:
41:47:4f:f0:47:e3:c4:7c:61:14:59:76:ca:81:e8:70:dc:3f:
03:b3:6a:08:52:d5:dc:c6:20:8f:42:57:38:dc:27:bf:20:6c:
dc:0b:8c:c9:c2:cc:33:45:a9:7a:92:e8:37:ee:43:89:7f:98:
79:d8:3b:62:4e:7d:df:1e:21:0e:bd:98:fd:6f:db:db:8e:ea:
ae:53:bb:c0:ba:a4:fc:51:00:e6:3f:2d:42:34:97:df:62:e3:
b7:a8:5f:85:fb:06:03:60:88:f6:ea:2e:0f:27:bc:41:0e:2f:
0c:1b:07:7a:bc:ac:89:64:3e:02:15:47:c4:75:5c:57:f4:f6:
15:a7:dc:bb:9c:1b:4d:30:38:48:38:3d:c4:7a:f9:52:1a:0b:
f8:f2:17:f3:cb:d4:25:14:52:3f:7e:be:bb:2d:2d:d8:91:5e:
1d:68:87:4a:da:d0:3b:e6:3e:c5:ac:42:87:00:d3:cb:12:0f:
4b:23:ab:71:e4:e2:e0:8f:f0:5d:3c:fa:aa:85:62:33:6b:43:
de:cd:2d:0a:85:5e:a4:fd:28:31:f0:e1:e6:fb:88:2c:c9:16:
3c:57:34:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:35 2026 by rpki-client