This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
File: Gu-1HeyOsHlip15FnOIQp0ABBPs.mft (raw, json)
Hash identifier: yNbSb0ylEpQTtHTO3fn95GHA9I9/4DfPaCGBlq8q1BU=
Subject key identifier: C1:E6:48:C5:08:A5:02:47:A0:B7:E4:4C:A7:F9:1A:54:8E:F0:BC:64
Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB
Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB
Certificate serial: 3513
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
Manifest number: 3507
Signing time: Sat 24 Jan 2026 14:38:20 +0000
Manifest this update: Sat 24 Jan 2026 14:38:19 +0000
Manifest next update: Sat 31 Jan 2026 14:38:19 +0000
Files and hashes: 1: Gu-1HeyOsHlip15FnOIQp0ABBPs.crl (hash: 4a7fE42dqlbdJp8Rw5jEWOM14dJo6hsgQ9e8gExbBOM=)
2: 229F27ACFEA411EDBC673B4BC4F9AE02.roa (hash: XxjtUd/hL+kIKHkOi4rgqBJdsfuyYhtMzuXgGEu/n3U=)
3: 220E32CEFEA411EDBC673B4BC4F9AE02.roa (hash: amc5JKgDCW0FwP7fqve5MmmvPdX66HObowu8LFy8/hw=)
4: 232E8BFEFEA411EDBC673B4BC4F9AE02.roa (hash: f0s5M+jY8Uq/Wkuq+EBQtTt5fdf658GNQxqS9tNI1Ho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl
rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13587 (0x3513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3DAE, serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB
Validity
Not Before: Jan 24 14:38:19 2026 GMT
Not After : Jan 31 14:38:19 2026 GMT
Subject: CN=6974d95c-36f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b9:fa:d2:c9:6c:3c:74:c1:cf:77:64:7f:f5:
25:35:a4:2c:fa:a4:3d:1c:9c:55:a4:06:96:aa:d5:
c2:a6:ea:26:e1:fd:87:19:ef:43:6e:c2:5d:63:e3:
52:01:ae:34:41:f3:48:1a:30:ef:6b:4c:ac:54:6f:
c4:a7:3b:e8:14:28:a5:71:f8:be:90:ee:f8:8b:cb:
2f:6f:bf:cc:f1:01:f6:1a:bf:4d:41:f3:cb:cd:96:
fe:6a:21:03:51:8d:dc:1f:f8:c4:71:ca:f0:d4:55:
c3:c4:5b:65:2b:5f:60:80:ea:ac:06:ef:90:0f:f7:
46:c5:2c:64:e5:69:2a:8b:ac:2f:d0:99:7f:d3:1b:
cf:af:a9:46:e2:b7:b0:b5:bc:f3:6d:8a:a9:10:b8:
70:34:fb:29:c3:3c:a5:32:5a:30:35:95:18:18:c0:
3e:0b:7f:47:fe:c1:c6:30:fc:12:48:9d:e6:e0:82:
39:ec:a6:d7:19:08:25:5b:d9:f4:ec:08:6b:22:d0:
ae:c8:4d:fc:6c:1b:2d:c2:e6:28:08:18:da:48:c0:
eb:24:4f:f9:1b:fe:5c:a6:04:3d:45:eb:68:3b:be:
68:a2:44:51:e2:20:43:13:6b:e4:1c:77:95:3d:bc:
c7:2a:f0:2d:8d:31:88:fa:84:3f:8f:37:c7:f6:2c:
00:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E6:48:C5:08:A5:02:47:A0:B7:E4:4C:A7:F9:1A:54:8E:F0:BC:64
X509v3 Authority Key Identifier:
keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d4:e3:dd:98:29:aa:8e:7e:c9:7a:10:44:e0:d4:28:75:60:
6f:de:db:18:c4:97:eb:6b:3d:7a:c5:6a:ce:a6:81:cc:92:f7:
dd:30:64:c2:c4:11:b7:d1:c3:9d:93:38:fa:14:e3:d3:91:d2:
54:21:76:eb:57:4d:eb:b3:f8:09:f8:31:fd:25:2d:aa:62:3f:
86:ea:30:c3:a5:03:61:68:7c:50:5e:12:ea:91:45:fc:dd:a9:
7f:7f:a5:da:52:1c:42:84:98:57:99:11:26:79:4a:f2:fe:e7:
8c:3b:6f:06:8f:6c:6e:ae:a2:c8:b3:82:8f:df:9d:e4:a7:8a:
cf:1e:05:74:b0:80:13:15:81:8e:d9:15:01:78:53:4d:c3:0b:
63:51:07:c7:5b:be:a4:88:60:30:e3:34:0d:92:ed:39:ff:50:
0a:13:f7:7f:3f:07:3b:32:7f:da:b4:ad:04:d0:a0:f5:e1:33:
91:46:6a:73:6a:6a:47:a8:5a:0e:7c:a3:4b:87:22:aa:6e:f6:
ff:bc:25:f4:cf:8b:5f:4c:e7:27:3d:7a:15:72:a1:0e:d8:0c:
db:af:c8:40:79:de:b6:42:3e:a4:a9:a8:81:22:6f:d2:dc:74:
b2:a9:bf:2a:03:6b:a8:67:79:23:46:e7:b4:29:81:97:fe:f6:
5e:8b:94:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:22:14 2026 by rpki-client