This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
File: gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json)
Hash identifier: XDizdq3aJDdIH350XfnHe00ZvNZXb8115vydtzSaZXY=
Subject key identifier: A7:5E:83:06:9A:12:ED:3F:15:76:46:03:74:78:42:FF:9B:0F:B2:AC
Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
Certificate issuer: /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Certificate serial: 0264
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
Manifest number: 025B
Signing time: Sun 25 Jan 2026 00:55:10 +0000
Manifest this update: Sun 25 Jan 2026 00:55:09 +0000
Manifest next update: Sun 01 Feb 2026 00:55:09 +0000
Files and hashes: 1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: GoHNHXi30i1W+JVYJR5wlr1Hit8rFbOvWDkVRQznUjg=)
2: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: guoDsfCdlPfgkYSScjR/9hRsT4QBuvGrmx7XsTxsYOY=)
3: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: PGJbQnjc1bTQtRJhtYYqM6Jzz/Z0WeIug83GlsZ1DPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 612 (0x264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE9CC, serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Validity
Not Before: Jan 25 00:55:09 2026 GMT
Not After : Feb 1 00:55:09 2026 GMT
Subject: CN=697569ed-8f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:42:57:84:14:12:1e:6b:43:03:4d:00:11:
ad:3a:53:c7:10:bf:ac:65:7e:e4:bc:53:82:d3:a6:
2c:b6:b9:dd:06:37:a4:bd:69:e7:51:61:74:99:6e:
aa:1f:98:9b:39:5d:36:c1:0f:fa:50:b2:07:92:1c:
c2:dc:3a:88:d9:ef:94:2f:fe:2a:bf:ed:27:23:8e:
cb:46:cd:65:37:0d:41:fd:34:9d:dc:38:97:b4:fd:
3b:e2:bd:9a:3b:27:e7:91:51:7d:a3:2a:1e:0a:39:
40:f1:d7:7e:9a:9a:2b:5c:eb:c5:3b:64:9d:06:ad:
70:d8:66:0f:ac:b5:82:52:6e:4f:3e:a1:75:ee:70:
6e:ed:b8:f7:76:02:ef:db:85:d4:45:60:f9:2e:98:
50:5b:9b:96:99:bb:bb:94:fa:23:a6:df:dc:ac:49:
0f:3e:1b:29:1d:fe:9d:e8:38:70:6d:1d:04:b9:b4:
08:93:e1:84:f1:5f:44:9b:7e:7a:30:96:aa:d7:dc:
89:8f:49:86:96:c2:4e:67:67:c4:af:f8:32:31:81:
95:1a:0e:45:93:2d:a6:86:54:85:c1:12:e0:6a:15:
bf:6d:ec:d9:63:3c:f9:4d:e7:ce:ed:41:05:96:e7:
86:f6:6a:03:9f:e3:ed:f2:5e:a6:1c:5b:41:71:13:
47:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5E:83:06:9A:12:ED:3F:15:76:46:03:74:78:42:FF:9B:0F:B2:AC
X509v3 Authority Key Identifier:
keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:61:7a:5f:ef:81:b5:1d:51:99:31:07:de:76:26:ac:c0:82:
06:20:37:16:22:9c:da:70:91:e8:d4:26:14:f9:64:ae:e9:b3:
f7:18:16:a2:c4:41:28:5a:62:d4:ac:57:57:e4:0c:f2:a9:c5:
58:30:03:a1:48:84:41:da:1f:76:87:7f:a9:15:0e:62:8d:ef:
74:49:65:5b:a7:e9:d8:96:32:6f:af:b5:fe:9c:2e:d6:7c:d6:
32:29:f2:3a:77:8a:4a:c2:e8:fe:9f:f4:ea:1c:c9:ad:66:30:
4c:45:95:c4:10:2f:e0:c2:08:a5:b5:00:00:2c:04:06:3e:cd:
66:54:af:91:b9:76:e2:55:bc:2e:f5:96:84:3e:76:1f:b6:5d:
fa:3e:c5:2b:93:15:82:61:25:d3:6d:05:a2:d7:20:60:34:79:
e1:9a:16:b8:53:2e:91:3f:0b:7c:77:79:ea:ba:9f:93:64:5a:
cb:bd:79:21:47:31:8e:92:33:7b:18:2d:52:2e:c4:24:f3:ac:
80:39:83:bb:65:0a:02:05:14:a4:91:30:7c:7c:34:ff:c6:3c:
33:a0:91:d3:50:cd:3e:32:ed:dc:95:c6:75:38:a6:4f:3d:73:
e2:dd:86:b7:40:53:47:60:32:61:71:30:5f:7b:35:8f:91:84:
f2:ae:54:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:35:12 2026 by rpki-client