This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
File: gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft (raw, json)
Hash identifier: Pcf3XzHqh9efM+oMiFk54xTj0zybQAHGYjFqqRnRwjc=
Subject key identifier: 15:8E:C8:7F:BA:3B:91:7B:0E:83:E7:49:A8:46:6F:2B:35:68:4A:4B
Authority key identifier: 81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
Certificate issuer: /CN=A91E6BEF/serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Certificate serial: 0E13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
Manifest number: 0E09
Signing time: Sat 24 Jan 2026 17:29:50 +0000
Manifest this update: Sat 24 Jan 2026 17:29:50 +0000
Manifest next update: Sat 31 Jan 2026 17:29:50 +0000
Files and hashes: 1: gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl (hash: 16KKE9QRWSsYxLKeIcxdto2wfi0mksKK6elBa9+wukw=)
2: FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa (hash: Pt5AOEwwZxq7lVNTYxsL3f5FIIGV0LQiKBFU4Ct/fFM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3603 (0xe13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6BEF, serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Validity
Not Before: Jan 24 17:29:50 2026 GMT
Not After : Jan 31 17:29:50 2026 GMT
Subject: CN=6975018e-b10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:66:cd:48:9e:24:b4:17:0b:84:0a:14:4b:
79:fc:4d:2c:1f:e1:cb:b9:82:d6:d0:fd:6f:f8:82:
f0:4f:3d:5c:a8:57:ee:52:65:61:bf:28:75:dd:5d:
9e:a9:e6:70:e9:8e:a1:1d:de:ba:86:15:e4:78:05:
3b:ee:4c:8b:d7:e7:a8:ac:96:38:68:02:00:86:d9:
a2:52:cd:ae:10:cd:aa:fa:93:e1:e7:09:45:ca:db:
db:77:27:83:51:80:ca:f8:e8:e9:7b:ac:27:7c:fb:
70:10:4f:ba:47:62:d6:76:3c:ac:ec:6f:f7:51:5e:
c4:de:f7:8b:ce:98:3c:26:27:ae:ef:af:f3:39:9a:
93:a4:8e:f0:7b:18:e2:b8:d4:a0:4c:34:89:62:77:
f0:b4:81:fe:e2:a3:3e:e6:64:5b:d0:3e:7b:a7:64:
f2:17:87:3a:78:a9:bb:bc:3f:57:c9:2b:74:0d:19:
01:7a:a7:d3:36:2f:44:ba:3d:99:dd:07:e4:f1:3f:
e7:0a:b4:22:e7:9e:56:35:06:ee:1a:27:f8:a0:bc:
43:c6:9f:ed:0d:97:26:84:39:c5:01:38:7b:9a:57:
cd:64:5b:84:a0:3e:2c:ae:2c:21:8a:d8:13:9b:15:
d1:2e:2a:3c:4e:2c:1a:29:9e:dc:d6:d6:16:a7:aa:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8E:C8:7F:BA:3B:91:7B:0E:83:E7:49:A8:46:6F:2B:35:68:4A:4B
X509v3 Authority Key Identifier:
keyid:81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:c2:2d:50:89:43:94:23:1a:ef:91:58:02:58:4c:2e:94:08:
17:de:cd:70:b1:91:a2:3b:37:9e:f3:6d:3e:bf:fd:f8:8a:d4:
f7:69:7d:b2:58:96:12:eb:66:dc:b2:b4:a5:bf:60:9c:0e:58:
d5:e1:dc:1d:75:b7:90:0e:73:30:ea:6a:06:a4:a2:aa:79:e4:
ac:e1:60:a4:fa:d3:5b:d8:e1:9d:83:2d:49:e4:cc:4a:97:5e:
c5:c3:67:1a:82:7b:96:c2:e0:92:b2:01:b4:33:0b:49:0c:59:
e8:52:05:be:0e:18:e0:08:3d:57:e4:85:f9:64:a8:55:67:75:
32:e0:ca:12:8b:06:f7:ed:e7:a6:e9:82:8d:2f:84:6e:fb:4a:
46:01:a5:53:da:e4:92:d7:b7:ad:fa:1c:9e:0c:c2:91:57:76:
f3:5a:d1:5d:a5:da:b1:86:89:da:df:9d:76:b4:6c:89:65:56:
1a:ba:51:4c:3c:bf:3d:e4:15:14:5d:b2:3b:16:d3:36:5e:55:
79:26:8e:0d:b5:8a:cb:ae:46:0e:ec:82:59:c8:7f:3f:72:bc:
81:d6:57:b2:4a:ac:5b:af:4b:4d:92:72:97:f3:35:22:eb:db:
28:2d:0e:dd:74:07:50:ef:7a:7f:21:2b:c4:43:45:8e:ca:bb:
b2:57:f7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:19:52 2026 by rpki-client