This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
File: GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft (raw, json)
Hash identifier: sywis7D+jJ7b2w1nPjsh3lb2+Rb3fCPSsohUE+0fWJY=
Subject key identifier: E9:C4:FB:DF:2E:4E:B3:47:79:81:3E:72:02:70:CF:5A:28:55:6F:C8
Authority key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60
Certificate issuer: /CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60
Certificate serial: 0571
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
Manifest number: 0568
Signing time: Sat 24 Jan 2026 22:35:57 +0000
Manifest this update: Sat 24 Jan 2026 22:35:56 +0000
Manifest next update: Sat 31 Jan 2026 22:35:56 +0000
Files and hashes: 1: GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl (hash: RIrLo/aiT2KgLODuQAQ/gPqMYQuLEU1EIRK/8LzUN5s=)
2: 491FFA9A177011ECA96DF680C4F9AE02.roa (hash: 7HMY0VAKzttuQ0fRp6AzkKm6fjk8O3uYxQqvsqTSq24=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl
rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:35:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1393 (0x571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED3AE, serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60
Validity
Not Before: Jan 24 22:35:56 2026 GMT
Not After : Jan 31 22:35:56 2026 GMT
Subject: CN=6975494c-c407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:2c:56:df:6b:ce:b3:27:8f:b1:7a:53:48:
70:a6:50:69:6a:30:8b:19:1f:7c:94:5c:70:92:09:
d4:05:6e:8b:2b:7b:f3:4c:1d:fa:3f:16:78:14:ef:
5b:27:51:77:0f:eb:d1:98:82:ec:8c:a7:71:01:8e:
84:65:13:77:56:14:16:64:d2:3e:07:07:d9:06:18:
2a:03:44:fb:fe:60:db:74:64:e5:8b:62:d6:38:09:
02:ed:21:64:b8:fc:37:fe:64:54:68:b7:22:60:47:
94:13:6f:22:53:76:d5:7f:25:d1:0b:59:f4:24:0a:
18:ba:8b:3a:f5:cc:e6:6b:10:cf:a5:3c:ab:59:71:
4b:a7:82:d7:e9:9b:d3:10:ed:c8:f6:43:82:85:06:
72:c6:61:41:cf:5a:82:b7:d5:c2:f5:04:74:64:98:
37:98:7d:b2:81:85:79:4a:26:3d:c5:eb:40:42:50:
00:68:37:aa:36:b7:47:1c:cf:9c:6a:d4:f0:c0:4c:
2f:f3:7a:77:2d:be:e6:0d:98:81:d8:a2:b0:d8:5f:
06:3b:a8:95:a8:31:ca:1a:d7:83:8c:1c:be:c4:67:
60:1e:f1:4e:f5:42:07:f1:18:c0:28:ce:bf:11:d1:
fc:ab:a1:75:6a:ce:e1:31:48:99:c2:e2:8e:e9:18:
06:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C4:FB:DF:2E:4E:B3:47:79:81:3E:72:02:70:CF:5A:28:55:6F:C8
X509v3 Authority Key Identifier:
keyid:19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a7:b2:1c:18:02:b6:f3:9f:12:bc:e9:29:e6:b6:09:bd:13:
dd:c4:d9:fc:08:18:27:76:b6:33:66:2b:84:41:1f:ad:8e:a8:
84:97:30:f1:bf:fd:41:ab:c2:e6:f6:03:9e:af:69:35:57:05:
72:d2:e9:9d:b0:3f:c9:c6:8e:86:a5:86:b3:cb:bb:8e:87:4c:
b8:00:c7:94:5c:41:93:88:1b:dd:39:c9:89:67:83:ed:f6:1b:
98:1f:28:3c:42:b2:47:a7:cb:71:d3:d9:0e:c8:dd:ea:ee:63:
53:55:0f:a2:92:52:cc:4a:c7:7f:8b:71:a4:6b:84:c8:f4:d4:
d0:58:f5:6c:95:bd:58:23:4f:21:a6:e4:5f:fb:43:56:ef:c9:
ac:67:18:5c:fa:9f:db:3b:6e:32:e7:8c:c0:8b:c3:b3:3e:ab:
42:fc:c3:4b:f0:c0:99:38:5c:bc:b2:30:7a:09:13:e3:48:f3:
ec:ee:b2:9f:4a:8e:7c:de:a7:6f:2b:c9:97:4f:48:4a:73:4e:
c6:79:e2:0e:c0:4a:82:8d:39:9f:83:8f:bc:97:25:6a:23:5a:
24:e3:73:3b:92:3d:fd:08:30:d2:ef:6a:8c:59:e0:92:35:c7:
a0:5a:34:59:13:04:94:36:8b:70:c3:65:91:a0:4d:76:71:b6:
92:8d:e9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:45:37 2026 by rpki-client