This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
File: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json)
Hash identifier: qi0vIsbHOlRKs253X1Pib4eu9gbtbCtSjTDEgoFMmL8=
Subject key identifier: F2:79:20:AA:7F:A6:7B:14:C4:0C:45:55:6B:17:6D:76:42:72:6E:C4
Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62
Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
Certificate serial: 016E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
Manifest number: 0163
Signing time: Sun 25 Jan 2026 03:21:56 +0000
Manifest this update: Sun 25 Jan 2026 03:21:56 +0000
Manifest next update: Sun 01 Feb 2026 03:21:56 +0000
Files and hashes: 1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: zpGTbchUckRSfIUt+ArrXW3yhm5DzkeryxokcR3j1wQ=)
2: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: w52d9OuktB7yo9yKgF19teLaRAwVoNJ/C/T16AevquE=)
3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: MNv7Tv9JE/4kyK1NNSNq4H6AovhKI1wlDUP/bnL+AHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl
rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:21:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
Validity
Not Before: Jan 25 03:21:56 2026 GMT
Not After : Feb 1 03:21:56 2026 GMT
Subject: CN=69758c54-9fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:d8:19:31:8b:82:5f:3d:f4:a4:0a:89:d8:
0c:93:51:77:30:16:ec:50:ab:6c:1c:9d:c7:ca:a5:
9d:3d:53:4e:fd:ac:f0:4b:92:a4:53:0f:19:8f:52:
44:92:52:42:c6:ac:4a:12:fe:65:63:f2:7d:40:b1:
a4:69:ad:2e:33:83:03:36:cb:1d:ef:78:4f:3c:f4:
c2:fe:3a:91:d8:e3:22:6e:cf:d6:55:cc:59:c2:f2:
cc:9c:0f:68:51:7d:c9:f8:63:64:e7:ec:63:51:f6:
07:dc:4f:0c:42:d3:fe:6a:88:bd:b2:db:9d:6a:f3:
f9:f2:c9:a0:a1:68:6a:7a:71:e9:4a:90:5e:0d:5d:
82:2f:19:61:06:f3:1d:13:52:cb:c3:d2:f3:02:69:
4d:f1:5d:1e:17:49:9a:3e:68:85:24:fd:93:59:f0:
4b:be:15:c6:cd:54:a5:a7:83:7f:e1:3b:4e:fc:c2:
bd:48:23:d0:ae:84:61:fd:69:d2:f3:b6:e3:f7:97:
d5:e3:69:54:a0:40:73:2e:ba:bb:08:eb:dd:b1:9d:
d9:98:50:05:cd:78:36:ed:8f:20:e3:36:8b:15:47:
83:cd:f2:ee:0a:04:dc:d6:ef:88:d9:1c:4a:6e:8f:
5c:4d:97:05:9c:72:05:53:ef:fc:62:48:27:0b:92:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:79:20:AA:7F:A6:7B:14:C4:0C:45:55:6B:17:6D:76:42:72:6E:C4
X509v3 Authority Key Identifier:
keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:19:b2:da:f0:2e:f7:df:2b:f4:5c:cb:98:64:1d:37:fb:43:
f1:44:fb:f9:d9:64:63:5d:36:3a:23:29:6a:5b:0b:c7:64:f4:
27:c1:fd:9f:e0:1a:69:49:72:ab:54:2a:f7:80:6c:e7:a7:ad:
af:f9:78:35:92:08:2d:23:8d:34:5b:57:98:22:4a:b5:17:71:
4b:1a:8b:74:c3:b5:ee:0d:3e:04:21:f5:e1:34:c9:67:58:9d:
e8:1e:d1:eb:d7:7e:0b:4b:90:f3:26:b3:38:cd:a5:71:b8:40:
9f:0b:d3:cf:59:35:3b:b0:98:5a:44:38:41:c1:2b:c2:a4:a8:
7a:29:41:7b:07:ae:ff:d1:0a:38:d1:4d:51:0e:a5:b9:1d:fe:
86:7c:31:ba:d5:82:4e:7b:cc:96:48:21:4e:67:22:44:19:3b:
4b:15:45:0c:14:f5:b9:d3:dd:50:84:1c:52:70:24:f6:02:0b:
f0:c7:38:96:7f:2b:30:78:10:55:50:7e:6e:71:a3:b3:f8:35:
90:61:71:e5:1c:70:30:2f:ac:8a:43:e6:fa:b7:99:40:44:fd:
b4:c9:b9:55:11:41:6c:8e:1e:89:b8:bb:0f:07:e8:d0:e6:4a:
64:e3:1e:57:f3:c8:c9:47:69:a2:eb:ed:87:e5:d2:38:3c:c6:
fa:05:23:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:31:13 2026 by rpki-client