This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft
File: GI72_1fx9ftPqwqu2qktYE8nVTA.mft (raw, json)
Hash identifier: qK+UlEjY1UdjY1GJQidKdnR5zlmhXltNsMzR2PTzk2U=
Subject key identifier: 39:3B:ED:D7:52:5F:44:BA:A6:7D:CD:7B:DD:34:F2:E7:F4:37:AD:FA
Authority key identifier: 18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30
Certificate issuer: /CN=A91FEC1E/serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft
Manifest number: 80
Signing time: Sun 25 Jan 2026 05:49:00 +0000
Manifest this update: Sun 25 Jan 2026 05:49:00 +0000
Manifest next update: Sun 01 Feb 2026 05:49:00 +0000
Files and hashes: 1: GI72_1fx9ftPqwqu2qktYE8nVTA.crl (hash: 418hKTfmtW+Y7aCIpXaN7nt7NjgtsWSMULvLzhyinK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl
rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEC1E, serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530
Validity
Not Before: Jan 25 05:49:00 2026 GMT
Not After : Feb 1 05:49:00 2026 GMT
Subject: CN=6975aecc-f755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:73:47:e6:39:4b:3d:53:1c:3f:6d:9a:83:88:
ae:89:3a:e9:36:a9:ab:26:d2:70:f1:45:22:91:42:
45:52:05:27:ee:d7:4b:d9:7f:d1:eb:74:24:72:87:
3e:29:a9:a1:0f:7f:b0:38:5f:dc:f6:7a:57:3b:3d:
06:a8:89:4f:75:2e:9d:73:d1:ae:be:5b:59:13:d8:
5b:a5:76:fa:e4:28:c1:1e:65:7b:7f:b9:83:2d:4c:
8b:3f:46:e0:7f:90:42:6a:e8:dd:02:2c:29:8f:60:
52:12:2a:f4:b4:da:9e:3d:c3:1c:9c:8b:9e:7f:6a:
be:84:69:cf:ad:9e:de:f2:48:9a:24:ea:31:ed:24:
7b:ed:2b:c4:f6:99:79:e2:0b:5f:a6:9a:36:24:c9:
13:40:e3:ea:c3:f7:f9:b7:f9:45:5a:82:94:4c:91:
2c:08:da:55:6c:6d:0d:d9:2f:bd:2a:2e:bd:87:37:
ad:62:cc:52:e9:4e:97:46:af:4c:e6:c5:1b:37:85:
40:5f:64:56:2d:56:48:0f:8a:6f:1b:5a:8f:b2:6e:
aa:c6:71:67:a4:fa:a7:3c:3a:db:92:b6:28:de:37:
29:65:69:40:ab:b8:5d:9c:8f:18:ef:7d:3d:bf:81:
ac:43:40:c7:99:ab:8d:2f:9f:85:f6:01:77:c5:ac:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3B:ED:D7:52:5F:44:BA:A6:7D:CD:7B:DD:34:F2:E7:F4:37:AD:FA
X509v3 Authority Key Identifier:
keyid:18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3c:5c:13:71:5d:75:1a:9b:aa:c9:8a:72:7e:82:5a:18:7d:
5c:96:c5:55:21:bc:0a:c1:37:af:f9:e4:48:7d:02:42:47:7e:
50:0f:29:e4:c4:bd:bf:f4:1a:3f:44:24:e1:c0:c8:4c:aa:e1:
fe:0c:08:c9:ca:d2:4d:8f:7b:b3:65:c9:0f:6c:1c:96:90:0b:
e3:8b:36:03:df:a9:2e:03:47:80:fc:8b:05:0a:52:5b:3c:23:
93:ea:40:fe:0b:ef:63:f7:5c:e2:2a:3d:90:86:73:88:6a:06:
9c:0f:0c:a4:1f:c2:10:79:0f:c2:29:7c:e2:26:d9:02:aa:43:
b4:39:cf:ed:c8:36:a9:ab:11:bc:4d:49:cd:98:5d:4b:07:de:
78:a9:42:f8:b5:7f:30:31:cb:4b:41:32:f0:77:2c:fb:5c:23:
0e:83:3a:08:62:4c:dc:a8:c5:1c:b8:b6:0d:89:9d:9f:f4:c0:
e2:68:5b:ca:c9:df:d1:48:a4:2a:0c:62:40:95:59:6c:89:95:
a2:b2:b4:02:38:f4:9c:bd:68:f9:53:26:f3:a5:f2:0f:ba:d1:
96:d1:9f:cc:a4:29:a4:16:10:cd:a6:ee:a1:1c:bd:97:45:7b:
50:b8:51:87:d1:2c:e9:71:9c:ed:19:6e:fe:13:b6:9a:43:82:
d0:2e:6f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:56:19 2026 by rpki-client