This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
File: gBf49rHsAjxINqRXp7BYQqBxnyg.mft (raw, json)
Hash identifier: HMx0jqXkjIyh1a3aopFUq5cLecoyjzJJbHJa9MBysTY=
Subject key identifier: 73:80:58:84:ED:F2:CA:0A:E2:94:E3:DB:1D:C9:A0:F4:78:42:A6:13
Authority key identifier: 80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28
Certificate issuer: /CN=A913B088/serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
Certificate serial: 0BB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
Manifest number: 0BAE
Signing time: Mon 12 Jan 2026 18:30:39 +0000
Manifest this update: Mon 12 Jan 2026 18:30:38 +0000
Manifest next update: Mon 19 Jan 2026 18:30:38 +0000
Files and hashes: 1: gBf49rHsAjxINqRXp7BYQqBxnyg.crl (hash: e6iA364UhmVSEF+vktD8cFo1U9p/fH3SkzH49dgybPI=)
2: 6DEDEF66387A11EA9450A37CC4F9AE02.roa (hash: o4u5Q2Jc2gCY8tVjsD1bgPzcbwwoDr6mqctN+7fPekU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl
rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 18:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2997 (0xbb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B088, serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
Validity
Not Before: Jan 12 18:30:38 2026 GMT
Not After : Jan 19 18:30:38 2026 GMT
Subject: CN=69653dcf-44a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:f6:d9:b4:c8:5e:2d:5b:bb:67:c9:df:5b:
ed:91:73:fa:67:c8:c3:7c:a4:97:88:de:87:62:0d:
86:c2:ba:d1:eb:22:7c:7b:27:1b:32:3a:6a:0d:9a:
09:8b:24:92:98:80:4a:7e:4f:ce:33:62:19:79:e4:
da:bc:d0:41:5c:5c:ab:ce:d4:24:fc:c3:7a:47:ef:
23:3d:69:43:8e:6c:17:f1:9a:43:00:92:df:52:1a:
3f:15:9a:76:7f:2f:60:56:cc:bb:af:c8:4c:62:2e:
c5:b3:b4:dc:3f:45:82:86:fb:2e:9d:6e:ba:52:93:
0e:b4:3b:ad:50:6c:f8:36:90:48:bf:76:a7:26:ac:
75:34:d8:3e:09:b6:40:ba:52:ea:34:7a:bf:8e:a1:
40:ca:38:84:05:e7:ce:db:49:75:4a:e9:0e:86:92:
97:d1:d0:d3:a4:1a:04:9f:ac:b1:9b:7d:2f:91:eb:
e5:46:6e:c6:f2:05:30:6e:16:64:28:1c:2b:0f:9c:
11:0a:46:c8:2f:9b:be:71:05:b5:b4:6e:fd:79:59:
3b:2d:60:af:50:a4:6c:29:a5:43:3e:19:96:f7:d9:
77:0e:8d:7e:4e:e3:d6:f3:72:df:fb:f2:5d:90:20:
c0:72:85:e3:f5:cd:d9:82:54:e0:a9:db:1b:f5:ff:
e1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:80:58:84:ED:F2:CA:0A:E2:94:E3:DB:1D:C9:A0:F4:78:42:A6:13
X509v3 Authority Key Identifier:
keyid:80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:f5:81:cc:39:54:fb:9d:41:97:bb:41:ff:53:7f:dc:a0:c4:
5a:82:f2:ba:d7:9f:42:ec:2c:06:9b:45:9f:2a:4e:83:29:dd:
a4:7e:f5:24:89:51:f0:52:2b:11:1c:e2:30:3b:ba:06:51:53:
df:8d:30:50:70:5d:33:d0:ce:72:8c:28:b8:80:7e:ea:fa:99:
f2:b7:3c:33:43:7d:95:d4:d0:1d:57:2f:49:74:bf:66:49:87:
7d:7e:51:17:f1:52:f9:23:88:70:19:fa:a1:39:ab:ad:5f:6f:
28:b8:14:5b:cb:2b:8b:84:00:b5:19:4b:55:59:db:41:d6:41:
cd:9e:f1:13:ad:f2:f3:ae:6a:02:21:d5:fa:06:c1:0c:36:b2:
2c:c9:55:aa:29:0a:40:99:a0:1a:0a:1c:e8:91:47:13:da:c1:
fe:17:74:0c:19:6c:cb:06:af:96:96:dc:26:95:e2:dc:11:90:
b8:d5:2e:46:5a:f5:dd:dd:9e:1c:a4:51:6b:1e:f7:48:b8:5b:
6f:60:3e:75:4d:cb:cd:72:84:45:46:50:48:0e:7a:6e:d7:9e:
b2:e1:84:39:f1:7d:e8:ab:82:8f:84:0e:ae:e7:ff:3f:a1:22:
99:93:fc:89:9e:22:0e:df:f2:07:bd:c3:8a:fc:d7:b9:25:0f:
d2:a9:26:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 13:30:06 2026 by rpki-client