This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
File: GyXsWdB_k0JLkMItNOyrIq2FKpc.mft (raw, json)
Hash identifier: 8AcLqNYw9TuLikb8K7LC0gmIdiz9HO4LM+6WKXDvQek=
Subject key identifier: 4C:39:FA:EA:8D:28:61:B8:90:0C:FC:50:DB:9D:08:68:22:45:91:8C
Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97
Certificate issuer: /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
Certificate serial: 024F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
Manifest number: 024A
Signing time: Tue 13 Jan 2026 00:55:45 +0000
Manifest this update: Tue 13 Jan 2026 00:55:44 +0000
Manifest next update: Tue 20 Jan 2026 00:55:44 +0000
Files and hashes: 1: GyXsWdB_k0JLkMItNOyrIq2FKpc.crl (hash: 2tl5zvnRGIeV/yliHEuh+zGw4bx8N8+hEQm00E32nr4=)
2: 790195326F6411ED83BC230FC4F9AE02.roa (hash: xVQRlc0PkJ4VXTg8SHxKZBLplXrS1P4Dp3rhgyw72w4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl
rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Jan 2026 00:55:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886EA, serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
Validity
Not Before: Jan 13 00:55:44 2026 GMT
Not After : Jan 20 00:55:44 2026 GMT
Subject: CN=69659811-fce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:85:d0:ae:25:e7:be:10:c9:ac:4c:38:f0:
ca:f5:4a:74:96:80:0a:27:95:60:f8:82:66:0f:31:
83:7d:50:7a:4b:1c:a6:17:0b:f2:c3:30:03:39:1d:
b1:57:17:fe:c8:3a:62:78:fc:3a:a4:14:cd:82:c0:
4b:24:d2:fb:3b:e3:21:e0:9b:2f:ff:4c:e2:78:a6:
c3:e5:5c:9d:f3:ed:99:47:43:a8:fc:62:01:cb:08:
53:14:56:8c:c8:02:ab:6c:e0:f9:84:2b:bc:26:52:
7a:54:5c:7c:6d:94:c6:af:34:76:23:3a:f8:51:15:
30:4b:5c:61:0d:e0:09:f9:db:46:b1:35:56:ce:95:
d4:05:c8:05:da:a6:7e:84:ff:0a:e0:46:a4:53:41:
a0:91:59:21:9f:7d:3d:b6:81:c3:19:32:0b:41:dc:
f6:9c:0a:fa:d0:4c:e3:e7:67:a3:a0:3f:7c:f6:2d:
60:6e:29:cf:72:02:a3:a4:28:20:42:c1:54:6e:2b:
c7:f8:35:0f:8d:6c:c0:4c:8e:9b:18:90:04:07:82:
b8:54:2b:ef:4a:3f:99:bb:33:11:2f:f8:8a:32:68:
02:04:8c:23:b6:4c:ac:06:97:35:10:75:31:a2:11:
cb:14:ac:14:27:41:b8:c2:f5:d8:c3:3d:23:69:eb:
1a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:39:FA:EA:8D:28:61:B8:90:0C:FC:50:DB:9D:08:68:22:45:91:8C
X509v3 Authority Key Identifier:
keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ea:c7:03:4e:cb:b7:64:59:d1:c8:6d:c7:ff:2e:5a:4f:0b:
fa:91:7d:86:ee:d6:61:ce:26:2f:f6:18:14:28:60:ad:cc:9f:
58:59:30:a3:22:2e:36:ed:85:e2:66:0b:8e:96:b4:09:be:ff:
e3:17:91:2d:ea:13:36:85:ee:8f:44:7b:fb:03:97:6c:8b:06:
28:bd:78:1e:70:d9:df:01:26:35:a5:04:22:7f:e1:c1:f2:91:
42:eb:d6:4f:b7:3e:ab:09:17:da:5e:f6:fe:7f:6a:46:fa:7d:
2a:fd:a8:5d:83:de:b9:d7:01:a9:f8:a7:32:7e:90:f6:fb:88:
61:cb:6c:13:94:c6:8b:a6:98:e8:32:67:45:fe:f2:b9:30:be:
07:32:16:2a:0c:35:15:07:b8:f9:be:1d:c3:33:74:40:d8:29:
8c:cd:35:cb:5d:3d:7d:84:03:84:4e:56:b0:97:5e:ff:a0:69:
b9:e1:65:7e:17:5b:7f:35:f9:e2:d4:8d:d4:83:1b:91:c2:1d:
dd:14:a3:f8:05:b7:ad:d1:25:27:eb:cd:a9:49:af:10:db:09:
35:6d:96:af:9d:4b:34:7f:61:10:15:74:e5:a5:0a:10:c5:ed:
24:a8:1e:85:aa:fb:85:a2:f8:8f:52:7f:64:9f:67:36:ae:26:
cd:d4:9c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 12:54:25 2026 by rpki-client