This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
File: gqdp3XRsgx9MTbKdamXeCNatle0.mft (raw, json)
Hash identifier: T/uZahzfuGnlWUZtMMpXNIMn4BrMEAkRQ7ZUf7vIZEM=
Subject key identifier: B0:3C:74:D9:FD:22:34:E1:97:06:0D:81:24:9D:5A:CE:EC:D0:34:27
Authority key identifier: 82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED
Certificate issuer: /CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
Manifest number: D8
Signing time: Sun 11 Jan 2026 04:54:57 +0000
Manifest this update: Sun 11 Jan 2026 04:54:56 +0000
Manifest next update: Sun 18 Jan 2026 04:54:56 +0000
Files and hashes: 1: gqdp3XRsgx9MTbKdamXeCNatle0.crl (hash: 3FTrG+WIXH3IP9L+jXLmXLUommDOe7YRkbG+AxPFBsE=)
2: DC76F25EBCFD11EFAF51D253C4F9AE02.roa (hash: 3kSsbmp5huWEzylEUYdx0oiOaN6SnRVFNm6WlSLEixg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl
rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 04:54:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91921AE, serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED
Validity
Not Before: Jan 11 04:54:56 2026 GMT
Not After : Jan 18 04:54:56 2026 GMT
Subject: CN=69632d20-d8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:fd:9f:2f:a8:46:d0:a6:41:6a:70:f7:26:
f1:ec:c7:9a:e7:72:3a:15:8e:63:e7:d7:f1:2e:37:
9e:58:27:98:83:e2:09:54:19:52:af:63:8d:08:0f:
1a:20:f4:3a:92:0e:e0:e2:a8:a3:95:ac:e6:df:63:
67:5a:2b:06:75:f1:49:65:a8:ca:82:80:31:96:6f:
14:65:9d:6d:eb:21:24:14:5b:41:3f:0e:48:05:d3:
3c:59:46:32:41:33:7a:62:ad:3c:1e:93:0b:2d:85:
ce:8e:4c:e7:89:c7:6d:79:79:cc:d8:cc:ed:ab:2e:
81:a9:70:82:1a:ac:98:7d:a7:78:5e:50:27:c6:67:
fa:4f:98:a1:9b:91:ef:33:4c:cd:72:5e:79:d4:32:
fa:d8:09:ef:1b:a6:6d:59:40:75:07:24:72:bf:ef:
6f:ad:54:75:c0:06:27:a5:20:9e:17:65:98:00:99:
c8:06:e7:0e:2e:26:2d:de:d7:e8:74:6b:ad:6d:28:
38:13:bb:b2:a8:a8:6a:3e:81:4e:52:6d:9e:ee:40:
7b:56:d0:d2:aa:42:d2:39:36:36:57:b8:7c:46:72:
0c:11:bf:f0:6f:19:6f:24:f3:12:fe:e9:fc:ab:1a:
44:18:5f:85:41:79:e7:17:69:d6:e1:77:6c:4f:76:
9f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3C:74:D9:FD:22:34:E1:97:06:0D:81:24:9D:5A:CE:EC:D0:34:27
X509v3 Authority Key Identifier:
keyid:82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5b:cf:bb:96:3a:ad:df:47:f4:79:3e:9c:b9:ae:b6:8d:96:
8a:98:43:fb:5c:92:c1:30:f5:3a:73:05:4b:05:3a:d9:2d:49:
01:28:c5:ac:26:55:9b:8c:0e:51:19:0f:5d:6e:a7:11:07:52:
14:e6:f7:a4:e2:66:0b:b9:f7:99:5b:df:d6:86:22:03:51:0a:
80:0a:c5:1c:49:35:ae:9f:e9:ea:fb:ab:61:2e:7d:77:d4:35:
35:a6:09:0a:82:0f:99:ea:89:0b:c9:4d:06:0e:08:a0:48:d1:
ff:50:e1:f9:ce:4f:de:01:30:15:0e:b2:9d:99:40:22:73:32:
bc:c8:0d:87:ad:89:f9:45:9b:a1:b1:d6:8b:fe:10:d3:30:d1:
4f:27:67:09:d0:f5:ac:d0:e2:1f:4b:17:3e:c3:8c:89:87:a0:
9d:81:f4:d8:01:57:61:58:a5:1c:5c:60:6a:51:96:fd:9c:9e:
c5:67:41:f7:97:da:37:49:84:c0:fe:f6:d9:47:b5:72:3d:c3:
b0:40:f5:47:0f:11:65:a1:fd:a0:a2:c5:ce:22:c6:e0:d3:fe:
24:d3:d0:ec:fd:c6:df:8e:46:a8:63:88:a5:0d:13:b6:92:f4:
f3:2e:33:a5:da:8d:99:3a:a9:ba:84:1c:e8:6f:07:34:4f:a6:
fe:5c:e0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:26:37 2026 by rpki-client