This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
File: GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft (raw, json)
Hash identifier: CkKdvZV5Oz5ulsVY0NKFl4nwIdH6yH6+KGEGsqhgMW0=
Subject key identifier: 6B:C2:D7:29:C6:AD:21:E0:7D:B7:9C:9D:84:35:49:31:B9:32:29:7F
Authority key identifier: 18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C
Certificate issuer: /CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
Certificate serial: 04BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
Manifest number: 04B5
Signing time: Sat 10 Jan 2026 23:08:26 +0000
Manifest this update: Sat 10 Jan 2026 23:08:26 +0000
Manifest next update: Sat 17 Jan 2026 23:08:26 +0000
Files and hashes: 1: GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl (hash: VPRCGVXR1w618YFa+gYiXvQwdgVnDuicJsPoDRjsMsg=)
2: C7EAFB5AB62011EC9060CD0FC4F9AE02.roa (hash: xFL3ypsjaivEwLZovLg7QH0r6iiczksBr1MYMN2w3rQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl
rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 23:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1210 (0x4ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A09DE, serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
Validity
Not Before: Jan 10 23:08:26 2026 GMT
Not After : Jan 17 23:08:26 2026 GMT
Subject: CN=6962dbea-86db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:0d:b3:ad:41:85:57:3c:d6:87:43:cc:c5:
cf:15:3a:c2:56:bc:1e:f0:3f:7b:16:47:eb:7a:bb:
3d:8e:e4:d2:d3:ca:c6:fb:c1:d3:e1:f6:d5:67:97:
c9:c9:07:0f:75:b2:58:5b:68:0c:2b:dc:45:c4:af:
d8:8d:15:40:de:1e:17:b7:5d:f0:46:6f:bb:05:f2:
8e:5a:d3:84:4f:28:29:9d:6b:8a:4b:bb:68:ee:ec:
c0:18:3b:0a:11:88:f9:df:c9:11:21:34:ca:72:b5:
8b:04:19:52:96:51:37:d1:6b:8f:18:24:ae:51:59:
18:42:16:ed:fa:34:71:d4:7d:c4:71:e8:14:19:80:
c3:a6:7f:61:c1:25:1c:29:b0:66:c4:bc:5d:fc:fd:
4e:f1:d7:21:75:a9:41:83:e5:d0:f9:10:57:3f:ec:
7b:fd:40:bb:d1:85:46:09:fa:8f:70:ee:fa:0b:e3:
98:aa:aa:43:78:7f:cb:48:54:f6:c0:0f:d7:2e:06:
bc:99:de:02:e6:5a:58:ed:d0:c6:bc:19:7b:89:07:
e2:3d:a7:7c:cd:36:df:8e:99:86:ff:4d:ac:e5:09:
f3:8e:b9:a5:76:a4:a2:b2:03:b7:57:10:0c:40:4b:
03:91:92:03:34:d9:2c:58:1f:8a:35:8a:7a:b0:77:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C2:D7:29:C6:AD:21:E0:7D:B7:9C:9D:84:35:49:31:B9:32:29:7F
X509v3 Authority Key Identifier:
keyid:18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:97:26:2c:6c:d8:eb:59:fb:d3:f3:e1:20:d6:07:4f:f4:48:
65:b2:e9:dd:49:9c:4d:4e:e5:ab:91:d7:c8:ad:6b:9c:2d:e0:
3e:38:08:68:e1:44:2a:06:35:5a:aa:02:43:8a:6f:34:28:ff:
ae:de:50:d7:51:fb:db:b5:84:6d:12:eb:6b:89:41:23:a0:4d:
23:0e:56:24:ac:85:bf:bd:72:bc:cd:3e:98:54:a6:6d:78:82:
98:99:73:ad:96:80:58:06:ac:87:bb:6c:18:0c:8b:06:5b:9e:
f9:33:af:c0:30:0e:53:b4:1c:46:83:41:ef:fd:76:f3:ab:c1:
29:e2:a1:b1:6e:a5:45:ba:b5:91:e8:2f:77:71:ae:76:f4:1f:
85:06:f2:b5:33:f8:84:b3:10:ba:a8:5d:11:e6:5a:cc:a0:c9:
2a:0e:57:89:d0:d7:8f:37:20:69:61:ac:72:47:f3:5a:08:a0:
0f:8c:24:49:cf:fa:74:7f:af:77:6e:9b:56:6a:4e:0d:e5:6a:
92:b4:ac:98:41:1a:89:25:a6:5b:ad:7c:e8:27:3a:69:1b:4d:
7d:72:1e:39:f3:21:cf:6a:b7:67:bb:bd:25:cd:be:67:8c:fe:
4c:40:90:1f:f3:ea:43:aa:bd:fa:0e:83:df:23:e4:67:3a:41:
2f:2d:74:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 14:42:00 2026 by rpki-client