This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft
File: gyJEswLRZc14vcOiErC35vkL_GA.mft (raw, json)
Hash identifier: IQ++k1XXK66iZUye5pMUZxCU5THgCOL0KN1B3XkbaQE=
Subject key identifier: DB:BA:D4:A2:17:73:4C:D8:D8:CA:25:5E:5F:E4:B5:1C:37:1B:A7:BB
Authority key identifier: 83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60
Certificate issuer: /CN=A91F5AAD/serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60
Certificate serial: 06BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft
Manifest number: 06B7
Signing time: Tue 06 Jan 2026 21:36:08 +0000
Manifest this update: Tue 06 Jan 2026 21:36:08 +0000
Manifest next update: Tue 13 Jan 2026 21:36:08 +0000
Files and hashes: 1: gyJEswLRZc14vcOiErC35vkL_GA.crl (hash: ORCDZP004w2DeaNtiG6yvrB5CCCgDrZkJmJGj0xPK9c=)
2: D9A63D2E9D0711EBB708700BC4F9AE02.roa (hash: rIs0TSp/FOVS2yEmJo3gyqgsWO9NpZnz1xIrp85P4OI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl
rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Jan 2026 21:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1727 (0x6bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5AAD, serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60
Validity
Not Before: Jan 6 21:36:08 2026 GMT
Not After : Jan 13 21:36:08 2026 GMT
Subject: CN=695d8048-c7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ec:34:a4:fc:2d:e2:1c:51:3c:9b:48:84:82:
e2:ff:22:55:ac:82:85:95:c8:8d:fa:21:b9:51:de:
64:74:0b:d6:96:7e:bf:66:0e:3f:7e:5a:0e:5e:fb:
7f:8a:82:a9:d3:a4:bd:91:b8:c3:e0:11:e5:65:37:
b1:3e:f5:79:71:55:e1:2d:01:d3:bc:20:76:e0:84:
37:a1:14:4e:7c:ab:8f:1e:d6:93:62:47:c6:3b:ff:
3e:d7:c5:4d:ae:68:8a:c6:8a:df:a0:82:c4:f3:84:
f7:0d:e9:ca:3e:1c:dc:0e:4e:45:f3:7e:f2:e5:2e:
1b:7d:9f:89:8f:05:59:31:e7:fc:87:45:94:6e:c9:
28:d9:97:87:1e:cf:a4:be:68:8a:11:a3:0a:7c:a2:
13:98:6b:54:99:15:d4:fa:3d:bd:10:6a:cd:35:a5:
d7:17:78:87:63:09:86:e5:ad:77:8f:f7:50:d3:b1:
ae:65:51:22:bc:2c:db:61:55:6a:ba:e3:02:68:ce:
b5:70:2f:f7:3e:44:50:8d:06:c6:e4:15:09:11:08:
2e:db:e6:3d:34:b2:5a:7a:2f:ac:04:4b:66:b2:c8:
cb:2a:d8:e6:7c:64:2c:33:72:3b:71:00:6d:1a:60:
bf:4c:5f:76:5e:08:41:a8:c0:16:dd:8a:c2:e8:b0:
5a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BA:D4:A2:17:73:4C:D8:D8:CA:25:5E:5F:E4:B5:1C:37:1B:A7:BB
X509v3 Authority Key Identifier:
keyid:83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:44:a7:52:4a:7a:13:c6:4b:a5:cc:5b:14:d2:d6:8c:cf:83:
6b:85:21:d5:43:c2:18:c2:27:8b:73:ad:8c:78:38:ae:b1:d7:
d8:9f:da:b9:6d:95:09:4f:fa:6b:5f:0e:f7:3b:f5:92:7c:a2:
77:f0:51:a5:bd:15:6b:7b:06:30:53:97:c4:c1:2f:46:ec:3a:
d5:f7:38:14:2c:8c:0c:58:9c:3f:88:76:b3:f7:03:b4:f1:20:
66:d3:79:f4:b8:c1:3d:97:fe:df:57:be:25:11:5f:f6:02:90:
93:09:97:6d:52:f4:ea:a9:ab:f7:d9:c7:99:fe:2d:0f:64:b8:
69:e0:a7:ce:d4:74:1e:ec:72:98:e4:4c:37:41:33:ab:f8:6a:
17:6f:b9:ee:90:94:a3:33:4e:e5:91:10:e2:dd:63:37:10:73:
b4:86:bc:48:21:cb:72:08:b4:9f:f0:71:7b:b6:0c:e8:47:e4:
4f:cf:ab:9a:c3:69:14:f8:da:86:df:0d:33:49:55:f0:54:2c:
89:07:9b:28:35:67:b4:15:24:51:4e:1d:e6:40:c9:e5:69:0e:
d0:d0:9e:ec:6a:20:c6:5e:a1:3d:93:2a:23:4d:1d:77:66:f1:
58:71:e2:14:62:ac:bc:1e:e3:1f:2d:04:22:28:67:53:7f:d2:
e5:d9:7b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 23:12:35 2026 by rpki-client