This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json)
Hash identifier: dgO2bBNbsT2sLifCmerCpy26vs/qCHRqx6Qat01lRvE=
Subject key identifier: B9:99:BD:77:7A:9F:AF:95:DF:C4:4C:49:70:30:6F:81:90:93:57:D9
Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Certificate serial: 01E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
Manifest number: 01D8
Signing time: Thu 01 Jan 2026 02:26:50 +0000
Manifest this update: Thu 01 Jan 2026 02:26:50 +0000
Manifest next update: Thu 08 Jan 2026 02:26:50 +0000
Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: G0Hz99XB1mx12uvIgsjAtRegdoHSlZzz1keITbpUnJk=)
2: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: 7UGzCq6Cb6amiBq87W5KeE/DUZqLNVV6OVzp45wF3WQ=)
3: 79FC546E326611F08478D72AC4F9AE02.roa (hash: ACKLgoePLs3Ke5FTi4aaIlytoIlfeMfpdj0hhLm4rHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl
rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Jan 2026 01:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482 (0x1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Validity
Not Before: Jan 1 02:26:50 2026 GMT
Not After : Jan 8 02:26:50 2026 GMT
Subject: CN=6955db6a-2501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:57:bd:98:91:32:a7:41:fe:a7:4e:2e:f1:
09:30:f2:a1:37:36:41:7b:66:f8:ff:30:a0:6d:e6:
20:f6:4e:1c:1a:7d:af:a0:83:65:b2:f3:33:20:87:
b1:d5:5c:e9:51:99:29:07:4c:a8:3f:68:4e:bd:37:
b3:87:5c:36:c8:95:d6:03:d9:d3:a7:24:76:92:52:
f9:e6:a8:fc:7c:68:93:27:0f:87:63:5c:ff:09:3e:
b9:c9:60:f6:95:ab:10:31:a9:17:e8:61:16:a4:d5:
f7:77:a7:88:c6:6a:b8:d8:9d:0e:3f:68:d2:86:cb:
c3:d3:24:69:26:4b:bf:ef:be:1e:79:30:c0:d3:64:
e3:8f:29:75:af:6b:79:13:17:37:40:b0:ef:6b:5c:
80:10:ac:af:47:ca:8f:83:12:c7:ba:0a:68:a0:5e:
c5:5f:cd:4f:c8:c4:7a:0a:b4:c3:3a:c1:31:4d:1a:
59:66:1e:14:d0:36:77:01:13:eb:a4:9e:a0:94:0e:
82:db:33:9f:f3:a8:33:12:c9:f6:c9:26:bb:ad:96:
98:3c:45:56:dd:52:6d:bd:cd:68:f3:64:40:f3:fc:
3f:aa:ba:e5:c6:bf:8d:3a:9c:58:66:56:27:e3:89:
9d:f5:c3:b3:51:4f:26:2c:2c:19:09:7e:fd:12:e0:
fc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:99:BD:77:7A:9F:AF:95:DF:C4:4C:49:70:30:6F:81:90:93:57:D9
X509v3 Authority Key Identifier:
keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:00:50:0d:e2:f0:4b:81:8e:17:55:ad:e1:c6:3a:b1:03:d8:
c1:7c:7c:10:7a:d0:10:7e:71:d4:2a:8a:6d:41:c9:80:0b:41:
3a:a4:79:e8:91:8a:a4:47:84:79:be:8e:3e:da:08:b1:92:2a:
65:cc:26:7a:0f:ec:90:ca:69:b3:75:e8:59:fb:30:5b:92:d1:
bd:18:16:af:0d:03:67:2e:ea:38:42:4e:79:74:8a:3c:e9:12:
e9:8d:7b:49:6f:80:59:55:13:00:d9:43:3c:e8:c2:31:ab:43:
2f:a2:70:53:f5:59:3b:f3:33:de:21:77:d2:c1:d2:ba:0b:16:
93:cf:36:1d:ad:4a:58:9c:17:69:1a:27:15:90:63:7c:fc:6a:
be:77:6e:c9:f8:0d:d0:eb:11:bf:b4:84:9d:6b:8c:4c:22:24:
34:23:d4:26:04:86:a5:d1:e6:16:3b:7c:95:df:66:d4:e8:35:
8e:b8:84:c4:71:f3:d8:96:7f:e4:0f:6d:72:19:b0:75:12:08:
05:da:6c:5c:d9:7b:e4:98:e0:52:d0:5f:e6:9a:fc:bb:e6:1b:
aa:7f:e2:66:79:43:92:27:bd:5e:f5:19:a1:05:98:6d:79:1c:
e6:98:77:db:c9:21:cb:8c:c8:72:36:7f:b1:9a:42:b1:a7:c8:
a3:aa:c4:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjlDNDIxMTAvBgNVBAUTKDgzNzlENzQ3Rjc0QTU1RURDNzNBMEUwNDIxQzc5QjVF
QzBFNERFNzYwHhcNMjYwMTAxMDIyNjUwWhcNMjYwMTA4MDIyNjUwWjAYMRYwFAYD
VQQDDA02OTU1ZGI2YS0yNTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0l5XvZiRMqdB/qdOLvEJMPKhNzZBe2b4/zCgbeYg9k4cGn2voINlsvMzIIex
1VzpUZkpB0yoP2hOvTezh1w2yJXWA9nTpyR2klL55qj8fGiTJw+HY1z/CT65yWD2
lasQMakX6GEWpNX3d6eIxmq42J0OP2jShsvD0yRpJku/774eeTDA02Tjjyl1r2t5
Exc3QLDva1yAEKyvR8qPgxLHugpooF7FX81PyMR6CrTDOsExTRpZZh4U0DZ3ARPr
pJ6glA6C2zOf86gzEsn2ySa7rZaYPEVW3VJtvc1o82RA8/w/qrrlxr+NOpxYZlYn
44md9cOzUU8mLCwZCX79EuD8KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmZvXd6
n6+V38RMSXAwb4GQk1fZMB8GA1UdIwQYMBaAFIN510f3SlXtxzoOBCHHm17A5N52
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM0Mi8yNEE2NUVCRTIw
RDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1ZlM0hPZzRFSWNlYlhzRGsz
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2czblhSX2RLVmUzSE9nNEVJY2ViWHNEazNuWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OUM0Mi8yNEE2NUVCRTIwRDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1Zl
M0hPZzRFSWNlYlhzRGszblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCrAFAN4vBLgY4XVa3hxjqxA9jBfHwQetAQfnHUKoptQcmAC0E6pHno
kYqkR4R5vo4+2gixkiplzCZ6D+yQymmzdehZ+zBbktG9GBavDQNnLuo4Qk55dIo8
6RLpjXtJb4BZVRMA2UM86MIxq0MvonBT9Vk78zPeIXfSwdK6CxaTzzYdrUpYnBdp
GicVkGN8/Gq+d27J+A3Q6xG/tISda4xMIiQ0I9QmBIal0eYWO3yV32bU6DWOuITE
cfPYln/kD21yGbB1EggF2mxc2XvkmOBS0F/mmvy75huqf+JmeUOSJ71e9RmhBZht
eRzmmHfbySHLjMhyNn+xmkKxp8ijqsSy
-----END CERTIFICATE-----
Generated at Thu Jan 1 03:52:19 2026 by rpki-client