This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
File: GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft (raw, json)
Hash identifier: 0tHgDR8YBlSJrtkt6AA/dPUp45gwQwzNJBK8Tv5wslQ=
Subject key identifier: 82:7A:9F:B1:97:0C:32:D4:2E:BE:83:8D:5B:EF:71:BA:0D:CE:35:86
Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
Certificate issuer: /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
Manifest number: 52
Signing time: Mon 19 Jan 2026 06:14:50 +0000
Manifest this update: Mon 19 Jan 2026 06:14:49 +0000
Manifest next update: Mon 26 Jan 2026 06:14:49 +0000
Files and hashes: 1: GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl (hash: vR410NGjFZNud7Ini10eu8rzdm2MtAywUNNDPjbylY4=)
2: E09D5D9C7F0711F092740742C4F9AE02.roa (hash: CfbrIA0HCJd5bnnoqk4fH/y8a3ECzbTG+URIorF3jYk=)
3: 7B86E2347F0711F0B9016941C4F9AE02.roa (hash: wZT27F3LQkOVM0f/2rSyNQsd/VoaPgZq7TdT9xnpo2w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 06:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Validity
Not Before: Jan 19 06:14:49 2026 GMT
Not After : Jan 26 06:14:49 2026 GMT
Subject: CN=696dcbda-8c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:95:63:c7:7f:ef:95:ec:aa:99:38:84:da:
90:80:fa:76:de:b2:be:48:02:b0:ae:ef:e9:8e:18:
4f:81:51:07:92:b6:32:f1:bc:66:fb:9d:12:2e:d4:
74:7e:e2:0b:83:f8:f4:9c:59:a5:83:82:4b:7e:b0:
7d:4f:b7:48:d6:b5:1d:89:bf:e1:9e:a0:29:5f:4f:
4a:c0:75:71:7e:05:3d:9d:60:20:03:52:ab:0f:85:
6f:5a:5d:c3:38:50:c1:20:e8:8c:dc:27:b3:0d:44:
c6:06:d7:2e:ea:60:d6:e2:0f:7c:02:4d:18:88:2b:
37:c9:1b:fe:c1:e3:79:c9:1c:42:b6:96:6e:4c:6a:
59:3b:dd:93:51:f5:37:7d:f2:4c:29:c1:9e:21:b2:
3d:1c:4b:a5:11:c5:42:d9:a2:f6:d7:2f:27:a7:71:
27:88:b1:dc:76:1f:f7:45:e5:cf:fe:d2:0c:24:52:
32:f1:e5:ed:24:21:da:e5:fd:09:ee:61:3d:9f:d0:
da:60:3e:c0:83:fc:ed:20:3b:91:74:ff:ac:ef:cb:
b7:bf:b2:45:a9:8b:52:7c:20:3b:9b:86:ab:8f:02:
59:51:f5:41:f0:d4:30:82:d9:39:10:eb:e2:4b:35:
ea:cb:d7:b3:df:26:be:2d:c5:ed:6a:65:47:74:aa:
73:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7A:9F:B1:97:0C:32:D4:2E:BE:83:8D:5B:EF:71:BA:0D:CE:35:86
X509v3 Authority Key Identifier:
keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:02:f2:39:c3:c5:dc:24:8b:96:4e:8a:8d:67:84:7e:f6:c5:
88:4f:f6:db:3a:ed:a6:3b:72:e1:1f:98:df:9b:1b:fb:80:14:
b3:31:fe:5f:98:a9:21:9d:dd:42:4b:ff:ec:c9:14:9a:28:25:
85:96:27:e7:7e:3a:5b:fc:c4:ca:89:18:99:00:39:94:c7:07:
b8:df:83:ef:77:c4:97:3d:28:09:45:d1:2d:08:83:c6:b8:34:
6f:29:a2:f2:c2:41:31:ff:51:fd:a4:ce:89:73:d7:25:ee:f7:
ae:66:13:36:fd:30:94:42:5c:89:ae:c6:95:36:1b:7f:26:ef:
74:ba:57:6b:03:c1:3f:64:44:4b:67:6a:f5:ea:a3:a2:c9:59:
29:fc:11:92:1b:29:ee:ab:b7:54:7a:96:65:d6:0f:75:ea:27:
98:00:22:cd:1d:58:b2:1f:c8:2b:d9:58:b5:61:b1:0f:30:65:
06:af:18:3f:c8:63:a3:b8:3c:5e:43:82:d3:a9:4d:04:63:c4:
66:4d:57:16:b9:7f:43:06:2b:1f:eb:ec:c4:b1:fe:e3:c6:bf:
93:20:e9:11:f5:d7:d0:da:87:f1:f3:98:d0:5f:a5:ea:f0:07:
ff:28:20:d0:60:fb:e1:44:34:19:cf:31:a2:90:c4:48:43:6f:
7d:48:c1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 07:36:18 2026 by rpki-client