This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
File: G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json)
Hash identifier: 6pIjWzX6/tN7IK60/Vhwv9fkOALrlhurH42IAcHkXWw=
Subject key identifier: F5:C9:30:77:DC:36:95:FB:13:D2:1E:1B:A0:60:77:05:8F:D1:26:E7
Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16
Certificate issuer: /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
Certificate serial: 095E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
Manifest number: 095E
Signing time: Tue 20 Jan 2026 19:34:40 +0000
Manifest this update: Tue 20 Jan 2026 19:34:40 +0000
Manifest next update: Tue 27 Jan 2026 19:34:40 +0000
Files and hashes: 1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: FDeqWtolLlG6RPwl0ehMzTuFe9wHGfqh91X+WLoWOkQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl
rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 19:34:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2398 (0x95e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
Validity
Not Before: Jan 20 19:34:40 2026 GMT
Not After : Jan 27 19:34:40 2026 GMT
Subject: CN=696fd8d0-1d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e9:12:5d:dc:f1:23:d6:2c:9d:83:c4:7f:2b:
e0:1a:63:64:6f:fb:70:77:1a:e1:da:11:02:47:c1:
21:47:bf:d2:d1:10:f8:6d:03:c8:09:07:bf:f4:5c:
2a:53:d1:fc:a2:b3:30:6c:4e:6b:4f:23:b3:77:8e:
2b:5d:a5:cf:79:f5:0f:79:38:00:f5:ee:cd:ce:7e:
87:c1:32:6d:64:96:ff:2f:6c:cd:59:32:48:bf:a1:
d0:fd:18:0f:98:10:7b:62:41:dd:38:bf:8a:10:56:
02:e3:e8:c1:e5:d8:bf:14:3a:fc:ca:12:92:f3:64:
96:c4:2f:ef:23:1b:cf:1b:43:0b:af:8f:e7:45:3b:
c7:b6:fe:90:c1:82:51:8e:5f:69:73:9a:71:d0:25:
a9:60:b6:31:22:e9:f6:7d:2b:7a:d6:87:e5:91:a0:
a0:7b:06:3c:4c:64:db:3a:84:24:b0:69:94:a4:fe:
80:a3:08:25:09:d3:c3:79:a0:92:4c:a7:c7:8d:c3:
5f:16:19:68:76:68:6e:b6:74:ad:d4:6d:79:1f:ad:
de:0a:80:a0:1b:0d:a6:c2:07:30:05:e2:26:eb:34:
3b:ee:40:ce:c7:61:4c:99:45:f1:84:1e:10:d7:8d:
e8:a5:42:67:c9:2e:cd:18:31:25:f6:43:e5:23:23:
de:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C9:30:77:DC:36:95:FB:13:D2:1E:1B:A0:60:77:05:8F:D1:26:E7
X509v3 Authority Key Identifier:
keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:79:6e:d0:20:1b:ac:ca:c7:8c:c4:e7:24:25:32:5c:76:4a:
a6:07:56:d6:a9:78:81:5a:d9:aa:69:28:e8:bb:b0:d4:d0:6d:
3b:dc:e7:cc:e0:20:35:bc:e7:a6:29:b0:3b:08:40:86:22:8e:
53:77:f9:33:13:e5:77:a6:f5:41:a2:09:6a:50:93:9c:09:4e:
e6:5a:12:08:dc:30:9b:c9:2d:d4:78:b6:d4:03:ed:43:eb:47:
61:17:f7:7a:71:67:15:e0:99:65:d0:04:02:fa:a3:ae:1b:64:
30:72:a3:84:aa:bc:c3:24:4a:c2:b6:c7:0e:d5:1b:55:a9:d5:
c0:e1:1d:3a:f5:89:84:e5:fa:19:fe:6a:bf:78:00:88:57:25:
aa:8b:8c:9f:ef:87:28:3e:7f:3d:e0:a6:a4:7d:27:ba:89:d5:
ff:d4:3f:a3:62:42:f2:43:f3:dc:92:69:55:36:19:21:eb:32:
6d:15:ef:92:6d:d9:3a:70:cc:35:61:94:42:67:34:87:c1:43:
af:3d:7c:58:b1:3a:a7:4d:de:92:2d:db:9f:05:be:d5:ca:65:
cc:f2:15:73:7f:28:89:48:f2:aa:28:1a:0d:88:81:f7:76:1f:
ae:f6:b3:78:36:69:17:f6:7d:f4:de:71:5d:7d:5c:2f:46:6d:
84:71:c7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 08:23:58 2026 by rpki-client