This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
File: G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft (raw, json)
Hash identifier: CuY6lj/17AhCTevGNAEzzAKxzN3xN3EMYtRoX6513Jw=
Subject key identifier: 4C:BD:DB:62:8B:E1:FD:36:6A:C0:20:BA:63:63:D3:50:75:2A:FF:6B
Authority key identifier: 1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61
Certificate issuer: /CN=A9168F50/serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
Manifest number: 1D
Signing time: Sat 17 Jan 2026 06:50:27 +0000
Manifest this update: Sat 17 Jan 2026 06:50:27 +0000
Manifest next update: Sat 24 Jan 2026 06:50:27 +0000
Files and hashes: 1: G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl (hash: 721TvECr8aF/8gyBRUBESuyS4dT8z7DjD3wmgQZXLHg=)
2: 8F62775EC9B311F08EBFD366C4F9AE02.roa (hash: HxgOvE8EAPC40IUOqEwdYq0KSHkJcIRXkuZt02zGc1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl
rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 06:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168F50, serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
Validity
Not Before: Jan 17 06:50:27 2026 GMT
Not After : Jan 24 06:50:27 2026 GMT
Subject: CN=696b3133-1c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d5:75:8d:35:bd:15:a6:5d:03:e7:2a:79:69:
6f:d3:5c:0b:cc:63:fd:b7:3a:0f:b9:1f:59:c2:f8:
59:40:b3:6b:55:57:12:02:87:95:6f:42:f2:bf:1d:
fb:1b:c7:8d:56:31:19:e7:22:52:5b:0b:87:50:17:
cb:13:f6:2e:02:41:7b:57:88:15:21:be:70:d5:e4:
b3:8b:15:dd:b2:33:62:ce:00:50:a0:1a:19:9b:15:
3a:37:0d:42:8e:55:cc:42:79:26:2f:f6:9c:f0:59:
fe:1f:cd:a2:18:17:67:45:ff:35:c4:3e:1f:32:f3:
ab:9f:86:f5:28:c8:dc:47:e0:87:87:0c:63:0d:b9:
7d:96:ad:44:de:82:8f:f1:e7:3d:ef:6b:35:41:3e:
f6:11:d4:37:e8:56:36:5e:51:4d:73:e3:db:45:ea:
55:10:2f:2c:1b:b2:32:9b:a9:4c:48:7e:49:24:bc:
09:67:d6:da:95:cf:be:d1:ad:37:ae:1b:77:95:7c:
24:56:c3:cb:bf:c3:c2:d1:a4:fe:c7:55:3d:d0:af:
a7:15:24:79:0a:28:03:1a:ec:89:ce:50:49:90:18:
fd:33:44:24:20:aa:38:d4:18:5d:2d:11:46:93:cf:
ab:d7:19:8a:7e:d8:b4:88:86:e8:00:07:92:b2:17:
19:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BD:DB:62:8B:E1:FD:36:6A:C0:20:BA:63:63:D3:50:75:2A:FF:6B
X509v3 Authority Key Identifier:
keyid:1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d6:67:04:11:57:90:fb:fa:ac:03:b6:91:67:21:85:56:f2:
85:19:e9:9f:bb:31:4b:da:a4:ca:6c:f1:13:79:b0:49:86:a8:
27:86:71:12:27:6b:55:25:bb:66:47:e7:bc:37:1c:1a:08:6b:
7e:27:db:9b:4e:2c:ee:db:05:40:a9:09:2c:12:fe:2a:10:a7:
7e:21:91:d9:ac:81:12:29:55:16:82:78:0b:52:f8:11:e1:6e:
94:da:da:4f:a1:e6:6c:39:dd:87:d7:4f:cf:a9:45:98:eb:7c:
2a:a1:14:8f:02:eb:0f:a4:45:b7:b1:81:aa:47:34:63:d3:38:
3f:19:fe:7c:49:a0:71:ef:8b:0c:ee:6d:8c:bf:94:8d:7e:b3:
04:e1:e6:a1:27:37:d0:de:14:26:ee:a7:eb:c3:76:fd:f1:f9:
ff:e2:6c:6a:3d:c4:3c:bc:44:85:9b:a4:24:db:7a:f3:33:80:
49:ed:ff:42:42:22:82:71:c5:fc:09:38:72:ae:fe:39:84:8f:
bc:72:ea:9c:30:7e:65:92:f1:ec:4c:0f:77:04:d6:a3:49:f2:
98:40:21:86:f5:b5:a9:77:d5:45:e2:77:45:85:9d:72:74:12:
21:14:09:ac:39:5d:ca:cd:a8:ad:3c:e9:12:1a:50:57:62:02:
20:cc:71:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 02:57:59 2026 by rpki-client