This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json)
Hash identifier: HnzToORtVnhH9QOE7gexrM951CvpyC1o11Pd+1Rqxys=
Subject key identifier: FA:D7:22:45:EB:A6:61:6E:A4:82:A0:58:F1:EA:AD:CC:56:D3:DB:80
Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F
Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
Certificate serial: 09F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
Manifest number: 09E9
Signing time: Mon 02 Feb 2026 19:33:59 +0000
Manifest this update: Mon 02 Feb 2026 19:33:58 +0000
Manifest next update: Mon 09 Feb 2026 19:33:58 +0000
Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: EgUGbjN5bGJaBMJk1ZCN/6KRo0bBbmxDP++GNlfWoy4=)
2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: F610C7Ym+IbTxaB7/QFjiGQSnmA/MEfTbDdc0n6x2y4=)
3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: AS8hUi479g1JOMhqd/DGudZL1BV4/ri0MrfNsHx+xyY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl
rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Feb 2026 19:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2553 (0x9f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
Validity
Not Before: Feb 2 19:33:58 2026 GMT
Not After : Feb 9 19:33:58 2026 GMT
Subject: CN=6980fc27-5496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:d3:2d:6e:64:80:47:7e:1b:95:50:ac:20:
93:a0:41:f6:a1:f0:e7:7f:37:e4:ef:55:02:ab:e3:
ba:7a:50:a2:c9:05:e0:b4:78:40:9c:e6:44:e9:81:
ed:40:4f:70:af:d6:7c:b3:62:69:43:ba:35:6e:c9:
1f:c5:2e:ad:b4:91:8f:a8:33:77:c2:78:b7:30:4c:
28:26:a8:ea:22:ca:ff:8c:be:c4:e5:19:2f:eb:a0:
ea:a9:1a:ad:a1:04:93:8c:41:4e:78:67:07:09:db:
4b:55:19:ae:26:d2:47:ba:57:81:92:98:2d:5c:f7:
18:0f:51:33:51:c7:5a:68:23:a4:20:c3:2d:93:5f:
03:a3:09:4a:39:b4:9f:be:d2:1d:dd:fb:69:1a:8f:
c2:59:4a:1d:fc:63:46:b3:52:5d:86:14:96:8b:a8:
b8:aa:4b:82:fa:7c:48:e7:63:4d:46:5e:a8:e7:8a:
30:84:a9:c9:d8:82:09:eb:ad:56:f0:c2:46:16:57:
b4:d8:57:f2:4e:0c:0b:02:c6:08:17:f0:f5:31:c7:
fd:00:01:c4:43:33:b1:14:44:18:45:d4:fe:c9:cc:
f6:04:6e:db:bf:c2:b9:18:7f:01:b3:f9:a5:07:ad:
cf:2d:6f:b9:e4:63:76:ca:d6:5b:98:67:43:24:0a:
ac:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D7:22:45:EB:A6:61:6E:A4:82:A0:58:F1:EA:AD:CC:56:D3:DB:80
X509v3 Authority Key Identifier:
keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:11:16:2a:1a:5a:de:82:08:3c:8b:9f:11:f2:17:e3:6e:e5:
4c:19:b5:6e:26:d8:17:11:a5:5b:d7:b9:c3:7b:b5:e6:2c:21:
6e:2d:57:38:03:c1:e4:6d:dc:c0:34:86:d4:cc:3c:48:b7:32:
6c:13:6b:df:c4:67:e1:d1:3b:59:8e:f0:43:b8:aa:2f:60:fc:
f3:e1:e0:d6:1a:eb:95:43:89:50:8e:23:a8:5e:8d:d6:7e:2f:
0f:57:2b:76:03:56:23:cf:f9:96:54:92:97:8b:ea:ec:af:a2:
8c:56:11:80:3a:32:1e:61:1b:d6:8a:2f:f6:5f:b8:12:31:90:
44:37:04:c9:74:72:af:a7:cb:6a:15:f4:a0:61:f1:41:aa:88:
be:52:f6:9d:e6:36:06:b0:22:6d:4a:5b:a0:45:ff:96:0d:39:
53:b5:65:b2:0b:0c:07:b5:b0:5b:91:3a:f1:d9:92:86:90:b0:
19:cf:4a:48:8a:a5:fc:ae:90:f4:3a:7d:05:1b:a4:62:91:e8:
d1:6b:bf:f6:64:ce:a7:65:46:10:c1:f4:75:4d:e8:5b:8e:6f:
d2:54:fd:82:88:26:36:33:4b:8a:d8:a2:55:62:bb:03:85:0c:
56:63:35:7c:16:2b:bc:06:db:32:45:a9:94:cb:ce:06:98:a6:
ee:8e:24:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx
NDM1RDNBNUYwHhcNMjYwMjAyMTkzMzU4WhcNMjYwMjA5MTkzMzU4WjAYMRYwFAYD
VQQDDA02OTgwZmMyNy01NDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq/zTLW5kgEd+G5VQrCCToEH2ofDnfzfk71UCq+O6elCiyQXgtHhAnOZE6YHt
QE9wr9Z8s2JpQ7o1bskfxS6ttJGPqDN3wni3MEwoJqjqIsr/jL7E5Rkv66DqqRqt
oQSTjEFOeGcHCdtLVRmuJtJHuleBkpgtXPcYD1EzUcdaaCOkIMMtk18DowlKObSf
vtId3ftpGo/CWUod/GNGs1JdhhSWi6i4qkuC+nxI52NNRl6o54owhKnJ2IIJ661W
8MJGFle02FfyTgwLAsYIF/D1Mcf9AAHEQzOxFEQYRdT+ycz2BG7bv8K5GH8Bs/ml
B63PLW+55GN2ytZbmGdDJAqsSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrXIkXr
pmFupIKgWPHqrcxW09uAMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0
MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3
QjIwZnljTG1YMmtVTmRPbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQByERYqGlreggg8i58R8hfjbuVMGbVuJtgXEaVb17nDe7XmLCFuLVc4
A8HkbdzANIbUzDxItzJsE2vfxGfh0TtZjvBDuKovYPzz4eDWGuuVQ4lQjiOoXo3W
fi8PVyt2A1Yjz/mWVJKXi+rsr6KMVhGAOjIeYRvWii/2X7gSMZBENwTJdHKvp8tq
FfSgYfFBqoi+Uvad5jYGsCJtSlugRf+WDTlTtWWyCwwHtbBbkTrx2ZKGkLAZz0pI
iqX8rpD0On0FG6RikejRa7/2ZM6nZUYQwfR1Tehbjm/SVP2CiCY2M0uK2KJVYrsD
hQxWYzV8Fiu8BtsyRamUy84GmKbujiRB
-----END CERTIFICATE-----
Generated at Wed Feb 4 15:32:46 2026 by rpki-client