This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
File: GOzmKe7ztqJpbrqzSz-wLviouIc.mft (raw, json)
Hash identifier: iLqN24IQPur4KWBW3n6a1yX53kJnXrBRjQXMi15VOlQ=
Subject key identifier: 36:77:ED:D9:8F:98:B6:2A:F2:01:6C:45:20:53:38:8E:8B:30:05:A5
Authority key identifier: 18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87
Certificate issuer: /CN=A91951AF/serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887
Certificate serial: 48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
Manifest number: 44
Signing time: Tue 27 Jan 2026 06:34:43 +0000
Manifest this update: Tue 27 Jan 2026 06:34:43 +0000
Manifest next update: Tue 03 Feb 2026 06:34:43 +0000
Files and hashes: 1: GOzmKe7ztqJpbrqzSz-wLviouIc.crl (hash: suKdTbTyioMWh8H69/pQPNRpQCW1KpRPia9b/gsDGJM=)
2: 9F82952895C511F0B89BD26BC4F9AE02.roa (hash: +1Bt6gAyfoUFpig1US0y9IYf8gqxESp603kTB9cS2LI=)
3: 0A2469F095E011F0B2B5CE77C4F9AE02.roa (hash: 2TUs1YZ2Eqxk5relT6yIF5miILYOJS8mbAVh6fsYe7A=)
4: 0A86FD7C95E011F0B2B5CE77C4F9AE02.roa (hash: 9TR+7jMSEj42WP2HgrvlmxnuqGeYCxwav28DarkHDK0=)
5: 8201D598AD9B11F080BD6B82C4F9AE02.roa (hash: XnkbG03fdUQKsnLMxvWnS0QGXcRDDBgD4VhVjpHPreg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl
rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 06:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91951AF, serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887
Validity
Not Before: Jan 27 06:34:43 2026 GMT
Not After : Feb 3 06:34:43 2026 GMT
Subject: CN=69785c83-5772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:15:92:c3:73:b7:d2:ec:aa:c5:f2:01:4b:0f:
c9:e6:5e:a2:70:b0:46:a6:c0:10:be:c3:e7:95:57:
82:45:4f:7a:7e:24:f4:8b:0f:d5:19:78:0c:b9:86:
93:97:57:79:85:33:61:2d:8a:8a:7e:f9:c7:8c:95:
c8:6b:e5:93:84:1f:75:c8:9d:ba:9d:70:3b:ba:af:
69:95:b8:54:c6:d1:d1:a4:c4:8c:56:c6:2f:3b:f8:
45:f2:90:2e:cd:0d:8e:4c:7e:06:aa:9a:17:d1:16:
81:e2:18:24:6e:8c:0c:ff:ce:2d:24:d0:16:d5:3c:
ba:15:ff:16:81:c7:91:6c:f7:97:0c:a4:8a:bc:e9:
0c:c6:4f:78:33:64:82:43:1f:1a:dd:5f:be:e2:23:
be:78:ac:0e:0e:5f:fe:0c:38:b4:ed:66:25:e8:4c:
f3:8f:37:77:22:e3:af:93:6e:4f:44:2c:12:00:07:
15:54:41:2b:f1:8e:ed:e5:d0:89:65:4f:1d:18:3e:
a3:b1:27:c9:b9:11:e8:3a:db:f7:fa:57:91:e1:38:
62:ec:54:cc:f6:5a:f5:1a:15:8f:33:b5:e6:23:64:
da:5c:cd:32:47:b1:c7:6f:9e:6e:b1:69:3a:5c:be:
2a:e3:dc:17:9a:49:f6:99:5f:5c:dd:b1:16:f4:39:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:77:ED:D9:8F:98:B6:2A:F2:01:6C:45:20:53:38:8E:8B:30:05:A5
X509v3 Authority Key Identifier:
keyid:18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b4:38:fd:19:b9:df:2a:2e:83:c9:dc:f2:e7:e9:83:45:a3:
84:1f:e8:2c:69:1e:14:92:c3:0e:d5:03:ea:30:c2:f8:96:6d:
82:61:c0:e8:09:53:e0:64:3e:e9:c0:50:17:02:9a:6f:c1:eb:
38:7d:48:08:29:32:8f:9f:1e:b7:24:04:da:a1:9e:e0:89:7b:
fb:cf:0c:4d:e2:0e:24:6e:d0:5e:f4:b7:80:fb:0e:19:3c:77:
4b:c4:7b:d5:d5:79:a4:fd:73:2f:15:e0:ea:22:66:f0:dd:68:
ed:ee:2b:61:3f:4e:e9:57:b0:a5:a1:5f:2e:b1:a5:a3:cb:75:
2a:3c:66:c3:c2:74:7b:f5:42:0e:6e:1a:d5:84:41:ba:67:b9:
dd:14:0c:cf:c3:7f:7e:6f:ae:9a:5e:4d:6e:4d:d1:d0:ca:38:
b5:a8:50:ef:19:e1:1d:8f:89:64:16:cc:a3:9a:86:cf:f4:6e:
87:23:50:f7:35:6f:c3:53:97:38:d6:4f:b3:a3:88:87:29:c4:
7a:41:b8:38:e8:04:99:78:21:ad:d5:96:42:9d:27:57:4b:16:
46:35:e5:04:91:66:99:fc:a3:72:0a:73:8f:c5:82:e4:43:89:
70:05:44:6b:bd:53:55:1d:c3:e2:ac:96:95:74:2b:85:a1:2b:
c3:d1:77:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 18:36:28 2026 by rpki-client