This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
File: GfKkbixJA4dTXpRfaxSGcABoV2E.mft (raw, json)
Hash identifier: a5quGg7nnhPl0UmKf8ePSAPP2rfn1wfnkJMgspIUGOo=
Subject key identifier: DC:DB:AD:5B:BD:20:47:DB:FE:30:DB:71:2B:08:A1:0B:10:54:34:92
Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61
Certificate issuer: /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761
Certificate serial: 61
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
Manifest number: 60
Signing time: Wed 11 Feb 2026 06:38:10 +0000
Manifest this update: Wed 11 Feb 2026 06:38:10 +0000
Manifest next update: Wed 18 Feb 2026 06:38:10 +0000
Files and hashes: 1: GfKkbixJA4dTXpRfaxSGcABoV2E.crl (hash: mKLLkEEqKlPDKDkTcU8d+SloLZ9c7Ihs8DSFJ5mmD4Q=)
2: 7DF6251A74B311F0A365281CC4F9AE02.roa (hash: ni8ytUAWwdbtGIc+iXlEFG+5N/RDCdFk/BOjShyc/2A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl
rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Feb 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761
Validity
Not Before: Feb 11 06:38:10 2026 GMT
Not After : Feb 18 06:38:10 2026 GMT
Subject: CN=698c23d2-ca4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:01:73:65:a8:ed:96:59:fd:d2:59:62:d5:
86:c9:70:2f:04:ff:70:cc:08:7b:d9:9a:be:ba:25:
e6:39:f3:8d:f2:8e:84:e1:21:c2:7a:29:3b:96:9b:
2b:6d:ae:86:de:4d:71:10:77:51:1b:23:c3:77:57:
c9:cb:0f:dd:f7:4d:5c:3e:a8:fb:c5:f1:5a:00:b4:
c3:21:3b:2f:08:65:08:79:ab:9c:3c:77:48:79:18:
7d:b5:e2:6f:c3:88:e3:bb:d9:4e:26:0f:20:7b:aa:
38:00:f0:33:e4:6a:8d:63:0e:8a:3e:6a:19:9d:5a:
a3:ce:a4:7e:c8:22:29:0b:90:2a:f5:3d:e9:c2:9c:
76:c3:ea:3a:f8:18:a1:ac:77:c7:1e:26:ee:68:c5:
a5:e2:00:f9:ee:31:e3:c1:ef:2e:fa:8e:44:33:10:
4f:7b:25:93:c8:62:ad:a0:ac:bf:ac:d5:af:f3:d9:
e6:c7:c9:e9:d7:b1:17:c5:01:ba:ca:97:c4:51:e6:
0f:f6:a7:36:bb:6d:d8:06:79:e2:02:59:06:7f:eb:
21:dd:39:a6:12:d3:f6:f0:ad:ec:94:70:e3:73:84:
e9:c8:05:88:6f:46:11:84:df:c7:95:e8:bd:e9:f0:
33:5a:af:c4:b0:67:41:32:00:c8:9b:19:c5:bc:98:
02:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DB:AD:5B:BD:20:47:DB:FE:30:DB:71:2B:08:A1:0B:10:54:34:92
X509v3 Authority Key Identifier:
keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:b1:7a:11:ee:62:5c:3b:3f:48:d0:df:5c:0e:a3:b8:9d:e8:
1e:bf:5f:db:f2:cd:d0:15:bb:0e:f0:31:b4:36:c0:4f:ad:45:
88:88:6c:b4:0a:b7:11:d4:cb:88:2b:65:95:67:aa:ab:0c:c9:
2e:17:73:17:d2:54:b8:95:1c:b2:e9:6e:6f:5f:72:91:b1:4a:
01:c3:ce:4f:21:a0:01:9b:8f:81:59:7d:0d:03:d1:a6:2c:ca:
37:f4:94:36:b3:3f:75:e9:de:33:db:29:51:0c:9c:fb:fc:25:
54:84:85:d9:c7:99:18:9d:b3:ef:2b:46:82:d4:19:c1:24:42:
c5:e6:f7:33:ec:f2:ca:ba:35:81:e6:40:a2:fe:a6:5d:5a:61:
78:3c:55:18:f9:a2:1a:89:84:cc:d1:0f:8d:fb:ff:65:32:8b:
55:15:b1:95:be:b2:e5:33:4f:33:04:1a:a9:5c:2d:ac:05:cd:
43:d7:af:81:93:73:99:54:4b:d0:c0:35:b8:46:ab:ed:8f:14:
22:7f:46:39:fc:2b:e6:49:31:c9:28:f1:29:d7:6d:7d:aa:4a:
04:c6:72:b6:6c:a3:97:a1:a8:45:55:17:ee:71:57:05:c2:16:
84:8c:13:c4:05:df:db:3c:94:ef:c1:7e:1b:ee:a8:71:fb:4c:
00:bb:db:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 11:54:58 2026 by rpki-client