This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json) Hash identifier: vh3hVaYtbJ+l8S9TITsjADM3VY8jhMCdrr3VIfmojw0= Subject key identifier: 49:4B:48:DC:8F:9B:C0:17:E9:91:ED:4D:B7:C8:3D:8D:71:53:28:E3 Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Certificate serial: 0206 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft Manifest number: 0206 Signing time: Sat 24 Jan 2026 22:21:06 +0000 Manifest this update: Sat 24 Jan 2026 22:21:05 +0000 Manifest next update: Sat 31 Jan 2026 22:21:05 +0000 Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: IwjyKMVtEZqixbfzqj1k4YKcCcg9SuqeaXlIajrkZGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Validity Not Before: Jan 24 22:21:05 2026 GMT Not After : Jan 31 22:21:05 2026 GMT Subject: CN=697545d2-be04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:25:17:23:77:47:bd:c2:71:f9:fd:01:ac:e7: ec:25:0a:47:2c:a9:6b:69:83:37:ef:72:38:18:69: 0c:d4:c4:9c:30:02:96:45:62:0c:42:f8:99:83:fc: b0:7d:86:a0:75:5f:66:29:82:74:7c:b0:f9:8e:76: 29:32:4a:9a:6d:85:b7:e4:1c:82:3a:19:d1:83:99: f6:97:ea:73:c9:dd:f1:f4:55:72:b6:06:98:48:6c: e6:07:74:04:51:9e:d4:fa:9a:37:d4:3f:53:31:63: ae:89:f7:c0:8f:5a:df:35:3d:e0:c0:b7:7c:f1:cf: 62:86:c5:3d:d0:a9:07:db:62:58:05:7f:e1:e6:e8: e9:68:c0:ad:9f:2c:95:80:24:5c:83:22:7f:93:b2: a8:a6:6a:c4:47:6c:07:ab:ba:8b:c4:e1:1d:b6:7a: 43:61:2a:40:49:dd:ab:a0:cb:03:84:0e:30:f8:dd: c5:31:ee:d2:32:08:92:8e:dd:09:53:53:97:a6:3b: 09:06:cf:79:26:08:60:02:db:41:85:e6:31:66:79: b3:56:76:69:59:58:fd:0a:75:49:74:f3:24:3e:24: eb:e1:98:50:6d:a5:d4:35:8c:18:bd:a9:c0:89:d6: 5f:07:e0:b9:70:59:08:34:64:3c:2c:2d:d9:d3:ae: fe:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4B:48:DC:8F:9B:C0:17:E9:91:ED:4D:B7:C8:3D:8D:71:53:28:E3 X509v3 Authority Key Identifier: keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:d0:62:36:70:9f:2b:f0:09:76:5c:01:a2:c1:d1:51:c9:10: d8:64:66:57:05:01:ed:0d:4d:93:57:6e:cf:68:da:a5:d7:50: 10:0a:77:e8:61:cd:47:10:c2:c9:0a:5a:2c:4d:c1:bb:f1:d1: 77:8f:d3:bd:98:84:49:13:b2:3a:a6:34:1b:ba:a1:52:ce:5e: b8:65:1b:58:41:e4:19:1d:82:9d:12:6f:14:e7:fa:da:c5:f5: a2:09:88:aa:3b:49:d3:39:69:7b:8b:8c:f7:89:95:89:2e:d9: f8:be:ab:e6:df:dd:ed:30:01:41:31:b4:f8:d0:d0:f6:f3:cc: 80:ff:a0:58:eb:fe:4f:b8:11:f5:92:13:61:92:c3:e8:20:d8: 36:1f:4a:5e:a9:c0:9e:89:1c:d9:ec:1c:77:7a:7e:64:e3:df: 17:be:e9:cc:38:3c:57:e1:ff:0d:4b:55:40:29:64:77:30:c6: 5a:a2:b0:de:d8:6d:19:ff:a2:95:93:b2:bc:d2:1b:d7:d8:93: e5:22:70:46:79:84:51:33:ea:e9:90:8f:f7:82:b9:3c:d1:75: c0:a6:06:47:6e:07:6b:cd:00:2f:39:37:ba:14:11:f7:ee:8e: 2c:ca:a9:bf:e0:25:49:17:7f:65:77:4f:86:d0:07:3c:bd:54: e5:aa:2c:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKDFCRkNENTk1QUQ1RkZEQjlDMDQzNzM3QkNBRkVDNzJF MDQ2QzZCRUUwHhcNMjYwMTI0MjIyMTA1WhcNMjYwMTMxMjIyMTA1WjAYMRYwFAYD VQQDDA02OTc1NDVkMi1iZTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCUXI3dHvcJx+f0BrOfsJQpHLKlraYM373I4GGkM1MScMAKWRWIMQviZg/yw fYagdV9mKYJ0fLD5jnYpMkqabYW35ByCOhnRg5n2l+pzyd3x9FVytgaYSGzmB3QE UZ7U+po31D9TMWOuiffAj1rfNT3gwLd88c9ihsU90KkH22JYBX/h5ujpaMCtnyyV gCRcgyJ/k7KopmrER2wHq7qLxOEdtnpDYSpASd2roMsDhA4w+N3FMe7SMgiSjt0J U1OXpjsJBs95JghgAttBheYxZnmzVnZpWVj9CnVJdPMkPiTr4ZhQbaXUNYwYvanA idZfB+C5cFkINGQ8LC3Z067+wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElLSNyP m8AX6ZHtTbfIPY1xUyjjMB8GA1UdIwQYMBaAFBv81ZWtX/25wENze8r+xy4EbGvu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi85MUZFMDU2QURG RkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9ibkFRM043eXY3SExnUnNh LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dfelZsYTFmX2JuQVEzTjd5djdITGdSc2EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi85MUZFMDU2QURGRkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9i bkFRM043eXY3SExnUnNhLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH0GI2cJ8r8Al2XAGiwdFRyRDYZGZXBQHtDU2TV27PaNql11AQCnfo Yc1HEMLJClosTcG78dF3j9O9mIRJE7I6pjQbuqFSzl64ZRtYQeQZHYKdEm8U5/ra xfWiCYiqO0nTOWl7i4z3iZWJLtn4vqvm393tMAFBMbT40ND288yA/6BY6/5PuBH1 khNhksPoINg2H0peqcCeiRzZ7Bx3en5k498XvunMODxX4f8NS1VAKWR3MMZaorDe 2G0Z/6KVk7K80hvX2JPlInBGeYRRM+rpkI/3grk80XXApgZHbgdrzQAvOTe6FBH3 7o4syqm/4CVJF39ld0+G0Ac8vVTlqiyG -----END CERTIFICATE-----Generated at Sun Jan 25 17:24:25 2026 by rpki-client