This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json) Hash identifier: AAOj5zYcTjgWF0WVNftltr5Rl3CAnYmSplEmCGQ3qgg= Subject key identifier: 88:5A:40:78:DE:32:54:E3:89:16:DA:F7:45:06:D7:CD:AE:2B:DD:A6 Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft Manifest number: 034A Signing time: Sun 25 Jan 2026 01:24:44 +0000 Manifest this update: Sun 25 Jan 2026 01:24:44 +0000 Manifest next update: Sun 01 Feb 2026 01:24:44 +0000 Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: DCE17emuv7udDmynNpeJqEnbl8HDupixSiIMszwMi2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Validity Not Before: Jan 25 01:24:44 2026 GMT Not After : Feb 1 01:24:44 2026 GMT Subject: CN=697570dc-5e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:3c:48:6b:1e:86:5a:6c:dc:91:74:fd:46: 08:56:cd:c1:fe:e5:6c:b2:2c:a3:92:e4:87:ed:cc: 03:3f:5d:0f:1a:67:77:69:19:a8:96:1e:fd:cd:0a: 29:3f:76:19:0e:a2:6d:32:6a:03:fa:c3:2f:21:a9: e6:7f:69:31:7a:f7:59:76:e1:d4:17:2e:9b:10:e1: e5:91:ee:01:2e:a1:ec:76:5a:25:6a:e4:03:e5:75: e7:46:03:d3:4e:79:c0:38:3a:c9:66:92:44:a7:a8: 6d:fa:03:d1:2c:c6:7b:06:56:89:53:43:fb:5d:66: 53:6f:f2:19:4c:54:fb:4b:fe:9a:65:30:ce:20:46: da:f8:42:a5:45:11:fc:8d:ae:ae:d8:fd:50:60:f6: 86:6b:4b:ec:b1:93:40:38:72:87:2a:7d:b5:d1:57: 46:6d:c9:e4:55:d3:09:b0:77:02:39:5c:f9:49:ea: 77:52:77:a0:1a:ae:88:d2:63:21:d7:0a:f9:e4:ac: 6a:a3:95:98:b6:70:9a:57:6b:ab:5f:e0:9c:45:ac: dd:38:68:63:1a:11:33:3b:47:b6:50:56:0c:81:be: e7:f9:00:67:d7:86:8f:ff:8a:b1:f3:74:2c:1d:21: 40:28:1f:88:a4:9f:fe:88:61:6f:d9:98:8e:2e:31: 25:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5A:40:78:DE:32:54:E3:89:16:DA:F7:45:06:D7:CD:AE:2B:DD:A6 X509v3 Authority Key Identifier: keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5e:91:bb:aa:e9:4a:eb:fa:b5:c0:13:f7:35:7b:6d:0d:a0: c2:77:9d:63:ad:bc:25:ff:2f:38:6d:87:13:87:94:64:09:8e: 7e:50:c6:2f:0c:ba:06:45:61:93:fc:43:0e:5d:88:55:c0:4c: 4d:43:55:40:3a:0f:b0:34:4a:47:f4:8a:22:2c:d0:04:9f:6c: 6e:e7:ab:20:4d:3e:da:e8:56:6a:a0:18:55:76:25:1e:c1:d4: 49:af:0f:93:86:c6:70:5f:8d:49:c3:03:84:05:23:91:82:6e: 91:63:ea:dc:ff:f8:b0:5f:49:1b:ce:6b:2e:60:da:ba:2a:29: c2:ff:79:8b:a2:d4:d7:22:4d:46:03:41:45:81:c9:d6:ec:6e: 54:07:e3:e3:14:08:bd:21:dc:4a:ce:09:70:99:e0:b3:68:fb: a6:4d:0a:71:cf:21:7b:63:47:74:88:7f:5f:00:77:76:74:ad: 24:9a:af:e4:f3:fd:17:e7:61:02:6b:70:3c:ed:9c:1b:a7:a3: 1d:4a:71:2b:c4:1d:65:92:3b:50:42:42:6d:71:14:f1:cc:98: 76:b7:2f:c5:d6:fc:bb:27:ac:f6:9e:82:da:37:91:5c:4b:0a: 04:4c:9a:8e:e9:88:7b:22:70:14:29:25:0f:72:4f:c9:b9:d5: a8:4e:70:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDBBMDE0NDlFQUVBMEZCMjg4NUM3RjNDNTY0RUU5MzMx QTczRjNGRjkwHhcNMjYwMTI1MDEyNDQ0WhcNMjYwMjAxMDEyNDQ0WjAYMRYwFAYD VQQDDA02OTc1NzBkYy01ZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0I8SGsehlps3JF0/UYIVs3B/uVssiyjkuSH7cwDP10PGmd3aRmolh79zQop P3YZDqJtMmoD+sMvIanmf2kxevdZduHUFy6bEOHlke4BLqHsdlolauQD5XXnRgPT TnnAODrJZpJEp6ht+gPRLMZ7BlaJU0P7XWZTb/IZTFT7S/6aZTDOIEba+EKlRRH8 ja6u2P1QYPaGa0vssZNAOHKHKn210VdGbcnkVdMJsHcCOVz5Sep3UnegGq6I0mMh 1wr55Kxqo5WYtnCaV2urX+CcRazdOGhjGhEzO0e2UFYMgb7n+QBn14aP/4qx83Qs HSFAKB+IpJ/+iGFv2ZiOLjElTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhaQHje MlTjiRba90UG182uK92mMB8GA1UdIwQYMBaAFAoBRJ6uoPsohcfzxWTukzGnPz/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15aUZ4X1BGWk82VE1hY19Q X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnRkVucTZnLXlpRnhfUEZaTzZUTWFjX1Bfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15 aUZ4X1BGWk82VE1hY19QX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9XpG7qulK6/q1wBP3NXttDaDCd51jrbwl/y84bYcTh5RkCY5+UMYv DLoGRWGT/EMOXYhVwExNQ1VAOg+wNEpH9IoiLNAEn2xu56sgTT7a6FZqoBhVdiUe wdRJrw+ThsZwX41JwwOEBSORgm6RY+rc//iwX0kbzmsuYNq6KinC/3mLotTXIk1G A0FFgcnW7G5UB+PjFAi9IdxKzglwmeCzaPumTQpxzyF7Y0d0iH9fAHd2dK0kmq/k 8/0X52ECa3A87Zwbp6MdSnErxB1lkjtQQkJtcRTxzJh2ty/F1vy7J6z2noLaN5Fc SwoETJqO6Yh7InAUKSUPck/JudWoTnA4 -----END CERTIFICATE-----Generated at Sun Jan 25 07:52:28 2026 by rpki-client