This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft File: GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json) Hash identifier: tYx19nwc3Lc3bDILDMH8UqTARL/IfeHj2P87DJa3Pds= Subject key identifier: 81:E1:FA:A5:75:5B:84:F3:25:99:73:EA:81:55:7F:B5:82:2E:09:E5 Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 Certificate issuer: /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft Manifest number: 01BD Signing time: Sun 25 Jan 2026 02:19:20 +0000 Manifest this update: Sun 25 Jan 2026 02:19:20 +0000 Manifest next update: Sun 01 Feb 2026 02:19:20 +0000 Files and hashes: 1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: 4X7B9Sbj2V5Ik1LYejKFmDrTit9+HOssJN6pQDyFIdY=) 2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: mDyA8en4O2HoFPMoiw1GIv6+nKDmPcew5/y5uXwGm88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D857, serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Validity Not Before: Jan 25 02:19:20 2026 GMT Not After : Feb 1 02:19:20 2026 GMT Subject: CN=69757da8-098d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:c8:83:79:8b:91:e3:ec:ed:58:f2:61:63: c8:c5:85:ec:3d:d6:ce:ce:2e:e5:6d:db:67:63:bd: 77:94:fc:c2:75:8f:ab:30:06:14:0c:0f:2e:5b:89: d8:f7:e5:22:3e:ef:cb:61:a9:28:41:07:59:c2:33: a5:7b:c7:be:78:34:9f:35:d2:ba:a7:f9:0f:7f:e5: 14:ea:3d:23:29:36:0e:8e:3e:ef:df:55:4c:ea:f5: ca:80:37:97:70:3c:f0:9c:9e:28:72:83:bc:2a:84: ca:4a:7c:ec:fb:a7:02:9c:c1:cd:72:cf:fc:64:3d: 00:ac:2b:39:6a:83:27:ca:62:31:7a:2c:d4:57:8e: 52:64:fd:1f:80:24:1f:91:bf:e4:5f:e5:0d:cb:01: c3:10:37:21:77:d8:ae:5b:38:69:a2:ce:fe:e6:2a: 3f:56:33:6c:18:2d:95:f4:f2:18:3d:26:55:9a:a8: 39:2e:92:36:75:ea:28:8a:7d:79:09:40:8e:79:37: 2f:7a:d8:eb:a2:d3:8d:e3:98:20:60:70:4c:98:9c: 4a:9a:fe:bc:1c:db:d5:8a:9e:f8:9d:31:5f:3e:b6: 44:c5:4d:7b:9a:e4:87:33:c6:ba:f4:18:22:a7:6b: 3a:69:0a:66:f5:02:6e:37:be:ff:b3:79:d6:2d:cc: 2f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E1:FA:A5:75:5B:84:F3:25:99:73:EA:81:55:7F:B5:82:2E:09:E5 X509v3 Authority Key Identifier: keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:97:ec:bf:56:a5:f1:68:f3:33:34:32:d0:a1:34:74:9d:41: a3:cc:db:42:28:08:4f:73:77:89:0f:85:6d:21:26:02:5e:22: b3:57:9d:41:b3:2d:6b:7d:e3:2d:6f:02:fb:8f:93:1f:d6:14: 0b:b7:bd:8d:d7:f5:20:fa:48:d8:e2:5b:d8:07:fa:14:0a:87: 82:79:ee:b9:99:18:5b:3b:f6:c0:cf:81:6b:3a:43:a3:ce:3c: 9e:03:dd:47:5b:3e:c4:13:2a:86:e0:f5:c4:d7:7a:f9:22:93: 72:0d:59:25:d4:5c:e2:fa:6a:d9:e1:fc:66:3c:ea:7a:fa:42: de:e8:ca:10:71:b2:53:be:1c:01:75:dc:22:ff:a1:0b:d9:be: 21:fe:43:ef:11:3e:ee:7d:bb:00:99:4d:4e:8b:ae:72:03:09: cb:22:a0:7f:2a:a9:6b:79:51:5f:53:4b:93:97:b8:3b:ef:25: e3:a9:4d:0b:cd:62:02:73:2c:4a:7a:a1:81:5a:ad:93:81:2c: d1:ec:f5:a1:ec:68:a3:c1:94:80:b3:91:95:b2:17:b1:bd:1f: 1d:c1:d8:27:da:29:a1:57:44:a7:80:56:b6:3b:77:5c:6d:da: f9:7f:06:65:8f:a7:c5:61:99:5c:b2:3c:b4:73:ec:9c:6f:56: 6d:a3:a1:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q4NTcxMTAvBgNVBAUTKDE5QTM2MDU5RTMxN0VGN0Y2Nzg4NUNFMjUyQUVEQjkx OTU4RjVFNjgwHhcNMjYwMTI1MDIxOTIwWhcNMjYwMjAxMDIxOTIwWjAYMRYwFAYD VQQDDA02OTc1N2RhOC0wOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYTIg3mLkePs7VjyYWPIxYXsPdbOzi7lbdtnY713lPzCdY+rMAYUDA8uW4nY 9+UiPu/LYakoQQdZwjOle8e+eDSfNdK6p/kPf+UU6j0jKTYOjj7v31VM6vXKgDeX cDzwnJ4ocoO8KoTKSnzs+6cCnMHNcs/8ZD0ArCs5aoMnymIxeizUV45SZP0fgCQf kb/kX+UNywHDEDchd9iuWzhpos7+5io/VjNsGC2V9PIYPSZVmqg5LpI2deooin15 CUCOeTcvetjrotON45ggYHBMmJxKmv68HNvVip74nTFfPrZExU17muSHM8a69Bgi p2s6aQpm9QJuN77/s3nWLcwvCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHh+qV1 W4TzJZlz6oFVf7WCLgnlMB8GA1UdIwQYMBaAFBmjYFnjF+9/Z4hc4lKu25GVj15o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDg1Ny82MUM1Q0RCODRF MjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDczOW5pRnppVXE3YmtaV1BY bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhTmdXZU1YNzM5bmlGemlVcTdia1pXUFhtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDg1Ny82MUM1Q0RCODRFMjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDcz OW5pRnppVXE3YmtaV1BYbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfl+y/VqXxaPMzNDLQoTR0nUGjzNtCKAhPc3eJD4VtISYCXiKzV51B sy1rfeMtbwL7j5Mf1hQLt72N1/Ug+kjY4lvYB/oUCoeCee65mRhbO/bAz4FrOkOj zjyeA91HWz7EEyqG4PXE13r5IpNyDVkl1Fzi+mrZ4fxmPOp6+kLe6MoQcbJTvhwB ddwi/6EL2b4h/kPvET7ufbsAmU1Oi65yAwnLIqB/KqlreVFfU0uTl7g77yXjqU0L zWICcyxKeqGBWq2TgSzR7PWh7GijwZSAs5GVshexvR8dwdgn2imhV0SngFa2O3dc bdr5fwZlj6fFYZlcsjy0c+ycb1Zto6Ej -----END CERTIFICATE-----Generated at Sun Jan 25 10:44:13 2026 by rpki-client