This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft File: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft (raw, json) Hash identifier: U5E6XDmHh6Hma5t5HkI3tFD6nOIjCv1paYACXo8LfgQ= Subject key identifier: 94:D7:A5:DE:1A:7B:EE:DE:94:4C:ED:6A:F1:39:96:C3:BA:AA:2F:46 Authority key identifier: 80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A Certificate issuer: /CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Certificate serial: 0887 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft Manifest number: 087A Signing time: Sat 24 Jan 2026 20:01:45 +0000 Manifest this update: Sat 24 Jan 2026 20:01:44 +0000 Manifest next update: Sat 31 Jan 2026 20:01:44 +0000 Files and hashes: 1: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl (hash: OspqH+mRsThboWhSsyx/6tKw2aIOFJnNqSI1hFx0/Wk=) 2: 538866F6E44B11EAA31DD984C4F9AE02.roa (hash: bESggwBVi2r8+ztWK2qOS9Hu8xH3ds99tl1f1AVVNNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2183 (0x887) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936BE, serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Validity Not Before: Jan 24 20:01:44 2026 GMT Not After : Jan 31 20:01:44 2026 GMT Subject: CN=69752529-9e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:56:7d:54:e5:3a:bd:57:93:12:18:cb:7e:b0: 7c:02:37:d9:4e:94:dc:ff:25:18:42:44:06:06:2e: c5:f9:26:0f:c7:04:95:ec:89:6e:bf:91:8a:fd:01: 0c:80:68:02:67:19:e1:b6:15:4d:c2:b6:09:89:53: 3c:f5:9f:9f:d4:0c:07:8b:2e:fd:24:99:49:3b:b9: b0:d8:ab:3e:8c:c8:3b:ee:82:41:73:a7:7c:49:85: a9:da:78:1f:67:05:b6:e8:5b:3e:1a:63:f3:f5:89: e4:03:f5:d5:29:6d:96:7e:7c:6b:db:04:bb:cf:fe: 91:94:b8:d5:8b:3d:dd:29:94:44:5d:3f:91:da:7d: ed:87:fc:4c:3c:af:f3:19:fd:1c:73:bc:51:23:c3: 39:28:4c:57:f4:0f:4a:e0:e3:0c:4e:5b:a6:a9:26: 00:a8:ba:ae:f8:98:0b:0a:4e:66:2c:66:0d:a4:3a: 05:3b:8f:85:91:75:a4:c7:3a:a8:1a:4f:09:e0:53: a7:c8:04:08:93:f5:e3:c7:fc:ea:3e:e0:a1:f2:e3: a9:12:32:a0:8a:cd:53:f5:dd:b3:c8:da:80:20:7e: d4:44:4c:de:be:11:8f:bf:92:2a:3a:da:72:c5:ce: 8e:47:36:71:38:36:bd:38:10:5c:bb:ac:c0:b4:a6: d8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D7:A5:DE:1A:7B:EE:DE:94:4C:ED:6A:F1:39:96:C3:BA:AA:2F:46 X509v3 Authority Key Identifier: keyid:80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:bf:fe:0e:59:b8:ce:81:35:16:c0:d1:3e:fa:33:e4:b5:2d: 8d:38:24:15:80:de:c3:74:47:8d:73:3c:85:5f:12:72:e9:59: d1:eb:78:63:fe:cb:87:d1:fc:66:1a:c2:7b:c6:d1:4d:03:9b: 76:70:b9:f1:21:cf:5d:6b:eb:a7:a3:ec:1c:e8:e7:2a:f4:92: d5:fa:b2:0d:a2:c5:36:38:95:f3:73:49:e1:7f:d4:c2:32:3a: 65:8b:91:1a:a5:78:9f:60:7d:1a:67:bb:3c:a5:fe:ba:c4:54: 5c:a5:1e:72:fa:54:20:2a:9f:86:65:e8:61:b0:6e:ba:35:f3: 3a:f4:53:99:89:b1:66:eb:8b:ea:d2:b1:66:e4:c3:5f:bc:68: d6:ab:a0:ff:27:59:bb:ff:e9:3c:c9:d9:ee:11:d6:e6:4f:6f: db:68:6d:05:2b:28:40:8b:82:34:23:14:17:bb:e2:56:17:18: 6a:29:3e:71:3f:eb:d5:99:ae:d7:28:8d:17:f1:34:30:1e:ab: 76:c0:ee:e1:d5:34:78:ac:68:5b:5c:51:e9:1d:3d:97:42:59: d0:91:7a:d9:69:c2:8e:0a:23:e3:5c:89:e0:46:a8:74:48:41: b8:8e:82:81:b5:b5:20:85:80:1c:c6:27:4b:77:e1:f1:19:f3: 94:5c:40:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2QkUxMTAvBgNVBAUTKDgwMjFCMTZCOTI0MjFGNzdCNzI2MEU5N0U2QUQ4QzFE MjRCRDI5OUEwHhcNMjYwMTI0MjAwMTQ0WhcNMjYwMTMxMjAwMTQ0WjAYMRYwFAYD VQQDDA02OTc1MjUyOS05ZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFZ9VOU6vVeTEhjLfrB8AjfZTpTc/yUYQkQGBi7F+SYPxwSV7Iluv5GK/QEM gGgCZxnhthVNwrYJiVM89Z+f1AwHiy79JJlJO7mw2Ks+jMg77oJBc6d8SYWp2ngf ZwW26Fs+GmPz9YnkA/XVKW2Wfnxr2wS7z/6RlLjViz3dKZREXT+R2n3th/xMPK/z Gf0cc7xRI8M5KExX9A9K4OMMTlumqSYAqLqu+JgLCk5mLGYNpDoFO4+FkXWkxzqo Gk8J4FOnyAQIk/Xjx/zqPuCh8uOpEjKgis1T9d2zyNqAIH7UREzevhGPv5IqOtpy xc6ORzZxODa9OBBcu6zAtKbY8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTXpd4a e+7elEztavE5lsO6qi9GMB8GA1UdIwQYMBaAFIAhsWuSQh93tyYOl+atjB0kvSma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZCRS9DQTA2NjY4Q0U0 NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gzZTNKZzZYNXEyTUhTUzlL Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDR3hhNUpDSDNlM0pnNlg1cTJNSFNTOUtaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZCRS9DQTA2NjY4Q0U0NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gz ZTNKZzZYNXEyTUhTUzlLWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9v/4OWbjOgTUWwNE++jPktS2NOCQVgN7DdEeNczyFXxJy6VnR63hj /suH0fxmGsJ7xtFNA5t2cLnxIc9da+uno+wc6Ocq9JLV+rINosU2OJXzc0nhf9TC Mjpli5EapXifYH0aZ7s8pf66xFRcpR5y+lQgKp+GZehhsG66NfM69FOZibFm64vq 0rFm5MNfvGjWq6D/J1m7/+k8ydnuEdbmT2/baG0FKyhAi4I0IxQXu+JWFxhqKT5x P+vVma7XKI0X8TQwHqt2wO7h1TR4rGhbXFHpHT2XQlnQkXrZacKOCiPjXIngRqh0 SEG4joKBtbUghYAcxidLd+HxGfOUXEAo -----END CERTIFICATE-----Generated at Sun Jan 25 14:12:05 2026 by rpki-client