This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json) Hash identifier: 08PDi3TmEZaFIvP9AHXoMlJNpKQF8rrjDRy0HVSufac= Subject key identifier: F8:12:B2:24:44:8D:36:51:50:F3:4D:67:6B:2C:5B:C1:16:DA:00:8E Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Certificate serial: 0B6D Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft Manifest number: 0B6D Signing time: Sat 24 Jan 2026 15:27:32 +0000 Manifest this update: Sat 24 Jan 2026 15:27:32 +0000 Manifest next update: Sat 31 Jan 2026 15:27:32 +0000 Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: JBjw/ikQBS4DXscGLd6Pf+y/LKkwNBiWyggJBF/PtMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2925 (0xb6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Validity Not Before: Jan 24 15:27:32 2026 GMT Not After : Jan 31 15:27:32 2026 GMT Subject: CN=6974e4e4-162f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:af:98:46:e6:1b:ec:7a:23:d7:5a:61:07:9d: 96:8b:dc:81:72:aa:8a:1d:56:4e:c0:2d:36:b0:80: 47:cd:10:a9:10:c0:72:eb:69:c7:ec:2f:cd:5a:9b: 30:13:06:68:9d:be:e8:4b:9f:db:5e:ca:6f:e5:f2: fe:c7:f2:ae:6f:b0:e7:70:83:11:dc:41:31:c9:e0: a5:14:83:fc:ea:1f:78:c5:6e:55:c3:08:cc:8b:21: 55:01:c7:51:c4:96:b2:7d:c2:bb:66:47:0c:64:28: ec:5e:81:3c:e8:4f:1d:94:4e:df:59:53:b5:75:1c: 17:1d:26:cf:95:6a:11:aa:cf:6d:cb:62:d0:d8:5e: 94:ba:b2:20:54:87:ba:e7:f2:06:03:05:a0:ab:56: 80:5e:18:cd:e9:d5:40:20:50:9a:b1:ad:63:92:9e: 5d:94:b2:43:75:51:f8:62:53:89:01:34:a0:8f:94: 21:77:92:30:a5:b1:c2:3e:ba:c8:d2:45:2b:92:37: b0:99:4c:f8:d3:d5:a8:d7:cb:a2:0e:a9:6b:f2:36: 61:95:aa:35:6a:d5:9d:ee:51:0c:59:67:d6:20:a2: af:ea:07:75:16:53:21:57:f1:39:bf:d9:c2:b1:50: 55:f5:1c:20:c7:3a:e6:38:ef:ea:ac:20:2d:99:af: fd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:12:B2:24:44:8D:36:51:50:F3:4D:67:6B:2C:5B:C1:16:DA:00:8E X509v3 Authority Key Identifier: keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:38:9c:4a:26:06:be:0d:a5:cf:6a:1f:2c:fb:da:58:06:70: e2:d2:98:c8:d4:a6:9b:01:ee:35:dd:22:9c:34:76:17:fd:75: ff:9d:aa:cd:21:14:25:c2:9f:88:db:2b:ea:61:a1:15:a8:4e: d5:ec:84:89:a2:a1:b0:c1:fe:0a:10:1f:15:a9:c9:43:0f:8b: df:b5:66:86:ad:d9:67:03:08:49:8b:65:97:be:bb:ec:a9:7e: 2b:3e:98:63:91:aa:ec:3e:96:c9:7e:86:1c:c9:44:c2:05:4a: 91:82:5b:ff:8c:6c:20:4a:b2:c6:d0:3c:c1:98:e7:0a:bf:03: d6:a9:9d:43:94:bc:33:74:46:9c:8b:04:36:76:d2:07:d8:4b: 71:ab:be:cd:20:23:08:94:0a:36:ac:eb:7f:00:c6:08:4e:9d: 9f:2e:11:b9:a0:d1:1a:9e:c5:1f:b6:29:14:15:d0:1e:d7:45: 4d:53:75:44:f9:a7:02:55:c5:e1:9d:93:ee:c9:21:6a:f1:9f: 2d:93:5d:b6:5b:96:e9:a1:16:bd:87:61:c4:22:08:1e:c7:d3: 9c:14:0b:68:10:df:9d:c2:97:05:05:d9:2f:c1:b7:35:d8:83: 00:e2:6a:7e:f2:79:5e:81:bd:16:56:c0:f1:09:fa:f0:61:1b: 33:ac:94:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKDE4NzJGOTg4QjY1NzIzNzgzNzk5MjM3RTU1NERCQ0M2 RTQ5RDE0QjAwHhcNMjYwMTI0MTUyNzMyWhcNMjYwMTMxMTUyNzMyWjAYMRYwFAYD VQQDDA02OTc0ZTRlNC0xNjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqa+YRuYb7Hoj11phB52Wi9yBcqqKHVZOwC02sIBHzRCpEMBy62nH7C/NWpsw EwZonb7oS5/bXspv5fL+x/Kub7DncIMR3EExyeClFIP86h94xW5VwwjMiyFVAcdR xJayfcK7ZkcMZCjsXoE86E8dlE7fWVO1dRwXHSbPlWoRqs9ty2LQ2F6UurIgVIe6 5/IGAwWgq1aAXhjN6dVAIFCasa1jkp5dlLJDdVH4YlOJATSgj5Qhd5IwpbHCPrrI 0kUrkjewmUz409Wo18uiDqlr8jZhlao1atWd7lEMWWfWIKKv6gd1FlMhV/E5v9nC sVBV9RwgxzrmOO/qrCAtma/9EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgSsiRE jTZRUPNNZ2ssW8EW2gCOMB8GA1UdIwQYMBaAFBhy+Yi2VyN4N5kjflVNvMbknRSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9BNjFERjFEQTQ2 NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkzZzNtU04tVlUyOHh1U2RG TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0dITDVpTFpYSTNnM21TTi1WVTI4eHVTZEZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9BNjFERjFEQTQ2NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkz ZzNtU04tVlUyOHh1U2RGTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXOJxKJga+DaXPah8s+9pYBnDi0pjI1KabAe413SKcNHYX/XX/narN IRQlwp+I2yvqYaEVqE7V7ISJoqGwwf4KEB8VqclDD4vftWaGrdlnAwhJi2WXvrvs qX4rPphjkarsPpbJfoYcyUTCBUqRglv/jGwgSrLG0DzBmOcKvwPWqZ1DlLwzdEac iwQ2dtIH2Etxq77NICMIlAo2rOt/AMYITp2fLhG5oNEansUftikUFdAe10VNU3VE +acCVcXhnZPuySFq8Z8tk122W5bpoRa9h2HEIggex9OcFAtoEN+dwpcFBdkvwbc1 2IMA4mp+8nlegb0WVsDxCfrwYRszrJQm -----END CERTIFICATE-----Generated at Sun Jan 25 17:04:12 2026 by rpki-client