This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft File: gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json) Hash identifier: fiPkN5B9Ijr+eEDDFBz03F143SynWb46i1wO8fS8yWk= Subject key identifier: D3:8D:81:66:E5:44:5B:19:C2:6B:3E:AC:8C:1C:16:18:13:78:B0:5B Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Certificate serial: 3FE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft Manifest number: 3B74 Signing time: Sat 24 Jan 2026 14:19:39 +0000 Manifest this update: Sat 24 Jan 2026 14:19:38 +0000 Manifest next update: Sat 31 Jan 2026 14:19:38 +0000 Files and hashes: 1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: neD3kzkrb4gO8rmt98Ij/GASiQqDazsLD0d44N2VxdA=) 2: EF57185A9D5911EEAA9F0413C4F9AE02.roa (hash: +mgdTNP414SUTOGaWf8OsfORlNcz2M/R4gZld0HJ9Ck=) 3: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: TQSzjpxrOYYy8gpn8cpyl7UgdqE6NAtOL8QTPBk1Mrs=) 4: F025BAB69D5911EEAA9F0413C4F9AE02.roa (hash: zGDGvlgT7VbRq78nqt2KCJawvdgk5RBzL4wyIDNIpkw=) 5: 9703DB3A870311F099FAB64CC4F9AE02.roa (hash: o3x3WNu8DVpOALptWI63rwh2Z21Ks2owpGrEUHSGlCk=) 6: F0F17BEC9D5911EEAA9F0413C4F9AE02.roa (hash: zIbTXKElzSRDJDgFmgpHOKMMizwQLMFjRvUcTHCmSxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16359 (0x3fe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Validity Not Before: Jan 24 14:19:38 2026 GMT Not After : Jan 31 14:19:38 2026 GMT Subject: CN=6974d4fb-33de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5a:ca:7d:a0:35:89:f1:3e:80:7b:97:33:a6: a3:01:44:79:65:17:d2:a5:bd:67:b8:e5:ce:91:0d: 79:31:d5:2a:b1:df:79:ca:9e:aa:79:90:94:04:9e: 58:d5:d7:58:1f:4d:2e:b7:e2:f1:5e:28:88:f3:8f: 86:aa:92:8c:b5:ca:b7:8a:5d:ca:fd:31:ee:c0:77: 66:f3:d9:f1:fe:52:3d:bc:4b:e3:c0:4e:b0:e1:20: 53:25:e9:f5:a4:87:4a:85:1d:2f:61:43:90:da:4e: 3b:ac:17:61:55:42:f7:d9:c5:78:a7:e9:52:09:a5: d6:5e:a5:a1:59:f8:c2:96:b2:4c:e3:b8:97:4a:91: 26:88:df:18:b4:a6:c4:e1:ab:a8:09:22:87:2a:2d: 59:af:47:74:87:22:54:0a:cb:d3:be:9d:97:5a:7e: dc:2a:dc:dc:e4:e1:d3:73:61:ea:c3:8f:2e:8f:90: c9:fb:ad:15:1f:9b:dc:cc:de:84:81:e4:8e:0a:43: dd:83:a7:7b:c0:19:53:df:35:6e:7a:8f:8c:70:58: 9f:50:ce:5c:b2:62:00:68:0b:f5:e0:ed:91:92:58: 65:2d:2b:d8:e0:31:67:0b:47:d9:1c:75:b9:72:16: f2:c6:b4:7c:47:ae:69:0e:cf:82:78:05:11:ab:12: 03:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8D:81:66:E5:44:5B:19:C2:6B:3E:AC:8C:1C:16:18:13:78:B0:5B X509v3 Authority Key Identifier: keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:3e:9b:48:09:28:f3:2a:46:0b:5c:3c:bf:99:f9:66:52:e0: da:5c:62:c0:f0:e9:11:a8:fb:e9:a3:4c:5e:9d:14:64:94:a1: 26:3f:f4:5e:37:f5:ed:91:50:da:55:40:f3:6b:84:d8:de:17: 2c:1e:3a:a6:ef:36:3b:91:30:bc:64:80:62:a5:c6:d6:b2:eb: 86:8c:ce:5d:a0:32:3f:5e:f6:e3:d9:fc:d6:13:28:26:bf:45: b4:05:71:22:91:c9:6f:d6:a1:64:29:7f:2d:f7:84:47:a7:b4: 47:c3:24:6e:be:85:ac:db:dd:34:d4:5d:14:89:34:5d:dd:4a: 93:2d:a7:2b:7f:24:d3:cd:79:7a:f6:aa:ea:55:70:d9:9e:0c: 39:3d:f0:a7:0a:ce:4e:13:1f:e2:64:cd:53:73:dd:cf:aa:45: 75:35:98:ef:77:6d:fd:5a:e0:3b:f8:b9:a3:c0:d4:97:6e:68: 06:72:c5:15:d4:ff:b8:04:f3:29:fc:ef:75:5b:09:5c:4c:01: 91:30:5a:9c:b8:bc:81:fa:39:75:2b:2e:a8:23:2b:f2:fe:97: 18:71:e1:06:ed:90:b2:ea:11:50:51:5c:b7:9c:43:5d:02:45: 9a:96:e7:a5:cc:c0:8e:a0:df:ce:4d:3b:91:1f:da:fe:72:f9: 7a:37:7a:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICP+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC RkE4OEQwMTUwHhcNMjYwMTI0MTQxOTM4WhcNMjYwMTMxMTQxOTM4WjAYMRYwFAYD VQQDDA02OTc0ZDRmYi0zM2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylrKfaA1ifE+gHuXM6ajAUR5ZRfSpb1nuOXOkQ15MdUqsd95yp6qeZCUBJ5Y 1ddYH00ut+LxXiiI84+GqpKMtcq3il3K/THuwHdm89nx/lI9vEvjwE6w4SBTJen1 pIdKhR0vYUOQ2k47rBdhVUL32cV4p+lSCaXWXqWhWfjClrJM47iXSpEmiN8YtKbE 4auoCSKHKi1Zr0d0hyJUCsvTvp2XWn7cKtzc5OHTc2Hqw48uj5DJ+60VH5vczN6E geSOCkPdg6d7wBlT3zVueo+McFifUM5csmIAaAv14O2RklhlLSvY4DFnC0fZHHW5 chbyxrR8R65pDs+CeAURqxID0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNONgWbl RFsZwms+rIwcFhgTeLBbMB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDAxRS8zNUZBMEY1NjFENzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0 d2dHSmY1bTh4dUtfcUkwQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2PptICSjzKkYLXDy/mflmUuDaXGLA8OkRqPvpo0xenRRklKEmP/Re N/XtkVDaVUDza4TY3hcsHjqm7zY7kTC8ZIBipcbWsuuGjM5doDI/Xvbj2fzWEygm v0W0BXEikclv1qFkKX8t94RHp7RHwyRuvoWs29001F0UiTRd3UqTLacrfyTTzXl6 9qrqVXDZngw5PfCnCs5OEx/iZM1Tc93PqkV1NZjvd239WuA7+LmjwNSXbmgGcsUV 1P+4BPMp/O91WwlcTAGRMFqcuLyB+jl1Ky6oIyvy/pcYceEG7ZCy6hFQUVy3nENd AkWaluelzMCOoN/OTTuRH9r+cvl6N3q3 -----END CERTIFICATE-----Generated at Sun Jan 25 02:59:05 2026 by rpki-client