This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft File: GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft (raw, json) Hash identifier: Wy39i8ffdeQM2Jt5KPZW9iNtjk4rQm4ibdEc43gcnac= Subject key identifier: FF:F0:A3:4F:BA:78:DE:3C:00:B6:F8:FD:05:31:1E:2B:4E:21:B8:4E Authority key identifier: 19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59 Certificate issuer: /CN=A91A470C/serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft Manifest number: 2F Signing time: Fri 23 Jan 2026 06:47:25 +0000 Manifest this update: Fri 23 Jan 2026 06:47:25 +0000 Manifest next update: Fri 30 Jan 2026 06:47:25 +0000 Files and hashes: 1: GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl (hash: Fkx40DInjS0bwku0TH+xt5paLqojEzIpY5PAV/PRaXA=) 2: 7B31D5E4CD0B11F0A1E66D5FC4F9AE02.roa (hash: NXL/hMdSFSKARiWStwfBKFLmVnxv6k1UKdBZKMx+0Os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A470C, serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259 Validity Not Before: Jan 23 06:47:25 2026 GMT Not After : Jan 30 06:47:25 2026 GMT Subject: CN=6973197d-990d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1b:2c:38:c6:04:e4:9c:e3:08:b4:0c:2c:bb: 47:2f:80:f7:5c:0d:a4:97:9d:bd:9c:b7:a9:28:67: 59:2f:3d:5c:40:9a:17:7c:8d:f3:3a:ee:f4:81:fe: 79:f5:46:b0:98:27:75:12:84:14:bf:7e:93:96:eb: cf:73:b8:9e:a3:60:77:f4:64:35:28:77:49:e8:b4: de:e7:03:1f:89:49:54:9b:50:78:ff:2c:4b:0b:ad: 1d:6b:48:12:ee:ec:fd:e9:7a:78:84:dc:fb:65:f0: 83:de:3d:a5:74:7f:e8:bb:77:14:1b:c9:d2:0c:c1: 4d:cb:9f:0a:cc:b3:91:b8:3d:32:b8:27:82:ad:a5: 79:df:2c:5f:94:f1:ad:4f:38:a3:10:96:6b:45:b2: ad:4e:b7:2c:db:3c:80:65:da:16:6b:ba:71:2c:9c: d9:32:b1:40:22:2f:d6:55:3a:60:b1:9c:6a:7f:32: be:4f:8c:bc:f9:8a:e7:3b:02:f4:10:20:8c:66:96: 4b:5c:f8:b4:0c:b8:f1:8a:f2:37:7b:2c:de:cf:a6: 08:c3:53:f2:8d:86:69:8b:10:82:86:14:3f:86:75: 1b:c3:a9:2b:c7:27:c7:f9:47:28:2a:af:37:3c:39: e8:d3:49:a9:01:39:04:d8:ae:ee:5a:9a:93:4b:4f: 53:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F0:A3:4F:BA:78:DE:3C:00:B6:F8:FD:05:31:1E:2B:4E:21:B8:4E X509v3 Authority Key Identifier: keyid:19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:07:88:37:57:5a:9e:7f:d9:69:ce:c0:8d:ac:1a:11:4d:38: e1:4f:c0:46:7e:74:96:16:4f:cf:26:eb:cf:79:54:7b:da:b3: 5f:c0:d0:2c:5b:53:a7:67:6c:33:a4:65:24:28:9a:c1:06:ed: c6:a6:4f:80:cd:c5:74:4d:9f:a0:b3:9c:c1:e5:5f:26:78:db: 5f:9f:25:ba:97:25:a6:59:c8:52:c4:72:b7:68:85:48:e1:73: 40:2d:3f:f7:24:64:46:f8:bf:9b:70:be:14:5c:4b:85:52:44: 12:77:e4:9b:e6:f8:88:ad:d1:a6:f3:ed:1a:d5:80:72:eb:3e: b1:39:7a:c5:cc:38:87:43:1f:3d:99:37:ca:35:54:d0:1c:c7: ce:41:54:e9:f0:02:27:fb:46:0a:e7:59:1d:03:d0:0a:7d:60: ac:50:61:c1:cf:1c:51:12:26:d3:99:fd:a1:79:08:f8:69:d1: 93:3b:26:bb:10:95:9a:b8:5e:02:7f:9c:63:75:f8:24:bc:96: f8:11:b2:98:3b:3b:94:31:99:91:c9:aa:01:87:ab:1c:21:87: aa:56:54:b4:81:0d:26:cc:cf:89:96:c4:fd:85:ff:81:6b:37: 45:d1:be:9b:24:b3:de:97:8b:06:fa:5c:24:42:d6:78:a0:1c: a4:0d:e9:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDcwQzExMC8GA1UEBRMoMTk5RDRCRTA2MDhBNTZGNTA0ODBDMEFEMjY0NURBRDdC NjkwMDI1OTAeFw0yNjAxMjMwNjQ3MjVaFw0yNjAxMzAwNjQ3MjVaMBgxFjAUBgNV BAMMDTY5NzMxOTdkLTk5MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9Gyw4xgTknOMItAwsu0cvgPdcDaSXnb2ct6koZ1kvPVxAmhd8jfM67vSB/nn1 RrCYJ3UShBS/fpOW689zuJ6jYHf0ZDUod0notN7nAx+JSVSbUHj/LEsLrR1rSBLu 7P3peniE3Ptl8IPePaV0f+i7dxQbydIMwU3LnwrMs5G4PTK4J4KtpXnfLF+U8a1P OKMQlmtFsq1OtyzbPIBl2hZrunEsnNkysUAiL9ZVOmCxnGp/Mr5PjLz5iuc7AvQQ IIxmlktc+LQMuPGK8jd7LN7PpgjDU/KNhmmLEIKGFD+GdRvDqSvHJ8f5Rygqrzc8 OejTSakBOQTYru5ampNLT1N5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU//CjT7p4 3jwAtvj9BTEeK04huE4wHwYDVR0jBBgwFoAUGZ1L4GCKVvUEgMCtJkXa17aQAlkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0NzBDL0FDNEQwQUI0QzY4 OTExRjA4RDJCRkUwQUM0RjlBRTAyL0daMUw0R0NLVnZVRWdNQ3RKa1hhMTdhUUFs ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR1oxTDRHQ0tWdlVFZ01DdEprWGExN2FRQWxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 NzBDL0FDNEQwQUI0QzY4OTExRjA4RDJCRkUwQUM0RjlBRTAyL0daMUw0R0NLVnZV RWdNQ3RKa1hhMTdhUUFsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFsHiDdXWp5/2WnOwI2sGhFNOOFPwEZ+dJYWT88m6895VHvas1/A0Cxb U6dnbDOkZSQomsEG7camT4DNxXRNn6CznMHlXyZ421+fJbqXJaZZyFLEcrdohUjh c0AtP/ckZEb4v5twvhRcS4VSRBJ35Jvm+Iit0abz7RrVgHLrPrE5esXMOIdDHz2Z N8o1VNAcx85BVOnwAif7RgrnWR0D0Ap9YKxQYcHPHFESJtOZ/aF5CPhp0ZM7JrsQ lZq4XgJ/nGN1+CS8lvgRspg7O5QxmZHJqgGHqxwhh6pWVLSBDSbMz4mWxP2F/4Fr N0XRvpsks96Xiwb6XCRC1nigHKQN6bw= -----END CERTIFICATE-----Generated at Sun Jan 25 09:24:14 2026 by rpki-client