This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft File: GEMtUeYt2nKdH_G-G4H79VvYs0c.mft (raw, json) Hash identifier: Q7hTyTm98xOF8mSZQDvBvwNXQkPXq1hC+NwTCmXQmhE= Subject key identifier: 20:6F:34:B1:CC:3E:2B:EE:40:9E:4B:40:48:5C:B7:D3:5E:39:F9:5A Authority key identifier: 18:43:2D:51:E6:2D:DA:72:9D:1F:F1:BE:1B:81:FB:F5:5B:D8:B3:47 Certificate issuer: /CN=A91AB1C2/serialNumber=18432D51E62DDA729D1FF1BE1B81FBF55BD8B347 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft Manifest number: 17 Signing time: Sun 25 Jan 2026 07:01:04 +0000 Manifest this update: Sun 25 Jan 2026 07:01:04 +0000 Manifest next update: Sun 01 Feb 2026 07:01:04 +0000 Files and hashes: 1: GEMtUeYt2nKdH_G-G4H79VvYs0c.crl (hash: HCfoBw7XbARa8F5ywnRW4/MyLbERo138TVkPXkXJnIc=) 2: D4578CBCE0F811F0841404A85E6F56BC.roa (hash: 9eUAekJiT1Ca1LaRVVMKrixh9PlS8uVmPngCkQ0JqKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.crl rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1C2, serialNumber=18432D51E62DDA729D1FF1BE1B81FBF55BD8B347 Validity Not Before: Jan 25 07:01:04 2026 GMT Not After : Feb 1 07:01:04 2026 GMT Subject: CN=6975bfb0-4fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e1:15:01:8e:e0:9b:e0:23:5d:b5:77:a1:7e: da:bb:f6:82:32:49:3d:09:00:e2:fa:d8:5d:e1:80: 78:94:60:4b:ac:2c:64:ad:b2:2f:7a:41:f5:14:1a: 90:d6:f2:41:91:fb:2b:ce:22:92:a0:12:49:53:e0: 0c:88:a9:19:42:a9:88:ac:f7:ed:d8:09:e1:d7:1d: b3:1f:44:71:89:eb:4c:22:30:7d:ca:6a:3a:07:ad: e7:73:18:07:c3:81:99:25:4b:ee:11:20:b7:19:2a: 8f:89:73:f9:ba:57:1e:52:05:8c:d3:c8:cc:d8:35: f6:c8:27:62:2c:13:5e:e2:c2:e4:b5:26:de:49:35: 93:85:c0:68:7f:86:97:3d:ae:1a:16:ea:8b:9b:27: 61:41:75:9e:fc:54:d0:67:f6:17:fc:0b:bd:47:6a: 83:42:c9:0b:50:08:a1:99:68:08:9a:f6:cf:32:b5: 40:cc:82:d1:7d:f8:62:1f:89:00:9f:6d:82:c2:24: 56:30:43:78:01:47:07:77:ff:fe:56:eb:ad:08:1e: ba:d5:ef:14:46:f7:a9:75:a3:28:8e:10:fb:76:2f: 1b:6b:fd:4f:6c:41:57:30:c7:d9:a2:4f:87:7e:da: 34:97:7a:5a:90:a4:d1:b0:b0:9a:70:6b:eb:f4:05: 2e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6F:34:B1:CC:3E:2B:EE:40:9E:4B:40:48:5C:B7:D3:5E:39:F9:5A X509v3 Authority Key Identifier: keyid:18:43:2D:51:E6:2D:DA:72:9D:1F:F1:BE:1B:81:FB:F5:5B:D8:B3:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:1c:7a:9a:52:e8:f1:cd:d3:9f:50:6b:87:ab:b9:d8:65:39: 82:7d:15:6f:d8:0d:00:eb:72:cb:61:9d:87:45:d5:cf:3e:a6: 48:4e:28:53:c9:91:6e:e4:43:23:45:66:02:28:77:99:81:71: 4a:51:f0:ea:2a:28:42:f8:1f:20:9c:43:38:11:22:8f:52:bd: f4:22:15:67:b2:d9:36:cf:41:fd:ae:32:d6:d6:eb:5a:d6:4b: d7:1d:12:46:6c:39:cd:1d:9d:25:b5:ca:a6:38:6b:b3:20:42: eb:9a:b3:bf:7d:63:c4:2b:9d:82:e4:ca:8e:cd:fa:23:5f:50: b9:8e:07:ed:3c:d6:35:ba:fb:62:fc:b6:c9:8b:7d:7e:16:f6: f6:82:95:47:36:51:49:60:b3:c0:c3:1d:fa:e9:f3:76:2f:0d: c1:0f:ed:03:b3:2a:73:d4:74:e8:ae:d0:3c:ba:4b:78:4f:e7: 62:0d:09:1a:4e:d7:bd:b8:cf:dd:f4:af:5f:f6:87:72:11:3f: 9a:b4:2a:42:22:f5:3c:4f:e1:3a:cb:0b:04:56:e6:32:08:24: a9:fa:66:98:30:a8:85:9d:be:fc:6a:6c:92:08:32:8d:3f:59: d7:2e:e5:b8:ca:e3:0c:86:a1:4e:1b:71:a0:e4:49:e4:48:80: f4:97:f9:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFB QjFDMjExMC8GA1UEBRMoMTg0MzJENTFFNjJEREE3MjlEMUZGMUJFMUI4MUZCRjU1 QkQ4QjM0NzAeFw0yNjAxMjUwNzAxMDRaFw0yNjAyMDEwNzAxMDRaMBgxFjAUBgNV BAMMDTY5NzViZmIwLTRmZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq4RUBjuCb4CNdtXehftq79oIyST0JAOL62F3hgHiUYEusLGStsi96QfUUGpDW 8kGR+yvOIpKgEklT4AyIqRlCqYis9+3YCeHXHbMfRHGJ60wiMH3KajoHredzGAfD gZklS+4RILcZKo+Jc/m6Vx5SBYzTyMzYNfbIJ2IsE17iwuS1Jt5JNZOFwGh/hpc9 rhoW6oubJ2FBdZ78VNBn9hf8C71HaoNCyQtQCKGZaAia9s8ytUDMgtF9+GIfiQCf bYLCJFYwQ3gBRwd3//5W660IHrrV7xRG96l1oyiOEPt2Lxtr/U9sQVcwx9miT4d+ 2jSXelqQpNGwsJpwa+v0BS6PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIG80scw+ K+5AnktASFy30145+VowHwYDVR0jBBgwFoAUGEMtUeYt2nKdH/G+G4H79VvYs0cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMUMyLzA1OUY3Q0JDRENB MzExRjA4NUQ2RjE1QjQzNkY1NkJDL0dFTXRVZVl0Mm5LZEhfRy1HNEg3OVZ2WXMw Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR0VNdFVlWXQybktkSF9HLUc0SDc5VnZZczBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC MUMyLzA1OUY3Q0JDRENBMzExRjA4NUQ2RjE1QjQzNkY1NkJDL0dFTXRVZVl0Mm5L ZEhfRy1HNEg3OVZ2WXMwYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABYceppS6PHN059Qa4erudhlOYJ9FW/YDQDrcsthnYdF1c8+pkhOKFPJ kW7kQyNFZgIod5mBcUpR8OoqKEL4HyCcQzgRIo9SvfQiFWey2TbPQf2uMtbW61rW S9cdEkZsOc0dnSW1yqY4a7MgQuuas799Y8QrnYLkyo7N+iNfULmOB+081jW6+2L8 tsmLfX4W9vaClUc2UUlgs8DDHfrp83YvDcEP7QOzKnPUdOiu0Dy6S3hP52INCRpO 1724z930r1/2h3IRP5q0KkIi9TxP4TrLCwRW5jIIJKn6ZpgwqIWdvvxqbJIIMo0/ Wdcu5bjK4wyGoU4bcaDkSeRIgPSX+c8= -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:12 2026 by rpki-client