This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft File: G7spe8goFmqkl9N8cmW_tgGuA2A.mft (raw, json) Hash identifier: Xvy+7ccbFvzlY1hGc8Zp/YCWKi7EYva5jI+SUSaJRME= Subject key identifier: D8:3C:C0:CE:13:D1:F3:68:79:4B:AE:91:35:6D:FB:9B:D2:38:B1:41 Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 Certificate issuer: /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Certificate serial: 0EAE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft Manifest number: 0EA3 Signing time: Sat 24 Jan 2026 17:22:49 +0000 Manifest this update: Sat 24 Jan 2026 17:22:49 +0000 Manifest next update: Sat 31 Jan 2026 17:22:49 +0000 Files and hashes: 1: G7spe8goFmqkl9N8cmW_tgGuA2A.crl (hash: OUp8v0AjNg5cFqQX2LFTr7k21yhYc2F5mWF+2gdw6LA=) 2: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (hash: KLPJPe472S0O1L4BKJwaeNcAQbh5Hn42irMA5av03NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3758 (0xeae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Validity Not Before: Jan 24 17:22:49 2026 GMT Not After : Jan 31 17:22:49 2026 GMT Subject: CN=6974ffe9-8804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:16:7c:b1:3e:6b:55:da:eb:47:75:30:2b: 6d:2e:18:01:cd:5c:c7:aa:5c:db:fb:ca:d1:b6:28: 13:47:4a:48:29:59:ea:2b:8e:90:42:e9:36:ea:8a: af:95:78:67:14:3e:b6:51:0d:6a:b0:91:99:59:33: fc:7e:51:a1:0b:63:42:26:44:e8:b8:ad:b5:91:a1: 29:93:d2:f3:8a:fa:e2:fe:a8:2e:67:eb:18:9b:5b: 8d:9c:81:28:4d:1d:87:1a:68:4d:1a:cf:e8:e0:70: 75:4a:df:f9:a5:94:b6:90:ea:2e:3c:e7:63:52:da: 06:5b:e2:82:bd:1e:a2:e7:53:d4:42:80:9c:21:5a: 3c:20:e8:20:f2:37:31:1e:5d:32:f6:7f:5c:fa:02: c3:ab:c8:6b:bb:22:d6:f1:35:65:3c:a8:79:d6:3d: 5f:1c:3e:93:cc:ff:2f:6b:7d:53:a5:a5:b3:bc:43: 51:c7:15:00:ad:e9:5d:bb:48:6d:ab:fd:60:75:de: 85:7b:55:b0:e7:2f:05:b4:c4:c4:48:50:eb:72:3c: 15:fd:33:25:6d:4e:0b:df:46:f4:01:55:b5:ca:ac: 69:08:c0:2b:82:79:3f:1e:3d:b6:82:7e:44:39:07: 30:11:0c:4d:d5:80:a3:f2:e2:b5:14:4a:25:d0:c1: 13:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3C:C0:CE:13:D1:F3:68:79:4B:AE:91:35:6D:FB:9B:D2:38:B1:41 X509v3 Authority Key Identifier: keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:9d:00:a1:ef:ec:fe:2c:06:d1:1b:0d:2d:54:58:7e:86:e0: d0:11:29:d6:b8:1b:ce:6b:d2:f4:cf:5c:6c:be:61:c5:0b:1c: bc:6c:68:46:e9:ff:ee:e3:68:e8:aa:ba:0e:5f:43:c0:f9:b0: 0c:be:f0:f5:73:1e:91:fd:88:61:d1:69:26:07:e3:8a:57:d9: 60:b5:da:37:55:d6:2b:df:b8:18:b6:71:31:1a:56:38:fe:9b: d5:d5:e1:a4:12:5f:37:e0:aa:e2:b9:8d:6c:6f:3b:26:82:6d: f8:ee:8a:55:a7:f2:69:62:22:a2:2d:ba:e1:a5:7f:64:47:a6: a3:52:02:b1:e5:f0:86:f2:b9:f9:77:cf:00:69:ea:87:96:d0: 3d:b7:30:af:74:6c:66:b1:00:1d:30:78:97:72:1b:eb:08:57: 44:d5:0a:2d:6c:21:06:e6:11:34:ca:35:5a:20:03:f9:4b:c4: 16:70:15:0a:ff:aa:66:67:75:69:4a:47:c2:96:1e:82:ec:f7: 83:ff:e3:fb:f0:4b:05:4e:04:5f:c3:ea:4d:28:99:3d:4d:c8: 45:39:ab:eb:63:76:28:20:af:b2:5f:27:8a:65:11:23:87:1a: 6d:3a:f3:63:a9:82:ac:9e:75:1a:76:ae:4f:97:42:0f:8e:9d: ca:94:b1:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKDFCQkIyOTdCQzgyODE2NkFBNDk3RDM3QzcyNjVCRkI2 MDFBRTAzNjAwHhcNMjYwMTI0MTcyMjQ5WhcNMjYwMTMxMTcyMjQ5WjAYMRYwFAYD VQQDDA02OTc0ZmZlOS04ODA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYUWfLE+a1Xa60d1MCttLhgBzVzHqlzb+8rRtigTR0pIKVnqK46QQuk26oqv lXhnFD62UQ1qsJGZWTP8flGhC2NCJkTouK21kaEpk9Lzivri/qguZ+sYm1uNnIEo TR2HGmhNGs/o4HB1St/5pZS2kOouPOdjUtoGW+KCvR6i51PUQoCcIVo8IOgg8jcx Hl0y9n9c+gLDq8hruyLW8TVlPKh51j1fHD6TzP8va31TpaWzvENRxxUAreldu0ht q/1gdd6Fe1Ww5y8FtMTESFDrcjwV/TMlbU4L30b0AVW1yqxpCMArgnk/Hj22gn5E OQcwEQxN1YCj8uK1FEol0METMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNg8wM4T 0fNoeUuukTVt+5vSOLFBMB8GA1UdIwQYMBaAFBu7KXvIKBZqpJfTfHJlv7YBrgNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi83QzA2RTc5Q0E2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0ZtcWtsOU44Y21XX3RnR3VB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0c3c3BlOGdvRm1xa2w5TjhjbVdfdGdHdUEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi83QzA2RTc5Q0E2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0Zt cWtsOU44Y21XX3RnR3VBMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVnQCh7+z+LAbRGw0tVFh+huDQESnWuBvOa9L0z1xsvmHFCxy8bGhG 6f/u42joqroOX0PA+bAMvvD1cx6R/Yhh0WkmB+OKV9lgtdo3VdYr37gYtnExGlY4 /pvV1eGkEl834KriuY1sbzsmgm347opVp/JpYiKiLbrhpX9kR6ajUgKx5fCG8rn5 d88AaeqHltA9tzCvdGxmsQAdMHiXchvrCFdE1QotbCEG5hE0yjVaIAP5S8QWcBUK /6pmZ3VpSkfClh6C7PeD/+P78EsFTgRfw+pNKJk9TchFOavrY3YoIK+yXyeKZREj hxptOvNjqYKsnnUadq5Pl0IPjp3KlLEU -----END CERTIFICATE-----Generated at Sun Jan 25 17:02:58 2026 by rpki-client