This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft File: GhgU2ojNOn_lNTsbW4hNytEkeJY.mft (raw, json) Hash identifier: A8rjeiUVI12gQG5UCCJ9auOWM8LR8EktgWBZRZbeCeA= Subject key identifier: F0:B6:5F:DD:9E:28:45:63:6C:81:B7:EE:E5:77:AE:B8:A5:EF:07:26 Authority key identifier: 1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96 Certificate issuer: /CN=A91B5FA7/serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft Manifest number: 0A Signing time: Fri 23 Jan 2026 07:05:47 +0000 Manifest this update: Fri 23 Jan 2026 07:05:47 +0000 Manifest next update: Fri 30 Jan 2026 07:05:47 +0000 Files and hashes: 1: GhgU2ojNOn_lNTsbW4hNytEkeJY.crl (hash: FbkX5RHp/XKma9XT76aVl2/KZy++v+2uMJxcDihKFLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 07:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5FA7, serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896 Validity Not Before: Jan 23 07:05:47 2026 GMT Not After : Jan 30 07:05:47 2026 GMT Subject: CN=69731dcb-c146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3b:af:68:6b:0d:5c:1e:cb:9b:0a:6f:e8:5e: b4:3b:2a:d9:b1:65:e0:2f:0e:16:72:99:f0:2d:7d: 68:a9:6c:3d:5e:30:33:b8:54:76:f3:ee:00:ba:13: 4e:5a:2a:8d:f1:65:38:fe:04:bc:14:49:f3:46:7a: ce:f8:99:3f:97:e8:2d:59:e0:7c:f4:c5:74:17:5d: 7e:30:16:fc:9b:e9:7f:86:dd:65:82:2c:40:0d:22: 97:62:b1:5f:44:2c:85:b3:89:36:bb:96:63:9d:3b: cc:21:f7:89:62:0b:8f:6f:49:b5:7d:34:17:19:85: b2:5a:88:7b:c5:8d:6f:47:12:6d:f5:0e:f3:49:93: 2d:2f:c2:a4:d9:28:8e:32:75:d2:75:8a:df:9e:7b: d4:82:82:59:81:bf:e1:6c:a2:ce:8a:df:3e:e7:41: 20:a6:b7:c2:25:a1:ca:12:a9:21:4d:47:bf:05:d2: 5b:df:c0:31:d9:60:3a:77:21:97:b1:7d:3a:26:1a: fa:dc:33:ee:26:82:b6:3e:28:45:84:87:93:d6:15: 28:63:a7:8b:fa:67:4e:a4:ee:f4:92:bf:f1:30:d0: a2:04:1f:5e:86:ea:e8:0c:58:fc:dd:d1:1c:e7:c8: 51:5a:b9:48:7b:e3:81:3a:67:01:33:ae:b5:11:5f: 4b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B6:5F:DD:9E:28:45:63:6C:81:B7:EE:E5:77:AE:B8:A5:EF:07:26 X509v3 Authority Key Identifier: keyid:1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:46:47:0a:bd:08:5d:1b:27:f3:ad:40:45:69:b8:39:74:55: f3:d6:09:24:04:74:8e:f8:d6:b8:3a:a5:35:02:42:ad:9b:b1: af:14:5f:87:fb:8b:4a:9f:c1:e4:ab:6c:50:39:d8:98:ed:cb: 97:76:0f:ae:15:ae:56:28:ea:2b:9b:79:53:57:64:0c:83:84: 40:f6:c5:f0:b1:f9:43:48:2e:3c:97:e8:05:a2:c3:41:90:7b: ad:2f:22:5c:94:55:10:08:6a:23:11:a9:a6:d9:cf:a3:53:c6: 2a:e1:9d:68:f9:8c:4b:3b:3c:df:22:a9:5f:55:55:d3:6b:2d: 79:74:6d:ec:89:3f:19:a4:bf:59:96:3d:ea:00:f0:4d:34:be: 13:20:bf:be:72:5c:6b:5b:aa:56:1e:ad:99:d3:90:66:ee:3f: 1e:71:36:22:e9:70:33:a5:78:6e:fa:3f:a9:85:e3:34:4d:40: 90:a1:52:1d:45:61:0c:3b:c7:9f:f2:26:f0:b0:1b:ec:35:58: cb:d4:c2:df:7d:12:08:df:bf:74:28:60:0a:5c:37:e2:16:89: cb:79:ac:18:05:1e:5c:ec:5f:0c:70:9a:40:60:61:d0:df:0c: 41:48:6f:1d:81:f8:5e:7f:38:a1:4b:c3:c9:a4:f7:78:42:a0: 09:74:9e:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFC NUZBNzExMC8GA1UEBRMoMUExODE0REE4OENEM0E3RkU1MzUzQjFCNUI4ODREQ0FE MTI0Nzg5NjAeFw0yNjAxMjMwNzA1NDdaFw0yNjAxMzAwNzA1NDdaMBgxFjAUBgNV BAMMDTY5NzMxZGNiLWMxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuO69oaw1cHsubCm/oXrQ7KtmxZeAvDhZymfAtfWipbD1eMDO4VHbz7gC6E05a Ko3xZTj+BLwUSfNGes74mT+X6C1Z4Hz0xXQXXX4wFvyb6X+G3WWCLEANIpdisV9E LIWziTa7lmOdO8wh94liC49vSbV9NBcZhbJaiHvFjW9HEm31DvNJky0vwqTZKI4y ddJ1it+ee9SCglmBv+Fsos6K3z7nQSCmt8IlocoSqSFNR78F0lvfwDHZYDp3IZex fTomGvrcM+4mgrY+KEWEh5PWFShjp4v6Z06k7vSSv/Ew0KIEH16G6ugMWPzd0Rzn yFFauUh744E6ZwEzrrURX0uBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8LZf3Z4o RWNsgbfu5XeuuKXvByYwHwYDVR0jBBgwFoAUGhgU2ojNOn/lNTsbW4hNytEkeJYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1RkE3LzdEMDMwN0U0RUMx OTExRjA4QUVGRkNCODNCNkY1NkJDL0doZ1Uyb2pOT25fbE5Uc2JXNGhOeXRFa2VK WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR2hnVTJvak5Pbl9sTlRzYlc0aE55dEVrZUpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1 RkE3LzdEMDMwN0U0RUMxOTExRjA4QUVGRkNCODNCNkY1NkJDL0doZ1Uyb2pOT25f bE5Uc2JXNGhOeXRFa2VKWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMZGRwq9CF0bJ/OtQEVpuDl0VfPWCSQEdI741rg6pTUCQq2bsa8UX4f7 i0qfweSrbFA52Jjty5d2D64VrlYo6iubeVNXZAyDhED2xfCx+UNILjyX6AWiw0GQ e60vIlyUVRAIaiMRqabZz6NTxirhnWj5jEs7PN8iqV9VVdNrLXl0beyJPxmkv1mW PeoA8E00vhMgv75yXGtbqlYerZnTkGbuPx5xNiLpcDOleG76P6mF4zRNQJChUh1F YQw7x5/yJvCwG+w1WMvUwt99Egjfv3QoYApcN+IWict5rBgFHlzsXwxwmkBgYdDf DEFIbx2B+F5/OKFLw8mk93hCoAl0njY= -----END CERTIFICATE-----Generated at Sun Jan 25 02:48:07 2026 by rpki-client