This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft File: GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft (raw, json) Hash identifier: h6pBNxQWIfrXvJhTqPRsttYSi+CDSF50xgS2vich4js= Subject key identifier: 74:81:B1:E0:53:7C:FC:7F:EC:C0:00:F0:2E:8B:3B:88:6F:F5:0B:11 Authority key identifier: 18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36 Certificate issuer: /CN=A91DACA7/serialNumber=18815B34C869284B4323C9169936770FDD0B4236 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft Manifest number: 011C Signing time: Sun 25 Jan 2026 04:01:17 +0000 Manifest this update: Sun 25 Jan 2026 04:01:17 +0000 Manifest next update: Sun 01 Feb 2026 04:01:17 +0000 Files and hashes: 1: GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl (hash: /BCH28C4h8zmhqoFAvJcnKroKhDw60zctdvSX+tZX1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DACA7, serialNumber=18815B34C869284B4323C9169936770FDD0B4236 Validity Not Before: Jan 25 04:01:17 2026 GMT Not After : Feb 1 04:01:17 2026 GMT Subject: CN=6975958d-6fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d8:da:ec:f0:31:90:8b:be:8e:40:5e:5e:7c: d7:8b:7b:cb:9d:a5:3d:06:30:26:6a:54:9c:89:d6: 3e:d8:4a:be:8c:d3:0b:3e:29:49:05:e0:ce:40:c7: d0:fa:cd:24:3d:8b:dc:7d:fb:a2:48:0b:39:cf:3b: ee:35:20:6f:b7:f7:d0:a1:b5:a5:5a:23:ca:09:24: 7c:cc:fd:9e:9e:f9:e3:76:d1:97:53:50:de:6f:84: 42:48:87:03:39:ab:6f:46:f3:bf:6a:e6:4b:64:8d: c4:73:dc:47:b1:8f:5b:f7:69:db:a7:09:e1:f9:60: 7f:d0:eb:41:a3:98:03:41:ef:e2:af:f8:a8:e7:f0: 14:12:e1:f6:23:bb:73:be:d5:d3:1a:65:29:7e:d2: d9:82:81:93:82:55:82:de:da:e5:71:a7:87:8b:ac: c2:46:db:1f:a2:40:c5:9a:41:5c:15:a3:de:b2:6a: 24:d7:38:0d:e3:1b:e8:21:93:e6:1c:c0:8a:44:54: ce:cf:97:04:a5:47:d7:0f:e0:fe:72:89:94:78:d6: cc:6e:84:09:2e:ef:e7:37:d2:d6:fd:f2:42:95:b9: c1:59:2c:a1:0f:5d:1a:5e:ec:12:e7:6b:7c:1d:62: b9:40:46:91:4c:1c:a7:b6:7f:be:15:6e:28:f9:0a: 88:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:81:B1:E0:53:7C:FC:7F:EC:C0:00:F0:2E:8B:3B:88:6F:F5:0B:11 X509v3 Authority Key Identifier: keyid:18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f3:6a:69:cd:54:45:58:35:72:37:ca:bf:3b:2c:c0:77:f0: e4:a8:78:a4:0c:6c:5b:98:28:91:be:56:a8:c9:08:eb:e6:5c: 44:81:24:ad:f8:fe:70:c3:ea:37:14:3e:79:6a:9c:56:24:6b: 4f:b1:7d:06:0c:ef:e3:5e:bc:a3:69:25:7e:8d:b0:2e:c5:0e: 22:eb:7d:1e:8b:fd:7a:97:5d:fb:fd:4c:b9:13:a8:4c:12:5c: 10:2f:80:83:02:f4:eb:68:84:c2:fb:c7:ad:60:73:97:26:01: 55:a3:8d:cf:3d:76:65:82:c5:cc:46:13:ea:51:a6:54:72:f9: 6e:c4:50:cd:68:2a:50:f7:66:ff:29:db:1a:50:6c:89:a4:e5: 8f:d3:63:d4:61:ce:9c:97:84:e7:bd:e8:99:9c:bb:30:35:61: 0e:c8:5b:ce:a8:b5:a3:7e:a2:ad:e0:1d:48:4e:43:e8:35:6d: 5a:00:95:04:d4:c5:8c:65:2a:c1:d3:b2:d5:12:cb:dd:da:d3: 90:7d:34:80:d9:94:11:24:76:e3:09:b0:96:e4:94:ec:8c:bf: d8:26:e6:0a:c9:6f:d0:19:52:89:73:1c:09:41:a4:72:37:bc: bf:e8:28:c9:16:78:6a:ca:47:fc:97:a9:0f:81:c6:6b:e6:d4: 18:79:fc:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx REFDQTcxMTAvBgNVBAUTKDE4ODE1QjM0Qzg2OTI4NEI0MzIzQzkxNjk5MzY3NzBG REQwQjQyMzYwHhcNMjYwMTI1MDQwMTE3WhcNMjYwMjAxMDQwMTE3WjAYMRYwFAYD VQQDDA02OTc1OTU4ZC02ZmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAltja7PAxkIu+jkBeXnzXi3vLnaU9BjAmalScidY+2Eq+jNMLPilJBeDOQMfQ +s0kPYvcffuiSAs5zzvuNSBvt/fQobWlWiPKCSR8zP2envnjdtGXU1Deb4RCSIcD OatvRvO/auZLZI3Ec9xHsY9b92nbpwnh+WB/0OtBo5gDQe/ir/io5/AUEuH2I7tz vtXTGmUpftLZgoGTglWC3trlcaeHi6zCRtsfokDFmkFcFaPesmok1zgN4xvoIZPm HMCKRFTOz5cEpUfXD+D+comUeNbMboQJLu/nN9LW/fJClbnBWSyhD10aXuwS52t8 HWK5QEaRTByntn++FW4o+QqIewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSBseBT fPx/7MAA8C6LO4hv9QsRMB8GA1UdIwQYMBaAFBiBWzTIaShLQyPJFpk2dw/dC0I2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81OUI5NDE4NjQ1 QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9HSUZiTk1ocEtFdERJOGtXbVRaM0Q5MExR alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dJRmJOTWhwS0V0REk4a1dtVFozRDkwTFFqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUNBNy81OUI5NDE4NjQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9HSUZiTk1ocEtF dERJOGtXbVRaM0Q5MExRalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc82ppzVRFWDVyN8q/OyzAd/DkqHikDGxbmCiRvlaoyQjr5lxEgSSt +P5ww+o3FD55apxWJGtPsX0GDO/jXryjaSV+jbAuxQ4i630ei/16l137/Uy5E6hM ElwQL4CDAvTraITC+8etYHOXJgFVo43PPXZlgsXMRhPqUaZUcvluxFDNaCpQ92b/ KdsaUGyJpOWP02PUYc6cl4TnveiZnLswNWEOyFvOqLWjfqKt4B1ITkPoNW1aAJUE 1MWMZSrB07LVEsvd2tOQfTSA2ZQRJHbjCbCW5JTsjL/YJuYKyW/QGVKJcxwJQaRy N7y/6CjJFnhqykf8l6kPgcZr5tQYefzj -----END CERTIFICATE-----Generated at Sun Jan 25 06:13:21 2026 by rpki-client