This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft File: GLHIjO5o9jwhzWoMsbgx1db11s8.mft (raw, json) Hash identifier: Kv7WpjWm+8s9GNVBGtseEVOSIut3/O4xsjQdikYMahI= Subject key identifier: 07:C2:F5:77:1F:02:87:23:1F:06:80:02:F2:81:93:E0:AD:56:73:9E Authority key identifier: 18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF Certificate issuer: /CN=A91DAFA2/serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Certificate serial: 1C83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft Manifest number: 1C77 Signing time: Sat 24 Jan 2026 15:58:41 +0000 Manifest this update: Sat 24 Jan 2026 15:58:40 +0000 Manifest next update: Sat 31 Jan 2026 15:58:40 +0000 Files and hashes: 1: GLHIjO5o9jwhzWoMsbgx1db11s8.crl (hash: ga1h5gHSPTHq6fjASKvgmaasTGkBdEbW429oc0BSStI=) 2: 02FB1DCAEF6A11E69A4AD551C4F9AE02.roa (hash: o3z6BRLTnD7CnNxQl2rygbilFIo9W6Al6sOGDkj+Zio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7299 (0x1c83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAFA2, serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Validity Not Before: Jan 24 15:58:40 2026 GMT Not After : Jan 31 15:58:40 2026 GMT Subject: CN=6974ec31-8c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dc:3b:ce:d1:d3:b9:3d:8f:a2:59:ab:93:84: 77:c2:26:1c:d9:ef:e7:20:cf:b1:90:12:82:06:88: 29:9b:f5:94:81:0e:4a:01:dc:06:ba:e4:43:cd:15: 48:69:72:6f:d7:5b:53:87:98:5a:bd:43:c6:fd:b6: e7:34:f4:4b:f9:5f:64:ba:f1:8e:94:d3:42:f8:c9: 68:c1:90:27:64:47:57:41:15:19:03:cb:bf:4a:9d: 4d:da:1c:f9:9b:de:39:d4:82:98:ee:52:dc:89:4a: 25:22:fa:74:77:a8:ff:ac:37:9a:4e:1b:a9:73:f8: 98:24:96:b7:9a:e0:8a:af:f3:3f:f4:97:30:16:91: cb:94:55:21:4b:15:0d:5d:3f:10:24:88:39:8c:00: b7:c8:6f:4b:c4:61:ba:d1:f8:ad:f5:15:0f:47:31: 24:74:8c:1f:7c:14:da:77:df:77:2b:6b:8d:41:8b: 4f:94:b3:b5:9c:42:fc:ef:8e:9f:3c:ec:7d:3b:54: c1:08:de:33:db:02:5a:0d:4e:83:31:10:f0:d6:3b: ad:21:fd:0a:c1:29:63:12:72:67:20:ee:67:e4:b8: 50:b0:bf:38:8f:01:a5:0c:89:2b:c0:f3:fb:d7:ac: 0b:75:e9:47:b3:0d:40:73:4c:a4:cd:6a:99:25:f9: 4c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C2:F5:77:1F:02:87:23:1F:06:80:02:F2:81:93:E0:AD:56:73:9E X509v3 Authority Key Identifier: keyid:18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:da:85:72:08:89:95:10:b3:c1:84:66:8f:22:84:33:43:82: a1:55:51:ec:07:f1:a1:03:21:99:72:68:ca:34:cb:e1:32:fd: 62:b3:c1:c6:03:2a:8b:b3:b1:4c:5e:93:60:46:12:6d:35:58: d5:0f:17:3d:34:12:47:28:ab:46:a4:c6:2d:18:3e:75:43:b4: 47:a5:7a:cc:43:42:e7:fe:78:6f:11:5d:6b:11:95:96:73:6c: 0d:69:75:bc:72:f7:fb:cc:df:35:f9:8a:ef:eb:97:83:1a:cf: 10:06:54:11:c9:d0:55:64:df:6a:5b:f9:6d:ee:e1:0e:63:50: e8:f0:ac:b7:a2:87:c1:2c:cb:c7:f9:1c:eb:88:8d:17:80:3d: 59:ff:57:89:a7:0f:4a:ca:0b:b8:70:cd:2f:fd:8a:cc:22:6c: 25:de:fb:60:aa:26:f6:04:1a:2b:62:13:a0:43:15:a8:df:5d: 13:da:10:3d:ff:99:8c:7e:59:c5:72:eb:b6:67:54:a9:64:17: 1e:73:3b:7f:f1:9c:7c:80:1b:d8:d6:de:62:0d:34:11:8b:7b: fd:c5:c4:09:4d:3d:9d:bc:e3:d3:f6:0c:65:db:ee:7f:db:a1: a1:07:29:fa:86:4c:df:54:28:e3:bc:3d:93:f6:58:ee:d5:46: 75:c0:84:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx REFGQTIxMTAvBgNVBAUTKDE4QjFDODhDRUU2OEY2M0MyMUNENkEwQ0IxQjgzMUQ1 RDZGNUQ2Q0YwHhcNMjYwMTI0MTU1ODQwWhcNMjYwMTMxMTU1ODQwWjAYMRYwFAYD VQQDDA02OTc0ZWMzMS04YzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5dw7ztHTuT2Polmrk4R3wiYc2e/nIM+xkBKCBogpm/WUgQ5KAdwGuuRDzRVI aXJv11tTh5havUPG/bbnNPRL+V9kuvGOlNNC+MlowZAnZEdXQRUZA8u/Sp1N2hz5 m9451IKY7lLciUolIvp0d6j/rDeaThupc/iYJJa3muCKr/M/9JcwFpHLlFUhSxUN XT8QJIg5jAC3yG9LxGG60fit9RUPRzEkdIwffBTad993K2uNQYtPlLO1nEL8746f POx9O1TBCN4z2wJaDU6DMRDw1jutIf0KwSljEnJnIO5n5LhQsL84jwGlDIkrwPP7 16wLdelHsw1Ac0ykzWqZJflMfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfC9Xcf AocjHwaAAvKBk+CtVnOeMB8GA1UdIwQYMBaAFBixyIzuaPY8Ic1qDLG4MdXW9dbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUZBMi9CN0I2Nzc2MEVG NjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81bzlqd2h6V29Nc2JneDFkYjEx czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dMSElqTzVvOWp3aHpXb01zYmd4MWRiMTFzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUZBMi9CN0I2Nzc2MEVGNjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81bzlq d2h6V29Nc2JneDFkYjExczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC2oVyCImVELPBhGaPIoQzQ4KhVVHsB/GhAyGZcmjKNMvhMv1is8HG AyqLs7FMXpNgRhJtNVjVDxc9NBJHKKtGpMYtGD51Q7RHpXrMQ0Ln/nhvEV1rEZWW c2wNaXW8cvf7zN81+Yrv65eDGs8QBlQRydBVZN9qW/lt7uEOY1Do8Ky3oofBLMvH +RzriI0XgD1Z/1eJpw9Kygu4cM0v/YrMImwl3vtgqib2BBorYhOgQxWo310T2hA9 /5mMflnFcuu2Z1SpZBceczt/8Zx8gBvY1t5iDTQRi3v9xcQJTT2dvOPT9gxl2+5/ 26GhByn6hkzfVCjjvD2T9lju1UZ1wIRQ -----END CERTIFICATE-----Generated at Sun Jan 25 10:47:32 2026 by rpki-client