This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft File: mGsNU3ZLyD3A4HLsrzacefIqOdc.mft (raw, json) Hash identifier: 0DS6AWRkckMFaiz3r8nSlgz775tLW570KldfatCvYwc= Subject key identifier: 54:A3:45:23:A7:50:A2:F6:AA:4C:D2:52:6F:CA:1A:A6:99:DF:B3:51 Authority key identifier: 98:6B:0D:53:76:4B:C8:3D:C0:E0:72:EC:AF:36:9C:79:F2:2A:39:D7 Certificate issuer: /CN=A91DD799/serialNumber=986B0D53764BC83DC0E072ECAF369C79F22A39D7 Certificate serial: 0786 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft Manifest number: 0786 Signing time: Sat 24 Jan 2026 14:44:43 +0000 Manifest this update: Sat 24 Jan 2026 14:44:43 +0000 Manifest next update: Sat 31 Jan 2026 14:44:43 +0000 Files and hashes: 1: mGsNU3ZLyD3A4HLsrzacefIqOdc.crl (hash: NW5VodBcE5aeH/PnD1yxFfpePig374W+mDAp3Q9Md6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.crl rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1926 (0x786) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD799, serialNumber=986B0D53764BC83DC0E072ECAF369C79F22A39D7 Validity Not Before: Jan 24 14:44:43 2026 GMT Not After : Jan 31 14:44:43 2026 GMT Subject: CN=6974dadb-0515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8c:fc:bc:7f:eb:9a:b4:c5:f7:23:93:1b:cd: 9a:8e:3c:f2:6f:6c:42:07:bf:95:24:54:43:33:a0: 71:89:76:95:f9:f7:0f:e1:8e:3a:2f:6f:03:e6:34: ad:14:8e:80:19:d0:53:9e:ba:ef:42:a8:cc:ab:80: ec:55:e9:8c:20:8f:b3:23:2c:95:dd:17:a3:f0:66: a8:2f:7a:33:28:a6:a6:ee:d3:78:f1:95:22:2d:56: 0f:41:18:b2:2e:50:d6:42:55:70:65:8b:12:f7:ce: f7:91:f5:ac:64:89:0c:3a:6a:ac:39:9e:5a:b2:fd: fb:ba:75:0d:b3:cd:5e:f8:a6:b1:7d:6d:b8:60:fe: 59:d4:b9:ba:bc:f4:3f:8f:23:11:ec:74:00:31:00: 76:55:e1:c9:55:3f:e6:c3:63:12:89:d5:be:aa:c3: 16:dc:84:b7:6b:89:6b:98:77:90:74:3c:d1:58:3d: a6:06:d7:19:5d:c0:7d:ae:fa:63:bb:78:0a:10:c7: 2f:38:7a:c1:cf:4b:1b:fc:76:5b:f3:20:64:4e:15: 3f:f7:e0:95:c1:88:53:35:ed:c9:a4:7a:a4:03:ac: dd:30:db:06:42:a2:9f:26:5a:42:65:e8:e7:1d:1c: 7e:7a:dd:2b:cd:15:39:37:fd:e7:6a:19:ae:48:93: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A3:45:23:A7:50:A2:F6:AA:4C:D2:52:6F:CA:1A:A6:99:DF:B3:51 X509v3 Authority Key Identifier: keyid:98:6B:0D:53:76:4B:C8:3D:C0:E0:72:EC:AF:36:9C:79:F2:2A:39:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:f9:85:c6:08:fa:dd:f6:ee:b8:a3:4d:6d:45:af:26:51:95: 92:f3:ca:30:84:5d:94:ef:01:5b:13:a3:a3:5f:2a:26:52:40: 67:a9:71:f8:f7:c8:a4:cb:cd:18:fb:3e:29:c9:e7:5e:6a:7e: 90:98:98:11:e8:c0:88:a1:33:e0:2a:5e:5f:fc:22:ea:c6:5a: b4:ce:61:82:f6:51:3b:2e:5b:67:59:18:cc:77:e9:0d:ef:03: 9c:ef:84:41:16:20:47:60:3f:c7:71:fe:2d:de:6e:84:51:64: 6b:8e:6e:e6:7a:46:21:07:51:28:ce:8a:fb:7d:5d:db:e8:29: 5e:c2:58:f2:ee:14:3e:b1:48:f9:02:de:88:c0:d2:17:9f:74: 41:f0:b9:1b:5f:6f:31:8a:e5:9a:24:f2:ee:9d:b0:f3:1d:bb: b1:5c:bd:2f:96:89:91:1f:5d:5d:c3:5b:18:7c:6e:94:6d:c5: 5b:5c:12:77:58:08:ca:d9:62:46:d7:42:a9:08:02:97:90:93: 87:72:4b:7b:1b:fb:b5:10:92:e3:ce:43:3c:69:75:4a:25:d5: 62:0e:a8:0f:ff:99:b8:7a:fe:32:c1:0e:f4:1b:9e:ab:ac:f7: ab:0f:f1:34:a4:77:27:70:f1:86:5d:4e:d9:9f:fe:4e:c5:9c: 3d:5d:25:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3OTkxMTAvBgNVBAUTKDk4NkIwRDUzNzY0QkM4M0RDMEUwNzJFQ0FGMzY5Qzc5 RjIyQTM5RDcwHhcNMjYwMTI0MTQ0NDQzWhcNMjYwMTMxMTQ0NDQzWjAYMRYwFAYD VQQDDA02OTc0ZGFkYi0wNTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4z8vH/rmrTF9yOTG82ajjzyb2xCB7+VJFRDM6BxiXaV+fcP4Y46L28D5jSt FI6AGdBTnrrvQqjMq4DsVemMII+zIyyV3Rej8GaoL3ozKKam7tN48ZUiLVYPQRiy LlDWQlVwZYsS9873kfWsZIkMOmqsOZ5asv37unUNs81e+KaxfW24YP5Z1Lm6vPQ/ jyMR7HQAMQB2VeHJVT/mw2MSidW+qsMW3IS3a4lrmHeQdDzRWD2mBtcZXcB9rvpj u3gKEMcvOHrBz0sb/HZb8yBkThU/9+CVwYhTNe3JpHqkA6zdMNsGQqKfJlpCZejn HRx+et0rzRU5N/3nahmuSJPIYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSjRSOn UKL2qkzSUm/KGqaZ37NRMB8GA1UdIwQYMBaAFJhrDVN2S8g9wOBy7K82nHnyKjnX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xM0NBODJGQTQz RkIxMUVCOUY3M0Q2M0NDNEY5QUUwMi9tR3NOVTNaTHlEM0E0SExzcnphY2VmSXFP ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21Hc05VM1pMeUQzQTRITHNyemFjZWZJcU9kYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc5OS8xM0NBODJGQTQzRkIxMUVCOUY3M0Q2M0NDNEY5QUUwMi9tR3NOVTNaTHlE M0E0SExzcnphY2VmSXFPZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4+YXGCPrd9u64o01tRa8mUZWS88owhF2U7wFbE6OjXyomUkBnqXH4 98iky80Y+z4pyedean6QmJgR6MCIoTPgKl5f/CLqxlq0zmGC9lE7LltnWRjMd+kN 7wOc74RBFiBHYD/Hcf4t3m6EUWRrjm7mekYhB1Eozor7fV3b6Clewljy7hQ+sUj5 At6IwNIXn3RB8LkbX28xiuWaJPLunbDzHbuxXL0vlomRH11dw1sYfG6UbcVbXBJ3 WAjK2WJG10KpCAKXkJOHckt7G/u1EJLjzkM8aXVKJdViDqgP/5m4ev4ywQ70G56r rPerD/E0pHcncPGGXU7Zn/5OxZw9XSXc -----END CERTIFICATE-----Generated at Sun Jan 25 11:52:30 2026 by rpki-client