This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft File: _GUnKrz-olrSH5XhQm4gZ5zfyG4.mft (raw, json) Hash identifier: Wx0Y5fBhamWwvabhHJE/SrZtQ8iHdHjhhY1YxM9Hec8= Subject key identifier: 9B:46:02:C7:12:23:EB:FF:12:45:B7:F9:3A:60:0F:1C:A7:3B:F6:52 Authority key identifier: FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E Certificate issuer: /CN=A91E5FCD/serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E Certificate serial: 19C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft Manifest number: 1FC2 Signing time: Sat 24 Jan 2026 16:09:30 +0000 Manifest this update: Sat 24 Jan 2026 16:09:29 +0000 Manifest next update: Sat 31 Jan 2026 16:09:29 +0000 Files and hashes: 1: _GUnKrz-olrSH5XhQm4gZ5zfyG4.crl (hash: 3qIWUlHUJtLMB3TXESkLrGnR1BqjVbZISv+1RUkC2HQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6592 (0x19c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5FCD, serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E Validity Not Before: Jan 24 16:09:29 2026 GMT Not After : Jan 31 16:09:29 2026 GMT Subject: CN=6974eeba-d4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7d:50:67:1e:0d:1b:e3:2e:04:e4:1c:ee:c7: 70:3f:b1:03:62:cc:45:f7:d4:69:c4:8b:f4:4b:a7: dd:c5:02:9a:e4:c9:05:d1:e4:3a:76:32:75:7f:66: 73:a1:28:5e:a4:23:f8:6b:02:ce:41:ba:33:84:4e: 3f:aa:e1:88:8b:9c:b3:7b:00:24:fe:a4:2e:28:a9: f5:11:ed:06:2c:a2:1c:5a:5f:db:30:0c:f3:fb:51: 2b:35:b3:79:82:31:52:6a:9c:26:1c:9f:c1:f7:8f: 5b:4f:fd:83:10:ee:d1:33:9b:87:03:99:14:d6:e0: 71:8d:73:a2:fc:de:7e:f7:c7:0c:53:15:85:16:1f: 75:ea:fc:39:b1:7c:9b:b1:fd:96:bf:72:da:99:e4: 53:94:64:54:13:2b:1b:85:f9:5c:61:f3:58:b2:57: 8e:b6:38:bc:70:d8:e0:28:08:21:9d:03:74:d7:1d: cf:d1:1c:7f:60:12:f2:a1:d8:47:30:41:34:37:07: 17:67:7f:4a:06:6d:86:a0:9a:c1:fc:5a:e4:c3:3e: 44:b0:cc:01:a9:18:5e:33:0c:99:e7:18:37:93:56: e7:30:ad:c5:4c:b2:d0:a1:a8:47:c7:3c:31:bd:f9: a8:75:c2:ca:ef:c8:b9:10:a3:b9:ed:1d:b0:24:b4: ef:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:46:02:C7:12:23:EB:FF:12:45:B7:F9:3A:60:0F:1C:A7:3B:F6:52 X509v3 Authority Key Identifier: keyid:FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:89:2a:6e:e6:94:19:a6:5e:df:90:c9:33:f0:5b:fd:28:05: 83:92:54:70:54:9e:c6:1b:40:56:ac:ad:aa:dd:52:db:3f:93: 2a:c0:c1:9d:2c:83:1c:2b:fd:cd:80:ac:20:37:f5:d0:fb:46: 3c:bb:2b:51:89:17:55:1c:94:10:d5:97:d7:98:55:7d:54:37: 64:8b:f8:db:16:da:b0:f4:0f:6b:f2:20:45:ef:49:eb:25:fa: e4:f8:c8:9c:da:ed:e4:70:7c:17:37:7a:f4:23:48:bd:2b:76: 1b:7b:a9:b5:0a:89:0f:db:90:e8:ab:59:06:71:21:ef:02:50: 1a:36:60:3c:36:d0:30:d2:47:16:f7:5e:e1:77:83:30:97:f3: 3b:62:4a:65:4d:c4:b8:f7:b8:49:72:97:b8:b4:6f:69:8d:7c: 49:1c:30:ee:61:50:0e:99:ec:14:13:d1:96:47:c5:51:87:5a: f3:b9:d0:fd:32:1f:09:12:b0:de:ec:32:80:83:cb:e3:c3:8e: 8c:90:bb:d6:04:e7:79:54:4e:02:60:50:79:e4:41:f4:92:f1: 77:cf:76:6c:61:1d:a9:b9:50:2c:b9:68:37:a8:c5:dc:5b:b3: f5:f5:2a:3f:f9:ef:8e:a4:7f:14:00:d2:b9:ed:70:37:75:e7: fb:23:2c:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RTVGQ0QxMTAvBgNVBAUTKEZDNjUyNzJBQkNGRUEyNUFEMjFGOTVFMTQyNkUyMDY3 OUNERkM4NkUwHhcNMjYwMTI0MTYwOTI5WhcNMjYwMTMxMTYwOTI5WjAYMRYwFAYD VQQDDA02OTc0ZWViYS1kNGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr31QZx4NG+MuBOQc7sdwP7EDYsxF99RpxIv0S6fdxQKa5MkF0eQ6djJ1f2Zz oShepCP4awLOQbozhE4/quGIi5yzewAk/qQuKKn1Ee0GLKIcWl/bMAzz+1ErNbN5 gjFSapwmHJ/B949bT/2DEO7RM5uHA5kU1uBxjXOi/N5+98cMUxWFFh916vw5sXyb sf2Wv3LameRTlGRUEysbhflcYfNYsleOtji8cNjgKAghnQN01x3P0Rx/YBLyodhH MEE0NwcXZ39KBm2GoJrB/Frkwz5EsMwBqRheMwyZ5xg3k1bnMK3FTLLQoahHxzwx vfmodcLK78i5EKO57R2wJLTvxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtGAscS I+v/EkW3+TpgDxynO/ZSMB8GA1UdIwQYMBaAFPxlJyq8/qJa0h+V4UJuIGec38hu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUZDRC8wQkUwRkZFMDc4 MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9fR1VuS3J6LW9sclNINVhoUW00Z1o1emZ5 RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HVW5Lcnotb2xyU0g1WGhRbTRnWjV6ZnlHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUZDRC8wQkUwRkZFMDc4MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9fR1VuS3J6LW9s clNINVhoUW00Z1o1emZ5RzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBniSpu5pQZpl7fkMkz8Fv9KAWDklRwVJ7GG0BWrK2q3VLbP5MqwMGd LIMcK/3NgKwgN/XQ+0Y8uytRiRdVHJQQ1ZfXmFV9VDdki/jbFtqw9A9r8iBF70nr Jfrk+Mic2u3kcHwXN3r0I0i9K3Ybe6m1CokP25Doq1kGcSHvAlAaNmA8NtAw0kcW 917hd4Mwl/M7YkplTcS497hJcpe4tG9pjXxJHDDuYVAOmewUE9GWR8VRh1rzudD9 Mh8JErDe7DKAg8vjw46MkLvWBOd5VE4CYFB55EH0kvF3z3ZsYR2puVAsuWg3qMXc W7P19So/+e+OpH8UANK57XA3def7IyyB -----END CERTIFICATE-----Generated at Sun Jan 25 02:57:13 2026 by rpki-client