This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft File: RGicZx-u8ZZ896mxozaNi5FLe6c.mft (raw, json) Hash identifier: 7RGdnzQcZ51cxCG4Pinvecquk50N1tk9SzMYOgswseI= Subject key identifier: B4:F6:6C:C2:A7:F1:3B:67:FE:F4:DD:46:D3:21:95:ED:91:04:37:85 Authority key identifier: 44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 Certificate issuer: /CN=A91EBA46/serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft Manifest number: E2 Signing time: Sun 25 Jan 2026 04:41:46 +0000 Manifest this update: Sun 25 Jan 2026 04:41:46 +0000 Manifest next update: Sun 01 Feb 2026 04:41:46 +0000 Files and hashes: 1: RGicZx-u8ZZ896mxozaNi5FLe6c.crl (hash: g3Y/SjPbKnTe13p6aPIF0YEgaBhJVSxTkgVye2ToXC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Validity Not Before: Jan 25 04:41:46 2026 GMT Not After : Feb 1 04:41:46 2026 GMT Subject: CN=69759f0a-5348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a4:62:f0:06:f0:fd:80:d8:a3:76:9b:78:88: 06:89:c9:78:4f:8b:09:d0:12:98:cd:39:f9:dc:25: c9:c6:3e:71:08:99:4d:31:11:12:d8:b4:73:9b:c8: b8:2b:d9:fa:90:89:7e:c9:3d:01:48:c5:0d:42:d7: 52:30:81:66:37:00:f9:0c:54:3c:0a:08:d6:82:f5: bd:ab:61:8e:20:b8:fb:f3:ea:bd:c7:04:60:19:c7: e9:df:8a:af:6e:a3:90:60:aa:56:f0:0c:b5:3b:44: 04:ec:51:8b:20:11:5a:93:00:e0:2e:cd:ef:90:81: e4:d2:cd:2b:1a:7a:f4:d7:af:56:33:14:4b:1c:83: 00:52:6e:2a:e9:cb:73:fc:61:f0:46:de:80:79:af: 09:37:c0:cd:a3:28:36:f5:69:87:6e:b7:b5:11:60: 87:94:10:b9:99:01:f0:6b:c5:9a:cf:41:41:7b:f4: 92:23:bf:0c:9c:d0:07:2c:4f:d2:cd:0f:e2:c9:48: b0:77:fd:91:b4:ef:fe:5e:91:47:66:c5:b2:cb:d2: 5c:23:2f:59:44:36:a3:a9:db:7d:17:07:e1:6d:8d: 93:b2:f8:cd:86:17:31:b1:07:04:36:8a:d5:98:9d: d8:fb:ab:e8:ad:05:dd:2b:93:06:8a:3c:93:8a:0b: 5d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F6:6C:C2:A7:F1:3B:67:FE:F4:DD:46:D3:21:95:ED:91:04:37:85 X509v3 Authority Key Identifier: keyid:44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:d2:b0:ed:8b:b7:21:e9:6d:a5:e8:ea:4a:18:79:f5:eb:82: e7:cb:12:40:7d:64:96:38:f6:ef:8d:fe:ae:b1:76:c2:c0:84: 15:57:b4:48:d7:a7:7c:3a:7a:5e:39:68:b0:e2:da:d0:8f:4e: 56:7b:ff:8e:f2:75:ba:af:6f:7a:3a:cd:9e:95:6f:5d:b3:8c: 4f:de:4c:6c:31:ed:77:9c:a5:24:59:d6:bd:0d:e2:4b:07:7e: 6b:77:61:b8:26:d2:1a:9a:fb:2e:6a:7a:5e:cd:43:2d:da:31: a6:ee:a7:5c:f3:40:c0:c4:7a:01:a2:66:cd:4c:23:4e:0b:da: ba:54:1a:19:1b:f6:44:9a:b6:eb:3f:97:b4:c0:69:b7:7a:14: 1d:4b:da:f2:16:38:df:33:4a:a0:64:9a:6d:1a:af:23:e4:fd: d3:77:f1:0f:ba:64:d4:27:94:b8:a8:17:e1:f2:95:30:2d:f3: ad:c9:93:68:88:46:39:39:3e:13:cf:62:38:40:5c:62:0e:ab: 48:fd:ec:cb:41:f9:14:b3:85:2a:05:96:ec:6c:08:bc:04:07: d1:fb:e6:a1:57:ca:1a:db:f8:8d:80:28:70:75:08:31:ee:9c: 87:3d:a8:f6:ef:9c:dd:40:e1:38:95:bc:37:f3:14:68:13:63: 97:af:d5:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBNDYxMTAvBgNVBAUTKDQ0Njg5QzY3MUZBRUYxOTY3Q0Y3QTlCMUEzMzY4RDhC OTE0QjdCQTcwHhcNMjYwMTI1MDQ0MTQ2WhcNMjYwMjAxMDQ0MTQ2WjAYMRYwFAYD VQQDDA02OTc1OWYwYS01MzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6Ri8Abw/YDYo3abeIgGicl4T4sJ0BKYzTn53CXJxj5xCJlNMRES2LRzm8i4 K9n6kIl+yT0BSMUNQtdSMIFmNwD5DFQ8CgjWgvW9q2GOILj78+q9xwRgGcfp34qv bqOQYKpW8Ay1O0QE7FGLIBFakwDgLs3vkIHk0s0rGnr0169WMxRLHIMAUm4q6ctz /GHwRt6Aea8JN8DNoyg29WmHbre1EWCHlBC5mQHwa8Waz0FBe/SSI78MnNAHLE/S zQ/iyUiwd/2RtO/+XpFHZsWyy9JcIy9ZRDajqdt9FwfhbY2TsvjNhhcxsQcENorV mJ3Y+6vorQXdK5MGijyTigtdwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLT2bMKn 8Ttn/vTdRtMhle2RBDeFMB8GA1UdIwQYMBaAFERonGcfrvGWfPepsaM2jYuRS3un MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni8wN0FFN0E5NjlD RjYxMUVGOEE2Qzg1ODFDNEY5QUUwMi9SR2ljWngtdThaWjg5Nm14b3phTmk1Rkxl NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JHaWNaeC11OFpaODk2bXhvemFOaTVGTGU2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE0Ni8wN0FFN0E5NjlDRjYxMUVGOEE2Qzg1ODFDNEY5QUUwMi9SR2ljWngtdTha Wjg5Nm14b3phTmk1RkxlNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR0rDti7ch6W2l6OpKGHn164LnyxJAfWSWOPbvjf6usXbCwIQVV7RI 16d8OnpeOWiw4trQj05We/+O8nW6r296Os2elW9ds4xP3kxsMe13nKUkWda9DeJL B35rd2G4JtIamvsuanpezUMt2jGm7qdc80DAxHoBombNTCNOC9q6VBoZG/ZEmrbr P5e0wGm3ehQdS9ryFjjfM0qgZJptGq8j5P3Td/EPumTUJ5S4qBfh8pUwLfOtyZNo iEY5OT4Tz2I4QFxiDqtI/ezLQfkUs4UqBZbsbAi8BAfR++ahV8oa2/iNgChwdQgx 7pyHPaj275zdQOE4lbw38xRoE2OXr9Wn -----END CERTIFICATE-----Generated at Sun Jan 25 09:44:40 2026 by rpki-client