This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft File: GfKkbixJA4dTXpRfaxSGcABoV2E.mft (raw, json) Hash identifier: qZipfVSpbRiwHUsiHTQe6y87/jnxeuQlE2SIyYqgJOo= Subject key identifier: 9A:46:E1:19:98:F8:18:A4:B3:66:63:83:9E:DD:FF:1F:90:CD:B4:42 Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 Certificate issuer: /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft Manifest number: 57 Signing time: Sun 25 Jan 2026 06:16:28 +0000 Manifest this update: Sun 25 Jan 2026 06:16:28 +0000 Manifest next update: Sun 01 Feb 2026 06:16:28 +0000 Files and hashes: 1: GfKkbixJA4dTXpRfaxSGcABoV2E.crl (hash: tEJVibuse2p2iIU2AcUI3lfbTKnbRcwsFhC+XZiLS5M=) 2: 7DF6251A74B311F0A365281CC4F9AE02.roa (hash: ni8ytUAWwdbtGIc+iXlEFG+5N/RDCdFk/BOjShyc/2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761 Validity Not Before: Jan 25 06:16:28 2026 GMT Not After : Feb 1 06:16:28 2026 GMT Subject: CN=6975b53c-5544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:54:ef:a2:6c:7c:49:e3:24:a6:d1:75:39: ba:f0:45:93:13:3d:e4:95:88:2c:7a:9a:a9:44:63: 55:f5:68:bb:e4:e8:79:7e:5b:59:6c:46:a9:05:2a: 78:53:fc:97:f1:8e:65:fc:cf:41:b8:5e:22:a9:3b: 06:19:80:86:03:f0:66:42:5e:b0:10:67:8a:a1:dd: 07:cf:5f:20:0b:55:13:0b:e1:c4:7b:81:b8:5b:eb: bf:3d:10:88:1c:89:8f:fe:f4:42:74:4e:c6:51:7f: ba:cb:3a:c5:b5:44:5a:68:07:3f:b1:39:16:bf:79: 8c:e3:85:de:17:33:3b:e5:0c:de:2b:fe:4b:3b:6d: e5:a9:27:df:45:d4:6b:ab:df:87:da:27:39:e6:51: 88:15:5e:7b:95:32:b4:2e:ff:c2:1a:47:25:8f:02: 13:70:4d:cc:17:02:b0:19:4a:f7:d5:e5:9b:c8:1f: 61:77:39:55:68:f6:85:66:ea:93:e9:a8:d9:95:a0: ac:10:e9:32:e5:4b:0f:e3:f9:c8:98:77:16:ea:f1: 90:59:1a:0e:87:89:52:4c:8c:d3:0c:73:aa:7a:17: db:c4:62:8a:34:25:58:71:2b:01:01:cc:5c:ad:17: e1:5f:92:21:52:27:42:a4:15:80:42:58:3e:b1:6f: 4c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:46:E1:19:98:F8:18:A4:B3:66:63:83:9E:DD:FF:1F:90:CD:B4:42 X509v3 Authority Key Identifier: keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:3a:ba:7e:46:9c:2a:2e:c2:10:ab:9b:71:b0:2e:32:67:a2: 54:15:58:db:ba:84:80:19:5b:89:1a:39:e7:0d:12:34:f1:c8: dd:a8:c9:fd:0b:d5:bd:cf:13:02:a5:91:7b:ad:88:f5:75:6e: 02:5b:f3:a3:a9:66:70:f7:15:0f:43:bb:eb:35:ef:b1:1f:c5: e7:40:f1:f0:e2:0f:05:2b:b5:b5:4a:17:4e:96:09:96:e8:bd: c8:4e:cc:80:f5:f7:48:aa:8b:47:5c:76:19:d2:d5:ea:b7:d0: 2f:5e:bc:1a:94:43:09:6d:13:62:62:d9:eb:22:c9:ca:41:4e: fc:fa:fd:7b:49:54:68:1d:39:c7:ec:c5:69:3e:67:67:91:01: 4d:22:8c:0e:26:b6:66:02:9a:91:6a:a9:73:22:be:46:12:c6: 61:fe:98:06:54:a7:39:5a:8d:3c:4a:26:37:26:ce:73:cb:13: 19:db:1a:44:e6:b2:d4:e4:56:e5:e8:ad:63:4c:ac:79:00:17: 09:ba:6c:f7:e6:dc:e4:fb:7b:92:ca:21:aa:ca:f1:b4:5e:71: e7:a7:41:67:c6:0a:45:34:37:a2:dd:7d:66:af:62:2e:86:56: 7b:46:2a:6d:c9:13:35:c8:e6:50:89:bf:bd:70:c9:b5:36:b1: 76:2c:ff:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEJERTExMC8GA1UEBRMoMTlGMkE0NkUyQzQ5MDM4NzUzNUU5NDVGNkIxNDg2NzAw MDY4NTc2MTAeFw0yNjAxMjUwNjE2MjhaFw0yNjAyMDEwNjE2MjhaMBgxFjAUBgNV BAMMDTY5NzViNTNjLTU1NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrmFTvomx8SeMkptF1ObrwRZMTPeSViCx6mqlEY1X1aLvk6Hl+W1lsRqkFKnhT /JfxjmX8z0G4XiKpOwYZgIYD8GZCXrAQZ4qh3QfPXyALVRML4cR7gbhb6789EIgc iY/+9EJ0TsZRf7rLOsW1RFpoBz+xORa/eYzjhd4XMzvlDN4r/ks7beWpJ99F1Gur 34faJznmUYgVXnuVMrQu/8IaRyWPAhNwTcwXArAZSvfV5ZvIH2F3OVVo9oVm6pPp qNmVoKwQ6TLlSw/j+ciYdxbq8ZBZGg6HiVJMjNMMc6p6F9vEYoo0JVhxKwEBzFyt F+FfkiFSJ0KkFYBCWD6xb0xZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmkbhGZj4 GKSzZmODnt3/H5DNtEIwHwYDVR0jBBgwFoAUGfKkbixJA4dTXpRfaxSGcABoV2Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQkRFLzI5RDFFNzZDNzRC MzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRkVFhwUmZheFNHY0FCb1Yy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2ZLa2JpeEpBNGRUWHBSZmF4U0djQUJvVjJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw QkRFLzI5RDFFNzZDNzRCMzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRk VFhwUmZheFNHY0FCb1YyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHQ6un5GnCouwhCrm3GwLjJnolQVWNu6hIAZW4kaOecNEjTxyN2oyf0L 1b3PEwKlkXutiPV1bgJb86OpZnD3FQ9Du+s177EfxedA8fDiDwUrtbVKF06WCZbo vchOzID190iqi0dcdhnS1eq30C9evBqUQwltE2Ji2esiycpBTvz6/XtJVGgdOcfs xWk+Z2eRAU0ijA4mtmYCmpFqqXMivkYSxmH+mAZUpzlajTxKJjcmznPLExnbGkTm stTkVuXorWNMrHkAFwm6bPfm3OT7e5LKIarK8bReceenQWfGCkU0N6LdfWavYi6G VntGKm3JEzXI5lCJv71wybU2sXYs/7o= -----END CERTIFICATE-----Generated at Sun Jan 25 20:54:21 2026 by rpki-client