This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft File: GSl33aoJW0B37g12I4Rj8bb0Cu4.mft (raw, json) Hash identifier: pa7bp6WuuXnfutKTlbszVpUDU0Cr+8jCGMOgrMz42Jo= Subject key identifier: 95:76:A6:15:B3:0B:44:B6:BD:39:9B:B3:39:6E:83:11:02:59:71:12 Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Certificate serial: 043E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft Manifest number: 042F Signing time: Sat 24 Jan 2026 23:31:15 +0000 Manifest this update: Sat 24 Jan 2026 23:31:14 +0000 Manifest next update: Sat 31 Jan 2026 23:31:14 +0000 Files and hashes: 1: GSl33aoJW0B37g12I4Rj8bb0Cu4.crl (hash: SJSqP07SKU3wMumMMdljrspy10pPOshuHvsJXJB7xgA=) 2: AFDE92321F5A11F0BA7E6961C4F9AE02.roa (hash: KgsedG4p1TKagm7CFAiCxXIQwYugyhlaYkwSVR/E4LU=) 3: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (hash: O0CTocw9S+aKMmyVNlp/W2ilJB5h65RMybZN3Xiy9s0=) 4: 2B46EF64951211F0A6C6AF5AC4F9AE02.roa (hash: YC+Xx7KbVUpjJoSdqrDIz5VLsWIkLluqz4lGXQlus1M=) 5: AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa (hash: lCh4qNG4MxGwgSOCokRlEuxslOzYqyQd9BkSkWApWyM=) 6: AEFCCA501F5A11F0BA7E6961C4F9AE02.roa (hash: mIeJgpnrbBqruNdNWn2xOG2sfzzb+tKpriiGmNDG67Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Validity Not Before: Jan 24 23:31:14 2026 GMT Not After : Jan 31 23:31:14 2026 GMT Subject: CN=69755643-f14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:92:54:a5:3e:e3:ec:7e:c1:de:ab:09:e0:c7: fc:a6:e5:9b:10:cc:ef:f3:f7:79:02:27:70:88:15: 44:11:a8:46:b3:1b:5a:a7:61:80:a6:bc:f4:05:33: 60:00:bc:c9:b6:09:18:a7:e1:a3:a3:27:96:64:72: 0c:e0:e5:ef:ee:41:28:4f:47:b1:72:f9:9b:5e:10: c5:be:c2:11:52:5a:ff:cb:1f:a8:47:b8:24:f3:b4: e2:55:4e:a8:48:c1:0f:28:e2:f1:02:f6:81:15:cb: 61:04:ea:94:9d:2b:56:3e:17:5d:b4:23:5d:51:fc: 97:40:8e:91:7f:5e:94:ab:b9:2c:59:44:a2:95:9f: a1:19:70:7c:b6:6e:97:94:9d:dd:f5:74:2e:7d:45: ed:cc:1f:ae:12:1b:fe:b2:66:c7:32:e7:25:f3:b1: 69:22:a9:af:11:3d:5f:84:ea:54:f3:0a:8f:88:50: 28:93:e8:6b:1c:40:19:8c:fa:5d:5a:bc:5b:a3:e8: 05:eb:c8:ee:b8:9a:5e:91:13:50:75:ec:bf:06:b9: 16:c0:f9:dd:c2:4f:96:d8:af:9c:63:c4:1a:bd:8d: 1d:03:10:4b:b1:2d:17:c3:87:81:03:1b:36:ee:50: 10:b4:55:3c:99:96:8d:11:7e:4d:45:48:c2:6a:3b: 05:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:76:A6:15:B3:0B:44:B6:BD:39:9B:B3:39:6E:83:11:02:59:71:12 X509v3 Authority Key Identifier: keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ad:c3:0a:b7:d3:dd:fe:46:3e:a9:0e:d8:e5:7c:f7:10:09: 88:cd:64:a1:5a:6e:39:45:73:e8:fe:6c:e8:21:f7:9d:99:15: ed:5c:33:af:3e:79:af:98:6b:d5:90:7e:ec:96:d6:62:39:c3: e8:b8:92:c9:65:42:df:7d:b4:d9:93:9a:28:d7:3c:84:c8:f9: e1:1e:b7:05:9e:d8:6b:2c:01:1d:d6:44:6a:40:69:f8:b0:e8: 8c:d3:63:e4:ff:75:0b:0e:15:c6:41:ce:28:0e:72:b3:ad:cf: bf:3c:f4:99:ca:7c:f1:0f:23:77:ac:16:94:42:b7:a0:cc:11: d1:6e:25:4f:97:ed:0f:4f:bb:1a:60:bb:bb:ee:35:f7:1a:6a: db:13:18:48:31:df:dc:3a:dd:ba:f3:37:5d:29:ca:36:fe:b5: 27:5f:a2:bb:5e:a6:eb:2c:5c:dd:77:84:3d:25:9f:fb:8d:d7: 92:d0:87:10:0b:54:82:6b:f6:25:63:d6:ed:72:17:2c:84:9b: 54:f0:e8:ba:34:aa:8a:a3:fa:94:1e:7e:9a:fb:7b:6b:59:7b: 4e:93:3e:56:0f:83:ff:f9:11:85:86:ae:1e:e5:af:78:97:d4: 13:e3:02:66:97:08:0d:d3:16:0c:4b:2e:48:52:b1:d8:f1:80: 2f:2a:24:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3NjIzODQ2M0Yx QjZGNDBBRUUwHhcNMjYwMTI0MjMzMTE0WhcNMjYwMTMxMjMzMTE0WjAYMRYwFAYD VQQDDA02OTc1NTY0My1mMTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJJUpT7j7H7B3qsJ4Mf8puWbEMzv8/d5AidwiBVEEahGsxtap2GAprz0BTNg ALzJtgkYp+GjoyeWZHIM4OXv7kEoT0excvmbXhDFvsIRUlr/yx+oR7gk87TiVU6o SMEPKOLxAvaBFcthBOqUnStWPhddtCNdUfyXQI6Rf16Uq7ksWUSilZ+hGXB8tm6X lJ3d9XQufUXtzB+uEhv+smbHMucl87FpIqmvET1fhOpU8wqPiFAok+hrHEAZjPpd Wrxbo+gF68juuJpekRNQdey/BrkWwPndwk+W2K+cY8QavY0dAxBLsS0Xw4eBAxs2 7lAQtFU8mZaNEX5NRUjCajsFuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJV2phWz C0S2vTmbszlugxECWXESMB8GA1UdIwQYMBaAFBkpd92qCVtAd+4NdiOEY/G29Aru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNThDOS80MEUwQzBFRTkz NkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcwQjM3ZzEySTRSajhiYjBD dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dTbDMzYW9KVzBCMzdnMTJJNFJqOGJiMEN1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NThDOS80MEUwQzBFRTkzNkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcw QjM3ZzEySTRSajhiYjBDdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNrcMKt9Pd/kY+qQ7Y5Xz3EAmIzWShWm45RXPo/mzoIfedmRXtXDOv PnmvmGvVkH7sltZiOcPouJLJZULffbTZk5oo1zyEyPnhHrcFnthrLAEd1kRqQGn4 sOiM02Pk/3ULDhXGQc4oDnKzrc+/PPSZynzxDyN3rBaUQregzBHRbiVPl+0PT7sa YLu77jX3GmrbExhIMd/cOt268zddKco2/rUnX6K7XqbrLFzdd4Q9JZ/7jdeS0IcQ C1SCa/YlY9btchcshJtU8Oi6NKqKo/qUHn6a+3trWXtOkz5WD4P/+RGFhq4e5a94 l9QT4wJmlwgN0xYMSy5IUrHY8YAvKiSE -----END CERTIFICATE-----Generated at Sun Jan 25 04:27:07 2026 by rpki-client