This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft File: G4nCebixZmmNK-SGc-zMKwgTPjk.mft (raw, json) Hash identifier: iFfZymQGn2MWNTydSNC3SBKowTOgC8bzsMeLMd+NlBI= Subject key identifier: D1:4C:22:ED:59:0C:8F:D1:0E:B2:64:9B:A4:45:54:1F:A3:8C:BE:4F Authority key identifier: 1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39 Certificate issuer: /CN=A91FCEB1/serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39 Certificate serial: 077E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft Manifest number: 2884 Signing time: Sat 24 Jan 2026 15:46:02 +0000 Manifest this update: Sat 24 Jan 2026 15:46:02 +0000 Manifest next update: Sat 31 Jan 2026 15:46:02 +0000 Files and hashes: 1: G4nCebixZmmNK-SGc-zMKwgTPjk.crl (hash: 5C5HcFBczuWYWjSD+8TwWDs1wL4AeB0NGWQlmxRycWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1918 (0x77e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39 Validity Not Before: Jan 24 15:46:02 2026 GMT Not After : Jan 31 15:46:02 2026 GMT Subject: CN=6974e93a-3cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:32:58:73:1a:ca:79:f4:62:2b:1e:c5:05:5a: 35:46:f6:97:cd:79:a0:6c:bb:9c:c7:d5:1f:2e:60: 2c:6e:d7:46:e1:16:0d:2e:12:2a:93:b3:44:5f:86: c4:f0:7c:91:c5:95:bd:7e:76:48:e1:56:57:b1:3b: 5b:0a:9f:4d:e6:1a:29:2e:11:2c:ae:6c:0a:8c:5f: bd:46:13:94:b7:bf:6e:58:66:93:c8:6e:3e:7c:9d: f7:8b:8a:fe:02:fa:ad:21:a4:c7:b0:09:5a:00:b2: f4:a3:84:8c:4b:02:ae:5e:82:76:65:14:3b:f2:83: 32:ef:e8:0a:99:59:26:d2:e9:a8:df:74:c5:d6:7d: 79:f6:da:be:17:c5:d6:40:79:7d:f8:53:9d:39:7f: 9d:6c:41:13:82:8d:22:e4:30:26:18:6e:53:1b:f3: b9:a7:b3:20:79:2c:b8:57:01:3c:4a:a5:3d:98:e5: ca:ac:d6:1f:59:e5:50:bc:4e:0c:64:a2:a8:20:18: fb:15:96:0a:b9:00:1b:df:15:1d:4a:86:ab:56:9e: 48:03:20:e4:17:e0:24:8a:78:59:56:3c:91:e0:21: 87:62:9e:bd:fa:6d:02:05:81:af:bb:aa:71:7d:26: 5b:0c:9a:86:84:fb:b9:19:a0:0b:b9:6b:84:1d:2a: c5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4C:22:ED:59:0C:8F:D1:0E:B2:64:9B:A4:45:54:1F:A3:8C:BE:4F X509v3 Authority Key Identifier: keyid:1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:cc:a9:43:53:69:2a:10:c2:c7:50:cc:b3:a8:c0:f6:79:6d: e8:4d:e0:7c:b1:d5:3a:f9:6d:d3:60:52:fc:ba:4e:61:90:2a: 44:f6:40:7b:66:93:d2:1c:cc:10:9a:da:59:ff:5d:5f:3c:56: 4b:a9:5a:6e:4f:fa:1d:8e:06:1b:f9:67:06:3b:f9:07:b2:8c: 62:0e:3d:f4:0c:f9:f9:ac:b8:15:51:cd:7f:c0:f8:a2:dd:fa: d7:34:17:83:b3:2b:94:0a:06:7d:d1:27:69:7d:66:09:5d:56: d6:1b:00:94:49:9f:58:84:38:79:ad:22:3c:f4:40:92:f0:e0: 3b:a0:16:2e:2e:48:8a:e1:d0:0b:7d:85:db:b1:bc:ae:f6:7a: 86:6c:8f:52:6e:39:a5:99:42:66:c9:7b:24:f8:d7:44:2a:d9: 03:df:3b:af:dc:b2:11:df:a4:0a:56:a8:b8:8d:48:94:0d:28: 7f:3e:41:7b:d3:2d:84:1b:b3:74:02:dd:b1:38:d0:01:22:c6: f7:81:b9:2a:f2:8a:97:0f:b6:d9:43:e7:7b:27:01:63:85:54: 30:0f:d7:33:12:d7:08:24:d6:c4:7c:39:49:7d:eb:61:b0:5b: 09:bf:8c:d7:ec:67:3a:1e:d0:71:10:62:a5:44:72:d3:c4:29: 80:73:d1:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDFCODlDMjc5QjhCMTY2Njk4RDJCRTQ4NjczRUNDQzJC MDgxMzNFMzkwHhcNMjYwMTI0MTU0NjAyWhcNMjYwMTMxMTU0NjAyWjAYMRYwFAYD VQQDDA02OTc0ZTkzYS0zY2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jJYcxrKefRiKx7FBVo1RvaXzXmgbLucx9UfLmAsbtdG4RYNLhIqk7NEX4bE 8HyRxZW9fnZI4VZXsTtbCp9N5hopLhEsrmwKjF+9RhOUt79uWGaTyG4+fJ33i4r+ AvqtIaTHsAlaALL0o4SMSwKuXoJ2ZRQ78oMy7+gKmVkm0umo33TF1n159tq+F8XW QHl9+FOdOX+dbEETgo0i5DAmGG5TG/O5p7MgeSy4VwE8SqU9mOXKrNYfWeVQvE4M ZKKoIBj7FZYKuQAb3xUdSoarVp5IAyDkF+AkinhZVjyR4CGHYp69+m0CBYGvu6px fSZbDJqGhPu5GaALuWuEHSrFZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFMIu1Z DI/RDrJkm6RFVB+jjL5PMB8GA1UdIwQYMBaAFBuJwnm4sWZpjSvkhnPszCsIEz45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFptbU5LLVNHYy16TUt3Z1RQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0bkNlYml4Wm1tTkstU0djLXpNS3dnVFBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFpt bU5LLVNHYy16TUt3Z1RQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnzKlDU2kqEMLHUMyzqMD2eW3oTeB8sdU6+W3TYFL8uk5hkCpE9kB7 ZpPSHMwQmtpZ/11fPFZLqVpuT/odjgYb+WcGO/kHsoxiDj30DPn5rLgVUc1/wPii 3frXNBeDsyuUCgZ90SdpfWYJXVbWGwCUSZ9YhDh5rSI89ECS8OA7oBYuLkiK4dAL fYXbsbyu9nqGbI9SbjmlmUJmyXsk+NdEKtkD3zuv3LIR36QKVqi4jUiUDSh/PkF7 0y2EG7N0At2xONABIsb3gbkq8oqXD7bZQ+d7JwFjhVQwD9czEtcIJNbEfDlJfeth sFsJv4zX7Gc6HtBxEGKlRHLTxCmAc9ET -----END CERTIFICATE-----Generated at Sun Jan 25 19:03:15 2026 by rpki-client