This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft File: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft (raw, json) Hash identifier: 4kYTSFyqpMZDtHiuWdUFzGEZ9nfhD84XITqxX+RImVc= Subject key identifier: CF:87:92:AB:83:B9:D6:F0:04:E9:56:FA:66:58:0F:51:53:AF:59:8C Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 Certificate issuer: /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft Manifest number: 012A Signing time: Sun 11 Jan 2026 03:52:02 +0000 Manifest this update: Sun 11 Jan 2026 03:52:02 +0000 Manifest next update: Sun 18 Jan 2026 03:52:02 +0000 Files and hashes: 1: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl (hash: bzkuOb4XZsi6ScYNQgstVZ4nRSFFkGpWgTIsYHfz0Do=) 2: CFD2FAA62A2811EF8313971CC4F9AE02.roa (hash: MJ7KYjeSeSeZOF9abPnnkspDrozm4Sn7jcyJdMYBE6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 03:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91196F9, serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Validity Not Before: Jan 11 03:52:02 2026 GMT Not After : Jan 18 03:52:02 2026 GMT Subject: CN=69631e62-e320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3b:0f:49:ea:ad:5c:04:a0:a6:1e:c4:a2:94: 01:31:68:8e:dd:1a:ef:bf:b8:57:11:61:cd:f2:51: 8a:3c:76:0f:a8:c9:7c:66:1c:94:3b:a1:52:96:19: 97:66:06:0b:48:79:fe:cd:ad:e5:d7:aa:f2:99:1f: 95:d6:94:72:1f:5e:58:15:9c:a0:0e:b2:16:dd:a2: 31:c8:9a:48:62:92:6a:1c:34:19:a6:98:bf:a4:50: 5a:46:e2:48:87:68:b5:0c:f9:a9:28:dc:57:ee:bb: 5b:50:6c:b9:66:15:03:0b:bf:41:da:ad:85:a5:df: 4d:d9:ba:d9:f0:6e:f0:30:f5:d3:4c:a0:9d:6a:cb: 85:1d:e7:9d:3d:f8:c2:b7:94:5b:d3:71:47:8b:d3: c1:19:d6:d4:bc:91:3f:43:7c:c0:3c:e9:84:4b:92: 99:eb:72:4a:ff:62:67:94:f3:5f:80:b1:86:be:93: ee:0e:a9:a4:30:98:bd:6d:1b:3e:5b:9c:18:00:5a: b3:3b:aa:98:f5:4e:23:c3:56:c3:18:55:c8:39:7f: 5c:12:84:d0:c3:cf:07:f3:f6:28:03:52:00:7b:8c: fb:5b:3d:23:d3:bd:ee:83:3e:46:7b:84:44:db:da: 53:1e:e1:9b:0f:4d:f8:03:7c:93:b3:fd:d7:c4:63: f5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:87:92:AB:83:B9:D6:F0:04:E9:56:FA:66:58:0F:51:53:AF:59:8C X509v3 Authority Key Identifier: keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4b:ae:57:f2:85:dc:e9:c8:ca:96:54:e0:ec:d2:9a:30:76: e3:e2:69:a2:d6:da:e3:40:78:3b:46:4f:16:c1:68:fc:41:f4: 0f:0a:44:d7:cb:df:73:78:b6:d2:ec:39:b1:3e:c9:7b:a9:eb: f9:a0:b2:78:e8:45:ff:77:6a:27:d3:f3:73:3b:3c:ac:28:26: 0a:10:ee:47:18:ec:be:e4:e4:e8:91:ea:ae:45:9d:df:3b:79: 34:f9:16:1a:75:66:7f:0f:04:b2:2c:b2:97:94:2b:b5:22:28: fb:d2:bc:a3:9c:62:03:9f:9a:f8:fc:89:5c:6d:34:bc:98:07: 89:cf:89:a0:36:0e:3a:7c:ea:5b:72:76:b9:33:71:76:d6:32: 92:48:09:a8:ab:b8:54:8b:db:11:6a:54:5b:cc:c7:bc:87:67: 27:ab:4f:74:10:64:0b:e1:30:c6:46:fb:50:b9:77:cf:7a:63: 1c:03:e1:73:cc:da:7f:c9:77:fa:eb:3f:69:49:7a:38:2c:70: 9a:2c:55:b8:c4:d3:fc:b4:33:ce:62:dc:49:b6:5e:fc:48:67: 7d:7d:c1:8a:e7:bb:71:72:be:f7:17:e7:08:20:b8:52:6e:f3: 70:e3:2a:59:40:0b:da:09:ce:8c:db:37:fe:52:c9:fb:70:8d: f7:fe:d5:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MTk2RjkxMTAvBgNVBAUTKDgyNzM1QjNGOUM5RUE5NzVENEUwMkE5NEUyQTEwODFC QTRBOEFCMjQwHhcNMjYwMTExMDM1MjAyWhcNMjYwMTE4MDM1MjAyWjAYMRYwFAYD VQQDDA02OTYzMWU2Mi1lMzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8DsPSeqtXASgph7EopQBMWiO3Rrvv7hXEWHN8lGKPHYPqMl8ZhyUO6FSlhmX ZgYLSHn+za3l16rymR+V1pRyH15YFZygDrIW3aIxyJpIYpJqHDQZppi/pFBaRuJI h2i1DPmpKNxX7rtbUGy5ZhUDC79B2q2Fpd9N2brZ8G7wMPXTTKCdasuFHeedPfjC t5Rb03FHi9PBGdbUvJE/Q3zAPOmES5KZ63JK/2JnlPNfgLGGvpPuDqmkMJi9bRs+ W5wYAFqzO6qY9U4jw1bDGFXIOX9cEoTQw88H8/YoA1IAe4z7Wz0j073ugz5Ge4RE 29pTHuGbD034A3yTs/3XxGP1ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+HkquD udbwBOlW+mZYD1FTr1mMMB8GA1UdIwQYMBaAFIJzWz+cnql11OAqlOKhCBukqKsk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTZGOS9GOTQ5NDAwODJB MUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFYWFU0Q3FVNHFFSUc2U29x eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duTmJQNXllcVhYVTRDcVU0cUVJRzZTb3F5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTZGOS9GOTQ5NDAwODJBMUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFY WFU0Q3FVNHFFSUc2U29xeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsS65X8oXc6cjKllTg7NKaMHbj4mmi1trjQHg7Rk8WwWj8QfQPCkTX y99zeLbS7DmxPsl7qev5oLJ46EX/d2on0/NzOzysKCYKEO5HGOy+5OTokequRZ3f O3k0+RYadWZ/DwSyLLKXlCu1Iij70ryjnGIDn5r4/IlcbTS8mAeJz4mgNg46fOpb cna5M3F21jKSSAmoq7hUi9sRalRbzMe8h2cnq090EGQL4TDGRvtQuXfPemMcA+Fz zNp/yXf66z9pSXo4LHCaLFW4xNP8tDPOYtxJtl78SGd9fcGK57txcr73F+cIILhS bvNw4ypZQAvaCc6M2zf+Usn7cI33/tWN -----END CERTIFICATE-----Generated at Mon Jan 12 03:15:52 2026 by rpki-client