This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft File: g1sFZ9k-rArjJOofFrPDnLGzOI4.mft (raw, json) Hash identifier: 6c5l5FzGY3HwgG/ZubROe2lPqO22+PQFJKy2krbjNtc= Subject key identifier: 69:60:6E:F6:97:99:43:A2:D5:34:18:8F:B6:2C:76:9A:CC:D7:7E:5E Authority key identifier: 83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E Certificate issuer: /CN=A911F5B7/serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Certificate serial: 0B3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft Manifest number: 0D28 Signing time: Sat 10 Jan 2026 18:46:39 +0000 Manifest this update: Sat 10 Jan 2026 18:46:39 +0000 Manifest next update: Sat 17 Jan 2026 18:46:39 +0000 Files and hashes: 1: g1sFZ9k-rArjJOofFrPDnLGzOI4.crl (hash: gc+vVWhb08/ElngmC1tX2DlQRhQW+DhgEZeq5TfKg2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 18:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2875 (0xb3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Validity Not Before: Jan 10 18:46:39 2026 GMT Not After : Jan 17 18:46:39 2026 GMT Subject: CN=69629e8f-12a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:be:c3:91:01:51:40:85:83:e7:8d:cf:a4:e2: bd:1d:ef:76:d6:06:bb:ab:9b:12:91:d1:70:29:19: 0a:0d:9c:40:11:58:8f:92:49:e2:ff:8c:9c:a7:53: 85:9b:6d:f9:fa:fa:00:2b:65:b7:39:9c:f7:68:b4: f4:df:6c:79:1b:be:9c:47:79:e2:ca:09:36:f5:59: 2e:aa:21:0e:a5:2a:6f:cf:d0:9b:a3:09:3b:1b:ab: 96:43:69:e9:22:dd:0a:f0:3e:ea:71:57:8e:cd:82: ee:98:35:6e:f2:97:56:c3:36:e7:2e:73:4b:e0:c1: 62:5d:56:d3:8e:0e:8d:19:67:0b:3e:3e:5d:58:d2: 4a:b4:74:bd:ca:cb:b2:91:9b:38:a7:61:7a:3d:6b: 52:b5:d4:53:8f:36:2e:c8:51:d5:48:3c:b5:3e:54: 27:25:1e:55:66:28:60:dc:bd:96:6a:c1:ca:17:6a: 0a:7d:54:52:e9:b4:6f:e2:d6:39:b4:b8:79:e4:85: 28:d2:57:26:1b:63:1a:2c:1f:9f:6a:49:14:b8:8d: e2:ae:fa:66:de:95:2f:48:8e:a9:fe:25:e5:f9:87: 28:db:bf:93:dd:5e:ea:6f:d0:bc:a9:10:2d:ab:fb: 1d:16:10:81:cd:a3:84:e6:3c:95:4a:a2:74:9f:c0: 8f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:60:6E:F6:97:99:43:A2:D5:34:18:8F:B6:2C:76:9A:CC:D7:7E:5E X509v3 Authority Key Identifier: keyid:83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d5:2c:54:02:27:11:fd:c9:cb:c4:24:e8:fc:7b:54:eb:63: c3:72:c3:0b:a5:8f:76:f8:fb:29:7d:ed:7b:a5:61:93:4b:66: b0:9d:39:fa:5a:e1:63:10:90:93:34:92:02:ec:ee:3e:24:c8: a6:9a:ef:df:e8:c2:1d:73:ce:8d:1f:30:1f:97:cf:4c:18:00: e3:1e:9e:dd:f5:0a:38:bf:22:a0:bd:44:3d:0f:ae:72:b6:5d: 50:e4:01:78:44:f9:fc:7c:4e:51:1a:62:5a:6d:94:63:3a:c0: b4:44:ee:c2:a6:41:0b:c7:6c:6d:a8:ac:84:a1:2c:0b:6e:77: b8:61:91:d9:6f:6b:2c:e6:b1:f7:66:90:46:b0:c8:8c:4b:cc: d3:c1:35:ad:22:f8:6d:a9:67:d1:9b:b7:0b:64:66:b5:ea:ca: b1:55:e9:30:50:c3:d3:ea:de:3e:b0:66:fe:a2:a8:f9:58:5a: 18:38:33:0e:5b:64:5c:79:46:ab:3b:34:e0:d8:b4:98:71:a4: 99:41:d5:1e:42:01:b1:66:c2:91:58:19:dc:3f:ed:d4:2a:6b: ec:26:37:57:f4:f6:d3:89:d1:4f:13:89:00:f8:ab:e5:26:69: 1e:f7:60:05:48:03:60:6f:f2:8a:6b:9e:d3:ef:98:50:36:63: 66:73:fc:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKDgzNUIwNTY3RDkzRUFDMEFFMzI0RUExRjE2QjNDMzlD QjFCMzM4OEUwHhcNMjYwMTEwMTg0NjM5WhcNMjYwMTE3MTg0NjM5WjAYMRYwFAYD VQQDDA02OTYyOWU4Zi0xMmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+L7DkQFRQIWD543PpOK9He921ga7q5sSkdFwKRkKDZxAEViPkkni/4ycp1OF m235+voAK2W3OZz3aLT032x5G76cR3niygk29VkuqiEOpSpvz9Cbowk7G6uWQ2np It0K8D7qcVeOzYLumDVu8pdWwzbnLnNL4MFiXVbTjg6NGWcLPj5dWNJKtHS9ysuy kZs4p2F6PWtStdRTjzYuyFHVSDy1PlQnJR5VZihg3L2WasHKF2oKfVRS6bRv4tY5 tLh55IUo0lcmG2MaLB+fakkUuI3irvpm3pUvSI6p/iXl+Yco27+T3V7qb9C8qRAt q/sdFhCBzaOE5jyVSqJ0n8CPpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlgbvaX mUOi1TQYj7YsdprM135eMB8GA1UdIwQYMBaAFINbBWfZPqwK4yTqHxazw5yxsziO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJBcmpKT29mRnJQRG5MR3pP STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxc0ZaOWstckFyakpPb2ZGclBEbkxHek9JNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJB cmpKT29mRnJQRG5MR3pPSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+1SxUAicR/cnLxCTo/HtU62PDcsMLpY92+Pspfe17pWGTS2awnTn6 WuFjEJCTNJIC7O4+JMimmu/f6MIdc86NHzAfl89MGADjHp7d9Qo4vyKgvUQ9D65y tl1Q5AF4RPn8fE5RGmJabZRjOsC0RO7CpkELx2xtqKyEoSwLbne4YZHZb2ss5rH3 ZpBGsMiMS8zTwTWtIvhtqWfRm7cLZGa16sqxVekwUMPT6t4+sGb+oqj5WFoYODMO W2RceUarOzTg2LSYcaSZQdUeQgGxZsKRWBncP+3UKmvsJjdX9PbTidFPE4kA+Kvl Jmke92AFSANgb/KKa57T75hQNmNmc/xc -----END CERTIFICATE-----Generated at Mon Jan 12 02:37:53 2026 by rpki-client