This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft File: Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json) Hash identifier: qJNppj8uCv6+WzWs6v3Tj9fMfuqAo3Y5ToYWuzqOF/s= Subject key identifier: 7D:4E:BD:84:5F:3B:53:1D:4C:1B:EE:CD:9A:AB:4E:40:54:75:10:A6 Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 Certificate issuer: /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft Manifest number: 0203 Signing time: Sun 11 Jan 2026 01:40:55 +0000 Manifest this update: Sun 11 Jan 2026 01:40:55 +0000 Manifest next update: Sun 18 Jan 2026 01:40:55 +0000 Files and hashes: 1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: sT//NrSb1E+YW+fkPyqJjY0c+iDELKHG/2cKlmHYnLw=) 2: 952F87FAEBDA11F082D0705C6C6F56BC.roa (hash: io0ecjEN2RzxSv5iuJw4fnOPjwrnvut5d2KzE1GcZUc=) 3: 59ADC606EBDA11F0868F86546C6F56BC.roa (hash: ONcczDIIfK3yhm1H64UIKDcxoQLX5CkoZ0+RbpZl65o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 01:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Validity Not Before: Jan 11 01:40:55 2026 GMT Not After : Jan 18 01:40:55 2026 GMT Subject: CN=6962ffa7-5ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b3:06:6f:88:53:7c:b5:71:c7:2e:ff:3b:c9: 07:d0:bb:02:e6:59:e9:f4:32:61:05:8e:25:b1:df: 5a:ad:68:7a:80:c4:60:e5:bf:d6:d0:2e:e2:09:e1: 41:e5:94:02:cf:da:71:66:43:8e:a6:4b:fe:d0:cf: 7f:5f:0b:63:f2:9b:67:e8:58:99:f7:20:91:56:10: bc:c3:0a:40:a1:9b:87:64:fe:55:c3:99:a7:a4:4b: c7:4a:b8:67:1f:28:2f:c3:8b:6e:fa:0e:ad:32:37: be:13:87:1d:95:11:86:d5:b0:02:84:2b:60:dc:9b: 5a:e8:68:df:75:df:6d:92:25:36:1f:ca:02:4f:a3: 97:e3:61:e0:27:e7:22:ef:cb:64:6f:10:80:85:21: 6d:bf:fe:2a:c7:54:16:68:d9:fb:3b:71:71:fb:06: 3e:ff:74:43:18:86:85:38:ed:03:d6:1a:22:af:fc: 76:eb:9d:ce:f4:80:b9:96:fe:41:f8:33:4c:20:50: ff:30:61:41:ce:b6:53:27:61:7a:f6:a8:54:a5:47: e3:6d:11:44:22:37:cd:94:7d:ed:25:a1:fb:f9:f7: 99:12:09:c3:a4:a6:20:58:b2:83:42:7a:5a:63:29: 0e:98:fe:f6:c9:99:e0:e1:4f:4f:1b:0d:f4:43:12: 8f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4E:BD:84:5F:3B:53:1D:4C:1B:EE:CD:9A:AB:4E:40:54:75:10:A6 X509v3 Authority Key Identifier: keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:d4:83:3a:c4:a5:76:14:a4:98:bc:3b:a4:db:a3:76:18:24: f4:ca:2f:f8:65:ff:71:42:b6:ef:19:99:de:9c:e9:d2:f1:12: 94:58:41:79:5c:cf:ff:85:3b:39:1d:81:2a:43:8d:3e:df:5a: 44:ca:1e:f0:18:f7:4d:2f:3f:84:c8:d2:23:12:93:2b:17:21: 89:b5:92:dc:17:6c:9d:9f:df:0a:02:2d:a9:97:7d:4f:45:7c: 18:35:e8:11:f2:aa:ae:29:72:72:0b:0d:60:e8:ae:a0:97:e3: 2d:17:5c:93:57:5c:f0:c0:2c:82:39:a4:d0:64:b1:9c:89:dd: 13:cc:8f:5d:31:fd:c3:87:cc:45:85:f6:05:77:34:ed:00:8a: 10:f9:f3:03:8f:56:59:fa:48:cc:b5:2e:0b:da:73:c8:87:85: 7a:b1:0c:b1:ea:57:c6:f7:22:40:c8:d7:17:38:6c:82:1e:0d: 5b:e8:48:52:82:dd:28:b0:ea:75:3a:b5:57:25:1a:67:f5:22: 34:f3:a2:5f:ac:01:2a:a5:de:59:8c:56:66:21:e8:13:87:2d: d0:58:98:51:9d:fe:06:42:65:2c:f3:a3:c7:6b:32:94:e6:2a: f2:8a:d0:65:e2:e3:6d:8d:2a:5f:09:18:fd:29:61:e4:6d:d0: c0:5a:1a:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NTExMTAvBgNVBAUTKDFBMEY3ODZGMTFCOEUxN0Q0NURFMUVEQ0U2MUUxNjAw REQ0OTMwQTQwHhcNMjYwMTExMDE0MDU1WhcNMjYwMTE4MDE0MDU1WjAYMRYwFAYD VQQDDA02OTYyZmZhNy01ZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrMGb4hTfLVxxy7/O8kH0LsC5lnp9DJhBY4lsd9arWh6gMRg5b/W0C7iCeFB 5ZQCz9pxZkOOpkv+0M9/Xwtj8ptn6FiZ9yCRVhC8wwpAoZuHZP5Vw5mnpEvHSrhn Hygvw4tu+g6tMje+E4cdlRGG1bAChCtg3Jta6Gjfdd9tkiU2H8oCT6OX42HgJ+ci 78tkbxCAhSFtv/4qx1QWaNn7O3Fx+wY+/3RDGIaFOO0D1hoir/x2653O9IC5lv5B +DNMIFD/MGFBzrZTJ2F69qhUpUfjbRFEIjfNlH3tJaH7+feZEgnDpKYgWLKDQnpa YykOmP72yZng4U9PGw30QxKP5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1OvYRf O1MdTBvuzZqrTkBUdRCmMB8GA1UdIwQYMBaAFBoPeG8RuOF9Rd4e3OYeFgDdSTCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk1MS82RjQ5Qjk5MkRC NzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRYMUYzaDdjNWg0V0FOMUpN S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dnOTRieEc0NFgxRjNoN2M1aDRXQU4xSk1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk1MS82RjQ5Qjk5MkRCNzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRY MUYzaDdjNWg0V0FOMUpNS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI1IM6xKV2FKSYvDuk26N2GCT0yi/4Zf9xQrbvGZnenOnS8RKUWEF5 XM//hTs5HYEqQ40+31pEyh7wGPdNLz+EyNIjEpMrFyGJtZLcF2ydn98KAi2pl31P RXwYNegR8qquKXJyCw1g6K6gl+MtF1yTV1zwwCyCOaTQZLGcid0TzI9dMf3Dh8xF hfYFdzTtAIoQ+fMDj1ZZ+kjMtS4L2nPIh4V6sQyx6lfG9yJAyNcXOGyCHg1b6EhS gt0osOp1OrVXJRpn9SI086JfrAEqpd5ZjFZmIegThy3QWJhRnf4GQmUs86PHazKU 5iryitBl4uNtjSpfCRj9KWHkbdDAWhpE -----END CERTIFICATE-----Generated at Mon Jan 12 15:20:27 2026 by rpki-client