This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft File: GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json) Hash identifier: 0orf4hbq5NWQmu7/wqo+YlX/U5kbJxmhMS6iO687ivI= Subject key identifier: C8:E3:63:68:37:D5:2A:33:BD:EC:3C:DA:82:10:DE:37:62:75:67:EC Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Certificate serial: 0AAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft Manifest number: 0AA3 Signing time: Sat 10 Jan 2026 19:01:35 +0000 Manifest this update: Sat 10 Jan 2026 19:01:35 +0000 Manifest next update: Sat 17 Jan 2026 19:01:35 +0000 Files and hashes: 1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: TQmwd1YJ22taQFmPFEgDw8EH83sE+cMe85yIoi8I2dk=) 2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: 0KMFzCuGu1v0hK3kHcYTktNw8X2QSZsfmeH/owyGjh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 19:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2733 (0xaad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Validity Not Before: Jan 10 19:01:35 2026 GMT Not After : Jan 17 19:01:35 2026 GMT Subject: CN=6962a20f-d266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ca:67:e1:95:fb:ab:c8:23:3d:89:14:7b:10: 8d:2f:cf:bf:a3:d1:05:e1:87:ce:bf:15:9d:38:ac: a7:fc:68:7d:c2:ad:0d:41:9f:af:2a:05:ef:8d:27: fb:18:18:da:79:de:d5:41:be:45:4d:96:e5:b4:07: 79:28:6c:02:cf:5d:c9:15:6c:c1:37:47:c4:b7:d4: 03:7f:dd:2d:e3:fe:14:0f:2f:b3:dd:2b:94:49:e8: cc:29:81:e4:74:9e:33:f7:7d:49:19:38:50:5c:0f: 83:c1:ac:5a:84:6c:aa:54:c7:6d:db:c7:8b:23:ea: 9a:c5:96:a9:c9:5e:e8:a1:9d:84:60:46:15:24:54: 63:43:c5:10:2d:47:cc:31:50:9c:f3:ed:e2:59:0e: 3d:3a:71:19:fd:26:d3:de:4e:21:9d:41:56:c9:be: d1:9c:7d:75:59:f2:b9:a7:d1:46:e7:0f:e7:5e:12: 1c:b6:a2:a1:24:38:83:c6:5f:f6:12:ad:f3:d1:d1: e7:35:f7:91:9e:98:9d:33:a0:f4:b8:63:83:2e:78: 31:66:50:ce:9f:80:b3:41:75:ea:84:79:53:67:d9: 28:9f:12:73:e4:90:6f:76:b9:de:88:e5:c6:a9:6f: c8:1d:b6:29:9a:4f:6c:97:b8:8e:cc:52:07:e3:27: 66:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E3:63:68:37:D5:2A:33:BD:EC:3C:DA:82:10:DE:37:62:75:67:EC X509v3 Authority Key Identifier: keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:12:52:57:bf:3a:ba:11:81:0d:5b:a8:a1:5b:fa:3b:01:00: 20:d2:51:66:7e:a0:5f:65:c2:32:e0:39:de:1b:ce:1f:cc:a8: 26:b2:b7:67:c5:70:6f:c6:82:fe:c3:36:5d:78:ef:12:75:33: 5f:9d:3a:39:a3:4b:ef:91:f9:b2:c7:1a:7a:bd:c5:7a:87:d0: 6a:bd:25:bf:9f:76:c4:77:aa:f1:b3:a3:51:c8:cb:a8:c8:a2: c5:04:47:d2:af:3b:62:20:74:dd:50:38:94:f1:8c:30:bc:62: 86:41:26:8a:d8:c2:70:1c:02:5b:06:64:bd:da:e1:18:33:42: ca:3d:da:03:01:1c:d3:82:96:f2:3c:64:c9:ad:3c:0c:35:bf: d7:93:2e:2b:ed:3a:61:fd:4d:2d:47:ec:a4:20:9e:14:3e:6c: f7:f6:fc:f1:b2:e4:4e:f9:4b:98:9d:01:ad:14:db:88:36:d7: 06:b2:45:8c:7c:0a:76:b8:12:cb:f3:43:66:2b:4c:e2:8d:3b: 4e:62:6c:ae:de:54:64:0f:96:bb:51:b8:4e:ef:13:52:78:09: 08:a8:74:95:d0:09:8b:a6:e5:d8:6a:4a:51:ed:76:eb:25:53: c6:53:21:43:77:f3:7f:18:98:6c:7f:3e:62:8c:e3:ec:89:c2: ec:d6:4b:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx REZCRTExMTAvBgNVBAUTKDE4MDc5RUU0Mzk4RDY3MUJENjQ3RkNBODJBMjc5NEU1 MEEzMDQ3QkQwHhcNMjYwMTEwMTkwMTM1WhcNMjYwMTE3MTkwMTM1WjAYMRYwFAYD VQQDDA02OTYyYTIwZi1kMjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cpn4ZX7q8gjPYkUexCNL8+/o9EF4YfOvxWdOKyn/Gh9wq0NQZ+vKgXvjSf7 GBjaed7VQb5FTZbltAd5KGwCz13JFWzBN0fEt9QDf90t4/4UDy+z3SuUSejMKYHk dJ4z931JGThQXA+DwaxahGyqVMdt28eLI+qaxZapyV7ooZ2EYEYVJFRjQ8UQLUfM MVCc8+3iWQ49OnEZ/SbT3k4hnUFWyb7RnH11WfK5p9FG5w/nXhIctqKhJDiDxl/2 Eq3z0dHnNfeRnpidM6D0uGODLngxZlDOn4CzQXXqhHlTZ9konxJz5JBvdrneiOXG qW/IHbYpmk9sl7iOzFIH4ydm+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjjY2g3 1Sozvew82oIQ3jdidWfsMB8GA1UdIwQYMBaAFBgHnuQ5jWcb1kf8qConlOUKMEe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkJFMS9BN0U3MUVGNjZF QTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4dldSX3lvS2llVTVRb3dS NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBZWU1RG1OWnh2V1JfeW9LaWVVNVFvd1I3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkJFMS9BN0U3MUVGNjZFQTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4 dldSX3lvS2llVTVRb3dSNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6ElJXvzq6EYENW6ihW/o7AQAg0lFmfqBfZcIy4DneG84fzKgmsrdn xXBvxoL+wzZdeO8SdTNfnTo5o0vvkfmyxxp6vcV6h9BqvSW/n3bEd6rxs6NRyMuo yKLFBEfSrztiIHTdUDiU8YwwvGKGQSaK2MJwHAJbBmS92uEYM0LKPdoDARzTgpby PGTJrTwMNb/Xky4r7Tph/U0tR+ykIJ4UPmz39vzxsuRO+UuYnQGtFNuINtcGskWM fAp2uBLL80NmK0zijTtOYmyu3lRkD5a7UbhO7xNSeAkIqHSV0AmLpuXYakpR7Xbr JVPGUyFDd/N/GJhsfz5ijOPsicLs1ku9 -----END CERTIFICATE-----Generated at Sun Jan 11 23:26:37 2026 by rpki-client