This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft File: GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft (raw, json) Hash identifier: uFs3xV6F/lmiYd2r6q5Lgjx0aOBxbGrEW2HtfFCynb4= Subject key identifier: FE:D8:50:62:39:4C:4D:B0:3F:D3:E1:72:28:0E:7E:57:BB:B8:40:36 Authority key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 Certificate issuer: /CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Certificate serial: 0566 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft Manifest number: 055D Signing time: Fri 02 Jan 2026 22:36:23 +0000 Manifest this update: Fri 02 Jan 2026 22:36:23 +0000 Manifest next update: Fri 09 Jan 2026 22:36:23 +0000 Files and hashes: 1: GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl (hash: mdOh7FnlIiVS5LoP4g6GBuVc60kogY+dw+eUNIbDDpw=) 2: 491FFA9A177011ECA96DF680C4F9AE02.roa (hash: 7HMY0VAKzttuQ0fRp6AzkKm6fjk8O3uYxQqvsqTSq24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Jan 2026 22:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1382 (0x566) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED3AE, serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Validity Not Before: Jan 2 22:36:23 2026 GMT Not After : Jan 9 22:36:23 2026 GMT Subject: CN=69584867-cd96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:47:e8:90:4c:27:61:a0:a8:a5:d3:59:71:38: 94:7a:8d:4c:8c:ee:aa:0b:98:e5:12:ed:a1:27:ee: 0b:24:88:53:e8:1c:6b:76:50:e7:9a:02:42:2c:61: cf:b1:2e:70:d3:76:9b:e1:8e:ec:e9:53:b0:98:30: c9:ae:ca:cc:a1:09:ef:63:29:a7:a9:e9:61:bd:db: 27:56:76:c0:6a:14:2c:39:3b:35:59:35:03:c3:0d: f1:8b:36:3d:27:4b:91:90:41:ee:2c:4e:5b:97:9e: 22:63:dd:e7:ac:14:64:59:cc:11:f9:3a:b5:1f:d5: da:fd:7a:6a:14:96:ca:5a:ca:f6:5c:91:91:10:ac: 6f:03:61:0a:89:4d:38:36:a4:09:24:c2:3b:d5:03: ec:85:4d:27:0c:a3:2e:77:cd:1a:54:8d:48:89:45: be:67:2a:5c:84:23:4b:21:a9:a4:b1:7f:db:49:32: 9a:0b:30:c6:54:c4:b7:bc:9e:9a:23:f2:d8:e6:10: a5:cf:38:31:62:49:16:ec:2b:c9:2e:96:b4:0b:1f: 24:84:cf:ad:99:83:6e:1d:48:a5:13:80:97:d9:09: b6:d1:7b:aa:99:9c:2b:7e:f0:cd:5f:e8:5b:53:cd: 81:28:ed:de:2e:e4:53:8c:9b:41:c0:a4:4f:29:25: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D8:50:62:39:4C:4D:B0:3F:D3:E1:72:28:0E:7E:57:BB:B8:40:36 X509v3 Authority Key Identifier: keyid:19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ed:dc:cd:54:a8:9e:c3:97:a2:7d:08:3a:48:8e:04:32:7a: a0:c4:c2:9a:63:37:b4:0a:7e:4b:fb:07:78:94:60:72:1f:c3: d5:0a:60:d7:d9:ac:42:a0:64:99:7d:9a:04:cb:2e:81:ff:6e: 90:ca:e5:5b:25:ba:4b:fc:ac:0c:a6:8e:95:34:51:ba:f6:57: e2:aa:6b:55:bf:b1:79:7a:fc:13:98:2f:9a:63:cf:c7:69:5a: 37:3a:cd:75:b5:b9:9f:27:70:e5:12:ce:59:13:1b:c2:99:31: 91:23:3d:be:04:5a:bc:8f:7b:bf:d9:0f:9d:5d:91:4f:10:09: 30:75:28:1d:06:68:4e:2c:8e:18:07:12:0a:51:2c:14:72:cc: f0:f3:8b:8d:f2:e9:1c:57:5e:94:7b:c9:a0:47:f4:3a:0a:dd: 0a:59:2d:8d:91:27:aa:c3:f4:d0:8e:cb:86:aa:ed:ef:c2:05: 05:76:e4:0e:8f:c3:95:d0:54:07:9c:7a:97:78:fc:aa:5b:8d: 6f:e3:cb:66:94:0f:ef:4a:9e:2a:74:e2:84:42:27:6e:17:fd: 5d:09:63:31:a6:4d:33:dd:1e:26:45:dc:e6:35:e4:53:1c:a2: d1:0a:42:f9:fa:a4:89:b1:e8:4e:d9:f6:27:38:cf:6e:7e:e7: 3f:38:d3:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RUQzQUUxMTAvBgNVBAUTKDE5QjlBNTJDQzkwMjUwM0VDREUzMDJCRDAyNDc3NDdF QTkxOTNCNjAwHhcNMjYwMTAyMjIzNjIzWhcNMjYwMTA5MjIzNjIzWjAYMRYwFAYD VQQDDA02OTU4NDg2Ny1jZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhUfokEwnYaCopdNZcTiUeo1MjO6qC5jlEu2hJ+4LJIhT6BxrdlDnmgJCLGHP sS5w03ab4Y7s6VOwmDDJrsrMoQnvYymnqelhvdsnVnbAahQsOTs1WTUDww3xizY9 J0uRkEHuLE5bl54iY93nrBRkWcwR+Tq1H9Xa/XpqFJbKWsr2XJGREKxvA2EKiU04 NqQJJMI71QPshU0nDKMud80aVI1IiUW+ZypchCNLIamksX/bSTKaCzDGVMS3vJ6a I/LY5hClzzgxYkkW7CvJLpa0Cx8khM+tmYNuHUilE4CX2Qm20XuqmZwrfvDNX+hb U82BKO3eLuRTjJtBwKRPKSUnyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7YUGI5 TE2wP9PhcigOfle7uEA2MB8GA1UdIwQYMBaAFBm5pSzJAlA+zeMCvQJHdH6pGTtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDNBRS80MTEyQ0I1ODE3 NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VEN040d0s5QWtkMGZxa1pP MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dibWxMTWtDVUQ3TjR3SzlBa2QwZnFrWk8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDNBRS80MTEyQ0I1ODE3NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VE N040d0s5QWtkMGZxa1pPMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd7dzNVKiew5eifQg6SI4EMnqgxMKaYze0Cn5L+wd4lGByH8PVCmDX 2axCoGSZfZoEyy6B/26QyuVbJbpL/KwMpo6VNFG69lfiqmtVv7F5evwTmC+aY8/H aVo3Os11tbmfJ3DlEs5ZExvCmTGRIz2+BFq8j3u/2Q+dXZFPEAkwdSgdBmhOLI4Y BxIKUSwUcszw84uN8ukcV16Ue8mgR/Q6Ct0KWS2NkSeqw/TQjsuGqu3vwgUFduQO j8OV0FQHnHqXePyqW41v48tmlA/vSp4qdOKEQiduF/1dCWMxpk0z3R4mRdzmNeRT HKLRCkL5+qSJsehO2fYnOM9ufuc/ONNz -----END CERTIFICATE-----Generated at Sat Jan 3 02:31:57 2026 by rpki-client