This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json) Hash identifier: 6NXXThYlAT2yyKM0rnyCLQlvOa86Y3IXDigjyLnHiCM= Subject key identifier: DE:D4:19:3A:13:10:8A:01:A4:BC:48:E1:F9:C4:F1:8A:D8:38:FF:5E Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft Manifest number: 0108 Signing time: Sun 25 Jan 2026 04:23:51 +0000 Manifest this update: Sun 25 Jan 2026 04:23:51 +0000 Manifest next update: Sun 01 Feb 2026 04:23:51 +0000 Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: 8wgvi3navifQztZUI5YQk4t7rDywTkvcQRniLTbW6Yk=) 2: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: KCUoweqEDh9jHcBtb7W3HaJWTeDZFQpve4LjGr9WIOQ=) 3: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: he2Yg9YLqUGBktzqkNPe9zTZfzSefhfrBKHZ0mm0MXI=) 4: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: 3FjaUGxyX9keX6h1j1EjjACKPn/PD276JgWOPNcm8Oo=) 5: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: SHadC7K9t4sf0FTRuN25Sqtx5daSfJ2m5VktpFS9BJc=) 6: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: aNcYj3A/gGnj4dxbU3z5mV3zt63Nh4QrgMIUUabFzuw=) 7: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: cAiqdNWzTF0sxkzvHv6yM/PcMz/pHk5XzQwUuq8wOgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Validity Not Before: Jan 25 04:23:51 2026 GMT Not After : Feb 1 04:23:51 2026 GMT Subject: CN=69759ad7-75cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1a:5b:6f:5b:ac:2f:49:5b:67:74:4b:6f:84: 9b:45:3b:e7:d6:58:21:1f:ef:54:f1:c4:18:e4:2d: 81:9c:ba:16:ae:b4:97:a5:09:88:1f:08:c5:09:4c: 66:80:e1:a6:a1:37:26:65:2c:8e:fb:f5:65:08:0b: 5d:2e:5a:1e:f9:06:e4:4e:d2:66:c7:fc:3b:b6:54: b5:99:3b:47:f1:f5:89:cf:e4:e2:37:99:f3:14:53: 7e:63:5e:92:4e:72:fc:b8:83:d9:9a:44:82:23:a5: bc:2e:21:b0:51:ad:40:a9:9e:7f:42:c7:44:23:ec: 72:f6:ee:69:83:24:d5:67:49:d9:88:97:cf:76:ac: 0d:c7:68:85:e7:5c:bf:d2:20:4c:92:6b:91:87:85: 15:af:39:6c:7d:ec:6c:fd:f7:e2:66:47:23:05:6a: 82:ac:b6:4f:85:51:ee:ab:b4:e2:de:1e:4f:f2:77: 2e:4b:7f:6f:39:cc:47:ac:0c:15:ea:f0:e6:d4:ac: d8:d1:5d:28:af:3e:7e:0c:d2:c1:71:84:d5:32:cc: 7f:59:7a:79:7f:48:c4:72:49:ac:79:42:08:1a:59: ec:73:80:85:7c:87:0c:94:83:e1:25:f6:17:ec:07: ce:c4:bc:9f:c8:cd:24:e0:f7:96:b7:5b:3a:7e:66: 16:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D4:19:3A:13:10:8A:01:A4:BC:48:E1:F9:C4:F1:8A:D8:38:FF:5E X509v3 Authority Key Identifier: keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:16:70:98:dc:1d:bb:24:16:c1:f0:67:2d:56:61:55:e6:89: b6:37:ce:8f:54:53:6d:91:b3:1a:a2:be:45:ca:29:8b:40:d2: 98:cc:0a:43:ef:41:af:fb:a0:fe:0b:8f:4a:e2:39:5e:65:1f: c3:43:e9:34:fd:3a:7d:c0:ff:d1:ee:09:9e:ca:8e:c6:ec:82: 8c:56:50:12:89:16:10:21:ce:09:de:fe:b7:74:6a:59:1f:79: 58:2d:4d:ec:f1:a0:a6:8f:31:c9:e4:f6:92:25:cc:2d:89:20: 78:38:ca:15:85:a5:a5:3d:31:7c:f2:50:14:0b:56:2f:6e:8e: 3b:1b:ad:44:fe:03:c0:ad:73:a5:e3:29:31:65:2d:84:be:e7: 11:aa:d3:d7:1f:7e:17:ef:ef:9d:4d:35:c5:36:75:9a:53:16: 6d:91:80:fb:db:b6:b1:c9:1d:a2:52:87:d4:11:1d:f1:b9:ae: 2e:2c:6b:f8:a7:4f:fb:ce:32:d4:01:d6:07:09:66:6a:52:73: 27:69:55:ae:0c:69:52:5e:1c:f2:d4:20:fe:c4:ed:c1:50:e0: 33:7a:90:c9:99:d6:c9:34:c6:ae:21:43:ee:91:92:92:04:06: 5a:e6:ef:88:ca:db:68:69:e3:d0:28:cb:40:8e:51:3f:8a:25: 97:25:f5:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5MkMxMTAvBgNVBAUTKDgxN0REMzgwMkYyNkU1N0VDRTgyNjVDRTg2MjZGQ0JC OUM2NEU5RDQwHhcNMjYwMTI1MDQyMzUxWhcNMjYwMjAxMDQyMzUxWjAYMRYwFAYD VQQDDA02OTc1OWFkNy03NWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8xpbb1usL0lbZ3RLb4SbRTvn1lghH+9U8cQY5C2BnLoWrrSXpQmIHwjFCUxm gOGmoTcmZSyO+/VlCAtdLloe+QbkTtJmx/w7tlS1mTtH8fWJz+TiN5nzFFN+Y16S TnL8uIPZmkSCI6W8LiGwUa1AqZ5/QsdEI+xy9u5pgyTVZ0nZiJfPdqwNx2iF51y/ 0iBMkmuRh4UVrzlsfexs/ffiZkcjBWqCrLZPhVHuq7Ti3h5P8ncuS39vOcxHrAwV 6vDm1KzY0V0orz5+DNLBcYTVMsx/WXp5f0jEckmseUIIGlnsc4CFfIcMlIPhJfYX 7AfOxLyfyM0k4PeWt1s6fmYWWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7UGToT EIoBpLxI4fnE8YrYOP9eMB8GA1UdIwQYMBaAFIF904AvJuV+zoJlzoYm/LucZOnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDkyQy9FMkMwNzdERTc3 NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVYN09nbVhPaGliOHU1eGs2 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dYM1RnQzhtNVg3T2dtWE9oaWI4dTV4azZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDkyQy9FMkMwNzdERTc3NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVY N09nbVhPaGliOHU1eGs2ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDFnCY3B27JBbB8GctVmFV5om2N86PVFNtkbMaor5FyimLQNKYzApD 70Gv+6D+C49K4jleZR/DQ+k0/Tp9wP/R7gmeyo7G7IKMVlASiRYQIc4J3v63dGpZ H3lYLU3s8aCmjzHJ5PaSJcwtiSB4OMoVhaWlPTF88lAUC1Yvbo47G61E/gPArXOl 4ykxZS2EvucRqtPXH34X7++dTTXFNnWaUxZtkYD727axyR2iUofUER3xua4uLGv4 p0/7zjLUAdYHCWZqUnMnaVWuDGlSXhzy1CD+xO3BUOAzepDJmdbJNMauIUPukZKS BAZa5u+IyttoaePQKMtAjlE/iiWXJfXq -----END CERTIFICATE-----Generated at Mon Jan 26 17:50:31 2026 by rpki-client