This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft File: GEMtUeYt2nKdH_G-G4H79VvYs0c.mft (raw, json) Hash identifier: yaSXDsCBg7C2wk70UNK/6Ntx4kCp4u7gUR3Rmo11Qlg= Subject key identifier: EC:8D:C9:7F:B6:D4:1C:F0:DF:40:81:3F:BB:42:A2:64:56:34:5C:7C Authority key identifier: 18:43:2D:51:E6:2D:DA:72:9D:1F:F1:BE:1B:81:FB:F5:5B:D8:B3:47 Certificate issuer: /CN=A91AB1C2/serialNumber=18432D51E62DDA729D1FF1BE1B81FBF55BD8B347 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft Manifest number: 13 Signing time: Sat 17 Jan 2026 07:00:08 +0000 Manifest this update: Sat 17 Jan 2026 07:00:08 +0000 Manifest next update: Sat 24 Jan 2026 07:00:08 +0000 Files and hashes: 1: GEMtUeYt2nKdH_G-G4H79VvYs0c.crl (hash: CeKzA8lFugT7nuWcm5CvoThQ2m8ZRSB+cQ7448D4jkM=) 2: D4578CBCE0F811F0841404A85E6F56BC.roa (hash: 9eUAekJiT1Ca1LaRVVMKrixh9PlS8uVmPngCkQ0JqKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.crl rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 07:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1C2, serialNumber=18432D51E62DDA729D1FF1BE1B81FBF55BD8B347 Validity Not Before: Jan 17 07:00:08 2026 GMT Not After : Jan 24 07:00:08 2026 GMT Subject: CN=696b3378-7236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:65:26:b7:a1:c0:70:db:f0:a8:c3:ea:b7:6a: 7f:55:19:a9:4c:2d:29:e7:f6:92:da:27:de:31:47: 8e:96:62:1e:9f:b1:ef:9e:50:64:cf:40:5a:93:12: 54:c7:fb:a8:9b:19:34:a5:a1:cf:b0:38:46:54:7a: db:31:6d:1e:6f:7b:db:ab:e4:04:fd:dc:9a:a3:ab: 5d:4d:ba:47:64:4f:a2:cb:f1:b3:1c:4f:29:6e:39: f0:41:3a:41:9d:ca:de:8d:85:26:75:31:2d:ec:7b: 47:51:54:fa:7b:62:12:f8:14:74:fa:24:3c:a6:83: 6b:80:04:ff:99:c9:a5:ed:16:a6:1b:9d:4b:8d:4f: d5:13:0d:a3:0f:5a:ea:3d:f2:98:e0:78:c6:8f:1a: ed:d2:2f:13:07:56:6c:59:21:b5:c0:b4:79:6f:8b: a7:2c:32:f8:f2:68:05:ad:d5:cd:23:dc:21:55:45: 76:c6:fd:17:fc:a0:66:db:1c:65:a3:e7:af:04:9d: ce:b4:41:c8:22:5a:2a:3f:a0:c4:52:5b:52:36:58: 9b:d0:d0:1d:38:65:65:71:09:42:97:3d:82:30:4c: af:88:70:bf:a8:ff:c8:4f:79:9f:11:91:81:72:8f: 91:0b:f5:74:70:5d:55:17:d2:41:27:be:a9:89:94: f6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8D:C9:7F:B6:D4:1C:F0:DF:40:81:3F:BB:42:A2:64:56:34:5C:7C X509v3 Authority Key Identifier: keyid:18:43:2D:51:E6:2D:DA:72:9D:1F:F1:BE:1B:81:FB:F5:5B:D8:B3:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:90:b1:4b:d9:b6:5b:2b:8a:28:58:69:44:43:fc:03:29:1d: 71:6f:ee:0e:ee:0f:19:d3:7d:75:c7:46:4b:d8:b1:73:7e:85: cc:c3:ba:d8:34:52:a2:6c:c3:d7:5c:57:2d:3e:46:03:27:f2: c1:51:7e:95:0a:d2:49:e9:9f:eb:68:11:40:0c:80:f1:7b:c8: 70:12:fe:38:42:8a:18:44:d8:7d:bc:a9:e1:c5:5c:9e:61:61: f3:a6:08:fd:9a:a0:98:9b:a7:8e:a4:09:f3:15:b9:9d:19:a0: 45:e0:83:6f:4d:a1:f7:6c:30:2d:2b:94:40:4d:70:f8:3e:07: 27:eb:f6:6f:2d:0f:91:b0:16:0e:8b:92:16:7d:1e:a2:15:c2: a4:46:f4:52:d3:e1:4d:e0:b6:fa:4c:10:75:be:0b:9a:07:6d: 05:cb:63:04:39:96:4b:53:7e:ef:5c:14:d2:50:bf:f0:b4:a4: a2:db:5e:e8:5b:a1:98:ab:ad:fc:7c:77:28:77:12:60:6d:7b: cc:87:2a:80:41:37:32:50:ca:0d:02:08:66:64:52:3f:cf:ae: 43:b3:88:58:a6:13:5d:25:0d:cf:1b:eb:0c:e6:29:b6:21:89: 79:5f:df:2a:2a:32:5a:2d:23:77:2c:7f:a1:d0:c3:52:3f:f8: 98:28:56:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFB QjFDMjExMC8GA1UEBRMoMTg0MzJENTFFNjJEREE3MjlEMUZGMUJFMUI4MUZCRjU1 QkQ4QjM0NzAeFw0yNjAxMTcwNzAwMDhaFw0yNjAxMjQwNzAwMDhaMBgxFjAUBgNV BAMMDTY5NmIzMzc4LTcyMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+ZSa3ocBw2/Cow+q3an9VGalMLSnn9pLaJ94xR46WYh6fse+eUGTPQFqTElTH +6ibGTSloc+wOEZUetsxbR5ve9ur5AT93Jqjq11NukdkT6LL8bMcTyluOfBBOkGd yt6NhSZ1MS3se0dRVPp7YhL4FHT6JDymg2uABP+ZyaXtFqYbnUuNT9UTDaMPWuo9 8pjgeMaPGu3SLxMHVmxZIbXAtHlvi6csMvjyaAWt1c0j3CFVRXbG/Rf8oGbbHGWj 568Enc60QcgiWio/oMRSW1I2WJvQ0B04ZWVxCUKXPYIwTK+IcL+o/8hPeZ8RkYFy j5EL9XRwXVUX0kEnvqmJlPY3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7I3Jf7bU HPDfQIE/u0KiZFY0XHwwHwYDVR0jBBgwFoAUGEMtUeYt2nKdH/G+G4H79VvYs0cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMUMyLzA1OUY3Q0JDRENB MzExRjA4NUQ2RjE1QjQzNkY1NkJDL0dFTXRVZVl0Mm5LZEhfRy1HNEg3OVZ2WXMw Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR0VNdFVlWXQybktkSF9HLUc0SDc5VnZZczBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC MUMyLzA1OUY3Q0JDRENBMzExRjA4NUQ2RjE1QjQzNkY1NkJDL0dFTXRVZVl0Mm5L ZEhfRy1HNEg3OVZ2WXMwYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKuQsUvZtlsriihYaURD/AMpHXFv7g7uDxnTfXXHRkvYsXN+hczDutg0 UqJsw9dcVy0+RgMn8sFRfpUK0knpn+toEUAMgPF7yHAS/jhCihhE2H28qeHFXJ5h YfOmCP2aoJibp46kCfMVuZ0ZoEXgg29NofdsMC0rlEBNcPg+Byfr9m8tD5GwFg6L khZ9HqIVwqRG9FLT4U3gtvpMEHW+C5oHbQXLYwQ5lktTfu9cFNJQv/C0pKLbXuhb oZirrfx8dyh3EmBte8yHKoBBNzJQyg0CCGZkUj/PrkOziFimE10lDc8b6wzmKbYh iXlf3yoqMlotI3csf6HQw1I/+JgoVvM= -----END CERTIFICATE-----Generated at Sun Jan 18 03:12:51 2026 by rpki-client