This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft File: RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json) Hash identifier: TO/6ZxaHQuyC1UnjGRijnqNxc5a45VHp+ZyS8BUPZb4= Subject key identifier: 17:F4:BB:E4:81:C7:47:67:94:AA:07:C0:DC:EE:16:CC:B4:E9:EC:A4 Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Certificate serial: 1599 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft Manifest number: 154B Signing time: Sat 24 Jan 2026 16:34:12 +0000 Manifest this update: Sat 24 Jan 2026 16:34:11 +0000 Manifest next update: Sat 31 Jan 2026 16:34:11 +0000 Files and hashes: 1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: BIAutWtTha22UUXWGkHfEHaa0hEPxKlmpLpo+yHJ+n4=) 2: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: QZH91q9FfvxDPaTkst1o+01IgGsC4352n7x2X0r1Yd4=) 3: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: dxV1QGzfZH8zDMNg5wdRo8EPxg+Mfpa3IbRgZn0wu9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5529 (0x1599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Validity Not Before: Jan 24 16:34:11 2026 GMT Not After : Jan 31 16:34:11 2026 GMT Subject: CN=6974f483-753d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:80:ba:1a:31:7a:34:37:4c:74:0e:c4:e6:5e: 9b:33:45:a2:2f:db:00:3e:09:33:c6:32:b2:07:4e: 64:03:69:38:a9:42:80:ff:90:40:99:8f:f8:89:5e: 19:8e:fb:96:90:62:cc:6a:14:62:db:cd:b5:49:7a: eb:e6:b4:21:ad:a5:f5:ff:48:68:75:d0:7f:e7:e7: 75:f9:3d:4a:03:49:a8:ff:c6:39:08:68:45:48:72: f8:9c:27:e7:3c:ab:04:fe:d1:6e:43:3f:67:13:b0: 43:e2:54:4a:c0:83:94:8f:28:24:b0:59:5b:d6:f5: 03:a9:e9:d2:5f:fc:62:57:1a:2c:6f:dd:8c:7f:b2: 7a:ca:5d:8e:ed:fb:02:17:9c:a4:f7:e9:4f:42:ff: 4f:25:d6:2a:9e:de:ee:22:0d:f8:19:fe:91:35:1c: 11:c0:0a:d4:eb:fd:f9:37:2a:ac:ff:09:dd:1d:74: a7:2a:aa:b2:df:46:f3:37:b5:3b:5d:54:1d:3c:cc: d0:ca:af:c2:3c:a4:63:57:1e:a4:0e:61:d2:62:67: db:00:bb:23:1b:43:bc:f3:da:90:45:51:72:36:6b: 54:99:33:6c:2e:d4:57:fb:7c:06:20:26:ac:4a:01: 27:20:96:9d:d9:ce:55:35:4f:eb:ba:1c:3b:6e:7d: 8a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F4:BB:E4:81:C7:47:67:94:AA:07:C0:DC:EE:16:CC:B4:E9:EC:A4 X509v3 Authority Key Identifier: keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:0b:29:fd:75:8a:ea:25:72:7f:53:22:ee:56:0d:f2:c4:aa: 70:a1:43:cc:9a:93:0f:78:b3:f7:2b:15:e6:43:fd:4c:ab:02: 80:06:f3:63:67:73:44:14:5c:92:c8:5e:07:c7:6d:52:d4:4b: 16:e4:1a:65:61:93:ed:1a:00:4a:24:dc:73:e1:cf:db:9e:a6: 0c:a3:c8:cb:99:b4:c5:b3:3d:31:4a:ad:e3:62:fc:b6:d6:ab: 8d:78:9d:a5:95:b0:d1:5f:5c:76:bd:e7:9b:fa:d7:f0:ff:9d: 71:17:44:65:ce:c9:88:40:c9:ac:2a:3f:2a:2d:68:0e:b9:18: 43:73:a6:db:a4:0f:69:54:d5:71:9a:b6:ae:cd:95:de:cb:ce: fe:d9:5d:a2:03:63:1e:0d:3b:30:bd:ff:15:71:2c:b1:c0:fa: 3c:8e:e5:91:c2:ae:af:6e:7a:6d:5b:61:24:c9:95:fc:bd:7a: 54:43:38:44:ec:51:02:0f:99:74:21:fd:12:2b:fa:97:60:a2: 9e:29:de:24:a8:54:52:be:4b:df:7c:d1:81:c5:8f:fc:88:b7: dc:c0:59:bb:33:28:ed:8c:13:09:44:97:7d:0f:29:01:fa:31: f5:07:e6:48:af:d6:38:0b:77:4a:e6:6b:b1:d5:b0:97:86:f4: fe:21:e1:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez MzhGNThCNTkwHhcNMjYwMTI0MTYzNDExWhcNMjYwMTMxMTYzNDExWjAYMRYwFAYD VQQDDA02OTc0ZjQ4My03NTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkIC6GjF6NDdMdA7E5l6bM0WiL9sAPgkzxjKyB05kA2k4qUKA/5BAmY/4iV4Z jvuWkGLMahRi2821SXrr5rQhraX1/0hoddB/5+d1+T1KA0mo/8Y5CGhFSHL4nCfn PKsE/tFuQz9nE7BD4lRKwIOUjygksFlb1vUDqenSX/xiVxosb92Mf7J6yl2O7fsC F5yk9+lPQv9PJdYqnt7uIg34Gf6RNRwRwArU6/35Nyqs/wndHXSnKqqy30bzN7U7 XVQdPMzQyq/CPKRjVx6kDmHSYmfbALsjG0O889qQRVFyNmtUmTNsLtRX+3wGICas SgEnIJad2c5VNU/ruhw7bn2KlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBf0u+SB x0dnlKoHwNzuFsy06eykMB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDFENS9ENEJFMDBENDYzRTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3 TmptZWNXM0NJY296ajFpMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJCyn9dYrqJXJ/UyLuVg3yxKpwoUPMmpMPeLP3KxXmQ/1MqwKABvNj Z3NEFFySyF4Hx21S1EsW5BplYZPtGgBKJNxz4c/bnqYMo8jLmbTFsz0xSq3jYvy2 1quNeJ2llbDRX1x2veeb+tfw/51xF0RlzsmIQMmsKj8qLWgOuRhDc6bbpA9pVNVx mrauzZXey87+2V2iA2MeDTswvf8VcSyxwPo8juWRwq6vbnptW2EkyZX8vXpUQzhE 7FECD5l0If0SK/qXYKKeKd4kqFRSvkvffNGBxY/8iLfcwFm7MyjtjBMJRJd9DykB +jH1B+ZIr9Y4C3dK5mux1bCXhvT+IeHr -----END CERTIFICATE-----Generated at Sun Jan 25 13:57:53 2026 by rpki-client