This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft File: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft (raw, json) Hash identifier: MM3XPP0+AJ+wvRXI2p7AuFE+y82XurHO+TXZ2GVQYN0= Subject key identifier: 7A:F7:57:70:08:1C:76:CB:63:09:1A:5F:AD:2C:16:F8:88:E9:50:92 Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 Certificate issuer: /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Certificate serial: 06AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft Manifest number: 0693 Signing time: Sat 24 Jan 2026 21:47:49 +0000 Manifest this update: Sat 24 Jan 2026 21:47:49 +0000 Manifest next update: Sat 31 Jan 2026 21:47:49 +0000 Files and hashes: 1: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl (hash: d3rWPII1LthX7EojIRhSZBNr8pyzFn/wbO7Eh8ewD4M=) 2: 236C6906A73F11EBA1751E33C4F9AE02.roa (hash: JyPetDHabfuANEcar/HU38MZvBtPYhC6A1gULHuakq8=) 3: DD643EBCE00C11ED8C71C709C4F9AE02.roa (hash: tNDEmIxy5H25Y3zlO9rXFUC8hfA45BbpRsPK4rM8u7s=) 4: 78345D00E01211ED8766DC5CC4F9AE02.roa (hash: CGANdjpj39CJWyCZVGb4EKEpCCBaXu9btf2XqDDOLY4=) 5: 8A88CCDC667911EE9D7DA167C4F9AE02.roa (hash: 9S57tdyd45wHLsInsTnI/GZly1K4hEDfcQJTNYuSOFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1711 (0x6af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91324D4, serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Validity Not Before: Jan 24 21:47:49 2026 GMT Not After : Jan 31 21:47:49 2026 GMT Subject: CN=69753e05-2b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2b:8b:ef:4a:3f:2f:47:52:d1:00:ad:10:97: 00:29:6d:2d:08:0b:aa:5f:97:24:90:bd:a9:7c:2d: 42:e7:00:91:fd:95:88:1d:e2:55:c2:1d:45:19:55: fd:9f:e3:c3:f6:cc:26:3a:33:eb:5c:cc:b7:a3:17: 7d:78:c6:96:a6:0a:95:1a:99:d0:f0:ed:69:3c:fc: 5a:c8:2f:1a:fd:f2:64:1a:c7:c8:f5:2a:c1:47:59: 7e:22:8b:e3:b4:d3:50:1a:e5:cb:1e:01:93:cc:11: 8a:34:54:04:fa:ea:88:43:95:ef:93:13:18:96:18: 98:af:9c:76:57:5c:2e:33:96:40:d3:9d:28:6a:b7: 18:64:0e:89:19:f2:78:6e:d5:d5:31:ba:b2:27:56: 2d:cf:ee:ba:ee:32:59:08:e5:f7:c4:66:7c:70:db: 12:ca:6b:b9:4b:16:36:0a:85:bc:41:c0:d7:90:f4: d6:23:fd:50:c3:97:35:ec:6b:3f:3c:0f:0e:e1:d4: 49:96:45:55:42:17:02:72:5f:7e:85:e0:74:3d:36: f0:53:32:94:9e:10:4f:dc:36:99:b4:e1:22:2d:a2: ac:8d:29:fa:ae:6f:71:95:23:a1:26:5e:8c:b0:51: b4:67:07:2f:17:61:60:1e:be:ec:00:dd:f1:9c:55: ed:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F7:57:70:08:1C:76:CB:63:09:1A:5F:AD:2C:16:F8:88:E9:50:92 X509v3 Authority Key Identifier: keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f7:13:5a:62:3b:5b:9a:b7:b0:a7:89:31:52:31:16:2d:6d: fe:da:78:6c:51:9b:91:00:9f:ed:01:1c:9c:4f:d4:03:64:12: a8:a1:86:eb:14:7f:c8:55:c6:98:f6:12:3a:62:fa:aa:ed:73: b6:52:ad:e2:81:0e:3c:28:0e:8b:28:01:4d:8f:5f:27:be:fc: af:68:50:c7:0c:fb:43:ae:a4:6a:5a:f2:2f:a1:7b:6d:a8:79: 24:f7:ae:f9:b0:37:c6:5c:95:29:13:e4:fd:04:0b:11:ac:f4: 0d:f5:08:38:7b:07:90:84:8c:29:8b:3e:1c:7d:16:bc:13:3a: b7:e7:50:5e:c4:38:d7:c7:c3:97:d0:9b:e5:9b:7f:ca:cd:92: 67:af:88:cf:70:e8:de:08:87:7c:c1:e7:d8:b6:80:14:fe:24: 84:d2:4b:04:e1:8c:5b:60:9a:f7:2b:e4:05:d0:d0:8d:e4:71: f7:93:3f:c2:30:11:c0:31:f6:c2:94:60:df:bf:f4:11:75:32: 48:b5:1c:6e:b1:f6:6f:31:1d:94:2f:da:19:ef:96:2d:b8:db: 2a:1d:fa:f0:81:d7:ee:9a:ba:ea:3b:e5:84:86:3c:3c:6c:0a: d8:d1:0c:f3:91:e9:ae:83:09:bf:dc:0d:b7:52:2b:f7:55:7a: d6:09:7c:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0RDQxMTAvBgNVBAUTKEJGNzRFN0U2MTRENEIyMkU0QjdGRTQwQjZCRUNFRkQx NzA1QUNGQzEwHhcNMjYwMTI0MjE0NzQ5WhcNMjYwMTMxMjE0NzQ5WjAYMRYwFAYD VQQDDA02OTc1M2UwNS0yYjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyuL70o/L0dS0QCtEJcAKW0tCAuqX5ckkL2pfC1C5wCR/ZWIHeJVwh1FGVX9 n+PD9swmOjPrXMy3oxd9eMaWpgqVGpnQ8O1pPPxayC8a/fJkGsfI9SrBR1l+Iovj tNNQGuXLHgGTzBGKNFQE+uqIQ5XvkxMYlhiYr5x2V1wuM5ZA050oarcYZA6JGfJ4 btXVMbqyJ1Ytz+667jJZCOX3xGZ8cNsSymu5SxY2CoW8QcDXkPTWI/1Qw5c17Gs/ PA8O4dRJlkVVQhcCcl9+heB0PTbwUzKUnhBP3DaZtOEiLaKsjSn6rm9xlSOhJl6M sFG0ZwcvF2FgHr7sAN3xnFXtFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHr3V3AI HHbLYwkaX60sFviI6VCSMB8GA1UdIwQYMBaAFL905+YU1LIuS3/kC2vs79FwWs/B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjRENC8xQTZFNzUxQ0E3 MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNpNUxmLVFMYS16djBYQmF6 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YzVG41aFRVc2k1TGYtUUxhLXp2MFhCYXo4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjRENC8xQTZFNzUxQ0E3MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNp NUxmLVFMYS16djBYQmF6OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo9xNaYjtbmrewp4kxUjEWLW3+2nhsUZuRAJ/tARycT9QDZBKooYbr FH/IVcaY9hI6Yvqq7XO2Uq3igQ48KA6LKAFNj18nvvyvaFDHDPtDrqRqWvIvoXtt qHkk9675sDfGXJUpE+T9BAsRrPQN9Qg4eweQhIwpiz4cfRa8Ezq351BexDjXx8OX 0Jvlm3/KzZJnr4jPcOjeCId8wefYtoAU/iSE0ksE4YxbYJr3K+QF0NCN5HH3kz/C MBHAMfbClGDfv/QRdTJItRxusfZvMR2UL9oZ75YtuNsqHfrwgdfumrrqO+WEhjw8 bArY0Qzzkemugwm/3A23Uiv3VXrWCXzw -----END CERTIFICATE-----Generated at Sun Jan 25 10:45:18 2026 by rpki-client