This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft File: 91XB4Q_ErmiS0krLh4LX5cAEGLA.mft (raw, json) Hash identifier: nqqAaC67M/DQT1apc3JLZUf7Hzuv7TFH490mvAJV14c= Subject key identifier: 48:34:E4:3A:8B:57:28:89:22:A1:EF:08:AB:AD:F5:10:BF:B5:B6:17 Authority key identifier: F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0 Certificate issuer: /CN=A9136F59/serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0 Certificate serial: 032F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft Manifest number: 032A Signing time: Sun 25 Jan 2026 00:14:23 +0000 Manifest this update: Sun 25 Jan 2026 00:14:22 +0000 Manifest next update: Sun 01 Feb 2026 00:14:22 +0000 Files and hashes: 1: 91XB4Q_ErmiS0krLh4LX5cAEGLA.crl (hash: HdtnXeqFvqbISsI6qGgfKMcH1BjTP11UI3FtDKNB6uU=) 2: ED0C111CF8F611ECB6DF8835C4F9AE02.roa (hash: GSaMIr6pgI7dtk3phmzJ+sITrRTfHVwUtDPjWfHSWD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 815 (0x32f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136F59, serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0 Validity Not Before: Jan 25 00:14:22 2026 GMT Not After : Feb 1 00:14:22 2026 GMT Subject: CN=6975605e-1549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5e:18:db:ca:53:a3:80:a8:7c:6e:35:af:02: 26:b4:21:df:47:71:1d:90:59:0f:3a:f2:3e:0e:fc: 62:c8:34:a6:2c:16:78:7f:b9:86:52:6a:89:f6:90: e6:fa:21:6a:c8:12:35:fd:e0:11:88:e2:22:bf:7a: 25:f1:ed:42:d2:ab:f1:5e:7f:85:ec:11:1a:b8:8d: 4e:5f:6f:c6:1e:85:ec:c1:11:7f:a2:de:0c:8c:de: f0:c1:8e:df:8e:5e:cb:2c:00:6d:5b:66:de:bb:05: bf:89:06:c9:02:fc:3e:76:75:0f:92:54:f7:05:e5: 2e:e7:f1:90:22:db:76:fa:4b:a6:8f:b0:0b:dc:d9: c4:9c:3e:01:03:ed:fe:62:24:16:c1:af:fa:60:16: 0a:42:0f:4a:3f:80:6d:2f:2e:87:c0:4e:77:8c:0b: 1d:29:41:f1:5d:88:af:d3:0f:27:fe:c7:f0:4e:cd: 27:64:88:28:ae:c3:7f:eb:12:86:b0:15:05:f1:d5: 58:23:80:e1:46:d7:c8:82:f8:87:20:c0:3b:08:8b: 25:53:97:d5:82:f9:13:68:78:e8:1a:8e:82:b9:c5: 83:a4:f4:58:3d:e3:5a:28:d1:f5:db:94:5a:06:7c: d0:11:75:25:93:3f:f7:6a:ea:fc:4c:92:bd:03:f5: 1c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:34:E4:3A:8B:57:28:89:22:A1:EF:08:AB:AD:F5:10:BF:B5:B6:17 X509v3 Authority Key Identifier: keyid:F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7a:bb:dd:b9:e1:e2:bf:ff:61:86:0b:de:62:30:fe:07:60: f1:c6:dc:89:e5:ab:2c:9c:91:14:1c:d4:b8:2b:a1:ac:41:5a: f0:9b:9e:2f:b0:f9:de:5c:9b:21:82:55:91:95:0a:95:13:d2: d5:a6:28:b7:3c:0a:6f:b3:98:46:d6:b1:08:7d:11:89:26:7e: e0:d4:a5:6b:16:c8:59:e5:8f:ab:c9:2b:2a:ff:2d:a2:d1:6e: 77:b8:bb:6d:94:db:32:39:50:55:4f:da:9d:6b:55:66:fe:d2: 7c:72:61:fd:a9:7f:7d:58:f8:b6:fa:41:5b:aa:db:86:37:bf: 11:34:6b:10:8c:17:d5:7b:71:44:f5:d8:ac:74:79:9a:68:a6: fe:32:fc:31:5f:74:f9:ab:c1:0c:d9:ef:86:73:f8:92:94:ad: 57:5e:ce:7e:ad:ed:f2:bd:38:4a:f0:6f:bc:2c:ee:b0:ec:09: 53:3e:fc:57:30:b0:08:87:a6:32:3b:f1:35:3f:ab:7f:68:22: 41:1e:3a:9e:e9:da:51:df:94:1a:66:99:b0:72:51:65:d4:d5: 6f:53:55:f7:9c:49:35:b2:b3:d0:7b:2a:37:4d:a8:09:2c:b3: 37:c5:03:ac:1b:70:64:7d:63:f7:85:78:45:bb:71:05:81:4d: aa:53:4d:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZGNTkxMTAvBgNVBAUTKEY3NTVDMUUxMEZDNEFFNjg5MkQyNEFDQjg3ODJEN0U1 QzAwNDE4QjAwHhcNMjYwMTI1MDAxNDIyWhcNMjYwMjAxMDAxNDIyWjAYMRYwFAYD VQQDDA02OTc1NjA1ZS0xNTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2l4Y28pTo4CofG41rwImtCHfR3EdkFkPOvI+DvxiyDSmLBZ4f7mGUmqJ9pDm +iFqyBI1/eARiOIiv3ol8e1C0qvxXn+F7BEauI1OX2/GHoXswRF/ot4MjN7wwY7f jl7LLABtW2beuwW/iQbJAvw+dnUPklT3BeUu5/GQItt2+kumj7AL3NnEnD4BA+3+ YiQWwa/6YBYKQg9KP4BtLy6HwE53jAsdKUHxXYiv0w8n/sfwTs0nZIgorsN/6xKG sBUF8dVYI4DhRtfIgviHIMA7CIslU5fVgvkTaHjoGo6CucWDpPRYPeNaKNH125Ra BnzQEXUlkz/3aur8TJK9A/UcwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEg05DqL VyiJIqHvCKut9RC/tbYXMB8GA1UdIwQYMBaAFPdVweEPxK5oktJKy4eC1+XABBiw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkY1OS81NzcyQUZCRUY4 NEYxMUVDQTI5MjM5NTJDNEY5QUUwMi85MVhCNFFfRXJtaVMwa3JMaDRMWDVjQUVH TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxWEI0UV9Fcm1pUzBrckxoNExYNWNBRUdMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkY1OS81NzcyQUZCRUY4NEYxMUVDQTI5MjM5NTJDNEY5QUUwMi85MVhCNFFfRXJt aVMwa3JMaDRMWDVjQUVHTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+ervdueHiv/9hhgveYjD+B2DxxtyJ5assnJEUHNS4K6GsQVrwm54v sPneXJshglWRlQqVE9LVpii3PApvs5hG1rEIfRGJJn7g1KVrFshZ5Y+rySsq/y2i 0W53uLttlNsyOVBVT9qda1Vm/tJ8cmH9qX99WPi2+kFbqtuGN78RNGsQjBfVe3FE 9disdHmaaKb+MvwxX3T5q8EM2e+Gc/iSlK1XXs5+re3yvThK8G+8LO6w7AlTPvxX MLAIh6YyO/E1P6t/aCJBHjqe6dpR35QaZpmwclFl1NVvU1X3nEk1srPQeyo3TagJ LLM3xQOsG3BkfWP3hXhFu3EFgU2qU03q -----END CERTIFICATE-----Generated at Sun Jan 25 17:00:38 2026 by rpki-client