This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft File: 3owRZVEEK-jnJkvttYLwo3e7JL0.mft (raw, json) Hash identifier: e94jeJeEl5494vegeAnzqpSdNNs31sb87hAxkR+HUaw= Subject key identifier: 07:38:CA:AA:96:61:B0:AC:D3:E0:7F:1A:31:CC:BD:A6:05:B0:9B:4F Authority key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD Certificate issuer: /CN=A91471A0/serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft Manifest number: 15 Signing time: Fri 23 Jan 2026 06:59:01 +0000 Manifest this update: Fri 23 Jan 2026 06:59:01 +0000 Manifest next update: Fri 30 Jan 2026 06:59:01 +0000 Files and hashes: 1: 3owRZVEEK-jnJkvttYLwo3e7JL0.crl (hash: lVh3jgKmGw1Cq4FFrqZugy6aO2IhjhXcxpvFtzJ4yzU=) 2: 4A2FDB94DA3F11F0A550B47F8ED3641D.roa (hash: wIVDcovfjaW48Qb333j3HFf+Ank1H8nyxSPomJxTa+M=) 3: 4AB6B736DA3F11F0A550B47F8ED3641D.roa (hash: o21jgh9wurw+Q8rhFWS/mFvCRGzFGONSERAdmnvicAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Validity Not Before: Jan 23 06:59:01 2026 GMT Not After : Jan 30 06:59:01 2026 GMT Subject: CN=69731c35-2216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dd:5e:84:a1:e7:c0:06:c3:a3:df:e2:9e:a9: 97:77:62:20:e4:9c:52:cd:f3:9d:fe:5e:12:15:64: 79:00:40:c4:06:e4:d4:87:c9:71:b8:7d:92:8c:4a: b1:0a:ee:0d:7a:7d:00:80:e6:4e:31:60:c7:98:44: ec:fb:2e:c9:cd:7e:74:75:ce:7e:6d:20:a0:e4:b9: c0:2c:9f:39:c2:d9:71:33:f7:02:3d:df:03:80:3b: 23:0e:fc:bf:ec:2d:e9:6b:ee:c4:8e:20:f8:cc:c8: 6e:a3:86:88:54:25:9f:b5:c7:33:4a:46:c6:c9:27: c1:22:7d:24:a4:9e:95:00:7c:60:8b:30:6d:3e:03: 55:49:c5:c6:e6:9a:9b:7d:1b:c7:6e:b7:3f:86:aa: 9d:1e:c7:45:64:85:85:7d:2a:fe:11:50:79:25:3d: 77:31:27:11:6b:34:1c:dd:81:d9:fc:e7:5a:f2:fd: 76:22:f3:90:03:c5:ca:51:ad:60:cc:b1:e3:0a:25: d8:b0:c5:e5:48:4e:a7:4a:84:46:ce:e5:c5:dc:cd: 80:f9:3f:1c:f2:15:03:a6:04:0b:b5:53:30:99:14: 97:b1:6c:02:7c:25:1b:c0:20:e2:4e:a5:54:b2:8e: 12:00:7d:d6:9f:f4:cd:da:2c:6e:24:48:c1:e4:78: ff:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:38:CA:AA:96:61:B0:AC:D3:E0:7F:1A:31:CC:BD:A6:05:B0:9B:4F X509v3 Authority Key Identifier: keyid:DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c1:34:0a:cb:c3:ad:f4:1a:c4:27:4c:30:dd:4a:9d:e3:cb: 7b:49:93:99:74:27:15:c1:ce:ef:76:30:02:21:b1:94:8b:7c: b4:1f:d8:23:b5:c2:b7:05:ec:e8:4f:d9:96:cd:a3:eb:f2:0d: f6:e6:60:82:68:62:2b:21:0d:67:6d:c6:05:2c:7d:ce:f7:27: 75:f4:25:1d:4b:e5:53:16:1e:5a:65:ca:6b:19:d4:99:7e:38: 75:f6:cc:14:10:63:ba:4a:62:66:fd:c3:f1:cd:0c:67:8d:d7: 53:c5:34:30:9b:3f:eb:b4:b1:c9:78:3a:b2:20:13:59:c1:76: 0d:fb:52:70:67:e5:db:cc:6a:73:08:46:e6:8b:de:e9:1a:3a: 2c:04:32:a6:87:cd:10:a4:32:d6:e5:8e:70:b1:f1:72:d8:5c: d0:3f:91:d8:f9:e7:24:78:9f:32:a2:07:0e:76:74:e3:c2:e3: 64:92:10:5d:77:dc:1c:79:90:e0:ef:2b:a2:3d:ad:0b:1f:c5: 32:26:6f:6e:30:26:39:fd:b5:74:9b:60:d3:fd:90:48:1f:6c: a9:09:e0:ab:41:61:78:a4:96:1c:20:2f:c7:d1:48:e9:e1:01: ca:6f:e9:c9:5a:d8:ba:a0:78:a0:c5:2d:6c:8a:5f:90:73:b1: 92:48:a5:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzFBMDExMC8GA1UEBRMoREU4QzExNjU1MTA0MkJFOEU3MjY0QkVEQjU4MkYwQTM3 N0JCMjRCRDAeFw0yNjAxMjMwNjU5MDFaFw0yNjAxMzAwNjU5MDFaMBgxFjAUBgNV BAMMDTY5NzMxYzM1LTIyMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI3V6EoefABsOj3+KeqZd3YiDknFLN853+XhIVZHkAQMQG5NSHyXG4fZKMSrEK 7g16fQCA5k4xYMeYROz7LsnNfnR1zn5tIKDkucAsnznC2XEz9wI93wOAOyMO/L/s Lelr7sSOIPjMyG6jhohUJZ+1xzNKRsbJJ8EifSSknpUAfGCLMG0+A1VJxcbmmpt9 G8dutz+Gqp0ex0VkhYV9Kv4RUHklPXcxJxFrNBzdgdn851ry/XYi85ADxcpRrWDM seMKJdiwxeVITqdKhEbO5cXczYD5PxzyFQOmBAu1UzCZFJexbAJ8JRvAIOJOpVSy jhIAfdaf9M3aLG4kSMHkeP9vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBzjKqpZh sKzT4H8aMcy9pgWwm08wHwYDVR0jBBgwFoAU3owRZVEEK+jnJkvttYLwo3e7JL0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MUEwL0Q2OTk0REU2REEz RTExRjA4MUY1QTQ1NzhFRDM2NDFELzNvd1JaVkVFSy1qbkprdnR0WUx3bzNlN0pM MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM293UlpWRUVLLWpuSmt2dHRZTHdvM2U3SkwwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MUEwL0Q2OTk0REU2REEzRTExRjA4MUY1QTQ1NzhFRDM2NDFELzNvd1JaVkVFSy1q bkprdnR0WUx3bzNlN0pMMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF7BNArLw630GsQnTDDdSp3jy3tJk5l0JxXBzu92MAIhsZSLfLQf2CO1 wrcF7OhP2ZbNo+vyDfbmYIJoYishDWdtxgUsfc73J3X0JR1L5VMWHlplymsZ1Jl+ OHX2zBQQY7pKYmb9w/HNDGeN11PFNDCbP+u0scl4OrIgE1nBdg37UnBn5dvManMI RuaL3ukaOiwEMqaHzRCkMtbljnCx8XLYXNA/kdj55yR4nzKiBw52dOPC42SSEF13 3Bx5kODvK6I9rQsfxTImb24wJjn9tXSbYNP9kEgfbKkJ4KtBYXiklhwgL8fRSOnh Acpv6cla2LqgeKDFLWyKX5BzsZJIpQY= -----END CERTIFICATE-----Generated at Sun Jan 25 05:56:37 2026 by rpki-client