This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft File: 2TXs95kTG-wkONqd6CtoWJY8cFw.mft (raw, json) Hash identifier: N6j2C4pFygsKozAGHKXbkyj6T2PcuSzCqSm5Ndq1p88= Subject key identifier: 1C:76:09:DA:E3:17:AE:25:43:57:BC:87:B2:34:96:EB:C5:06:35:B5 Authority key identifier: D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C Certificate issuer: /CN=A91547E4/serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft Manifest number: 21 Signing time: Fri 23 Jan 2026 06:50:44 +0000 Manifest this update: Fri 23 Jan 2026 06:50:44 +0000 Manifest next update: Fri 30 Jan 2026 06:50:44 +0000 Files and hashes: 1: 2TXs95kTG-wkONqd6CtoWJY8cFw.crl (hash: RFvgB8QRb5AqPfWEXZi4ZUTkY/dvT+q3cokGsOn5LUA=) 2: EDD5097ECB7411F0A2C24D4FC4F9AE02.roa (hash: HCkuebr9HV42wP4+Tkes5jAKhv3pdZCIfJI8PjfVHow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547E4, serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C Validity Not Before: Jan 23 06:50:44 2026 GMT Not After : Jan 30 06:50:44 2026 GMT Subject: CN=69731a44-da65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:00:7c:95:d7:d5:28:5f:95:76:ca:26:79:70: fe:67:de:b1:92:74:c6:62:35:d9:52:af:f7:1b:67: 48:eb:64:52:47:cb:86:48:cc:0c:36:d2:23:c6:50: dd:d8:41:a7:52:64:3f:3f:2d:d8:5a:44:78:59:e9: c8:5e:6f:1f:ac:ba:c2:03:5e:74:c7:eb:25:85:87: 37:49:36:0e:5e:3c:e5:1b:16:23:0d:6f:19:20:2e: 8f:48:2f:db:5f:51:f7:13:75:50:cf:6f:b9:45:60: 78:ec:29:2f:d8:39:82:21:1f:26:fd:45:de:02:df: 70:8e:9f:98:b0:2b:c5:15:02:d5:9e:ab:12:5a:eb: cf:9b:37:49:82:fe:c6:b3:82:1e:4e:fd:e0:7d:4f: 00:d4:79:cb:26:92:8d:87:4e:3c:6f:63:5e:f2:7d: a5:65:53:02:42:91:2c:9b:2a:75:51:73:6c:22:7c: 29:b1:95:c7:05:cd:52:51:7a:3d:8b:90:54:38:ea: d5:51:5a:d7:f9:bf:42:a7:59:e1:7c:90:24:5e:88: bd:b2:f4:e2:e7:e1:81:16:1a:90:6c:11:61:1c:b2: e6:5e:f0:fe:cc:73:0f:4c:f7:0f:f2:3d:cc:ac:a6: be:c4:7d:3a:8b:d4:d3:58:5d:5b:5b:66:d3:01:59: 19:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:76:09:DA:E3:17:AE:25:43:57:BC:87:B2:34:96:EB:C5:06:35:B5 X509v3 Authority Key Identifier: keyid:D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:fd:51:98:de:f7:a4:0c:19:1a:5d:1b:e7:5b:c0:1a:86:ef: c7:98:a7:51:84:36:87:13:de:8e:ee:c3:74:90:6c:76:2b:87: 4f:e9:ee:08:77:2e:b5:17:c9:52:9c:1a:d5:b5:9a:8a:8c:26: 40:d9:34:58:bd:98:a5:5b:03:9a:f1:c1:06:fc:46:bd:8f:53: 36:46:21:48:08:c4:69:be:89:f8:f0:b6:7b:3c:10:ab:c5:42: a1:b2:4e:8b:77:49:84:4a:21:1c:45:94:0b:7b:cc:72:e2:14: 92:bc:72:67:e4:9f:a9:c6:6b:d4:f6:e5:f9:ec:24:46:50:39: d2:fe:32:42:30:5b:97:28:dc:59:2f:64:40:34:59:ef:c1:83: 62:02:4d:09:9c:06:59:0e:03:33:de:48:8d:e5:2c:fe:0e:56: dc:a1:d9:a9:b8:f2:4c:19:e4:33:34:8e:81:0c:24:8e:26:86: 17:09:d6:49:05:88:21:d6:07:51:4d:69:2f:90:79:5f:58:0d: f8:bb:49:ce:5d:8a:7f:f4:ca:f5:d3:8b:13:15:b7:97:62:b6: 0a:96:d4:39:2d:f9:cb:39:12:0e:84:4a:81:ea:2e:8b:f6:01: 1d:83:e7:4f:d1:11:c6:58:35:7f:9a:4c:54:f3:ce:24:86:1f: 38:4f:fb:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDdFNDExMC8GA1UEBRMoRDkzNUVDRjc5OTEzMUJFQzI0MzhEQTlERTgyQjY4NTg5 NjNDNzA1QzAeFw0yNjAxMjMwNjUwNDRaFw0yNjAxMzAwNjUwNDRaMBgxFjAUBgNV BAMMDTY5NzMxYTQ0LWRhNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnAHyV19UoX5V2yiZ5cP5n3rGSdMZiNdlSr/cbZ0jrZFJHy4ZIzAw20iPGUN3Y QadSZD8/LdhaRHhZ6chebx+susIDXnTH6yWFhzdJNg5ePOUbFiMNbxkgLo9IL9tf UfcTdVDPb7lFYHjsKS/YOYIhHyb9Rd4C33COn5iwK8UVAtWeqxJa68+bN0mC/saz gh5O/eB9TwDUecsmko2HTjxvY17yfaVlUwJCkSybKnVRc2wifCmxlccFzVJRej2L kFQ46tVRWtf5v0KnWeF8kCReiL2y9OLn4YEWGpBsEWEcsuZe8P7Mcw9M9w/yPcys pr7EfTqL1NNYXVtbZtMBWRmXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHHYJ2uMX riVDV7yHsjSW68UGNbUwHwYDVR0jBBgwFoAU2TXs95kTG+wkONqd6CtoWJY8cFww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0U0LzAyMzJFNTQ4Q0I3 MTExRjBBNUFERUQyMkM0RjlBRTAyLzJUWHM5NWtURy13a09OcWQ2Q3RvV0pZOGNG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMlRYczk1a1RHLXdrT05xZDZDdG9XSlk4Y0Z3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 N0U0LzAyMzJFNTQ4Q0I3MTExRjBBNUFERUQyMkM0RjlBRTAyLzJUWHM5NWtURy13 a09OcWQ2Q3RvV0pZOGNGdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHz9UZje96QMGRpdG+dbwBqG78eYp1GENocT3o7uw3SQbHYrh0/p7gh3 LrUXyVKcGtW1moqMJkDZNFi9mKVbA5rxwQb8Rr2PUzZGIUgIxGm+ifjwtns8EKvF QqGyTot3SYRKIRxFlAt7zHLiFJK8cmfkn6nGa9T25fnsJEZQOdL+MkIwW5co3Fkv ZEA0We/Bg2ICTQmcBlkOAzPeSI3lLP4OVtyh2am48kwZ5DM0joEMJI4mhhcJ1kkF iCHWB1FNaS+QeV9YDfi7Sc5din/0yvXTixMVt5ditgqW1Dkt+cs5Eg6ESoHqLov2 AR2D50/REcZYNX+aTFTzziSGHzhP+5A= -----END CERTIFICATE-----Generated at Sun Jan 25 06:20:14 2026 by rpki-client