This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft File: dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft (raw, json) Hash identifier: 4877r5qd0s6dCO3xeGk1Cpoux3v58fCG54tmQ8eEFPw= Subject key identifier: E0:A5:5B:B0:68:DB:3E:76:89:08:8C:52:55:2D:ED:A5:C1:A7:A0:23 Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Certificate serial: 0CD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft Manifest number: 0CC6 Signing time: Sat 24 Jan 2026 17:52:58 +0000 Manifest this update: Sat 24 Jan 2026 17:52:57 +0000 Manifest next update: Sat 31 Jan 2026 17:52:57 +0000 Files and hashes: 1: dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl (hash: MzSgn8w/mB6uSr141s/xHKMn1bEM5OcaYVbAtfZj8Ks=) 2: D68289BE984B11ECB04DAB38C4F9AE02.roa (hash: TFFXR7HvdoBBfkYQcKZFG8C4IZWcW3CzAFgZ6vyFYeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3281 (0xcd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA, serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Validity Not Before: Jan 24 17:52:57 2026 GMT Not After : Jan 31 17:52:57 2026 GMT Subject: CN=697506fa-8bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2b:cc:93:7e:18:6b:37:76:7c:f7:77:96:d7: 3c:ce:90:24:88:34:90:ab:ca:4b:43:cd:3b:f7:fb: db:f5:a7:db:c6:84:0c:3f:ac:ae:63:34:89:6e:68: 51:d9:db:29:fd:d6:99:25:69:f9:fc:e2:8c:98:7e: da:98:45:37:e5:e5:54:62:09:50:f9:3c:af:4b:ba: 0f:e4:b3:82:56:81:5c:ec:29:2e:1b:c8:1f:da:45: d0:a1:9f:59:20:29:10:bd:e2:a4:aa:d9:87:80:35: e8:11:e2:27:08:31:b0:c0:cf:24:d4:2a:26:5d:05: f0:2b:5c:b5:bc:71:03:bf:1f:08:f5:e2:9a:4a:29: 21:27:0b:d8:ac:d0:d5:0f:92:46:93:6a:c1:b4:bb: 9f:c7:ed:f1:00:b2:10:f0:37:91:37:53:b8:f0:63: f8:5f:54:23:2b:e4:d4:30:0f:a1:ed:3b:6b:97:b8: 92:3c:f3:9e:56:9f:ff:54:6d:14:c7:20:b7:1a:aa: 88:f4:d3:b9:c0:e9:ac:8a:17:89:f7:d3:da:b4:36: 45:0c:1f:f0:ab:ba:61:5f:3f:24:cc:cd:d2:e2:68: 55:ef:35:e8:5c:4e:20:a0:0d:a4:2d:11:73:eb:d8: b6:70:11:b2:15:df:7c:e6:7a:c4:a3:98:bf:9a:46: d7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A5:5B:B0:68:DB:3E:76:89:08:8C:52:55:2D:ED:A5:C1:A7:A0:23 X509v3 Authority Key Identifier: keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e4:e8:e8:16:a1:ab:f7:c4:0c:a6:17:f4:8a:09:ef:af:f2: ce:cc:d6:cb:48:cb:90:a9:5d:fa:15:27:a5:00:9f:4e:a0:62: ae:67:b8:9f:2e:81:0b:25:9b:71:5c:30:7b:36:01:43:ce:c3: 96:5d:06:2d:aa:48:46:ed:94:64:f9:56:f2:dc:22:8a:11:71: f2:5f:7a:ce:aa:7c:5a:3f:64:0a:a7:ed:53:82:77:99:29:23: 14:49:cd:5d:a4:b0:d7:f9:c5:b2:55:a6:9e:e0:5c:91:6f:3a: db:29:33:5c:96:25:e5:ee:d8:79:45:ff:88:69:d9:17:50:8b: 4b:a7:ec:4a:b9:8b:be:99:08:4c:17:79:b2:7a:a1:aa:76:8d: 06:3f:5b:63:30:79:f5:63:9d:32:94:3f:a3:43:ea:b3:13:f9: 0b:c4:7f:5c:03:b2:6f:7b:41:2a:13:18:39:5b:a4:f8:88:46: dd:4a:7a:c1:db:9c:8d:ae:9f:31:c1:f2:76:15:53:ae:4b:52: 16:48:27:7e:8c:38:9b:02:35:f2:76:8c:4d:e8:30:91:63:d1: df:3f:2f:62:fa:a3:c4:60:fc:9c:9d:0d:f8:2c:ff:da:67:62: 43:6f:9f:eb:4d:9c:db:fd:3c:c3:97:4e:c9:a1:4b:6a:e4:03: c9:83:f3:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKDc3MDZEMDg4RTkyMURFOEIwMUVCQkEwNjIwMUQwNDE1 MEU4NjREMDQwHhcNMjYwMTI0MTc1MjU3WhcNMjYwMTMxMTc1MjU3WjAYMRYwFAYD VQQDDA02OTc1MDZmYS04YmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtivMk34Yazd2fPd3ltc8zpAkiDSQq8pLQ8079/vb9afbxoQMP6yuYzSJbmhR 2dsp/daZJWn5/OKMmH7amEU35eVUYglQ+TyvS7oP5LOCVoFc7CkuG8gf2kXQoZ9Z ICkQveKkqtmHgDXoEeInCDGwwM8k1ComXQXwK1y1vHEDvx8I9eKaSikhJwvYrNDV D5JGk2rBtLufx+3xALIQ8DeRN1O48GP4X1QjK+TUMA+h7Ttrl7iSPPOeVp//VG0U xyC3GqqI9NO5wOmsiheJ99PatDZFDB/wq7phXz8kzM3S4mhV7zXoXE4goA2kLRFz 69i2cBGyFd985nrEo5i/mkbXaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOClW7Bo 2z52iQiMUlUt7aXBp6AjMB8GA1UdIwQYMBaAFHcG0IjpId6LAeu6BiAdBBUOhk0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82RTc0OTUxMDA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNvc0I2N29HSUIwRUZRNkdU UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3YlFpT2toM29zQjY3b0dJQjBFRlE2R1RRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdCQS82RTc0OTUxMDA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNv c0I2N29HSUIwRUZRNkdUUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN5OjoFqGr98QMphf0ignvr/LOzNbLSMuQqV36FSelAJ9OoGKuZ7if LoELJZtxXDB7NgFDzsOWXQYtqkhG7ZRk+Vby3CKKEXHyX3rOqnxaP2QKp+1TgneZ KSMUSc1dpLDX+cWyVaae4FyRbzrbKTNcliXl7th5Rf+IadkXUItLp+xKuYu+mQhM F3myeqGqdo0GP1tjMHn1Y50ylD+jQ+qzE/kLxH9cA7Jve0EqExg5W6T4iEbdSnrB 25yNrp8xwfJ2FVOuS1IWSCd+jDibAjXydoxN6DCRY9HfPy9i+qPEYPycnQ34LP/a Z2JDb5/rTZzb/TzDl07JoUtq5APJg/PO -----END CERTIFICATE-----Generated at Sun Jan 25 20:12:33 2026 by rpki-client