This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft File: Di3qFP18_9DQqeo-N0N7keRUsjY.mft (raw, json) Hash identifier: TtDcsnqmm3v6RVltQRRMqvP55sLSNediVKR3zJF6PIk= Subject key identifier: 0C:88:B6:ED:9C:46:4A:1C:B8:E9:71:B3:6C:6E:67:4E:27:C9:59:22 Authority key identifier: 0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 Certificate issuer: /CN=A91560A3/serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Certificate serial: 11F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft Manifest number: 11F3 Signing time: Sat 24 Jan 2026 16:52:52 +0000 Manifest this update: Sat 24 Jan 2026 16:52:52 +0000 Manifest next update: Sat 31 Jan 2026 16:52:52 +0000 Files and hashes: 1: Di3qFP18_9DQqeo-N0N7keRUsjY.crl (hash: 4+nwkafYvT7Gn5bRcm7Eez4P8rtRVbHmERVc4rillsc=) 2: 2245CE0A606811EB80E3D531C4F9AE02.roa (hash: PSSQDCbjfGOv5hsREHHq3AE69qVBQBbQjxmYclshFuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4601 (0x11f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91560A3, serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Validity Not Before: Jan 24 16:52:52 2026 GMT Not After : Jan 31 16:52:52 2026 GMT Subject: CN=6974f8e4-d5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:28:84:20:95:80:38:d4:ca:7b:af:c3:79:12: fd:5d:43:0d:24:fb:28:30:49:a9:14:06:3d:3f:3c: cd:a5:d1:a9:29:2d:16:f4:2c:5f:14:72:c3:02:e8: 2b:4e:e2:28:66:0c:d7:28:90:12:08:56:a0:b1:23: be:5c:0c:ba:28:0a:7f:ed:41:8a:78:43:9c:e2:5a: 8a:50:19:70:0f:2e:9e:2d:8e:f9:49:8c:75:23:1a: 9d:29:ba:e1:15:a6:3f:98:f4:41:10:c7:73:f6:f6: 82:c8:17:e5:b6:fc:90:c1:a1:18:a5:aa:80:55:20: 9c:4b:99:4c:b2:2e:c0:b7:6d:bd:8d:63:5e:d9:08: 6d:22:54:08:55:7a:02:ad:07:ec:ce:c0:00:ea:c6: a5:05:1e:e0:2f:75:1a:11:f9:d9:9d:c5:04:68:30: f4:0f:63:e0:5c:cb:76:80:eb:82:17:44:a5:ba:51: 35:1a:bd:f1:19:05:fe:f2:9c:bb:33:9f:75:b4:2f: 62:5f:f3:0f:69:a2:88:42:eb:08:79:43:ba:6a:79: 01:38:19:60:af:be:9d:f4:da:35:ca:ed:ca:de:e7: a2:17:99:34:9e:33:82:04:5c:f4:22:1f:85:24:13: f9:8e:4a:8e:59:e6:22:76:9b:f1:a0:3e:95:32:e5: fe:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:88:B6:ED:9C:46:4A:1C:B8:E9:71:B3:6C:6E:67:4E:27:C9:59:22 X509v3 Authority Key Identifier: keyid:0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:44:6f:8d:81:22:58:4d:ac:2f:d4:b0:43:0d:db:3b:a2:70: 2e:9a:9f:1c:35:70:87:21:f5:7e:63:22:95:41:6e:b8:36:55: a4:5a:73:41:8d:cf:dc:9d:c9:0a:52:b3:1f:9c:de:8f:b2:ca: 14:35:68:a6:61:f8:da:3c:e8:a2:b9:f6:81:c6:25:0c:57:72: c2:69:fe:0a:16:9b:df:c9:3e:9c:6f:21:29:fe:7e:33:68:53: e0:13:89:f3:93:30:91:3c:3e:e5:13:5e:7f:c4:04:a5:d5:2c: 09:05:21:c9:e4:c6:47:ea:ee:0a:bb:5b:c3:1a:1d:8d:6f:6a: bf:5a:00:a8:4e:a1:2d:69:c4:95:94:6a:3f:89:ff:ca:72:73: bc:c7:4e:de:fb:ef:20:b2:21:7a:1f:75:1e:88:d8:55:58:86: db:ea:7a:bb:e9:f4:49:9c:6c:5e:b8:6e:2c:6b:bc:55:5d:1d: 5f:cf:ce:63:60:5b:b9:c1:10:95:a3:05:ff:74:6d:56:d5:af: 09:dc:bc:83:93:99:a8:85:cd:92:04:8b:a6:06:a6:82:80:7e: f2:f3:30:95:4a:29:31:f1:ee:a0:c7:e7:9f:da:85:9c:aa:7d: 81:e9:4c:30:ac:62:cc:3d:0c:77:bf:f8:e2:11:e4:a8:a6:83: 7d:85:bd:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwQTMxMTAvBgNVBAUTKDBFMkRFQTE0RkQ3Q0ZGRDBEMEE5RUEzRTM3NDM3Qjkx RTQ1NEIyMzYwHhcNMjYwMTI0MTY1MjUyWhcNMjYwMTMxMTY1MjUyWjAYMRYwFAYD VQQDDA02OTc0ZjhlNC1kNWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iiEIJWAONTKe6/DeRL9XUMNJPsoMEmpFAY9PzzNpdGpKS0W9CxfFHLDAugr TuIoZgzXKJASCFagsSO+XAy6KAp/7UGKeEOc4lqKUBlwDy6eLY75SYx1IxqdKbrh FaY/mPRBEMdz9vaCyBfltvyQwaEYpaqAVSCcS5lMsi7At229jWNe2QhtIlQIVXoC rQfszsAA6salBR7gL3UaEfnZncUEaDD0D2PgXMt2gOuCF0SlulE1Gr3xGQX+8py7 M591tC9iX/MPaaKIQusIeUO6ankBOBlgr76d9No1yu3K3ueiF5k0njOCBFz0Ih+F JBP5jkqOWeYidpvxoD6VMuX+zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyItu2c RkocuOlxs2xuZ04nyVkiMB8GA1UdIwQYMBaAFA4t6hT9fP/Q0KnqPjdDe5HkVLI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjBBMy9FNERGOTZBQUZE RjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85RFFxZW8tTjBON2tlUlVz alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpM3FGUDE4XzlEUXFlby1OME43a2VSVXNqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjBBMy9FNERGOTZBQUZERjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85 RFFxZW8tTjBON2tlUlVzalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiRG+NgSJYTawv1LBDDds7onAump8cNXCHIfV+YyKVQW64NlWkWnNB jc/cnckKUrMfnN6PssoUNWimYfjaPOiiufaBxiUMV3LCaf4KFpvfyT6cbyEp/n4z aFPgE4nzkzCRPD7lE15/xASl1SwJBSHJ5MZH6u4Ku1vDGh2Nb2q/WgCoTqEtacSV lGo/if/KcnO8x07e++8gsiF6H3UeiNhVWIbb6nq76fRJnGxeuG4sa7xVXR1fz85j YFu5wRCVowX/dG1W1a8J3LyDk5mohc2SBIumBqaCgH7y8zCVSikx8e6gx+ef2oWc qn2B6UwwrGLMPQx3v/jiEeSopoN9hb3T -----END CERTIFICATE-----Generated at Sun Jan 25 10:51:00 2026 by rpki-client