This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft File: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft (raw, json) Hash identifier: Nts6ytgmx3KfEoHBlL31eI6i/Moo33mBrMkqHUmhhYc= Subject key identifier: E5:99:06:6E:AC:CB:31:97:94:19:96:96:36:50:6A:6E:84:40:43:8C Authority key identifier: 4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 Certificate issuer: /CN=A91834AD/serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Certificate serial: 0CCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft Manifest number: 0CB6 Signing time: Sat 24 Jan 2026 17:59:51 +0000 Manifest this update: Sat 24 Jan 2026 17:59:50 +0000 Manifest next update: Sat 31 Jan 2026 17:59:50 +0000 Files and hashes: 1: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl (hash: h5enWObDZMm7DxzwHsFulYiOb0nEBBjXeCi74x6gNdM=) 2: 6FFF14F0695E11EFAF2AF785C4F9AE02.roa (hash: 0bN6aa9LmlwzevTlnntKDv/hy63nRIyDPNtf4oHkk54=) 3: 6C3D5766692F11EF9E22F029C4F9AE02.roa (hash: /S+W07A3aVql6ze6kJn+yDdzoX1dXbrV898MDchVnCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3274 (0xcca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91834AD, serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Validity Not Before: Jan 24 17:59:50 2026 GMT Not After : Jan 31 17:59:50 2026 GMT Subject: CN=69750897-bfd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:32:72:b2:9c:1c:20:9f:95:ee:16:8a:8d:59: 0b:84:e8:65:85:0d:bb:3e:a1:37:c8:e1:db:91:98: ab:3e:e7:34:fa:d5:94:5d:85:fe:3e:fd:8e:7b:b9: e1:94:e0:38:5f:db:b7:0a:98:ab:97:04:10:16:16: f5:13:a4:0c:6f:04:4a:d0:da:3e:11:79:5a:92:4d: 09:2e:fe:99:e9:43:8f:b3:b9:0d:6c:ce:cb:71:33: c4:ea:3c:37:f8:01:ca:db:81:f9:8b:97:99:70:61: 9d:8b:87:7f:b9:9f:2a:ea:e8:6d:c7:48:d6:d3:ad: 7a:b9:31:0c:d9:af:0e:49:7c:95:83:0d:52:09:a1: 5f:13:d6:88:6a:d9:5e:8b:2f:e9:49:aa:f0:59:fc: 97:75:f2:51:92:b2:c2:31:e6:7a:46:88:d8:44:f7: 1a:53:b1:3c:0a:11:3d:b2:60:2c:77:ff:a8:d7:dc: 46:58:fd:e8:fa:19:c7:23:45:b4:e5:c6:59:52:42: 35:f8:33:33:fc:88:a5:ef:f3:68:3d:a7:61:48:b0: b3:d1:fe:39:21:93:e8:ec:97:df:4f:2c:18:d7:77: 09:b7:32:f5:47:1d:5e:e0:70:e4:73:00:73:c0:95: 0e:28:64:b8:2d:80:1f:81:ed:82:28:6a:bc:39:b5: 91:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:99:06:6E:AC:CB:31:97:94:19:96:96:36:50:6A:6E:84:40:43:8C X509v3 Authority Key Identifier: keyid:4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:f5:c6:ac:8f:16:14:d4:2b:8a:eb:48:06:fe:6c:5c:c9:89: 70:ce:d3:f1:bf:17:8c:54:19:76:11:76:c5:6b:bf:3b:c2:95: 36:f0:81:8c:36:e6:57:20:40:5c:24:86:e3:42:b4:9b:7c:f5: b6:e5:62:7e:fc:ae:19:52:9d:6a:78:58:a9:37:a3:c7:24:dd: 5b:e5:bc:42:75:ed:23:ba:ee:37:15:1b:0d:5a:a6:e6:59:45: 33:c7:40:7c:3f:f1:be:16:13:ee:ea:9c:e4:0d:4a:0c:4f:3f: a7:2c:d6:bb:2f:a6:cf:ef:1a:07:da:2b:ab:8e:21:0b:da:2c: e7:56:59:75:ca:32:28:b5:a5:cf:31:23:b3:b0:cb:40:74:2f: ad:8c:1e:a5:31:c5:4e:ac:2b:5a:5f:10:bc:32:fe:12:74:0e: 10:48:8d:2e:8f:81:99:46:2a:b1:5a:76:2a:f1:8b:81:df:bb: d3:83:64:2c:cb:7e:01:46:b1:b0:ad:5a:f1:9b:98:2c:58:ce: 64:f0:ff:cf:eb:d5:da:eb:d3:e7:b9:67:45:55:61:08:a8:9c: a9:ee:cf:1a:7c:51:c0:a5:d8:c7:f0:ca:8a:27:52:4e:3b:50: 58:c5:e1:d6:98:07:b5:db:8c:5d:7f:b8:33:c9:03:70:60:65: 6d:c1:2e:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0QUQxMTAvBgNVBAUTKDRENzZGNzkzRTJCMTI5RjQ2RjhGQzkwRTIxRjlEMEZF QUYxMEQwNDAwHhcNMjYwMTI0MTc1OTUwWhcNMjYwMTMxMTc1OTUwWjAYMRYwFAYD VQQDDA02OTc1MDg5Ny1iZmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDJyspwcIJ+V7haKjVkLhOhlhQ27PqE3yOHbkZirPuc0+tWUXYX+Pv2Oe7nh lOA4X9u3CpirlwQQFhb1E6QMbwRK0No+EXlakk0JLv6Z6UOPs7kNbM7LcTPE6jw3 +AHK24H5i5eZcGGdi4d/uZ8q6uhtx0jW0616uTEM2a8OSXyVgw1SCaFfE9aIatle iy/pSarwWfyXdfJRkrLCMeZ6RojYRPcaU7E8ChE9smAsd/+o19xGWP3o+hnHI0W0 5cZZUkI1+DMz/Iil7/NoPadhSLCz0f45IZPo7JffTywY13cJtzL1Rx1e4HDkcwBz wJUOKGS4LYAfge2CKGq8ObWRjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWZBm6s yzGXlBmWljZQam6EQEOMMB8GA1UdIwQYMBaAFE1295PisSn0b4/JDiH50P6vENBA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzRBRC8wREU0QUQwNDA4 RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtmUnZqOGtPSWZuUV9xOFEw RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYYjNrLUt4S2ZSdmo4a09JZm5RX3E4UTBFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzRBRC8wREU0QUQwNDA4RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtm UnZqOGtPSWZuUV9xOFEwRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh9casjxYU1CuK60gG/mxcyYlwztPxvxeMVBl2EXbFa787wpU28IGM NuZXIEBcJIbjQrSbfPW25WJ+/K4ZUp1qeFipN6PHJN1b5bxCde0juu43FRsNWqbm WUUzx0B8P/G+FhPu6pzkDUoMTz+nLNa7L6bP7xoH2iurjiEL2iznVll1yjIotaXP MSOzsMtAdC+tjB6lMcVOrCtaXxC8Mv4SdA4QSI0uj4GZRiqxWnYq8YuB37vTg2Qs y34BRrGwrVrxm5gsWM5k8P/P69Xa69PnuWdFVWEIqJyp7s8afFHApdjH8MqKJ1JO O1BYxeHWmAe124xdf7gzyQNwYGVtwS5f -----END CERTIFICATE-----Generated at Sun Jan 25 08:20:26 2026 by rpki-client