This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft File: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft (raw, json) Hash identifier: 4dbDM8xm7lgQiJk1WjwSC2o5cX02MR7XsSN0EslZhyc= Subject key identifier: 68:0D:6D:92:65:C4:F6:A1:D0:B9:46:5E:96:E7:7E:8C:AA:31:35:38 Authority key identifier: F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0 Certificate issuer: /CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0 Certificate serial: 06EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft Manifest number: 06D8 Signing time: Sat 24 Jan 2026 21:26:00 +0000 Manifest this update: Sat 24 Jan 2026 21:26:00 +0000 Manifest next update: Sat 31 Jan 2026 21:26:00 +0000 Files and hashes: 1: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl (hash: tjP0osrnBsPuwkHKLwEfyrmKsLWNkpe9fX0KguaK2Tg=) 2: 5892BB44853E11EB9D9E2D39C4F9AE02.roa (hash: bj4EEU6BonBdP8tBLldcSa0qw8eOD5SAjacKu9I9ahU=) 3: 57D28CCA853E11EB9D9E2D39C4F9AE02.roa (hash: iKn5TfguO8Mhc7Q+khdM2Gs5+kk+EBJN5sb5yyLHen0=) 4: 399EDDAA823F11F0895C5843C4F9AE02.roa (hash: /r//PhS93LHdDuYeU1cRwdY/pqIxC89dGfVtSVhWFU8=) 5: 3EACF95EEBB511ECA410BF6DC4F9AE02.roa (hash: qKX/GBn2ViWf+TjqAq1x5OKYSX2OLWnCMDMtErmOaQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1775 (0x6ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91854B7, serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0 Validity Not Before: Jan 24 21:26:00 2026 GMT Not After : Jan 31 21:26:00 2026 GMT Subject: CN=697538e8-a5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ca:82:d8:cb:0a:f3:87:38:e5:2a:72:7c:dc: 58:26:2e:d5:6e:b5:63:b8:d2:35:fa:9a:ee:1b:49: 0d:25:4e:d6:74:59:53:a4:75:ac:00:54:63:34:2c: 09:ba:c1:08:c2:bd:5f:9a:64:06:97:e0:34:fe:3f: 80:54:4d:a6:37:ba:d7:70:cc:28:c3:56:50:06:28: 58:7d:0a:83:df:86:d6:f2:23:52:a1:9f:23:5f:ac: 9e:84:98:bc:10:e8:30:01:bb:2b:42:cf:69:82:4b: 78:bf:cd:49:32:1d:b4:9d:56:f4:e6:a1:7b:35:b2: 73:3b:52:ae:94:85:6f:d6:d7:27:cf:4c:72:d1:a9: ee:88:8a:5a:be:e9:32:60:ab:14:95:3e:27:bf:06: 1a:de:d0:df:3c:54:60:ed:5d:a2:96:92:ac:65:e6: 8d:9f:da:bd:12:4e:b7:41:ba:5d:4f:a7:53:53:e7: c5:60:97:20:54:23:9f:7a:0f:cd:be:10:34:bb:07: 63:17:0a:84:84:a9:09:1e:88:d8:04:1d:27:27:e5: 3b:c2:ca:e9:f7:7f:89:cf:b4:77:ad:0a:17:e9:99: 61:2c:a0:c0:9c:aa:a3:aa:ef:87:5d:13:89:98:c3: 3f:ab:7f:9e:87:cc:95:89:7e:9f:ff:27:67:a3:bd: fc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0D:6D:92:65:C4:F6:A1:D0:B9:46:5E:96:E7:7E:8C:AA:31:35:38 X509v3 Authority Key Identifier: keyid:F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:03:74:91:d1:63:21:39:42:1d:15:3c:73:8f:0c:08:a9:75: c3:3f:76:76:5a:a0:ba:8d:54:06:59:fe:49:6c:c0:22:cf:13: 13:89:c7:ad:28:46:a4:40:7e:29:5c:63:4a:06:db:5a:86:f1: c3:ad:31:22:87:7c:03:8e:4c:31:89:bb:9c:df:1d:45:15:28: e3:60:6a:63:4f:7a:fe:7e:20:a1:b3:5e:0b:34:a3:ff:f4:03: 77:24:ff:58:35:55:22:82:12:29:90:0c:5f:3e:9c:87:cf:2f: 2d:54:ff:77:12:df:a3:1c:d4:05:91:e0:19:17:57:1f:cb:db: 1f:13:46:1c:e1:14:45:71:03:1b:ec:fd:68:5b:05:8b:f3:7b: 56:3d:f3:1b:5b:42:17:d6:48:74:ce:57:2f:98:f0:e7:aa:26: b8:41:9a:96:2b:f2:ee:fd:dd:d1:2f:f0:00:98:29:5e:d7:f3: d1:45:6b:4d:b1:2e:40:0b:e8:01:43:70:61:db:1c:62:2e:68: 66:0f:87:85:17:84:08:2b:b0:d2:71:74:b2:9a:cf:80:a0:9c: 42:53:8a:f6:9c:ad:1b:94:ab:9e:01:76:61:4f:07:18:1f:99: af:c7:c1:d5:31:9c:bb:57:7f:cb:93:8f:21:e1:a1:40:90:b3: c2:9b:20:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0QjcxMTAvBgNVBAUTKEY4OEI5NzQwNEY5REMxMEY1QUFCMDJGNzRFQzQ5MEY5 OEFEMEQzQjAwHhcNMjYwMTI0MjEyNjAwWhcNMjYwMTMxMjEyNjAwWjAYMRYwFAYD VQQDDA02OTc1MzhlOC1hNWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysqC2MsK84c45SpyfNxYJi7VbrVjuNI1+pruG0kNJU7WdFlTpHWsAFRjNCwJ usEIwr1fmmQGl+A0/j+AVE2mN7rXcMwow1ZQBihYfQqD34bW8iNSoZ8jX6yehJi8 EOgwAbsrQs9pgkt4v81JMh20nVb05qF7NbJzO1KulIVv1tcnz0xy0anuiIpavuky YKsUlT4nvwYa3tDfPFRg7V2ilpKsZeaNn9q9Ek63QbpdT6dTU+fFYJcgVCOfeg/N vhA0uwdjFwqEhKkJHojYBB0nJ+U7wsrp93+Jz7R3rQoX6ZlhLKDAnKqjqu+HXROJ mMM/q3+eh8yViX6f/ydno738dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgNbZJl xPah0LlGXpbnfoyqMTU4MB8GA1UdIwQYMBaAFPiLl0BPncEPWqsC907EkPmK0NOw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTRCNy9FMTgwQ0U3QTg1 MUUxMUVCODQxOUIzMjdDNEY5QUUwMi8tSXVYUUUtZHdROWFxd0wzVHNTUS1ZclEw N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1JdVhRRS1kd1E5YXF3TDNUc1NRLVlyUTA3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTRCNy9FMTgwQ0U3QTg1MUUxMUVCODQxOUIzMjdDNEY5QUUwMi8tSXVYUUUtZHdR OWFxd0wzVHNTUS1ZclEwN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2A3SR0WMhOUIdFTxzjwwIqXXDP3Z2WqC6jVQGWf5JbMAizxMTicet KEakQH4pXGNKBttahvHDrTEih3wDjkwxibuc3x1FFSjjYGpjT3r+fiChs14LNKP/ 9AN3JP9YNVUighIpkAxfPpyHzy8tVP93Et+jHNQFkeAZF1cfy9sfE0Yc4RRFcQMb 7P1oWwWL83tWPfMbW0IX1kh0zlcvmPDnqia4QZqWK/Lu/d3RL/AAmCle1/PRRWtN sS5AC+gBQ3Bh2xxiLmhmD4eFF4QIK7DScXSyms+AoJxCU4r2nK0blKueAXZhTwcY H5mvx8HVMZy7V3/Lk48h4aFAkLPCmyCK -----END CERTIFICATE-----Generated at Sun Jan 25 02:58:51 2026 by rpki-client