This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft File: jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft (raw, json) Hash identifier: FGXf2FJzHFzK1UXkyPAxOcc21W+G4efQ9pzZw8vS1KA= Subject key identifier: 54:27:24:F8:8C:35:00:99:2B:2D:0F:FB:C3:E5:F1:D8:71:8D:74:AD Authority key identifier: 8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 Certificate issuer: /CN=A91870C2/serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Certificate serial: 0CE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft Manifest number: 0CD9 Signing time: Sat 24 Jan 2026 17:48:49 +0000 Manifest this update: Sat 24 Jan 2026 17:48:49 +0000 Manifest next update: Sat 31 Jan 2026 17:48:49 +0000 Files and hashes: 1: jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl (hash: v4lKlC4Ntg0P4LVQgIzxR9Jc9bx/M6dxE09wlmOQB1Y=) 2: 6FF4CA0E006311EAB403274DC4F9AE02.roa (hash: 38J2MM7f9ujaRxSK9Wf5Oifb+Q5gxrpsn27nhrXs2/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3298 (0xce2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91870C2, serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Validity Not Before: Jan 24 17:48:49 2026 GMT Not After : Jan 31 17:48:49 2026 GMT Subject: CN=69750601-5198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e6:89:34:c6:e1:ba:6f:80:cf:42:96:38:af: 98:0e:06:50:db:3a:fb:b0:b0:d3:7c:ee:a4:83:00: 98:dd:a0:55:f1:cd:54:2c:44:0e:47:8e:8b:e3:12: 31:77:07:17:6d:6d:5d:8e:d4:03:5b:0d:c9:30:c4: 11:26:c2:e1:20:2c:49:f5:62:bb:0f:14:da:73:93: 98:ef:74:1e:12:32:96:1b:98:4b:8b:1f:b4:14:2d: f7:90:f4:7a:be:1d:0b:0e:f6:21:6c:b4:23:7d:17: 0b:77:d2:a1:b4:7d:5f:07:26:25:27:14:cc:02:30: 65:c8:8f:b7:16:b3:22:b7:2f:40:b8:ad:3f:73:79: cc:c6:05:7b:58:16:4b:54:6e:f1:16:90:2f:4a:04: 63:b3:f0:cd:3c:27:05:8e:45:ee:f9:6e:a8:a6:42: 60:2c:00:e5:96:6b:9f:88:f6:bf:fc:14:bd:c5:51: 05:ae:c4:4e:52:82:c1:ca:c7:51:37:ad:cf:77:de: da:d2:92:14:71:ee:99:09:18:65:d0:cf:1f:c4:25: 83:46:d2:01:12:ae:c1:fb:10:60:3f:0e:5d:11:a9: 51:bb:15:43:66:23:11:b6:ce:ef:e2:7b:46:46:d6: 17:47:9d:db:2c:a9:68:83:a8:26:60:f4:08:49:de: 84:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:27:24:F8:8C:35:00:99:2B:2D:0F:FB:C3:E5:F1:D8:71:8D:74:AD X509v3 Authority Key Identifier: keyid:8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:10:3b:07:13:7c:fa:fc:ad:aa:66:e8:37:91:27:b7:78:9b: 77:5d:9d:d9:98:17:e8:51:67:2a:0d:fa:9d:bc:a6:34:2b:37: 76:26:3c:b7:a9:2f:77:a2:70:02:4e:c5:ef:3a:4e:0d:db:cf: 3a:06:a3:96:38:0d:50:5f:19:4b:37:77:13:15:56:e1:39:eb: a1:e8:51:1c:8f:6c:c8:d9:5d:a6:96:2d:51:31:7f:68:1a:bf: 5d:ed:3e:06:46:ea:e6:61:7c:8d:f8:a8:6d:08:ae:ab:b4:1f: af:54:09:b3:a7:ff:ae:5e:ee:db:83:3b:88:c4:65:b8:6c:e1: 87:6b:94:a9:82:e4:0b:4f:35:8a:40:24:99:21:aa:4d:5f:e6: 9c:67:b2:3a:93:11:00:3a:32:f8:bc:45:c6:1d:97:55:5e:cc: 76:8b:fe:20:b8:a7:2e:bf:de:97:26:db:06:27:03:11:09:8f: d7:29:b8:10:8f:64:f6:c6:05:4b:4a:c8:96:2a:02:db:a5:88: 56:69:70:d9:b5:aa:55:b8:24:33:ed:49:c9:bb:71:a3:e5:e5: f1:9c:73:ad:b2:27:f2:91:44:75:5a:e2:6f:66:9d:65:7b:78: e4:d1:e8:f1:ac:4a:9b:3b:fb:f0:19:cd:db:25:c6:63:52:f7: b0:23:d4:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwQzIxMTAvBgNVBAUTKDhDNzhGRUM3NDU1OTIwQ0JGREUwMzBGRTU0NEU1N0Yx RUM5RkM4NjQwHhcNMjYwMTI0MTc0ODQ5WhcNMjYwMTMxMTc0ODQ5WjAYMRYwFAYD VQQDDA02OTc1MDYwMS01MTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOaJNMbhum+Az0KWOK+YDgZQ2zr7sLDTfO6kgwCY3aBV8c1ULEQOR46L4xIx dwcXbW1djtQDWw3JMMQRJsLhICxJ9WK7DxTac5OY73QeEjKWG5hLix+0FC33kPR6 vh0LDvYhbLQjfRcLd9KhtH1fByYlJxTMAjBlyI+3FrMity9AuK0/c3nMxgV7WBZL VG7xFpAvSgRjs/DNPCcFjkXu+W6opkJgLADllmufiPa//BS9xVEFrsROUoLBysdR N63Pd97a0pIUce6ZCRhl0M8fxCWDRtIBEq7B+xBgPw5dEalRuxVDZiMRts7v4ntG RtYXR53bLKlog6gmYPQISd6EvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQnJPiM NQCZKy0P+8Pl8dhxjXStMB8GA1UdIwQYMBaAFIx4/sdFWSDL/eAw/lROV/Hsn8hk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBDMi84RDcxMkVBMjAw NjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklNdjk0REQtVkU1WDhleWZ5 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pIai14MFZaSU12OTRERC1WRTVYOGV5ZnlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzBDMi84RDcxMkVBMjAwNjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklN djk0REQtVkU1WDhleWZ5R1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPEDsHE3z6/K2qZug3kSe3eJt3XZ3ZmBfoUWcqDfqdvKY0Kzd2Jjy3 qS93onACTsXvOk4N2886BqOWOA1QXxlLN3cTFVbhOeuh6FEcj2zI2V2mli1RMX9o Gr9d7T4GRurmYXyN+KhtCK6rtB+vVAmzp/+uXu7bgzuIxGW4bOGHa5SpguQLTzWK QCSZIapNX+acZ7I6kxEAOjL4vEXGHZdVXsx2i/4guKcuv96XJtsGJwMRCY/XKbgQ j2T2xgVLSsiWKgLbpYhWaXDZtapVuCQz7UnJu3Gj5eXxnHOtsifykUR1WuJvZp1l e3jk0ejxrEqbO/vwGc3bJcZjUvewI9S4 -----END CERTIFICATE-----Generated at Mon Jan 26 00:47:33 2026 by rpki-client