This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft File: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft (raw, json) Hash identifier: nzpiVk/9PyEKfr/wal9CGkVqE2s8+mzRmTmOYPKz8r4= Subject key identifier: 1B:8E:36:FD:D3:DA:1B:36:15:39:5A:A4:03:30:E4:29:C9:34:96:36 Authority key identifier: F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 Certificate issuer: /CN=A91958FF/serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft Manifest number: 1A Signing time: Fri 23 Jan 2026 06:57:09 +0000 Manifest this update: Fri 23 Jan 2026 06:57:09 +0000 Manifest next update: Fri 30 Jan 2026 06:57:09 +0000 Files and hashes: 1: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl (hash: Ao7KGzQRlqrqW/xDKVR1gSNYIsR2OjZrheBAkWfAODo=) 2: AB837982D90911F0BBD32F4D7CD3641D.roa (hash: bxVst1LrTLLEZ/QR9QaBFKdm4rngKF7dcIYYnPPecbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958FF, serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Validity Not Before: Jan 23 06:57:09 2026 GMT Not After : Jan 30 06:57:09 2026 GMT Subject: CN=69731bc5-1dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f6:f4:cd:db:0e:23:43:c6:c0:76:21:11:34: 01:03:45:4a:94:65:3f:d2:53:a2:65:63:79:b6:5d: 14:31:7a:18:b6:de:c7:96:65:73:74:32:2c:79:fe: 41:48:62:c4:4e:78:3c:c5:70:4e:f5:70:c4:13:29: c2:e4:84:83:a1:3d:76:03:07:c4:20:c3:94:89:6b: df:ef:e7:9b:9c:52:7a:9a:17:93:42:00:28:56:80: 32:ec:f9:35:ee:65:04:da:91:92:3d:6d:22:c9:c7: 33:6f:52:8b:6b:22:7f:03:df:43:88:1b:f0:99:1a: 93:d5:e9:4a:6d:65:1c:cb:36:b9:de:5c:bc:f8:48: 4f:c8:e8:92:77:35:14:7c:77:54:d7:3f:7d:6d:61: 6a:66:4b:28:c4:f6:1d:5d:79:ff:2a:c6:f1:18:a7: 95:90:3a:f4:d9:e3:f9:19:51:82:eb:03:7c:da:e9: e7:bf:1d:9c:19:6a:89:1e:6a:74:7d:c6:5e:a9:71: f5:1e:73:60:5d:86:bc:11:78:c2:bf:99:b4:6f:b9: 73:54:4e:ce:08:63:3a:f4:8c:08:66:69:c0:09:13: 50:e1:b2:18:41:cb:24:ce:d3:29:b8:04:fe:1c:4b: 13:4c:34:e2:56:a8:79:11:2f:2f:05:13:16:12:92: d5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8E:36:FD:D3:DA:1B:36:15:39:5A:A4:03:30:E4:29:C9:34:96:36 X509v3 Authority Key Identifier: keyid:F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:31:f7:a6:98:a1:4d:1d:3e:fc:0d:d6:dc:3e:72:a4:6d:37: 8f:eb:34:f7:c6:fd:fa:e1:32:83:b8:0e:89:4f:42:03:35:f2: c0:58:59:4c:38:f7:6f:fb:6a:45:84:b1:c9:e2:ad:2a:b1:85: 3d:ce:f3:54:c6:23:a0:f3:b8:7d:26:ed:ac:6f:1d:e8:c7:40: 11:bb:56:f3:78:12:d4:2b:f2:e0:04:43:b7:8c:5c:2e:fa:cc: a0:b7:af:e7:9d:e6:8e:a0:8b:5b:2c:d3:31:20:ae:82:5c:cc: 2e:58:dc:fc:f6:5b:f6:d1:01:1f:96:1b:5a:d3:c6:f3:63:42: 73:9b:95:dd:f7:5f:16:c0:96:1c:cb:84:99:9b:f9:d3:6b:51: a5:0e:89:0b:f5:22:91:33:28:cd:3b:66:07:9c:40:cf:c5:4e: 6b:ff:74:ca:48:8c:bf:2d:40:5a:c1:9d:cc:9d:5b:24:d2:4e: f7:84:dc:2c:02:74:0d:00:36:80:91:f0:60:f1:ac:78:d5:96: 11:88:af:c5:9f:3f:7a:a7:16:fe:5f:56:0f:a1:d2:d1:0f:02: 9f:9f:e6:62:9f:37:94:93:9d:62:c2:77:3c:80:f2:fa:2d:93: 5e:13:4b:98:3d:72:41:0e:b3:5e:34:61:bb:6c:d8:52:ff:88: ed:0f:c3:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NThGRjExMC8GA1UEBRMoRjI0RjE0NzE3MjNBNjRFNEQ1NzBEQkIwRDQ0QzgyNDMw NTQyNjI2NjAeFw0yNjAxMjMwNjU3MDlaFw0yNjAxMzAwNjU3MDlaMBgxFjAUBgNV BAMMDTY5NzMxYmM1LTFkYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx9vTN2w4jQ8bAdiERNAEDRUqUZT/SU6JlY3m2XRQxehi23seWZXN0Mix5/kFI YsROeDzFcE71cMQTKcLkhIOhPXYDB8Qgw5SJa9/v55ucUnqaF5NCAChWgDLs+TXu ZQTakZI9bSLJxzNvUotrIn8D30OIG/CZGpPV6UptZRzLNrneXLz4SE/I6JJ3NRR8 d1TXP31tYWpmSyjE9h1def8qxvEYp5WQOvTZ4/kZUYLrA3za6ee/HZwZaokeanR9 xl6pcfUec2BdhrwReMK/mbRvuXNUTs4IYzr0jAhmacAJE1DhshhByyTO0ym4BP4c SxNMNOJWqHkRLy8FExYSktXrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUG442/dPa GzYVOVqkAzDkKck0ljYwHwYDVR0jBBgwFoAU8k8UcXI6ZOTVcNuw1EyCQwVCYmYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1OEZGLzRFM0NCNkMwRDcx QjExRjA5QTE0OEQyNTlBRDM2NDFELzhrOFVjWEk2Wk9UVmNOdXcxRXlDUXdWQ1lt WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOGs4VWNYSTZaT1RWY051dzFFeUNRd1ZDWW1ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 OEZGLzRFM0NCNkMwRDcxQjExRjA5QTE0OEQyNTlBRDM2NDFELzhrOFVjWEk2Wk9U VmNOdXcxRXlDUXdWQ1ltWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIsx96aYoU0dPvwN1tw+cqRtN4/rNPfG/frhMoO4DolPQgM18sBYWUw4 92/7akWEscnirSqxhT3O81TGI6DzuH0m7axvHejHQBG7VvN4EtQr8uAEQ7eMXC76 zKC3r+ed5o6gi1ss0zEgroJczC5Y3Pz2W/bRAR+WG1rTxvNjQnObld33XxbAlhzL hJmb+dNrUaUOiQv1IpEzKM07ZgecQM/FTmv/dMpIjL8tQFrBncydWyTSTveE3CwC dA0ANoCR8GDxrHjVlhGIr8WfP3qnFv5fVg+h0tEPAp+f5mKfN5STnWLCdzyA8vot k14TS5g9ckEOs140Ybts2FL/iO0Pww8= -----END CERTIFICATE-----Generated at Sun Jan 25 02:48:19 2026 by rpki-client