This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft File: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json) Hash identifier: aHypEYytw7X6Paz0CvtkGCalIqaqx8Qz/DwySzxD7ng= Subject key identifier: 8A:F0:FA:65:F2:92:C7:37:3F:5C:9B:ED:53:4E:1E:21:B6:A0:F3:2E Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 Certificate issuer: /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Certificate serial: 0D18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft Manifest number: 0D11 Signing time: Sat 24 Jan 2026 17:42:19 +0000 Manifest this update: Sat 24 Jan 2026 17:42:19 +0000 Manifest next update: Sat 31 Jan 2026 17:42:19 +0000 Files and hashes: 1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: gIKsP/+IYosNi2b2aPvWfxiXult49dscAdtf12BUylg=) 2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: 7aBlRGKjzxRqNTE4/k88lfJou1zQvjo1o2zcrm10Xw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3352 (0xd18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983E5, serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Validity Not Before: Jan 24 17:42:19 2026 GMT Not After : Jan 31 17:42:19 2026 GMT Subject: CN=6975047b-04d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:ae:48:8f:99:99:fd:8c:db:e9:22:71:40: 62:d3:41:89:c0:f3:4d:19:2b:9a:d7:0e:66:00:7c: a4:52:dc:2b:17:e0:1e:65:f5:ac:91:d8:e0:9d:fd: b8:91:66:d6:5c:80:33:71:4a:03:53:56:bb:53:0e: 47:4b:d1:ac:49:d4:21:6c:cd:29:fd:8c:9e:3f:10: cb:d8:b2:6e:08:3f:e0:18:d5:d8:49:98:35:39:51: 62:0e:80:38:5c:52:80:02:ad:8a:1c:98:13:8a:63: 7a:44:7a:6a:f9:1b:dd:25:7f:18:c7:15:d3:d7:71: b7:1b:ad:31:1d:20:8c:13:d8:3d:62:cb:2c:f5:ef: a6:65:5c:e2:54:07:c1:32:04:3a:82:9f:4b:9c:12: c4:36:93:2a:59:6c:b6:07:ab:90:0f:86:47:db:d1: 97:e4:11:ba:67:68:f0:fb:bc:23:3c:53:7b:ae:6c: 3d:38:2c:09:26:c3:77:09:6f:67:a4:55:b6:39:51: 4b:47:36:36:e3:53:4d:6c:43:b1:39:f5:b8:60:94: c3:62:5c:a6:63:1d:bd:42:e7:18:21:5f:5f:6b:ee: 0b:34:63:54:fb:89:4e:9f:60:aa:1d:7d:bf:aa:b5: a5:23:2b:35:d7:4c:a2:6c:38:e5:95:8a:85:16:0d: 8e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F0:FA:65:F2:92:C7:37:3F:5C:9B:ED:53:4E:1E:21:B6:A0:F3:2E X509v3 Authority Key Identifier: keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:df:ef:3c:c9:8f:33:f8:50:9f:6d:41:eb:16:f1:15:7f:90: 01:c9:e9:83:69:fd:01:c0:d1:08:04:bb:4d:b7:bf:3e:68:3a: 25:c1:b2:57:44:9f:3f:74:c4:44:6d:c4:e5:c6:9c:10:56:c2: c1:42:66:74:48:83:31:1c:f6:a6:3c:0d:21:89:6c:42:3a:40: 54:47:a6:0d:c6:da:bc:59:cd:d1:e3:9b:00:8e:38:f5:d4:f4: db:bb:84:67:86:03:c1:97:30:7a:a3:51:b9:88:60:23:19:8d: 32:2b:da:f2:50:8d:e9:5b:f3:e3:ef:2e:4e:48:c5:05:ba:a8: 7c:35:b3:99:1d:6c:20:75:8b:d9:8c:31:bb:cf:d3:bd:e2:64: 26:b1:f1:74:f6:89:67:9b:6a:c3:dc:f8:17:23:02:ae:42:46: 66:7f:55:31:90:00:e8:2b:7f:cc:a9:43:73:30:77:c4:5c:1b: 5e:c8:9e:ec:b3:20:83:38:9b:5c:3a:a8:04:ea:d0:e4:7a:d8: ba:9f:47:43:19:80:c0:a5:84:2e:ce:5e:0b:09:c3:93:da:82: 09:d5:4d:f5:60:81:37:af:b8:14:09:b9:4b:b4:6f:b9:9c:7c: 1b:d0:fd:84:1f:b6:bf:4a:8a:a3:ad:56:25:31:9b:52:86:24: 86:c8:02:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzRTUxMTAvBgNVBAUTKDcwNTNGRjgxRkVDRjA1OUEzRThCRDcwRjg1RDY0OTQz RDExNEU1MzYwHhcNMjYwMTI0MTc0MjE5WhcNMjYwMTMxMTc0MjE5WjAYMRYwFAYD VQQDDA02OTc1MDQ3Yi0wNGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgyuSI+Zmf2M2+kicUBi00GJwPNNGSua1w5mAHykUtwrF+AeZfWskdjgnf24 kWbWXIAzcUoDU1a7Uw5HS9GsSdQhbM0p/YyePxDL2LJuCD/gGNXYSZg1OVFiDoA4 XFKAAq2KHJgTimN6RHpq+RvdJX8YxxXT13G3G60xHSCME9g9Ysss9e+mZVziVAfB MgQ6gp9LnBLENpMqWWy2B6uQD4ZH29GX5BG6Z2jw+7wjPFN7rmw9OCwJJsN3CW9n pFW2OVFLRzY241NNbEOxOfW4YJTDYlymYx29QucYIV9fa+4LNGNU+4lOn2CqHX2/ qrWlIys110yibDjllYqFFg2OSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrw+mXy ksc3P1yb7VNOHiG2oPMuMB8GA1UdIwQYMBaAFHBT/4H+zwWaPovXD4XWSUPRFOU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNFNS83MDM4Mzg2Q0Y0 QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJaby1pOWNQaGRaSlE5RVU1 VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGUF9nZjdQQlpvLWk5Y1BoZFpKUTlFVTVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNFNS83MDM4Mzg2Q0Y0QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJa by1pOWNQaGRaSlE5RVU1VFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN3+88yY8z+FCfbUHrFvEVf5AByemDaf0BwNEIBLtNt78+aDolwbJX RJ8/dMREbcTlxpwQVsLBQmZ0SIMxHPamPA0hiWxCOkBUR6YNxtq8Wc3R45sAjjj1 1PTbu4RnhgPBlzB6o1G5iGAjGY0yK9ryUI3pW/Pj7y5OSMUFuqh8NbOZHWwgdYvZ jDG7z9O94mQmsfF09olnm2rD3PgXIwKuQkZmf1UxkADoK3/MqUNzMHfEXBteyJ7s syCDOJtcOqgE6tDketi6n0dDGYDApYQuzl4LCcOT2oIJ1U31YIE3r7gUCblLtG+5 nHwb0P2EH7a/SoqjrVYlMZtShiSGyAJu -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:48 2026 by rpki-client