This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft File: 4-ABdWjohx9OiHmxBiqu1yw08jo.mft (raw, json) Hash identifier: 8yVOu3nCjBnY86Hjeg1m2tSByt2GWsPp4cHt2Y9szM8= Subject key identifier: 69:BB:7A:67:20:6A:55:7D:72:87:84:25:09:EC:D9:5D:74:45:DC:DE Authority key identifier: E3:E0:01:75:68:E8:87:1F:4E:88:79:B1:06:2A:AE:D7:2C:34:F2:3A Certificate issuer: /CN=A91A05BF/serialNumber=E3E0017568E8871F4E8879B1062AAED72C34F23A Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4-ABdWjohx9OiHmxBiqu1yw08jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft Manifest number: 33 Signing time: Sun 25 Jan 2026 06:38:55 +0000 Manifest this update: Sun 25 Jan 2026 06:38:54 +0000 Manifest next update: Sun 01 Feb 2026 06:38:54 +0000 Files and hashes: 1: 4-ABdWjohx9OiHmxBiqu1yw08jo.crl (hash: eYTRRCI6cvKalk6AIqyU7IazuNRj8p5PcMTTM1RyJbA=) 2: 5FC8CD04B3B511F0BF1A0B54C4F9AE02.roa (hash: NcL+J1oXA1oh3xoPJMoQRrIZs5vXjNVk2410Ro/0xzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.crl rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4-ABdWjohx9OiHmxBiqu1yw08jo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A05BF, serialNumber=E3E0017568E8871F4E8879B1062AAED72C34F23A Validity Not Before: Jan 25 06:38:54 2026 GMT Not After : Feb 1 06:38:54 2026 GMT Subject: CN=6975ba7f-51bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4c:eb:54:65:91:23:d7:ca:bc:44:6d:e2:be: 30:80:79:0c:dd:a2:61:63:c1:f5:1d:08:62:8c:b6: dc:b3:39:41:a7:64:a4:1e:bf:9b:36:cc:a9:a2:ed: 4c:a6:dd:25:b4:51:c7:07:b0:a9:71:6e:5b:43:4d: bc:64:f5:ca:f4:be:44:97:26:e5:01:87:50:b2:0b: e7:5a:b2:96:2f:cf:ff:87:41:9b:21:20:eb:a2:c5: c1:1e:ef:6b:c9:92:16:db:4c:e4:2c:bb:02:55:1a: 1d:e3:9d:63:16:b8:bf:b1:c9:3e:8a:36:c8:10:b3: 9a:b5:78:55:3c:58:94:b3:c8:96:dc:af:e2:90:cd: 55:32:6a:c4:26:ae:14:49:a5:a5:4c:96:6e:41:bd: b4:51:55:02:37:75:2e:d0:d2:43:53:75:a0:8d:36: 2f:11:8a:1b:0c:fd:74:23:37:8d:ab:d1:3f:50:bc: 5e:6c:4b:0b:bc:dd:87:4f:77:32:7f:9d:a3:13:f6: 25:21:70:9d:ee:9e:43:36:7d:e6:46:b9:12:40:00: 60:2c:ba:8c:d8:75:03:0e:59:f6:79:8a:93:51:04: 15:88:a8:0c:c8:ec:4b:af:f2:5d:f8:f6:79:d4:61: b7:e7:9d:da:ba:ca:2d:84:4b:a1:ab:8d:df:c3:66: 55:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BB:7A:67:20:6A:55:7D:72:87:84:25:09:EC:D9:5D:74:45:DC:DE X509v3 Authority Key Identifier: keyid:E3:E0:01:75:68:E8:87:1F:4E:88:79:B1:06:2A:AE:D7:2C:34:F2:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4-ABdWjohx9OiHmxBiqu1yw08jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:be:bc:7b:d2:5d:1b:c9:cc:8b:66:79:9b:2f:c5:8f:49:eb: 1f:68:da:63:7e:b0:1d:5c:5b:79:0f:81:3b:0e:b6:b0:07:ca: 60:d7:dc:a9:96:1d:b2:69:68:05:38:11:75:1b:c6:5a:fc:a9: 58:13:24:ee:7f:aa:6d:a1:38:84:1f:f0:9c:51:e3:af:ad:e2: 73:2d:6c:9b:7f:a9:9b:46:25:c2:14:1f:6a:52:ca:6a:dc:22: 7a:56:44:85:1d:06:4b:c9:26:76:39:b4:70:71:b4:68:2d:e2: d8:e4:73:10:20:e1:59:a9:3d:75:03:20:80:d4:86:69:fd:36: cc:58:e4:73:1c:11:c1:dd:ed:61:12:fc:8a:a3:a2:ea:4f:61: 27:b9:6a:88:2c:1c:90:ff:63:1b:29:2a:ca:8c:ef:0f:a2:03: 35:03:14:92:c5:24:ee:50:e2:97:f3:13:a4:d9:3f:ed:1a:04: 6c:f9:a0:2b:d3:e4:c2:75:02:f8:ff:a5:f2:4d:55:da:c8:7c: 48:94:9d:f3:f8:d2:66:68:28:eb:e8:bf:97:f6:8d:35:4b:47: 9d:d1:16:5b:15:92:45:90:9c:50:43:3a:64:29:2a:6f:f2:e9: d0:0a:3d:3a:38:8f:f3:9c:4e:33:7a:fc:4c:5d:1f:5c:1a:a9: 8d:73:aa:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDVCRjExMC8GA1UEBRMoRTNFMDAxNzU2OEU4ODcxRjRFODg3OUIxMDYyQUFFRDcy QzM0RjIzQTAeFw0yNjAxMjUwNjM4NTRaFw0yNjAyMDEwNjM4NTRaMBgxFjAUBgNV BAMMDTY5NzViYTdmLTUxYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClTOtUZZEj18q8RG3ivjCAeQzdomFjwfUdCGKMttyzOUGnZKQev5s2zKmi7Uym 3SW0UccHsKlxbltDTbxk9cr0vkSXJuUBh1CyC+daspYvz/+HQZshIOuixcEe72vJ khbbTOQsuwJVGh3jnWMWuL+xyT6KNsgQs5q1eFU8WJSzyJbcr+KQzVUyasQmrhRJ paVMlm5BvbRRVQI3dS7Q0kNTdaCNNi8RihsM/XQjN42r0T9QvF5sSwu83YdPdzJ/ naMT9iUhcJ3unkM2feZGuRJAAGAsuozYdQMOWfZ5ipNRBBWIqAzI7Euv8l349nnU Ybfnndq6yi2ES6Grjd/DZlWPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUabt6ZyBq VX1yh4QlCezZXXRF3N4wHwYDVR0jBBgwFoAU4+ABdWjohx9OiHmxBiqu1yw08jow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNUJGLzE4MTM2RDhBQjNC NDExRjBCNjkxN0YwRUM0RjlBRTAyLzQtQUJkV2pvaHg5T2lIbXhCaXF1MXl3MDhq by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNC1BQmRXam9oeDlPaUhteEJpcXUxeXcwOGpvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw NUJGLzE4MTM2RDhBQjNCNDExRjBCNjkxN0YwRUM0RjlBRTAyLzQtQUJkV2pvaHg5 T2lIbXhCaXF1MXl3MDhqby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAG+vHvSXRvJzItmeZsvxY9J6x9o2mN+sB1cW3kPgTsOtrAHymDX3KmW HbJpaAU4EXUbxlr8qVgTJO5/qm2hOIQf8JxR46+t4nMtbJt/qZtGJcIUH2pSymrc InpWRIUdBkvJJnY5tHBxtGgt4tjkcxAg4VmpPXUDIIDUhmn9NsxY5HMcEcHd7WES /IqjoupPYSe5aogsHJD/YxspKsqM7w+iAzUDFJLFJO5Q4pfzE6TZP+0aBGz5oCvT 5MJ1Avj/pfJNVdrIfEiUnfP40mZoKOvov5f2jTVLR53RFlsVkkWQnFBDOmQpKm/y 6dAKPTo4j/OcTjN6/ExdH1waqY1zqi0= -----END CERTIFICATE-----Generated at Sun Jan 25 12:35:57 2026 by rpki-client