This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft File: s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft (raw, json) Hash identifier: OAqB2XwIsTYRtjKhBXpS7JIa+qkhjxBBnGclONbNNAo= Subject key identifier: B3:A6:AF:B6:C6:26:9A:45:1A:CA:B5:A3:3A:6D:FD:A2:06:55:AC:4F Authority key identifier: B3:60:DB:14:9D:55:C1:8E:03:71:E0:42:87:57:CA:F1:FD:D4:2C:33 Certificate issuer: /CN=A91A05BF/serialNumber=B360DB149D55C18E0371E0428757CAF1FDD42C33 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2DbFJ1VwY4DceBCh1fK8f3ULDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft Manifest number: 30 Signing time: Sun 25 Jan 2026 06:38:52 +0000 Manifest this update: Sun 25 Jan 2026 06:38:52 +0000 Manifest next update: Sun 01 Feb 2026 06:38:52 +0000 Files and hashes: 1: s2DbFJ1VwY4DceBCh1fK8f3ULDM.crl (hash: LcJO1gSp6reWKjKkJoRlxFIrG1pEO6GwNdhzXkAjVCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.crl rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2DbFJ1VwY4DceBCh1fK8f3ULDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A05BF, serialNumber=B360DB149D55C18E0371E0428757CAF1FDD42C33 Validity Not Before: Jan 25 06:38:52 2026 GMT Not After : Feb 1 06:38:52 2026 GMT Subject: CN=6975ba7c-b015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:db:ed:58:f9:ce:bd:8b:b1:0b:9f:b1:bd:ca: 59:14:77:69:7c:e3:f8:24:8d:f1:2b:28:49:85:22: 89:dd:14:b6:8f:f3:c9:23:d8:ee:60:da:30:b5:91: 71:84:6e:88:fe:9a:32:49:11:50:04:34:ba:98:08: c8:a2:98:3c:db:dc:88:88:b4:6e:86:52:5e:d3:a7: 93:1e:cf:e0:71:8a:95:e0:c6:b3:74:a9:ed:b1:6e: 91:20:ab:23:53:0e:d0:45:c5:3d:14:00:5d:93:a3: 5d:39:96:a7:24:7e:34:87:e4:90:30:15:40:78:9a: 97:78:7b:7a:80:a4:39:d2:7d:20:20:f2:1a:37:a6: 78:e2:1c:68:a9:3f:27:d3:49:96:a1:9d:5d:9b:a2: 5e:f8:49:fc:c8:6a:87:81:36:cd:86:ec:e9:7b:7e: fb:f6:9c:b5:66:6e:b6:56:7d:a4:dd:45:d4:6d:b0: 5f:cb:54:1d:eb:6f:b3:6d:a2:43:a4:2f:ee:98:08: 0b:f3:0d:8f:88:47:68:64:dc:44:a9:43:24:e6:be: da:df:c1:79:d1:19:d4:94:7a:a6:55:89:91:6e:b8: e7:a1:15:46:42:9b:db:46:c9:4c:95:e9:2c:86:d8: 74:c3:09:a5:85:10:ce:e5:65:a2:6b:4b:cc:78:7c: e7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A6:AF:B6:C6:26:9A:45:1A:CA:B5:A3:3A:6D:FD:A2:06:55:AC:4F X509v3 Authority Key Identifier: keyid:B3:60:DB:14:9D:55:C1:8E:03:71:E0:42:87:57:CA:F1:FD:D4:2C:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2DbFJ1VwY4DceBCh1fK8f3ULDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9d:14:6b:57:4d:2b:3f:2b:c4:61:bd:61:c2:c4:4e:65:e6: 94:fd:9d:7e:39:0f:ef:e9:f3:70:fe:6b:17:6e:4b:bd:73:f0: e2:83:3d:d4:3f:a3:e4:fa:8c:b6:b4:bb:79:26:2d:5a:19:6a: d4:83:54:23:fc:fd:1c:dd:8b:20:58:f8:31:a6:3e:3a:b4:03: e2:d4:55:1a:3d:6c:92:df:1c:7c:8a:67:3d:eb:07:89:57:da: ea:33:d0:d1:b8:be:72:85:be:45:37:f3:2f:b1:bd:24:f5:04: 6a:2d:04:37:59:c2:dc:6f:c3:ed:db:1a:98:e9:c2:f5:00:26: 18:3f:7d:73:62:e6:08:1c:07:ca:34:30:81:9d:bd:20:35:6c: c9:a1:68:a1:73:3e:b9:4e:e7:63:45:23:ef:12:7e:13:ee:b8: a3:4f:65:78:da:fb:4e:01:ca:d9:20:27:fe:7e:39:f8:20:0f: 96:f0:fd:bd:28:0a:19:72:54:8b:f6:8b:2f:f0:23:26:ec:39: bb:c1:98:14:f1:51:ef:7a:c2:47:91:01:0e:6d:0b:fc:7d:52: 62:20:04:58:a7:82:c3:b5:d5:34:ea:04:8d:68:2f:70:48:42: 9a:58:2c:b1:fc:c6:a8:2f:fa:fc:74:b7:39:c1:23:ee:1e:05: 10:d5:96:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDVCRjExMC8GA1UEBRMoQjM2MERCMTQ5RDU1QzE4RTAzNzFFMDQyODc1N0NBRjFG REQ0MkMzMzAeFw0yNjAxMjUwNjM4NTJaFw0yNjAyMDEwNjM4NTJaMBgxFjAUBgNV BAMMDTY5NzViYTdjLWIwMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr2+1Y+c69i7ELn7G9ylkUd2l84/gkjfErKEmFIondFLaP88kj2O5g2jC1kXGE boj+mjJJEVAENLqYCMiimDzb3IiItG6GUl7Tp5Mez+BxipXgxrN0qe2xbpEgqyNT DtBFxT0UAF2To105lqckfjSH5JAwFUB4mpd4e3qApDnSfSAg8ho3pnjiHGipPyfT SZahnV2bol74SfzIaoeBNs2G7Ol7fvv2nLVmbrZWfaTdRdRtsF/LVB3rb7NtokOk L+6YCAvzDY+IR2hk3ESpQyTmvtrfwXnRGdSUeqZViZFuuOehFUZCm9tGyUyV6SyG 2HTDCaWFEM7lZaJrS8x4fOc/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs6avtsYm mkUayrWjOm39ogZVrE8wHwYDVR0jBBgwFoAUs2DbFJ1VwY4DceBCh1fK8f3ULDMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNUJGLzIxQkNENjc4QjNC NDExRjBCNjkxN0YwRUM0RjlBRTAyL3MyRGJGSjFWd1k0RGNlQkNoMWZLOGYzVUxE TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvczJEYkZKMVZ3WTREY2VCQ2gxZks4ZjNVTERNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw NUJGLzIxQkNENjc4QjNCNDExRjBCNjkxN0YwRUM0RjlBRTAyL3MyRGJGSjFWd1k0 RGNlQkNoMWZLOGYzVUxETS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH6dFGtXTSs/K8RhvWHCxE5l5pT9nX45D+/p83D+axduS71z8OKDPdQ/ o+T6jLa0u3kmLVoZatSDVCP8/RzdiyBY+DGmPjq0A+LUVRo9bJLfHHyKZz3rB4lX 2uoz0NG4vnKFvkU38y+xvST1BGotBDdZwtxvw+3bGpjpwvUAJhg/fXNi5ggcB8o0 MIGdvSA1bMmhaKFzPrlO52NFI+8SfhPuuKNPZXja+04BytkgJ/5+OfggD5bw/b0o ChlyVIv2iy/wIybsObvBmBTxUe96wkeRAQ5tC/x9UmIgBFingsO11TTqBI1oL3BI QppYLLH8xqgv+vx0tznBI+4eBRDVloY= -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:26 2026 by rpki-client