This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft File: yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft (raw, json) Hash identifier: nbVvc2jsOvmg+0wjCFLkRnde9HVQuKbLEDzYmKipkP8= Subject key identifier: 9F:C1:B4:57:57:25:75:1E:77:F3:9F:0B:EE:64:83:DE:B6:69:53:FC Authority key identifier: C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D Certificate issuer: /CN=A91A2946/serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft Manifest number: 1E Signing time: Sun 25 Jan 2026 07:00:14 +0000 Manifest this update: Sun 25 Jan 2026 07:00:13 +0000 Manifest next update: Sun 01 Feb 2026 07:00:13 +0000 Files and hashes: 1: yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl (hash: xSq1BOLGhJ3qmJ28RvVJRKcDntDPaJ5RJTf6gJTKtO8=) 2: 26CABD66DB4011F0B92C4C778FD3641D.roa (hash: qNSJ4pqRhXOzoVAHZQaycGg0ZmCHhSMerGrL2kuYbx8=) 3: 32A734F4DB3411F095EFF1788DD3641D.roa (hash: R8KX+/SyNsukJ5wZis8PnNKPy522TKB6VdISz0Pj3f8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 07:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2946, serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D Validity Not Before: Jan 25 07:00:13 2026 GMT Not After : Feb 1 07:00:13 2026 GMT Subject: CN=6975bf7e-fcfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:d3:9a:f0:39:73:ad:5f:32:0f:60:5a:40: 93:28:f9:97:7a:18:27:1d:3b:75:7d:6d:f2:46:20: f9:a6:a3:6e:15:41:e1:08:b3:fd:d7:fd:af:2e:61: 0a:36:44:af:4c:6f:2b:cf:d0:03:09:86:d2:9e:64: 3f:f6:6a:3d:6e:e5:c0:55:78:66:26:1c:a5:9b:aa: 7a:4f:cd:7c:19:68:1a:67:e7:45:21:ca:9d:ae:02: 48:b6:6a:aa:5e:85:36:d3:6e:86:5a:2e:a1:98:76: e9:3d:a5:88:76:fe:c9:28:bc:20:d2:33:5b:ed:ca: 5c:30:87:00:fa:9f:9e:f4:c0:ba:4a:70:70:8d:b1: 3e:61:79:de:37:a7:80:de:64:af:8a:cf:25:af:c5: 8c:17:ea:31:c5:ce:51:cc:fb:57:72:d8:bb:7e:18: 39:58:0b:bb:15:93:a7:c2:a1:53:38:21:ec:b3:c3: 17:ce:37:60:4f:16:e3:e4:66:c9:d7:a9:2d:61:df: 10:8f:7d:6a:52:ad:02:f4:22:00:c0:66:95:23:21: 47:bc:14:82:6c:d0:aa:df:d2:73:c9:a2:c4:d6:08: b4:c0:64:57:36:ad:55:1c:4c:25:65:bf:1c:b3:a8: df:b3:f8:6d:5f:8b:8c:43:f3:d2:35:12:8d:f0:42: 88:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C1:B4:57:57:25:75:1E:77:F3:9F:0B:EE:64:83:DE:B6:69:53:FC X509v3 Authority Key Identifier: keyid:C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:2e:43:d7:4f:c8:ef:58:ca:f5:34:d8:3d:d4:c8:df:cb:2d: e1:a4:2e:0e:ad:e9:12:be:f4:0c:c6:d5:27:1e:89:63:34:11: f6:40:85:d1:77:6a:95:46:71:29:a2:fe:51:33:b4:b0:a8:b6: 8a:38:da:46:75:aa:fd:81:cb:f9:42:18:bf:7d:e8:0c:c7:8a: 60:31:5c:c2:47:10:0d:51:d0:7f:5b:48:df:d6:84:d8:89:c4: 58:d4:0c:0f:e6:47:0b:4b:b2:1a:8f:74:5e:d8:da:4c:5f:07: 10:44:e7:ca:66:ad:82:e8:d4:ba:cc:4c:0d:e5:a4:dc:c1:4c: 03:7a:3d:73:04:fd:83:33:da:a3:ba:d2:e8:69:43:06:85:7c: 61:f5:89:9f:a0:fa:69:35:2b:6d:a6:56:d7:2e:f3:a3:3e:16: ca:88:c6:37:f8:34:bd:34:30:3e:a5:3f:41:c3:e6:5f:6e:10: 9f:45:4a:f0:93:82:38:1e:c8:ba:96:dd:16:32:08:16:82:b0: c5:ae:21:5e:0b:56:bf:28:23:ec:c3:0f:d3:8f:22:0e:44:cf: 64:92:57:0c:c6:cc:54:c2:e2:85:50:db:3e:13:40:29:41:2c: f9:f4:8f:c2:44:d0:a0:1e:a1:f3:72:83:90:43:7a:73:c6:99: 7c:c8:71:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB Mjk0NjExMC8GA1UEBRMoQzhFQkMyNDVDMDRDRjNFNDZDRkVFNzgxMjM4N0NDMUQ1 QUQzOEU1RDAeFw0yNjAxMjUwNzAwMTNaFw0yNjAyMDEwNzAwMTNaMBgxFjAUBgNV BAMMDTY5NzViZjdlLWZjZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz9tOa8DlzrV8yD2BaQJMo+Zd6GCcdO3V9bfJGIPmmo24VQeEIs/3X/a8uYQo2 RK9MbyvP0AMJhtKeZD/2aj1u5cBVeGYmHKWbqnpPzXwZaBpn50Uhyp2uAki2aqpe hTbTboZaLqGYduk9pYh2/skovCDSM1vtylwwhwD6n570wLpKcHCNsT5hed43p4De ZK+KzyWvxYwX6jHFzlHM+1dy2Lt+GDlYC7sVk6fCoVM4IeyzwxfON2BPFuPkZsnX qS1h3xCPfWpSrQL0IgDAZpUjIUe8FIJs0Krf0nPJosTWCLTAZFc2rVUcTCVlvxyz qN+z+G1fi4xD89I1Eo3wQoifAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUn8G0V1cl dR53858L7mSD3rZpU/wwHwYDVR0jBBgwFoAUyOvCRcBM8+Rs/ueBI4fMHVrTjl0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOTQ2L0FDRDRGQjVFREIz MzExRjBBMkNFNTM2ODhDRDM2NDFEL3lPdkNSY0JNOC1Sc191ZUJJNGZNSFZyVGps MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveU92Q1JjQk04LVJzX3VlQkk0Zk1IVnJUamwwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy OTQ2L0FDRDRGQjVFREIzMzExRjBBMkNFNTM2ODhDRDM2NDFEL3lPdkNSY0JNOC1S c191ZUJJNGZNSFZyVGpsMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACMuQ9dPyO9YyvU02D3UyN/LLeGkLg6t6RK+9AzG1SceiWM0EfZAhdF3 apVGcSmi/lEztLCotoo42kZ1qv2By/lCGL996AzHimAxXMJHEA1R0H9bSN/WhNiJ xFjUDA/mRwtLshqPdF7Y2kxfBxBE58pmrYLo1LrMTA3lpNzBTAN6PXME/YMz2qO6 0uhpQwaFfGH1iZ+g+mk1K22mVtcu86M+FsqIxjf4NL00MD6lP0HD5l9uEJ9FSvCT gjgeyLqW3RYyCBaCsMWuIV4LVr8oI+zDD9OPIg5Ez2SSVwzGzFTC4oVQ2z4TQClB LPn0j8JE0KAeofNyg5BDenPGmXzIcVM= -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:40 2026 by rpki-client