This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json) Hash identifier: SVa6TAeUoRc9Z0m1Coq6sRfgUEBVx+7eWhavvbq5pp0= Subject key identifier: 65:93:CF:59:95:F2:34:FE:D5:5E:B6:79:B1:CB:82:B0:A1:00:47:D5 Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0D5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft Manifest number: 0D54 Signing time: Sat 24 Jan 2026 17:39:08 +0000 Manifest this update: Sat 24 Jan 2026 17:39:08 +0000 Manifest next update: Sat 31 Jan 2026 17:39:08 +0000 Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: pK4sy4AhZ6sqlpuxdg5zJMtQR4yz8yHQZtNPewQNOhg=) 2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: eWcvHOUT67GedsanEfBHjHteAl5xPcgw0p372As4/K0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3422 (0xd5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: Jan 24 17:39:08 2026 GMT Not After : Jan 31 17:39:08 2026 GMT Subject: CN=697503bc-d71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:2a:74:98:fb:30:13:14:ff:b0:d2:51:ce: ed:e3:5a:e6:b4:f3:63:be:6b:39:3c:60:22:f4:44: 9e:de:fc:1c:68:cf:73:c1:d6:81:98:38:f2:fd:c1: db:fe:a8:7d:e4:1b:30:45:8b:d6:d7:8f:c0:f7:49: ea:d5:e9:0c:a2:da:78:db:a7:25:a6:e7:4e:b7:26: 5a:99:92:0c:19:a6:22:3d:e9:7c:ea:a0:7f:77:0c: fc:c1:cf:b0:ee:61:55:47:91:50:e2:85:22:b8:a2: bf:1b:2b:52:54:1d:88:7e:53:39:3c:7f:eb:46:3d: 7a:92:55:2c:47:aa:ed:ea:f6:ec:6c:77:34:ba:5c: d2:9e:fd:18:d5:f7:50:3e:30:7a:4c:43:16:bb:2d: b8:b3:27:ef:13:08:22:b9:34:46:ba:4b:10:e6:7d: 61:8a:a4:37:1c:5a:7b:bb:9d:f6:48:a6:af:50:7c: 2a:d4:af:84:85:d4:2d:ab:e2:42:5c:d4:95:3c:56: 8f:27:07:c4:f6:54:ef:b9:72:5a:7e:30:5c:bb:f8: 3f:5b:52:51:59:78:d7:f4:77:20:84:8e:68:65:7d: ac:48:ce:7f:9d:3a:37:9a:64:35:31:58:da:ed:4c: 86:b0:e3:17:56:29:c8:51:4d:bb:e1:b6:40:53:7a: b6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:93:CF:59:95:F2:34:FE:D5:5E:B6:79:B1:CB:82:B0:A1:00:47:D5 X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:65:09:c8:f8:a3:b7:85:f8:8b:47:14:ce:2b:7e:03:06:03: 5a:08:ba:a4:41:38:5e:c7:ba:e3:5b:3f:82:88:05:9d:08:6c: b2:7e:21:ea:6a:ab:da:f3:38:17:6f:cb:98:af:73:b5:71:ed: d3:85:9d:47:ad:59:47:24:de:be:e6:87:98:bd:74:d6:8a:11: 74:cf:81:ba:f1:5e:0e:b9:7d:61:3a:8c:ca:77:8a:17:4f:29: 6f:30:30:b5:c6:1a:eb:89:28:38:85:02:f3:2d:3a:e7:cb:82: 85:58:f1:bf:23:76:51:0c:bc:53:ec:85:e6:7f:62:d0:79:d9: 22:76:34:ee:d7:a9:e2:ad:38:cc:46:64:af:96:64:ee:33:a3: 62:11:41:b7:eb:f1:1b:c8:18:3c:fe:13:b5:a8:48:09:3f:22: 9e:a3:df:bb:3a:cb:45:9c:7d:28:ae:9d:f9:95:9e:34:1b:08: bf:bb:ff:46:13:2f:24:1a:88:1a:53:66:7b:39:84:a4:df:c7: a0:0e:4f:58:c8:75:0f:75:49:3a:21:54:92:6e:02:d9:ba:0a: 31:be:54:1c:6c:ab:c1:c2:9d:64:d6:5a:eb:0a:cc:09:8b:6b: 48:91:6a:66:a2:86:12:e5:c6:40:56:88:0a:cd:a5:38:aa:20: 5d:7e:8a:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjYwMTI0MTczOTA4WhcNMjYwMTMxMTczOTA4WjAYMRYwFAYD VQQDDA02OTc1MDNiYy1kNzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFoqdJj7MBMU/7DSUc7t41rmtPNjvms5PGAi9ESe3vwcaM9zwdaBmDjy/cHb /qh95BswRYvW14/A90nq1ekMotp426clpudOtyZamZIMGaYiPel86qB/dwz8wc+w 7mFVR5FQ4oUiuKK/GytSVB2IflM5PH/rRj16klUsR6rt6vbsbHc0ulzSnv0Y1fdQ PjB6TEMWuy24syfvEwgiuTRGuksQ5n1hiqQ3HFp7u532SKavUHwq1K+EhdQtq+JC XNSVPFaPJwfE9lTvuXJafjBcu/g/W1JRWXjX9HcghI5oZX2sSM5/nTo3mmQ1MVja 7UyGsOMXVinIUU274bZAU3q2wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWTz1mV 8jT+1V62ebHLgrChAEfVMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4 Q3pjN2VaWllnaGtUU3A1aEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfZQnI+KO3hfiLRxTOK34DBgNaCLqkQThex7rjWz+CiAWdCGyyfiHq aqva8zgXb8uYr3O1ce3ThZ1HrVlHJN6+5oeYvXTWihF0z4G68V4OuX1hOozKd4oX TylvMDC1xhrriSg4hQLzLTrny4KFWPG/I3ZRDLxT7IXmf2LQedkidjTu16nirTjM RmSvlmTuM6NiEUG36/EbyBg8/hO1qEgJPyKeo9+7OstFnH0orp35lZ40Gwi/u/9G Ey8kGogaU2Z7OYSk38egDk9YyHUPdUk6IVSSbgLZugoxvlQcbKvBwp1k1lrrCswJ i2tIkWpmooYS5cZAVogKzaU4qiBdfooe -----END CERTIFICATE-----Generated at Sun Jan 25 04:37:23 2026 by rpki-client