This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json) Hash identifier: GWQpfuS3l0Do9oyxoBwJZVHaWFzwlcqVN9YhjuILx8E= Subject key identifier: 85:DA:DC:1B:31:3F:F8:5A:43:84:37:A3:1E:8F:A9:66:BF:DB:99:DF Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 06C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft Manifest number: 0697 Signing time: Sat 24 Jan 2026 21:59:20 +0000 Manifest this update: Sat 24 Jan 2026 21:59:20 +0000 Manifest next update: Sat 31 Jan 2026 21:59:20 +0000 Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: IVV7a3P33LL7ybfy5U5lECKMhZ7KeJOrq3U88kULbOg=) 2: 617AEF02C0A211F0834F0B2EC4F9AE02.roa (hash: e2cBgK3GRmfDjSm1Qqg4IoisAWAPLTjuVCxKZ4c2zQ4=) 3: 845606CEC0A211F08C07402EC4F9AE02.roa (hash: 60O5q/M3Zhbupf4irny02ti/wPSXEWKTgiVbupEbwmY=) 4: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: lXdiATosqgnGw9iwMqgeyMFFlsqTM6dHLhkV++SdnXI=) 5: A19BECB47DC011F0907B9458C4F9AE02.roa (hash: PV6jY777/SNCb3xfvV4u3m3ixy1j9fHX09H2Nm4Vk4s=) 6: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: CKUqvOaMRoHUuvk0O3ZRuqOU8HxzjagSOpCtfnM7DSk=) 7: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: 50SJ1VD5Mg9u7/s+ykx+b/EGgkeu1R+I/i5QtPiDi1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1737 (0x6c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Jan 24 21:59:20 2026 GMT Not After : Jan 31 21:59:20 2026 GMT Subject: CN=697540b8-d256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f1:45:bc:33:8f:3c:5c:4a:be:08:3f:6d:79: 39:bd:03:79:32:83:db:8a:15:64:e3:68:b7:0f:1d: 8e:21:2e:d3:83:a3:f8:30:d2:b2:c5:e5:ba:1c:93: 8b:e3:ec:7b:b9:ee:2f:52:5e:82:3b:f1:70:12:fa: 89:21:bb:0b:46:b6:4f:3c:4e:05:ce:31:44:6e:57: 91:19:c9:8a:10:41:a3:f9:26:93:f0:29:31:ac:78: 9b:df:bc:d4:e9:95:fb:b8:60:fc:ac:3b:c4:19:16: ea:34:d9:a3:15:f2:4c:94:08:8a:69:83:8c:90:a2: 38:ac:ca:df:63:1a:8c:ba:34:66:09:b9:bf:57:2a: 3c:09:c5:71:01:d3:53:33:e8:12:e7:11:94:d3:30: 5d:ad:3b:2a:bb:d1:d4:96:30:7b:b4:51:85:db:b2: f6:2c:73:ea:3f:6e:93:ca:d4:79:90:22:9c:d5:83: 33:cf:21:d6:64:59:c6:66:1e:85:4a:be:fe:96:bc: 68:bd:e2:b4:4d:4b:23:5d:f6:07:5a:10:f3:80:07: 2b:7a:b2:9c:ff:9f:d9:25:c3:91:ca:20:b1:97:59: d7:53:65:2a:af:9d:92:a1:69:5b:6e:08:25:e6:fd: e2:ae:4c:85:59:15:eb:74:af:04:cf:84:88:71:92: 31:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DA:DC:1B:31:3F:F8:5A:43:84:37:A3:1E:8F:A9:66:BF:DB:99:DF X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:5d:4f:19:bf:c8:6f:7b:c7:2e:a8:10:8e:a3:5f:42:71:a3: 09:58:38:b6:f7:47:d9:5a:8d:22:6d:34:ac:20:56:00:06:dd: b7:37:9b:77:37:37:0d:f9:7b:b8:40:70:5d:b2:e7:23:e5:2b: 06:fc:f6:79:80:cc:8d:07:b5:b1:38:c4:20:fd:f4:a3:33:b6: 69:70:10:d6:75:91:c5:b8:dd:fa:53:aa:50:58:21:25:15:09: 84:6f:cb:df:ef:a9:62:61:47:ef:1f:22:90:08:17:d7:e9:4c: 8f:34:c7:ff:6a:9e:1c:ec:87:5c:d2:ae:04:88:17:74:24:9a: 8c:71:e5:f4:53:1e:d0:6c:77:86:ff:2e:18:97:57:1a:b5:d0: 7d:b6:f8:bf:04:69:58:6d:32:bd:ca:19:da:6a:e6:6c:82:bd: 13:c2:de:55:34:99:3d:f5:6a:7e:ea:26:a2:92:fe:c7:97:b7: 26:c9:47:1e:97:9a:37:99:83:7e:f8:69:44:d3:f9:19:6b:3a: 17:79:c7:8e:95:c5:23:d9:d2:75:55:c0:0c:a8:f6:02:31:5f: 04:19:98:d2:ca:dc:4d:b8:42:38:18:9a:d8:3d:95:52:48:cc: 24:cb:d9:d2:68:e9:ef:d7:6d:ca:28:29:ab:38:66:7a:a9:6a: 43:38:b0:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjYwMTI0MjE1OTIwWhcNMjYwMTMxMjE1OTIwWjAYMRYwFAYD VQQDDA02OTc1NDBiOC1kMjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPFFvDOPPFxKvgg/bXk5vQN5MoPbihVk42i3Dx2OIS7Tg6P4MNKyxeW6HJOL 4+x7ue4vUl6CO/FwEvqJIbsLRrZPPE4FzjFEbleRGcmKEEGj+SaT8CkxrHib37zU 6ZX7uGD8rDvEGRbqNNmjFfJMlAiKaYOMkKI4rMrfYxqMujRmCbm/Vyo8CcVxAdNT M+gS5xGU0zBdrTsqu9HUljB7tFGF27L2LHPqP26TytR5kCKc1YMzzyHWZFnGZh6F Sr7+lrxoveK0TUsjXfYHWhDzgAcrerKc/5/ZJcORyiCxl1nXU2Uqr52SoWlbbggl 5v3irkyFWRXrdK8Ez4SIcZIxVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXa3Bsx P/haQ4Q3ox6PqWa/25nfMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDZCMC8zMkU5ODczQ0JGQzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpM TkIyY3Q3YkFaWnZfcXN5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0XU8Zv8hve8cuqBCOo19CcaMJWDi290fZWo0ibTSsIFYABt23N5t3 NzcN+Xu4QHBdsucj5SsG/PZ5gMyNB7WxOMQg/fSjM7ZpcBDWdZHFuN36U6pQWCEl FQmEb8vf76liYUfvHyKQCBfX6UyPNMf/ap4c7Idc0q4EiBd0JJqMceX0Ux7QbHeG /y4Yl1catdB9tvi/BGlYbTK9yhnaauZsgr0Twt5VNJk99Wp+6iaikv7Hl7cmyUce l5o3mYN++GlE0/kZazoXeceOlcUj2dJ1VcAMqPYCMV8EGZjSytxNuEI4GJrYPZVS SMwky9nSaOnv123KKCmrOGZ6qWpDOLC+ -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:26 2026 by rpki-client