This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft File: cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft (raw, json) Hash identifier: dxFqUc4Qp/r4RwT96ixxpyRdqutm21BN35GHYmoryzQ= Subject key identifier: D6:CC:38:BB:4B:65:07:8C:CB:DA:9E:40:46:E7:F4:0D:EA:CD:9B:7A Authority key identifier: 71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74 Certificate issuer: /CN=A91A759F/serialNumber=71ACECF1A1AD97085655DBD344C3EBBBD56FE474 Certificate serial: 097A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft Manifest number: 3CF9 Signing time: Sat 24 Jan 2026 15:13:14 +0000 Manifest this update: Sat 24 Jan 2026 15:13:14 +0000 Manifest next update: Sat 31 Jan 2026 15:13:14 +0000 Files and hashes: 1: cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl (hash: uKU6DAQpI1PvyMsBK6BcHr24wFdj2JERUUtRaz33nB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2426 (0x97a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A759F, serialNumber=71ACECF1A1AD97085655DBD344C3EBBBD56FE474 Validity Not Before: Jan 24 15:13:14 2026 GMT Not After : Jan 31 15:13:14 2026 GMT Subject: CN=6974e18a-af4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:63:d1:93:94:d3:77:1e:b4:67:fe:85:dd:e1: 2c:0a:db:9b:ca:c8:9e:92:96:ab:3c:3f:d0:df:65: a9:90:ed:26:cc:31:99:f6:32:35:a4:af:96:4e:9b: ef:28:26:15:b6:4a:ac:6e:81:2b:d0:de:88:c0:13: 32:34:88:c8:ed:9a:b6:bf:2a:0f:53:56:02:ed:73: c0:7a:87:c3:ff:9c:f9:aa:ac:4e:1f:b2:f4:a0:a8: 30:97:7c:2c:5f:8b:ec:89:0c:ca:d5:3b:00:60:b9: a6:b6:29:dc:23:04:c0:b0:70:59:ed:29:e2:a9:8b: 01:e7:a6:5f:b6:b8:37:ea:39:8f:1c:ef:9d:48:e0: 75:ed:5c:ca:31:94:b0:5b:b1:4b:74:91:d5:b6:8d: a4:5e:ea:e8:d2:9d:ba:e0:12:d4:cc:8c:b1:37:1d: 16:f1:04:4f:43:a8:1f:c3:d1:ad:28:e5:3d:18:f9: f2:ac:33:9e:a3:29:6e:e4:0b:88:cc:44:91:79:3d: 9e:ae:1a:3e:44:82:52:37:4b:77:1f:9b:a6:6a:58: 59:da:41:da:02:66:98:2f:37:2d:8d:ae:2d:d8:e7: ab:75:17:f5:ea:31:dd:36:40:f2:b4:5d:76:e6:93: 5f:6a:28:05:79:8a:b5:fe:96:d8:ed:b6:54:0f:8a: 26:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CC:38:BB:4B:65:07:8C:CB:DA:9E:40:46:E7:F4:0D:EA:CD:9B:7A X509v3 Authority Key Identifier: keyid:71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:c7:b4:29:71:bd:3d:1e:d7:c8:87:80:71:59:27:14:5d:07: 28:c1:f1:ea:00:d2:09:7e:21:4f:54:05:2e:74:51:77:69:ca: 3e:47:78:6f:24:30:5a:53:f3:6f:c5:26:ad:1a:6d:a6:32:1b: 73:38:f0:d3:f3:1e:51:51:e6:fc:ea:2c:8c:56:86:a5:2f:c1: 03:f7:d4:0b:ba:2b:d1:25:8d:34:93:96:e2:c8:3c:77:22:7e: 39:36:b6:ae:71:53:80:42:37:2b:33:44:1e:9f:fa:4e:de:d8: a6:8c:59:3c:99:72:bd:56:33:07:27:95:db:57:e0:ed:ca:b5: 90:7b:7a:be:49:c2:e0:4a:3f:94:14:11:2a:08:fc:78:7a:ea: f4:be:70:07:83:b7:1b:5d:da:f8:4f:8b:98:ae:30:26:83:47: f8:f4:de:75:1e:0a:ea:e7:cc:17:33:66:9a:61:d7:6a:93:32: 6d:bd:df:22:a0:84:0d:d0:ff:2e:00:ba:6f:3d:f5:f8:07:cc: d5:08:59:07:e0:71:ae:52:30:36:5c:1b:66:10:7c:51:5f:0b: e1:ac:aa:64:86:75:bb:26:4e:7d:0c:e9:00:cb:b2:dc:42:d9: 24:ee:ec:9b:03:a0:bf:1c:2d:a0:26:63:d3:8d:f8:b4:ae:a3: a5:89:3c:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc1OUYxMTAvBgNVBAUTKDcxQUNFQ0YxQTFBRDk3MDg1NjU1REJEMzQ0QzNFQkJC RDU2RkU0NzQwHhcNMjYwMTI0MTUxMzE0WhcNMjYwMTMxMTUxMzE0WjAYMRYwFAYD VQQDDA02OTc0ZTE4YS1hZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGPRk5TTdx60Z/6F3eEsCtubysiekparPD/Q32WpkO0mzDGZ9jI1pK+WTpvv KCYVtkqsboEr0N6IwBMyNIjI7Zq2vyoPU1YC7XPAeofD/5z5qqxOH7L0oKgwl3ws X4vsiQzK1TsAYLmmtincIwTAsHBZ7SniqYsB56Zftrg36jmPHO+dSOB17VzKMZSw W7FLdJHVto2kXuro0p264BLUzIyxNx0W8QRPQ6gfw9GtKOU9GPnyrDOeoylu5AuI zESReT2erho+RIJSN0t3H5umalhZ2kHaAmaYLzctja4t2OerdRf16jHdNkDytF12 5pNfaigFeYq1/pbY7bZUD4omNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbMOLtL ZQeMy9qeQEbn9A3qzZt6MB8GA1UdIwQYMBaAFHGs7PGhrZcIVlXb00TD67vVb+R0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzU5Ri8wQTZGMjYzNDY5 QzUxMUUyODU5MDAyNDUyOTc5QkIyMC9jYXpzOGFHdGx3aFdWZHZUUk1QcnU5VnY1 SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NhenM4YUd0bHdoV1ZkdlRSTVBydTlWdjVIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzU5Ri8wQTZGMjYzNDY5QzUxMUUyODU5MDAyNDUyOTc5QkIyMC9jYXpzOGFHdGx3 aFdWZHZUUk1QcnU5VnY1SFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCix7Qpcb09HtfIh4BxWScUXQcowfHqANIJfiFPVAUudFF3aco+R3hv JDBaU/NvxSatGm2mMhtzOPDT8x5RUeb86iyMVoalL8ED99QLuivRJY00k5biyDx3 In45NraucVOAQjcrM0Qen/pO3timjFk8mXK9VjMHJ5XbV+DtyrWQe3q+ScLgSj+U FBEqCPx4eur0vnAHg7cbXdr4T4uYrjAmg0f49N51Hgrq58wXM2aaYddqkzJtvd8i oIQN0P8uALpvPfX4B8zVCFkH4HGuUjA2XBtmEHxRXwvhrKpkhnW7Jk59DOkAy7Lc Qtkk7uybA6C/HC2gJmPTjfi0rqOliTwg -----END CERTIFICATE-----Generated at Sun Jan 25 06:11:56 2026 by rpki-client