This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft File: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json) Hash identifier: o9IDnetiXm/Bmk1rS3cArf69swuKFzXQXVUitJ8ZbXg= Subject key identifier: 7D:E5:2A:A6:DA:6E:3F:B7:37:F7:FF:02:C3:B8:DE:F5:CE:85:D4:DF Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 Certificate issuer: /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft Manifest number: D4 Signing time: Sun 25 Jan 2026 04:59:52 +0000 Manifest this update: Sun 25 Jan 2026 04:59:52 +0000 Manifest next update: Sun 01 Feb 2026 04:59:52 +0000 Files and hashes: 1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: khncVmCbFDepxhg4vVL4d0ygid+TBVVEe7OM2mTibAk=) 2: E90F04F4114711F0B6E44E12C4F9AE02.roa (hash: PlQx8+H4QWwRWOJyC7w29KW+ohdqt59u/vmKToMRgGo=) 3: 1363F5E60E8E11F082304B42C4F9AE02.roa (hash: hu1JiBFiyTnMySrt80yNdScgCjSfSkHINTEYjzYfdUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B67, serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Validity Not Before: Jan 25 04:59:52 2026 GMT Not After : Feb 1 04:59:52 2026 GMT Subject: CN=6975a348-45a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:52:e6:6d:59:ed:40:3a:3f:38:32:7d:c0:e2: 2a:83:aa:e8:2e:97:96:ee:e7:49:0a:0a:17:e2:55: a7:be:60:ad:0b:74:5d:33:29:51:46:fe:31:44:02: 97:73:9e:f5:b4:e2:a2:b9:a8:b7:1a:31:c3:26:f1: 45:04:6a:55:4a:bf:82:fe:c8:20:b2:0b:f6:3b:9c: fe:14:af:f2:ab:e9:29:15:24:8e:76:d1:3f:ed:20: 0e:97:d2:47:d4:c4:1f:13:31:98:a6:24:e7:b6:5d: 23:ed:7f:57:41:a1:ff:df:f5:d9:e9:4a:cd:cf:f6: 50:5e:a4:b3:87:3c:4b:a0:3a:11:fb:e4:35:15:6d: 13:39:76:f6:dd:3e:69:19:21:dd:1e:74:c4:22:8f: 6c:91:ec:05:38:0a:63:ac:87:c4:6a:32:c4:ed:33: c4:19:3e:69:64:ee:e8:5a:30:1e:16:e2:b8:85:64: d6:4b:3a:fe:4a:e9:15:4d:aa:d7:54:9f:d6:8b:72: 0d:9f:72:d2:35:4c:c1:c6:ee:74:e5:44:bf:30:44: 1d:53:71:95:0e:96:7e:d3:9c:91:e3:7e:a4:4e:10: 39:0d:04:49:19:3a:ea:fc:45:e8:aa:17:d6:26:9e: 4d:9b:92:e7:9e:6a:9e:aa:e1:a4:f6:27:e1:16:7f: b9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E5:2A:A6:DA:6E:3F:B7:37:F7:FF:02:C3:B8:DE:F5:CE:85:D4:DF X509v3 Authority Key Identifier: keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:10:ca:35:b2:87:5a:b2:a8:ea:39:9a:31:be:c5:ef:0e:95: 14:01:bb:5b:19:34:d8:40:a2:6a:d7:72:8e:9a:77:a3:8a:e9: 05:98:8b:e5:31:60:d3:a7:fd:a9:6d:0d:46:82:dc:b9:03:98: ad:2d:29:b4:e9:e8:f4:b5:ce:98:9c:83:00:21:1c:d8:70:f6: c8:7e:f9:dc:e5:0e:6d:75:75:14:a4:09:32:66:d1:f3:27:f3: 81:e2:bc:59:90:d8:3a:b6:65:f3:24:94:38:17:9e:ab:90:ed: 87:89:a2:64:77:8a:29:6c:52:6b:bd:df:b4:89:34:2b:17:2a: 12:93:65:f6:9a:66:f4:0b:73:d0:50:2e:34:0d:6e:66:d9:56: ea:00:81:2b:51:cf:68:26:0c:79:c9:f4:ec:8c:f5:08:3c:e0: 9f:7a:d4:4d:17:75:4e:3d:0f:b0:51:0c:92:c8:61:c7:90:a9: 2d:94:a1:a3:61:9a:d5:35:9b:54:5c:ee:b3:77:08:0f:da:64: fe:fb:2a:80:0a:83:68:28:1c:4f:01:85:c0:d7:6a:e6:07:42: 65:d3:df:30:04:b8:69:e8:31:ab:41:c9:eb:9a:1b:46:a8:bd: 3e:ef:24:bc:09:5f:39:08:fc:cb:b7:85:be:b9:d0:62:ad:b0: 67:75:9a:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCNjcxMTAvBgNVBAUTKEQ0NTlEMjY3NTI1MjM0QTA1MzVFQzM4RDhDQ0M4OTkw MTk0REUxODkwHhcNMjYwMTI1MDQ1OTUyWhcNMjYwMjAxMDQ1OTUyWjAYMRYwFAYD VQQDDA02OTc1YTM0OC00NWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1LmbVntQDo/ODJ9wOIqg6roLpeW7udJCgoX4lWnvmCtC3RdMylRRv4xRAKX c571tOKiuai3GjHDJvFFBGpVSr+C/sggsgv2O5z+FK/yq+kpFSSOdtE/7SAOl9JH 1MQfEzGYpiTntl0j7X9XQaH/3/XZ6UrNz/ZQXqSzhzxLoDoR++Q1FW0TOXb23T5p GSHdHnTEIo9skewFOApjrIfEajLE7TPEGT5pZO7oWjAeFuK4hWTWSzr+SukVTarX VJ/Wi3INn3LSNUzBxu505US/MEQdU3GVDpZ+05yR436kThA5DQRJGTrq/EXoqhfW Jp5Nm5LnnmqequGk9ifhFn+5HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3lKqba bj+3N/f/AsO43vXOhdTfMB8GA1UdIwQYMBaAFNRZ0mdSUjSgU17DjYzMiZAZTeGJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEI2Ny8yRkEwMEQzRUM2 QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05LQlRYc09Oak15SmtCbE40 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGblNaMUpTTktCVFhzT05qTXlKa0JsTjRZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEI2Ny8yRkEwMEQzRUM2QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05L QlRYc09Oak15SmtCbE40WWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPEMo1sodasqjqOZoxvsXvDpUUAbtbGTTYQKJq13KOmnejiukFmIvl MWDTp/2pbQ1Ggty5A5itLSm06ej0tc6YnIMAIRzYcPbIfvnc5Q5tdXUUpAkyZtHz J/OB4rxZkNg6tmXzJJQ4F56rkO2HiaJkd4opbFJrvd+0iTQrFyoSk2X2mmb0C3PQ UC40DW5m2VbqAIErUc9oJgx5yfTsjPUIPOCfetRNF3VOPQ+wUQySyGHHkKktlKGj YZrVNZtUXO6zdwgP2mT++yqACoNoKBxPAYXA12rmB0Jl098wBLhp6DGrQcnrmhtG qL0+7yS8CV85CPzLt4W+udBirbBndZpw -----END CERTIFICATE-----Generated at Sun Jan 25 07:51:27 2026 by rpki-client