This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft File: D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft (raw, json) Hash identifier: FEc8TQQsjEkg+Hvifw4OztPEYgbZjb5iMBfN0JirvIY= Subject key identifier: 59:DF:74:F9:8C:95:5E:39:10:F7:3D:D0:C1:25:39:D0:A3:D2:25:84 Authority key identifier: 0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75 Certificate issuer: /CN=A91A9720/serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft Manifest number: 10 Signing time: Sun 25 Jan 2026 07:04:12 +0000 Manifest this update: Sun 25 Jan 2026 07:04:11 +0000 Manifest next update: Sun 01 Feb 2026 07:04:11 +0000 Files and hashes: 1: D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl (hash: BIsbT4Psh9EudNbIU2BXroh/BD/5ajgDkBe0vBhk3KI=) 2: 88128B34E55A11F0A78CF268396F56BC.roa (hash: HHL6kdnlbPDQz7AjXAsWLR46QCw18YsY0020DlTzrO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 07:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9720, serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075 Validity Not Before: Jan 25 07:04:11 2026 GMT Not After : Feb 1 07:04:11 2026 GMT Subject: CN=6975c06b-7e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:75:b3:85:f2:8c:07:15:f2:58:f5:7b:f3:c5: fe:c8:75:8b:73:59:a4:b0:b6:13:c2:0f:99:9c:24: 7b:e7:84:e2:a2:d2:c0:7e:c8:2c:89:80:62:42:83: cb:22:05:62:df:da:60:c6:5c:d2:ff:c9:dd:c8:9e: 36:27:64:b6:bc:77:70:b1:1a:e5:26:56:2a:d2:66: e6:7e:46:82:2a:67:04:10:16:7b:0d:f6:65:fd:65: e9:08:8d:e3:7c:57:8e:92:07:fa:ee:b0:29:73:ac: 15:37:6d:7c:ae:89:0f:c5:80:6d:02:cc:e6:18:e4: d9:cb:94:ef:b8:b9:20:04:a9:63:3f:c5:5d:ee:6e: 17:6f:d7:9b:76:10:44:81:b5:0a:a9:1b:e9:18:3f: 1b:24:63:21:7e:5b:bc:68:22:12:c6:a3:eb:de:9a: 3c:59:c2:bf:c7:6f:a9:a1:cd:db:de:f7:cd:ae:ed: ec:e3:0d:ac:3e:b5:2a:d1:64:fb:11:2a:a2:ec:5b: da:99:a3:42:c6:e1:1b:e9:d2:d5:f3:6f:08:f7:0a: ae:7c:1b:e2:77:70:b2:f6:a5:40:a5:0d:36:96:b9: 72:be:24:58:14:9c:4e:6e:48:5b:14:3e:97:f3:6e: 14:90:87:07:ea:b8:58:57:7b:0a:44:92:56:7f:c9: 85:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DF:74:F9:8C:95:5E:39:10:F7:3D:D0:C1:25:39:D0:A3:D2:25:84 X509v3 Authority Key Identifier: keyid:0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:17:87:8f:b9:99:6e:e0:69:da:5b:1b:91:a8:eb:db:3a:78: 1b:b7:0c:bd:ed:02:b1:d7:05:9c:53:d0:20:04:70:fe:41:25: 33:ee:d7:30:7d:53:c4:35:13:ec:c7:ad:5e:44:4c:81:d5:86: d5:11:bf:dc:06:08:af:bb:c5:3a:5b:fe:7b:b5:68:9b:55:03: d9:b0:e2:bd:b9:be:70:f4:5c:1f:39:cc:7c:f8:cf:14:4c:bf: 29:18:95:6a:14:16:8d:06:ea:a2:80:89:e8:ac:92:38:fa:b0: b4:61:9a:dd:ff:56:92:5a:5a:e1:b9:67:86:74:72:0e:a1:b7: c6:94:90:c4:f1:9c:42:3f:b8:53:22:3e:09:c5:aa:10:0f:2e: 55:e9:ac:31:94:17:dd:d6:c2:14:ef:9c:a7:7d:33:f4:5d:a7: 5a:ac:5d:fc:72:68:61:3f:5e:e4:03:6f:3f:db:7c:af:26:69: 80:53:6d:57:39:a3:b8:7d:27:f7:b1:f8:1f:53:ee:5d:ff:0f: ea:90:41:e4:eb:24:94:5f:a1:89:c1:ef:10:24:34:7d:d9:64: e4:8f:f0:00:9d:2f:6f:63:13:b1:0f:bc:0f:d4:22:a2:d1:2e: 2e:98:77:5e:36:6f:e2:aa:67:d3:85:e6:90:76:a7:e3:57:6b: 2d:f4:03:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFB OTcyMDExMC8GA1UEBRMoMEY1NDY3QTlEMUVCMDk4QjUyQ0MxMzlENTc0M0I0NzQ1 QkY1OTA3NTAeFw0yNjAxMjUwNzA0MTFaFw0yNjAyMDEwNzA0MTFaMBgxFjAUBgNV BAMMDTY5NzVjMDZiLTdlMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsdbOF8owHFfJY9Xvzxf7IdYtzWaSwthPCD5mcJHvnhOKi0sB+yCyJgGJCg8si BWLf2mDGXNL/yd3InjYnZLa8d3CxGuUmVirSZuZ+RoIqZwQQFnsN9mX9ZekIjeN8 V46SB/rusClzrBU3bXyuiQ/FgG0CzOYY5NnLlO+4uSAEqWM/xV3ubhdv15t2EESB tQqpG+kYPxskYyF+W7xoIhLGo+vemjxZwr/Hb6mhzdve982u7ezjDaw+tSrRZPsR KqLsW9qZo0LG4Rvp0tXzbwj3Cq58G+J3cLL2pUClDTaWuXK+JFgUnE5uSFsUPpfz bhSQhwfquFhXewpEklZ/yYVbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWd90+YyV XjkQ9z3QwSU50KPSJYQwHwYDVR0jBBgwFoAUD1RnqdHrCYtSzBOdV0O0dFv1kHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5NzIwLzUxOUMxMDRFRTU1 OTExRjBCMjI4ODk1ODM4NkY1NkJDL0QxUm5xZEhyQ1l0U3pCT2RWME8wZEZ2MWtI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRDFSbnFkSHJDWXRTekJPZFYwTzBkRnYxa0hVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 NzIwLzUxOUMxMDRFRTU1OTExRjBCMjI4ODk1ODM4NkY1NkJDL0QxUm5xZEhyQ1l0 U3pCT2RWME8wZEZ2MWtIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJsXh4+5mW7gadpbG5Go69s6eBu3DL3tArHXBZxT0CAEcP5BJTPu1zB9 U8Q1E+zHrV5ETIHVhtURv9wGCK+7xTpb/nu1aJtVA9mw4r25vnD0XB85zHz4zxRM vykYlWoUFo0G6qKAieiskjj6sLRhmt3/VpJaWuG5Z4Z0cg6ht8aUkMTxnEI/uFMi PgnFqhAPLlXprDGUF93WwhTvnKd9M/Rdp1qsXfxyaGE/XuQDbz/bfK8maYBTbVc5 o7h9J/ex+B9T7l3/D+qQQeTrJJRfoYnB7xAkNH3ZZOSP8ACdL29jE7EPvA/UIqLR Li6Yd142b+KqZ9OF5pB2p+NXay30A/s= -----END CERTIFICATE-----Generated at Sun Jan 25 13:06:16 2026 by rpki-client