This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft File: _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json) Hash identifier: eH/qrYNswV7wjaVlPGe5Iuo8+vZvRV7f9pSx3M9OkUg= Subject key identifier: 6B:B4:39:54:97:5B:A5:AD:F1:F7:58:A9:3A:3E:D3:99:10:34:E4:00 Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft Manifest number: 95 Signing time: Sun 25 Jan 2026 05:37:16 +0000 Manifest this update: Sun 25 Jan 2026 05:37:15 +0000 Manifest next update: Sun 01 Feb 2026 05:37:15 +0000 Files and hashes: 1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: 3COQej+78nWOkfoxvFRFPYzc7K75kEhuTu/HXnm2nK0=) 2: 2A8C8F02198E11F09D302145C4F9AE02.roa (hash: pkFF5f+Vaat+aJOayMibpTMU9Wp7Q864DQvUc24s624=) 3: 947AB09E459C11F0BF881335C4F9AE02.roa (hash: ZL0Aa2llI8aydVHlIy2x+gVqsBcKLbop2xFjrlC+Qtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: Jan 25 05:37:15 2026 GMT Not After : Feb 1 05:37:15 2026 GMT Subject: CN=6975ac0c-7c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5a:30:22:89:f7:05:2d:30:c3:4c:e3:2f:7a: 3f:6d:db:57:e3:d9:17:85:52:1f:50:63:8a:e5:d9: 82:25:a2:15:e8:e8:a0:a4:26:43:de:b2:fe:21:97: 26:de:2f:00:a4:58:45:92:bd:f0:d7:36:56:ea:33: e8:22:05:80:61:89:84:61:f4:73:80:f8:ef:a6:e4: b1:e3:67:50:eb:9f:d2:e8:00:fc:2f:b1:18:c8:30: 29:7f:50:01:f8:56:1e:8e:e6:e4:d4:c7:56:9a:e9: 4f:92:71:3c:07:fe:3a:c1:34:13:75:4a:6f:71:ad: aa:57:00:4f:67:23:80:dd:76:34:ba:8b:71:cf:a7: c8:48:ee:b8:63:ce:2c:2f:42:b8:bb:e9:f9:a3:6e: c2:8a:51:f7:dd:0a:15:55:2d:c2:bf:2f:77:fc:69: 0b:20:01:57:ad:b6:cc:cc:4b:40:17:6a:eb:a9:78: fc:b4:97:f2:c7:06:52:c1:7a:44:db:7d:4c:5c:6e: 63:72:97:6f:8a:49:1f:f6:a6:af:b6:bd:63:25:fc: 80:88:c4:be:1f:0e:30:1b:1c:56:88:19:35:c3:92: 43:ea:d2:5e:66:04:ba:7b:03:86:8e:9e:3b:64:be: 0a:e8:04:29:92:66:33:36:e0:3e:4d:f2:fe:5c:46: 25:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B4:39:54:97:5B:A5:AD:F1:F7:58:A9:3A:3E:D3:99:10:34:E4:00 X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:2f:a2:87:b3:56:50:a0:b3:c6:76:fb:1e:e3:33:9b:48:cc: ca:f2:c7:6f:b4:c9:87:17:b6:1a:39:84:9b:25:d6:27:01:42: 42:50:e5:62:5e:cb:a3:1a:f8:af:cb:ff:64:e7:a7:fa:ac:b9: 03:6d:08:a0:5e:0c:95:6e:6f:79:71:c8:d1:d8:ab:f7:a1:17: a4:b4:96:ec:17:07:34:07:ef:34:53:1b:91:5a:ff:f9:12:74: fe:a2:d2:41:73:c4:3f:22:c1:5a:b5:4e:3d:4e:37:ae:b2:a5: b9:9e:8d:c1:a1:22:4b:28:36:a7:a9:b4:75:35:b6:fb:66:20: d8:df:60:f2:d0:ef:81:d4:7b:5f:71:94:33:40:7e:40:51:27: f0:02:2d:77:8b:fa:97:bc:05:6d:51:e7:7f:21:31:5d:c2:10: 79:64:b0:29:31:54:27:d8:9e:d1:4b:8b:b1:2c:32:16:eb:05: 0e:5d:5a:e7:23:33:d5:d5:13:cc:96:3f:fc:ec:51:d5:21:e9: 1f:25:4d:8c:b7:d0:01:04:95:9e:77:8f:84:44:60:e2:48:36: 26:16:73:13:eb:98:8e:78:2d:89:a9:55:51:a5:98:9a:7e:6f: e4:2e:81:71:83:1f:39:bc:86:e6:ed:ea:2a:fe:bd:a3:9d:f4: a1:74:b5:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlDQkIxMTAvBgNVBAUTKEZDMjRGNTM5MDc0Nzg3RUNFQUIwMEMyNDI2MDZDMkJE Njg4MTlBMEQwHhcNMjYwMTI1MDUzNzE1WhcNMjYwMjAxMDUzNzE1WjAYMRYwFAYD VQQDDA02OTc1YWMwYy03Yzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1owIon3BS0ww0zjL3o/bdtX49kXhVIfUGOK5dmCJaIV6OigpCZD3rL+IZcm 3i8ApFhFkr3w1zZW6jPoIgWAYYmEYfRzgPjvpuSx42dQ65/S6AD8L7EYyDApf1AB +FYejubk1MdWmulPknE8B/46wTQTdUpvca2qVwBPZyOA3XY0uotxz6fISO64Y84s L0K4u+n5o27CilH33QoVVS3Cvy93/GkLIAFXrbbMzEtAF2rrqXj8tJfyxwZSwXpE 231MXG5jcpdvikkf9qavtr1jJfyAiMS+Hw4wGxxWiBk1w5JD6tJeZgS6ewOGjp47 ZL4K6AQpkmYzNuA+TfL+XEYl1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGu0OVSX W6Wt8fdYqTo+05kQNOQAMB8GA1UdIwQYMBaAFPwk9TkHR4fs6rAMJCYGwr1ogZoN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNCQi9ENTNCRDE0NjE1 QjExMUYwQTI3NzRBMDlDNEY5QUUwMi9fQ1QxT1FkSGgtenFzQXdrSmdiQ3ZXaUJt ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1nMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUNCQi9ENTNCRDE0NjE1QjExMUYwQTI3NzRBMDlDNEY5QUUwMi9fQ1QxT1FkSGgt enFzQXdrSmdiQ3ZXaUJtZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFL6KHs1ZQoLPGdvse4zObSMzK8sdvtMmHF7YaOYSbJdYnAUJCUOVi XsujGvivy/9k56f6rLkDbQigXgyVbm95ccjR2Kv3oRektJbsFwc0B+80UxuRWv/5 EnT+otJBc8Q/IsFatU49TjeusqW5no3BoSJLKDanqbR1Nbb7ZiDY32Dy0O+B1Htf cZQzQH5AUSfwAi13i/qXvAVtUed/ITFdwhB5ZLApMVQn2J7RS4uxLDIW6wUOXVrn IzPV1RPMlj/87FHVIekfJU2Mt9ABBJWed4+ERGDiSDYmFnMT65iOeC2JqVVRpZia fm/kLoFxgx85vIbm7eoq/r2jnfShdLXM -----END CERTIFICATE-----Generated at Sun Jan 25 20:37:04 2026 by rpki-client