This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft File: 3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json) Hash identifier: lv2C5yOCsIKYTl+iLeh4xg6zY+k+bFaNFgdt/Z8d3x4= Subject key identifier: 8B:9E:13:D4:B3:E1:4F:0E:70:A5:F5:BD:3C:CF:88:30:A9:F4:D4:6C Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft Manifest number: 0153 Signing time: Sun 25 Jan 2026 03:27:12 +0000 Manifest this update: Sun 25 Jan 2026 03:27:12 +0000 Manifest next update: Sun 01 Feb 2026 03:27:12 +0000 Files and hashes: 1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: ooH1dbP3kR+Yo1z31v+QC43H2sxby4SCprchZt89UY4=) 2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: /IMJX7XsSqXWSBpPQa+GU6jkXrtHKjX0kCU46WfMzTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Validity Not Before: Jan 25 03:27:12 2026 GMT Not After : Feb 1 03:27:12 2026 GMT Subject: CN=69758d90-9d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f6:88:38:8f:b2:14:53:25:f0:fa:c8:24:a7: f0:36:cf:bf:2a:07:3a:a6:16:9f:d9:61:81:9e:4e: ec:40:4f:0c:91:fa:eb:d4:e7:b3:25:72:d1:b3:52: 20:39:68:59:29:1f:ab:f9:83:18:2f:a0:68:19:88: 01:5d:a2:14:59:a9:5d:2d:c2:56:54:37:4b:02:e3: 85:9a:31:80:fa:8a:fa:1f:a6:97:a9:71:06:3f:80: c6:1a:e5:75:01:ac:d3:80:8b:59:a7:d7:48:e2:4f: 39:c0:0c:50:21:97:91:99:54:16:8a:a9:a5:ed:d5: be:e7:47:0e:6a:13:66:21:38:f4:7b:5d:dc:7d:df: 2e:bf:23:9a:86:f0:17:07:d0:7c:86:8b:87:67:58: c1:ab:ec:e4:71:33:ea:86:d8:f7:59:22:b8:78:5c: 6f:22:5c:f2:41:46:aa:d0:23:c0:06:1f:01:53:ee: e8:51:84:42:30:fd:fd:07:51:fc:2a:0a:47:8f:4e: f4:69:34:36:e2:64:77:b2:f7:fe:bf:5f:c3:c7:5a: c4:37:4d:20:e9:65:3f:9f:a2:5c:cd:07:d9:f3:e8: 87:8a:dc:45:d0:6e:5c:70:fe:72:cb:63:6c:c9:ae: fa:02:ed:9b:5f:54:8e:38:3a:0e:86:e7:5c:cd:b1: ed:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9E:13:D4:B3:E1:4F:0E:70:A5:F5:BD:3C:CF:88:30:A9:F4:D4:6C X509v3 Authority Key Identifier: keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:bb:f2:64:a0:ee:d1:93:62:0d:18:16:65:fd:fd:77:ac:8c: 9b:c8:db:cc:49:f7:17:f5:f2:4e:d3:3d:0d:20:4f:0c:45:f8: df:47:0e:8d:01:c1:85:f8:8d:17:ad:68:02:1c:8c:74:56:55: 19:17:d9:15:d4:61:ec:10:0e:1b:5a:05:0c:1e:4f:6c:06:be: f0:33:aa:b1:79:ef:57:db:bf:64:96:19:af:dd:55:d7:e0:5e: 5d:70:65:a7:f5:b0:72:a3:20:b0:99:4e:28:4c:72:59:8c:a3: 42:ec:89:de:b6:3c:f0:60:38:1f:22:d0:50:47:3a:07:3c:d4: 97:63:3f:2b:a3:44:1c:bf:24:7c:4e:fb:c8:48:d6:95:70:ee: b6:9a:57:11:65:05:16:86:f1:a5:81:cb:d3:53:58:ac:c1:bd: f9:a5:6e:74:22:09:74:74:e9:28:a1:79:46:9f:d3:38:ef:4b: d1:ce:a2:f9:23:2d:51:62:11:94:06:db:f8:ee:fd:a2:5d:f7: d3:69:4c:2a:03:0d:ef:9b:7e:5b:88:bf:4f:25:b5:18:34:b3: ee:e3:8a:bf:6c:71:cc:30:80:c6:fa:d4:85:d3:17:b3:24:0f: db:d8:20:0b:26:35:a4:9b:77:c1:ae:3a:1c:fa:39:86:81:17: 46:a8:d7:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMkUxMTAvBgNVBAUTKEREMjQzMkQ4QUQ2QkIzRTlFOTk2NTU4MEJCQzZEMjIy MTkwN0IzRjcwHhcNMjYwMTI1MDMyNzEyWhcNMjYwMjAxMDMyNzEyWjAYMRYwFAYD VQQDDA02OTc1OGQ5MC05ZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfaIOI+yFFMl8PrIJKfwNs+/Kgc6phaf2WGBnk7sQE8Mkfrr1OezJXLRs1Ig OWhZKR+r+YMYL6BoGYgBXaIUWaldLcJWVDdLAuOFmjGA+or6H6aXqXEGP4DGGuV1 AazTgItZp9dI4k85wAxQIZeRmVQWiqml7dW+50cOahNmITj0e13cfd8uvyOahvAX B9B8houHZ1jBq+zkcTPqhtj3WSK4eFxvIlzyQUaq0CPABh8BU+7oUYRCMP39B1H8 KgpHj070aTQ24mR3svf+v1/Dx1rEN00g6WU/n6JczQfZ8+iHitxF0G5ccP5yy2Ns ya76Au2bX1SOODoOhudczbHtsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIueE9Sz 4U8OcKX1vTzPiDCp9NRsMB8GA1UdIwQYMBaAFN0kMtita7Pp6ZZVgLvG0iIZB7P3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUyRS9FNzFBMEJCQ0Yy MTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMtbnBsbFdBdThiU0loa0hz X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNTUXkySzFycy1ucGxsV0F1OGJTSWhrSHNfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUyRS9FNzFBMEJCQ0YyMTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMt bnBsbFdBdThiU0loa0hzX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQu/JkoO7Rk2INGBZl/f13rIybyNvMSfcX9fJO0z0NIE8MRfjfRw6N AcGF+I0XrWgCHIx0VlUZF9kV1GHsEA4bWgUMHk9sBr7wM6qxee9X279klhmv3VXX 4F5dcGWn9bByoyCwmU4oTHJZjKNC7InetjzwYDgfItBQRzoHPNSXYz8ro0QcvyR8 TvvISNaVcO62mlcRZQUWhvGlgcvTU1iswb35pW50Igl0dOkooXlGn9M470vRzqL5 Iy1RYhGUBtv47v2iXffTaUwqAw3vm35biL9PJbUYNLPu44q/bHHMMIDG+tSF0xez JA/b2CALJjWkm3fBrjoc+jmGgRdGqNdP -----END CERTIFICATE-----Generated at Sun Jan 25 10:46:36 2026 by rpki-client