This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: O7lwaKeHP+JqArWFBQA1ARb4ZgD7PZTBg60KnaPvwrU= Subject key identifier: 16:44:2F:14:E1:08:4D:FE:C1:C9:F4:FD:67:28:75:6C:0D:FC:60:BC Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 351A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 3511 Signing time: Sat 24 Jan 2026 14:32:46 +0000 Manifest this update: Sat 24 Jan 2026 14:32:46 +0000 Manifest next update: Sat 31 Jan 2026 14:32:46 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: 9fGDZZJa3P/Uv5ep+0vq3vpP1eFoYI2WA0UG8CbepF8=) 2: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: WAqkzYiOMG3eVsSlxconspeITWeLsHW6M6BKW5GBoNA=) 3: 1733DE66945D11F09E173B0CC4F9AE02.roa (hash: 7XJqHJEnhdUplCJ4iz+cv5gM2kcVkpUwLnhh4FUX6U8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13594 (0x351a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Jan 24 14:32:46 2026 GMT Not After : Jan 31 14:32:46 2026 GMT Subject: CN=6974d80e-da2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:f5:7b:55:aa:19:c1:7c:95:db:47:fa:70: d8:13:c7:7b:84:6b:3d:90:ea:fc:a4:13:a4:7c:b5: e7:f3:9c:dc:ba:4b:66:f1:7f:ac:74:a0:30:2c:93: 95:54:e7:ed:aa:f0:ea:43:35:04:90:81:62:70:36: 0c:f9:5d:3f:eb:79:c6:76:25:fd:39:ac:f5:12:53: 2c:d1:81:82:1b:fb:18:51:e2:c4:44:07:2e:e0:0b: 95:8e:f3:e2:2e:8e:73:ef:c5:d5:fc:38:dd:47:2c: 38:09:17:d9:1e:95:b1:5e:12:4c:8a:fa:82:37:25: 6c:33:a2:fd:dd:f6:fc:0c:b3:3e:ce:6a:b0:41:a0: 88:54:f6:cc:f1:ce:0e:5d:44:53:e8:cd:4b:66:6b: bc:c4:f1:38:55:ff:af:be:6e:ed:07:29:08:50:4a: 7e:ff:4d:da:e3:97:09:4d:8a:45:ee:59:ac:98:d1: f8:ba:13:57:e2:81:8b:5e:d2:25:0d:db:fe:2a:b8: c3:13:38:ca:a9:2e:3c:9b:6f:1d:fb:46:5e:89:db: 2d:73:f0:5e:8a:08:41:09:c8:57:2e:8c:e3:cc:aa: 40:18:73:30:f2:fe:83:aa:46:9e:c9:28:71:cd:62: 4d:00:6e:84:c4:73:7f:a0:b3:82:b9:84:8b:81:c5: 11:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:44:2F:14:E1:08:4D:FE:C1:C9:F4:FD:67:28:75:6C:0D:FC:60:BC X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e0:1d:3c:01:a4:8b:ce:4d:7e:1a:e3:74:ab:90:ac:50:0f: de:41:6c:26:6d:4d:f8:c9:77:16:cb:2a:f9:4a:2f:12:51:33: f4:74:2f:c9:c5:a1:49:8e:01:17:56:35:6e:54:60:c9:9c:cb: 3c:c8:96:46:49:3b:5f:88:e0:84:95:da:e7:e9:c7:1a:b4:c9: 8c:30:f9:a4:f3:a3:bc:34:56:33:6d:b3:13:c9:ff:73:63:be: e8:9e:99:61:13:d6:a1:05:68:d9:71:10:b8:6a:4c:26:5f:5a: ec:02:10:7f:ff:4a:d5:34:db:73:13:3d:f9:64:a2:e9:2b:cb: ca:97:45:15:4d:15:65:c0:82:03:df:6e:64:e6:4f:24:14:a2: a5:f2:14:88:99:eb:54:f3:6a:05:e1:2c:da:46:ea:39:f9:1a: fd:aa:3e:e2:90:f8:b6:26:18:9c:ff:20:97:8b:24:80:97:38: cb:1f:76:0d:6e:e2:51:5c:ff:84:71:8e:c5:1b:d9:09:a2:f7: bf:47:6b:b3:b9:0c:6b:ee:96:03:ac:7a:1d:79:32:02:7b:ec: 47:17:db:00:03:b5:f4:2f:41:35:21:06:69:1d:6f:5b:75:65: 36:9d:ad:76:c0:80:a5:93:f9:d7:a6:64:06:00:17:5c:76:40: 5f:27:a5:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjYwMTI0MTQzMjQ2WhcNMjYwMTMxMTQzMjQ2WjAYMRYwFAYD VQQDDA02OTc0ZDgwZS1kYTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVz1e1WqGcF8ldtH+nDYE8d7hGs9kOr8pBOkfLXn85zcuktm8X+sdKAwLJOV VOftqvDqQzUEkIFicDYM+V0/63nGdiX9Oaz1ElMs0YGCG/sYUeLERAcu4AuVjvPi Lo5z78XV/DjdRyw4CRfZHpWxXhJMivqCNyVsM6L93fb8DLM+zmqwQaCIVPbM8c4O XURT6M1LZmu8xPE4Vf+vvm7tBykIUEp+/03a45cJTYpF7lmsmNH4uhNX4oGLXtIl Ddv+KrjDEzjKqS48m28d+0Zeidstc/BeighBCchXLozjzKpAGHMw8v6DqkaeyShx zWJNAG6ExHN/oLOCuYSLgcURdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZELxTh CE3+wcn0/WcodWwN/GC8MB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa4B08AaSLzk1+GuN0q5CsUA/eQWwmbU34yXcWyyr5Si8SUTP0dC/J xaFJjgEXVjVuVGDJnMs8yJZGSTtfiOCEldrn6ccatMmMMPmk86O8NFYzbbMTyf9z Y77onplhE9ahBWjZcRC4akwmX1rsAhB//0rVNNtzEz35ZKLpK8vKl0UVTRVlwIID 325k5k8kFKKl8hSImetU82oF4SzaRuo5+Rr9qj7ikPi2Jhic/yCXiySAlzjLH3YN buJRXP+EcY7FG9kJove/R2uzuQxr7pYDrHodeTICe+xHF9sAA7X0L0E1IQZpHW9b dWU2na12wIClk/nXpmQGABdcdkBfJ6UW -----END CERTIFICATE-----Generated at Sun Jan 25 02:51:22 2026 by rpki-client