This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft File: IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft (raw, json) Hash identifier: 3RKXJsdXJ8Yb3VT8nh91homNFqj1s5ozjOFZaWJUDH0= Subject key identifier: 54:CE:F8:3B:D9:39:E8:F7:24:CE:D7:9A:F7:3D:E6:16:9D:5A:DA:67 Authority key identifier: 21:76:05:A5:DE:DE:2D:62:2F:98:AE:A6:C2:F6:F9:5D:8F:AE:1B:66 Certificate issuer: /CN=A91AE81E/serialNumber=217605A5DEDE2D622F98AEA6C2F6F95D8FAE1B66 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft Manifest number: 33 Signing time: Fri 23 Jan 2026 06:35:59 +0000 Manifest this update: Fri 23 Jan 2026 06:35:58 +0000 Manifest next update: Fri 30 Jan 2026 06:35:58 +0000 Files and hashes: 1: IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl (hash: LocOMbu1JEvnogkV4BA0KjcSwBrs2i5Vl3SEwKDhDw8=) 2: 06048736B08B11F087892851C4F9AE02.roa (hash: jS5QM4hRJOIYwJpJlvBhAodT8MrOcODdJ9KiBgqN9zQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE81E, serialNumber=217605A5DEDE2D622F98AEA6C2F6F95D8FAE1B66 Validity Not Before: Jan 23 06:35:58 2026 GMT Not After : Jan 30 06:35:58 2026 GMT Subject: CN=697316cf-32b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:e0:23:68:d1:c6:cb:ea:59:c5:85:55:60: 48:53:e1:23:19:b7:66:64:c6:44:6b:e3:0d:c8:c6: 27:01:7c:2e:b6:00:bc:eb:44:eb:92:2d:27:17:ca: b6:b9:c6:95:f4:3d:e9:4f:54:09:f3:4f:7c:c3:76: ab:84:7d:28:a0:d6:64:f6:aa:09:a1:93:e3:7b:23: af:e5:cc:9e:ab:33:dd:5d:2d:39:c4:20:72:47:81: ae:6d:3a:07:a7:26:ac:dd:a5:b6:16:af:02:0f:ac: 22:43:58:d3:52:0e:86:5e:88:00:8a:a1:08:d4:74: 90:26:70:bf:31:fc:62:67:b0:07:e6:cf:b7:d7:1a: 42:7c:2e:71:27:53:d1:17:64:d9:d1:99:d7:42:3d: a3:57:6b:02:63:e2:c9:ee:e4:69:d0:a4:01:5c:6f: 93:92:af:e1:cd:44:4b:89:b4:4f:5d:0f:26:d2:36: e9:be:1b:9e:23:c9:53:81:b3:78:48:77:22:40:e9: 1b:c0:2c:2a:f4:4e:1c:09:0b:da:f1:c4:e3:4c:b9: 73:6c:6a:da:a2:bf:8e:47:72:1c:51:25:86:63:a8: 23:9f:1e:1c:27:c1:10:8d:a7:d3:09:e5:e5:8d:8c: 24:80:6a:fa:32:0a:eb:fc:e5:1d:13:e6:90:e1:4d: b8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CE:F8:3B:D9:39:E8:F7:24:CE:D7:9A:F7:3D:E6:16:9D:5A:DA:67 X509v3 Authority Key Identifier: keyid:21:76:05:A5:DE:DE:2D:62:2F:98:AE:A6:C2:F6:F9:5D:8F:AE:1B:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:58:29:ad:7b:ef:ce:f0:99:96:22:72:38:43:e3:20:91:b4: de:ce:af:b9:44:f9:d5:97:9e:b2:02:71:57:cc:bb:13:23:43: 32:80:e9:92:76:77:6c:48:ea:1d:0b:d2:ee:a8:c2:1f:10:ac: 8e:19:82:46:a6:10:85:25:06:e2:ae:37:57:66:38:be:ac:cf: e9:16:fd:40:71:03:38:69:9c:2f:f9:15:f4:4e:ad:71:31:8b: e1:75:b6:d8:0b:5b:8f:a2:e7:96:89:06:c2:ab:9e:64:ea:40: cc:8e:41:64:67:85:1c:dd:0d:cf:a5:14:1d:2e:00:e8:52:1d: d4:0a:21:b8:b6:b9:d7:f0:9a:3d:a5:f3:48:e2:1d:c6:51:9d: b9:a3:50:25:60:af:0a:cb:a5:9b:a0:45:fb:f7:7d:ef:63:c9: 05:5b:27:86:e6:8d:72:2f:9f:3a:55:64:ff:60:f4:2e:87:0d: 67:8e:93:9f:0d:49:a1:1f:29:52:25:d5:93:d0:3d:20:24:0e: c3:5c:aa:55:76:a2:35:0b:d7:09:cc:7a:43:fa:a4:99:d1:40: 73:a2:34:96:c8:d9:9d:5a:53:3e:3b:8e:3c:f9:bb:e6:e4:18: 69:12:bf:db:3e:50:58:c6:15:41:43:eb:a0:6b:f5:72:72:51: d6:8d:c5:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFB RTgxRTExMC8GA1UEBRMoMjE3NjA1QTVERURFMkQ2MjJGOThBRUE2QzJGNkY5NUQ4 RkFFMUI2NjAeFw0yNjAxMjMwNjM1NThaFw0yNjAxMzAwNjM1NThaMBgxFjAUBgNV BAMMDTY5NzMxNmNmLTMyYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzluAjaNHGy+pZxYVVYEhT4SMZt2ZkxkRr4w3IxicBfC62ALzrROuSLScXyra5 xpX0PelPVAnzT3zDdquEfSig1mT2qgmhk+N7I6/lzJ6rM91dLTnEIHJHga5tOgen JqzdpbYWrwIPrCJDWNNSDoZeiACKoQjUdJAmcL8x/GJnsAfmz7fXGkJ8LnEnU9EX ZNnRmddCPaNXawJj4snu5GnQpAFcb5OSr+HNREuJtE9dDybSNum+G54jyVOBs3hI dyJA6RvALCr0ThwJC9rxxONMuXNsatqiv45HchxRJYZjqCOfHhwnwRCNp9MJ5eWN jCSAavoyCuv85R0T5pDhTbhlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVM74O9k5 6Pckztea9z3mFp1a2mcwHwYDVR0jBBgwFoAUIXYFpd7eLWIvmK6mwvb5XY+uG2Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFODFFL0VBNzgyMEQ4QjA4 ODExRjA5QzIyMkIyRUM0RjlBRTAyL0lYWUZwZDdlTFdJdm1LNm13dmI1WFktdUcy WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVhZRnBkN2VMV0l2bUs2bXd2YjVYWS11RzJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF ODFFL0VBNzgyMEQ4QjA4ODExRjA5QzIyMkIyRUM0RjlBRTAyL0lYWUZwZDdlTFdJ dm1LNm13dmI1WFktdUcyWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJBYKa17787wmZYicjhD4yCRtN7Or7lE+dWXnrICcVfMuxMjQzKA6ZJ2 d2xI6h0L0u6owh8QrI4ZgkamEIUlBuKuN1dmOL6sz+kW/UBxAzhpnC/5FfROrXEx i+F1ttgLW4+i55aJBsKrnmTqQMyOQWRnhRzdDc+lFB0uAOhSHdQKIbi2udfwmj2l 80jiHcZRnbmjUCVgrwrLpZugRfv3fe9jyQVbJ4bmjXIvnzpVZP9g9C6HDWeOk58N SaEfKVIl1ZPQPSAkDsNcqlV2ojUL1wnMekP6pJnRQHOiNJbI2Z1aUz47jjz5u+bk GGkSv9s+UFjGFUFD66Br9XJyUdaNxb0= -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:15 2026 by rpki-client