This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft File: AXCw4NBuMUc8rBZOSwttIb300jc.mft (raw, json) Hash identifier: g+yQATO3qVVG3LcMBU9LuLA+lhTQAZWN4UcDYuyLdQ8= Subject key identifier: F0:31:43:78:4E:6A:06:93:4A:36:E6:08:5E:08:44:D9:6E:B3:4A:07 Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 Certificate issuer: /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Certificate serial: 1059 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft Manifest number: 104C Signing time: Sat 24 Jan 2026 17:06:44 +0000 Manifest this update: Sat 24 Jan 2026 17:06:43 +0000 Manifest next update: Sat 31 Jan 2026 17:06:43 +0000 Files and hashes: 1: AXCw4NBuMUc8rBZOSwttIb300jc.crl (hash: LI5PI6SbopEyHyqKvWle8HyqX4KBX7wieCl/HJwnKAU=) 2: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (hash: RkelPLg7E6uL52G5WbWQ45BxHbDDvE+59Nsvn5kHeGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4185 (0x1059) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Validity Not Before: Jan 24 17:06:43 2026 GMT Not After : Jan 31 17:06:43 2026 GMT Subject: CN=6974fc24-f5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1d:7b:55:35:0b:5f:2e:c0:b9:55:94:16:c6: 78:a5:29:09:44:ad:ab:39:76:e2:f0:7b:e9:0f:84: 16:6a:bd:4b:52:b9:34:48:f3:29:c6:19:e6:a6:f3: 71:a3:cc:49:de:57:09:50:7f:03:4b:d5:db:da:0c: a0:c3:44:7c:43:08:aa:b8:e0:b0:5d:c9:ab:c9:69: 54:4d:d4:23:e2:44:43:ac:5c:91:07:10:02:e6:4b: bf:4d:87:6f:13:65:ca:97:44:62:70:a5:0e:e9:41: d7:5e:3f:7f:b2:71:cc:d4:89:5a:8e:37:e5:42:34: 29:8f:1d:ac:5a:3c:71:d1:33:35:7e:6f:f4:a3:48: 9a:56:5d:b4:84:7c:d7:9b:86:a2:46:bb:74:35:de: 56:b5:90:cb:a6:95:85:27:02:7f:6d:a4:ca:4f:41: 63:10:21:32:25:89:19:84:52:1b:3c:2b:17:a3:43: a9:62:e3:89:80:b7:1a:d2:c4:12:07:81:ed:89:47: bd:ad:a2:d8:1e:4d:57:07:48:27:87:f8:d7:b5:91: 0f:03:9a:bb:79:bf:18:bd:09:a4:64:9f:30:26:2d: c3:b2:16:df:96:c2:ce:5a:42:35:f7:28:9f:f9:70: 11:ab:e0:a8:21:62:8f:30:10:33:30:05:75:e9:e7: e9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:31:43:78:4E:6A:06:93:4A:36:E6:08:5E:08:44:D9:6E:B3:4A:07 X509v3 Authority Key Identifier: keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ae:c8:d3:10:9a:58:86:c9:e3:94:df:93:47:c2:35:e8:7d: 22:6f:30:53:27:3d:b1:72:2e:0e:0f:7e:21:b7:55:20:3e:c7: 96:f4:34:22:40:a6:58:47:c5:f4:73:31:39:11:46:7a:89:47: 2c:f2:c1:f8:10:be:6d:97:a7:2c:5a:31:e6:85:fb:13:51:7c: 05:36:ab:a1:4d:64:45:96:5f:87:f1:40:d8:31:4f:b7:73:9d: db:55:e6:63:6b:fd:15:58:e8:d3:de:0f:f1:64:5a:ba:c3:a3: ac:54:4f:50:32:24:f9:61:45:33:5b:71:33:0b:2e:9c:cb:9e: 0d:3a:0a:7f:b9:7f:23:d0:47:e6:f1:ea:1a:1c:fd:22:d3:e9: 7f:a4:e9:b8:46:a2:b6:19:04:cd:2a:1e:6e:36:53:3e:b6:85: 52:ee:f5:42:c3:06:95:32:b3:3d:d9:e4:62:c7:7d:f1:fb:53: 55:00:09:b6:fd:f5:ee:64:4b:53:db:8a:b6:1f:66:59:de:68: 20:94:42:0b:51:fb:56:58:e5:f1:fd:b3:13:4c:64:05:73:35: a2:63:43:1e:d2:e7:8f:48:24:10:eb:e4:e9:7e:a8:6e:dc:d0: ad:df:fd:56:cc:b2:ec:2b:cb:fd:85:9d:ec:49:4a:df:de:d7: 48:21:ca:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5RjcxMTAvBgNVBAUTKDAxNzBCMEUwRDA2RTMxNDczQ0FDMTY0RTRCMEI2RDIx QkRGNEQyMzcwHhcNMjYwMTI0MTcwNjQzWhcNMjYwMTMxMTcwNjQzWjAYMRYwFAYD VQQDDA02OTc0ZmMyNC1mNWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuB17VTULXy7AuVWUFsZ4pSkJRK2rOXbi8HvpD4QWar1LUrk0SPMpxhnmpvNx o8xJ3lcJUH8DS9Xb2gygw0R8QwiquOCwXcmryWlUTdQj4kRDrFyRBxAC5ku/TYdv E2XKl0RicKUO6UHXXj9/snHM1IlajjflQjQpjx2sWjxx0TM1fm/0o0iaVl20hHzX m4aiRrt0Nd5WtZDLppWFJwJ/baTKT0FjECEyJYkZhFIbPCsXo0OpYuOJgLca0sQS B4HtiUe9raLYHk1XB0gnh/jXtZEPA5q7eb8YvQmkZJ8wJi3DshbflsLOWkI19yif +XARq+CoIWKPMBAzMAV16efpFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAxQ3hO agaTSjbmCF4IRNlus0oHMB8GA1UdIwQYMBaAFAFwsODQbjFHPKwWTksLbSG99NI3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNy8zNzlFQzc0MjU0 NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1VYzhyQlpPU3d0dEliMzAw amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYQ3c0TkJ1TVVjOHJCWk9Td3R0SWIzMDBqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlGNy8zNzlFQzc0MjU0NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1V YzhyQlpPU3d0dEliMzAwamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMrsjTEJpYhsnjlN+TR8I16H0ibzBTJz2xci4OD34ht1UgPseW9DQi QKZYR8X0czE5EUZ6iUcs8sH4EL5tl6csWjHmhfsTUXwFNquhTWRFll+H8UDYMU+3 c53bVeZja/0VWOjT3g/xZFq6w6OsVE9QMiT5YUUzW3EzCy6cy54NOgp/uX8j0Efm 8eoaHP0i0+l/pOm4RqK2GQTNKh5uNlM+toVS7vVCwwaVMrM92eRix33x+1NVAAm2 /fXuZEtT24q2H2ZZ3mgglEILUftWWOXx/bMTTGQFczWiY0Me0uePSCQQ6+Tpfqhu 3NCt3/1WzLLsK8v9hZ3sSUrf3tdIIcry -----END CERTIFICATE-----Generated at Sun Jan 25 10:43:20 2026 by rpki-client