This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft File: cNpFkZHpBoa9sKxHq9owqcPhdPo.mft (raw, json) Hash identifier: kl5OJCxG9Qcrm7yCzQej8mby3hAA+Oyej/6YkFnBYbk= Subject key identifier: 8B:45:1F:EC:3F:18:89:88:D3:27:95:EE:37:BE:2B:D3:6E:B3:78:41 Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA Certificate issuer: /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft Manifest number: 01D8 Signing time: Sun 25 Jan 2026 02:11:33 +0000 Manifest this update: Sun 25 Jan 2026 02:11:33 +0000 Manifest next update: Sun 01 Feb 2026 02:11:33 +0000 Files and hashes: 1: cNpFkZHpBoa9sKxHq9owqcPhdPo.crl (hash: 8sLkvPVJPs2xM+R3BE93jjqfF2KzRdLuD23H5K+vtss=) 2: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (hash: d0hrWabvEDExci5t6WU7rsD4gdFR7O4tRXZR37UM1GQ=) 3: 971B23D236EA11EE802E9246C4F9AE02.roa (hash: UyfMMb1+MxfY9sz24UI+SyQxwGOXE8nJHXlCf8yhy2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Validity Not Before: Jan 25 02:11:33 2026 GMT Not After : Feb 1 02:11:33 2026 GMT Subject: CN=69757bd5-96df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cb:40:07:e8:01:5c:01:41:52:f1:e3:76:a5: 44:a3:01:68:91:9d:24:84:e6:6b:af:60:ca:eb:17: d1:19:4e:77:8b:09:be:d6:0d:93:af:2b:d8:76:ce: f4:f7:3c:02:fc:93:18:a5:6e:50:62:7a:da:d0:f4: dc:67:f6:87:b1:08:7a:ce:8c:5b:39:b4:f9:8c:d7: bd:90:22:5a:ca:0a:5c:16:16:b6:d2:aa:63:3e:7b: 06:fc:de:f6:2c:70:0d:59:4a:29:f1:74:b1:36:dd: 72:ba:60:c9:04:7c:01:26:9c:82:6e:86:70:f2:9b: 0e:76:f4:c9:d9:33:78:ca:75:6b:14:c5:fb:81:5c: 7d:14:fc:fb:d0:18:39:87:dd:cd:4b:cc:71:04:ec: 47:37:31:cf:19:72:ef:4b:df:a7:89:d4:61:51:6f: 87:e3:6c:7f:87:77:1d:29:5d:15:d9:af:c2:a9:38: c8:74:1c:f7:10:67:c5:c7:fa:d9:1f:31:b9:e8:86: 38:96:ba:3d:b6:da:bb:67:d4:70:0b:28:a7:18:97: e1:bb:04:ef:f8:e0:86:21:10:8a:b6:98:01:43:25: b4:5e:0a:c5:46:97:59:d6:3b:1e:fb:b4:d4:a7:0b: 14:e7:8e:90:c0:d0:dd:06:55:a6:3f:01:21:ec:d6: 43:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:45:1F:EC:3F:18:89:88:D3:27:95:EE:37:BE:2B:D3:6E:B3:78:41 X509v3 Authority Key Identifier: keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:fe:d5:1a:74:b9:18:dc:5c:8e:f1:0b:12:75:fa:57:ce:02: 3d:92:3b:24:b3:cf:ce:07:60:4e:9e:4a:47:7e:b2:1d:5e:e8: d2:8a:6b:f6:e7:7b:7c:85:ec:90:cf:08:0a:54:41:0f:72:44: b3:32:ca:7d:d1:b8:a6:0f:98:19:8e:d0:d1:2f:49:d7:54:f1: e4:e6:1a:25:26:69:ca:ed:1e:44:71:ed:3e:d3:c0:8b:ee:2a: 07:d1:c9:55:84:e3:2d:83:e6:37:79:55:1a:fb:ea:f4:01:6e: cd:a0:f9:74:32:b4:2f:90:dc:91:fc:8a:dc:25:0a:07:0f:89: 81:11:1b:30:5c:a5:a3:40:e2:0a:ef:b2:87:2d:1d:6f:39:7a: da:bf:96:f1:e3:7a:41:35:74:95:ed:84:6c:58:6b:d3:80:a5: e2:d7:1c:58:f0:5c:2c:c0:48:16:cb:e7:59:69:d1:3f:8e:55: 02:9b:74:77:4e:73:ce:2c:be:66:1c:04:3a:6f:bd:b2:85:1b: d3:74:d0:dc:f8:bf:ab:ff:45:ce:dc:80:f4:4d:6b:4a:d5:96: 31:8d:22:18:9b:86:7a:e0:1d:31:e2:b1:1c:c4:fa:0f:fb:be: 17:0f:93:f9:c0:81:48:97:06:4c:65:68:b2:e6:81:f0:e8:45: 64:03:a1:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNDUxMTAvBgNVBAUTKDcwREE0NTkxOTFFOTA2ODZCREIwQUM0N0FCREEzMEE5 QzNFMTc0RkEwHhcNMjYwMTI1MDIxMTMzWhcNMjYwMjAxMDIxMTMzWjAYMRYwFAYD VQQDDA02OTc1N2JkNS05NmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMtAB+gBXAFBUvHjdqVEowFokZ0khOZrr2DK6xfRGU53iwm+1g2TryvYds70 9zwC/JMYpW5QYnra0PTcZ/aHsQh6zoxbObT5jNe9kCJaygpcFha20qpjPnsG/N72 LHANWUop8XSxNt1yumDJBHwBJpyCboZw8psOdvTJ2TN4ynVrFMX7gVx9FPz70Bg5 h93NS8xxBOxHNzHPGXLvS9+nidRhUW+H42x/h3cdKV0V2a/CqTjIdBz3EGfFx/rZ HzG56IY4lro9ttq7Z9RwCyinGJfhuwTv+OCGIRCKtpgBQyW0XgrFRpdZ1jse+7TU pwsU546QwNDdBlWmPwEh7NZDDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItFH+w/ GImI0yeV7je+K9Nus3hBMB8GA1UdIwQYMBaAFHDaRZGR6QaGvbCsR6vaMKnD4XT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE0NS8yNzgwNzNDRTM2 RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJvYTlzS3hIcTlvd3FjUGhk UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOcEZrWkhwQm9hOXNLeEhxOW93cWNQaGRQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE0NS8yNzgwNzNDRTM2RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJv YTlzS3hIcTlvd3FjUGhkUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp/tUadLkY3FyO8QsSdfpXzgI9kjsks8/OB2BOnkpHfrIdXujSimv2 53t8heyQzwgKVEEPckSzMsp90bimD5gZjtDRL0nXVPHk5holJmnK7R5Ece0+08CL 7ioH0clVhOMtg+Y3eVUa++r0AW7NoPl0MrQvkNyR/IrcJQoHD4mBERswXKWjQOIK 77KHLR1vOXrav5bx43pBNXSV7YRsWGvTgKXi1xxY8FwswEgWy+dZadE/jlUCm3R3 TnPOLL5mHAQ6b72yhRvTdNDc+L+r/0XO3ID0TWtK1ZYxjSIYm4Z64B0x4rEcxPoP +74XD5P5wIFIlwZMZWiy5oHw6EVkA6FR -----END CERTIFICATE-----Generated at Sun Jan 25 10:50:01 2026 by rpki-client