This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft File: S7U1I5SOxqyZE7LVCcHXspRtnpI.mft (raw, json) Hash identifier: 5S1//evxXUObyswcz8J9lvHbhJb2NOg5VfkAC8KjROQ= Subject key identifier: C0:3F:E0:71:45:07:0D:AB:93:18:EE:88:64:2C:63:6A:AA:C5:6E:3F Authority key identifier: 4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92 Certificate issuer: /CN=A91AF431/serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft Manifest number: 3F Signing time: Fri 23 Jan 2026 06:26:50 +0000 Manifest this update: Fri 23 Jan 2026 06:26:50 +0000 Manifest next update: Fri 30 Jan 2026 06:26:50 +0000 Files and hashes: 1: S7U1I5SOxqyZE7LVCcHXspRtnpI.crl (hash: tVmR88yqCmU8bYczX1SVUuZFzVZV8SCxg8rg1CFLcGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF431, serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92 Validity Not Before: Jan 23 06:26:50 2026 GMT Not After : Jan 30 06:26:50 2026 GMT Subject: CN=697314aa-0769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c1:06:f0:29:ff:5f:74:2b:5a:4d:77:2d:d8: c3:63:95:b5:ec:b2:5c:4d:71:b7:51:3b:b6:0a:a8: ba:5e:c6:73:95:6b:80:0c:30:e7:22:b0:40:9e:e9: 0c:ec:74:28:d5:71:60:10:37:4d:dc:ec:1d:c0:e1: a9:6f:eb:aa:b6:e7:e7:dd:51:7f:2f:49:9d:4b:2f: 20:78:14:ca:6b:1f:0d:84:87:79:42:79:a6:9c:83: 65:c0:b6:64:90:5e:c8:e0:02:75:f1:cc:cb:0b:1c: 81:c5:e5:59:58:5b:13:ea:67:9e:27:62:75:43:e7: f4:8a:cb:cc:81:8b:68:2d:4c:e5:9a:04:bd:c8:02: 82:69:96:f0:cb:50:6d:e3:ad:c0:48:7f:f3:d3:27: 2e:af:59:ca:5f:b2:55:17:82:dc:ef:7d:dc:5e:77: ad:e8:03:53:69:c7:9f:45:5e:47:73:4e:bf:4a:23: bd:07:28:b7:b7:22:20:a0:4e:b4:9e:3f:82:9c:41: 8e:5e:ca:fd:6f:b9:c5:18:15:2b:59:44:6d:f6:68: 7c:85:fc:b7:11:f6:e4:18:ed:68:a3:95:71:11:5e: e8:11:19:3d:eb:e4:80:34:68:6d:0d:c0:b9:f8:ee: 2c:cb:e8:51:96:df:50:78:47:f9:9a:89:92:3b:c9: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3F:E0:71:45:07:0D:AB:93:18:EE:88:64:2C:63:6A:AA:C5:6E:3F X509v3 Authority Key Identifier: keyid:4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:45:86:5a:b0:cd:58:10:16:68:bd:17:b1:ae:da:54:2b:10: ed:6a:92:1a:f4:d9:cf:82:1a:bc:71:f1:e2:5b:ed:b1:4e:4e: 1d:2c:84:3a:10:0f:7d:b5:60:63:f5:e3:63:e4:85:43:a4:b3: ef:ca:6d:9d:ae:49:1a:44:6c:77:73:3b:6a:22:7d:97:92:30: b3:a9:41:f9:07:4a:69:2f:d6:d9:26:4b:12:b7:a6:26:99:83: f4:5d:81:58:0a:36:b8:60:62:2b:8b:f7:10:29:31:59:1c:12: a2:2f:2d:89:15:50:e0:3a:78:b7:b2:15:d3:5e:9a:a7:dd:c5: 9d:d6:8a:39:1c:2c:c3:83:84:15:c2:58:f8:6a:23:b5:ba:f3: a0:98:be:8a:96:ac:c8:42:52:d0:49:ec:4d:dd:44:cf:4c:21: 0e:e6:ce:ae:b4:be:67:fe:1a:8b:91:70:f4:cd:48:c0:14:7c: a2:fc:6a:d3:6f:90:41:61:6e:9d:3a:2e:7a:b7:3f:52:f8:94: 47:65:d3:b3:18:0b:27:ed:e0:7b:83:74:04:08:f0:74:72:0d: 8f:c7:58:dd:46:3f:9c:0e:f3:42:40:3c:6b:30:96:50:cc:a4: 86:b0:16:90:c8:ac:fc:2a:87:71:e8:33:b3:8d:53:d2:a6:3f: c9:58:8e:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjQzMTExMC8GA1UEBRMoNEJCNTM1MjM5NDhFQzZBQzk5MTNCMkQ1MDlDMUQ3QjI5 NDZEOUU5MjAeFw0yNjAxMjMwNjI2NTBaFw0yNjAxMzAwNjI2NTBaMBgxFjAUBgNV BAMMDTY5NzMxNGFhLTA3NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfwQbwKf9fdCtaTXct2MNjlbXsslxNcbdRO7YKqLpexnOVa4AMMOcisECe6Qzs dCjVcWAQN03c7B3A4alv66q25+fdUX8vSZ1LLyB4FMprHw2Eh3lCeaacg2XAtmSQ XsjgAnXxzMsLHIHF5VlYWxPqZ54nYnVD5/SKy8yBi2gtTOWaBL3IAoJplvDLUG3j rcBIf/PTJy6vWcpfslUXgtzvfdxed63oA1Npx59FXkdzTr9KI70HKLe3IiCgTrSe P4KcQY5eyv1vucUYFStZRG32aHyF/LcR9uQY7WijlXERXugRGT3r5IA0aG0NwLn4 7izL6FGW31B4R/maiZI7yVEHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwD/gcUUH DauTGO6IZCxjaqrFbj8wHwYDVR0jBBgwFoAUS7U1I5SOxqyZE7LVCcHXspRtnpIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGNDMxL0ZGN0QxOERBOTkx ODExRjBCNDUwQ0Y0RkM0RjlBRTAyL1M3VTFJNVNPeHF5WkU3TFZDY0hYc3BSdG5w SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzdVMUk1U094cXlaRTdMVkNjSFhzcFJ0bnBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG NDMxL0ZGN0QxOERBOTkxODExRjBCNDUwQ0Y0RkM0RjlBRTAyL1M3VTFJNVNPeHF5 WkU3TFZDY0hYc3BSdG5wSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABtFhlqwzVgQFmi9F7Gu2lQrEO1qkhr02c+CGrxx8eJb7bFOTh0shDoQ D321YGP142PkhUOks+/KbZ2uSRpEbHdzO2oifZeSMLOpQfkHSmkv1tkmSxK3piaZ g/RdgVgKNrhgYiuL9xApMVkcEqIvLYkVUOA6eLeyFdNemqfdxZ3WijkcLMODhBXC WPhqI7W686CYvoqWrMhCUtBJ7E3dRM9MIQ7mzq60vmf+GouRcPTNSMAUfKL8atNv kEFhbp06Lnq3P1L4lEdl07MYCyft4HuDdAQI8HRyDY/HWN1GP5wO80JAPGswllDM pIawFpDIrPwqh3HoM7ONU9KmP8lYjuY= -----END CERTIFICATE-----Generated at Sun Jan 25 06:04:09 2026 by rpki-client