This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft File: d4SIFI464vFK1AhU96L6WVd1xXU.mft (raw, json) Hash identifier: ChwRTurNrFnK88TJZGZnRCBPC16CyDn/Jdq5bbnzPNI= Subject key identifier: D4:D5:62:50:18:0D:9B:3B:67:A9:68:F8:FB:49:2C:51:09:E7:C1:B9 Authority key identifier: 77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75 Certificate issuer: /CN=A91AFEA8/serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft Manifest number: 23 Signing time: Sun 25 Jan 2026 06:47:39 +0000 Manifest this update: Sun 25 Jan 2026 06:47:39 +0000 Manifest next update: Sun 01 Feb 2026 06:47:39 +0000 Files and hashes: 1: d4SIFI464vFK1AhU96L6WVd1xXU.crl (hash: hAHyaxoZKjZNDMKEv9iKHy8YV4pmXLhLrencCMMG7Lo=) 2: 61955FD6C5A211F09E92B426C4F9AE02.roa (hash: 6r1w44qLv6tmb8QOg76Wi+rpkJfAknvdkQET/Ztoh7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFEA8, serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575 Validity Not Before: Jan 25 06:47:39 2026 GMT Not After : Feb 1 06:47:39 2026 GMT Subject: CN=6975bc8b-4246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:76:b2:cd:80:99:92:db:b8:e3:de:06:e2:52: 0c:91:a7:84:92:a6:10:8f:c5:b5:ee:38:12:4c:30: df:d8:fb:4d:24:dd:10:89:57:7e:cd:4b:64:71:5c: bd:46:5e:c9:5b:a9:59:2c:a7:ff:5e:e8:09:b9:1d: 53:7d:c5:f9:fb:2a:16:e8:6f:6b:31:76:a7:26:7f: 30:d8:bb:c4:1e:31:1f:5b:b1:8a:fd:ac:6e:70:15: f8:39:81:e5:eb:aa:3b:3d:e1:cb:e6:8e:5a:b8:66: 38:15:9a:b6:6b:e6:bd:ff:d5:cf:89:34:3f:79:61: 97:d5:a2:69:4e:4b:85:26:48:b9:91:35:d8:5c:3d: 7a:60:d6:5e:93:1c:a5:9c:a5:43:a9:67:87:dc:ba: a1:31:76:fc:f5:33:a0:7a:a3:ef:a4:10:61:14:f0: 3c:e3:73:33:2e:53:77:99:74:cf:d1:d1:9f:b5:39: 36:f1:f1:16:79:41:15:5e:8d:6a:3f:24:3d:45:00: 1d:1d:58:db:84:1c:2c:7d:6d:f3:c6:19:bc:0c:ce: 8c:0a:30:94:a4:2a:ed:86:05:bd:fe:b8:cc:83:6a: 04:a0:5d:d4:0b:dc:7a:8b:ef:a0:51:a8:09:11:cd: 5e:b9:68:d7:9d:fc:71:26:b0:9d:6c:7d:9f:e6:d2: cd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D5:62:50:18:0D:9B:3B:67:A9:68:F8:FB:49:2C:51:09:E7:C1:B9 X509v3 Authority Key Identifier: keyid:77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:cc:32:ab:0d:ee:4a:be:d9:0e:3e:8f:c2:fd:13:9d:66:d7: 99:83:36:95:b2:9f:40:b0:5a:f9:aa:a9:f9:3a:16:07:22:57: 38:ee:72:f4:19:2c:79:73:9c:56:ea:4e:9c:fb:8d:67:e5:ff: fb:99:9e:dc:80:10:82:15:40:18:36:af:42:b2:14:a7:26:fa: af:b2:bf:a7:af:57:16:b3:82:bf:02:42:1c:05:16:b0:6b:9e: 39:b5:9c:de:ff:97:ba:c8:8e:bd:31:df:1e:3f:37:7a:e6:65: b8:85:29:ba:79:2b:3a:1b:17:0f:70:e4:6c:a8:78:f9:b8:64: 00:7f:5b:3c:3e:45:e9:b4:28:21:33:dc:b7:45:92:70:f1:50: 36:2d:13:71:d9:69:2f:52:0f:ca:01:e1:4b:68:3f:8c:9e:bc: 44:a5:89:13:6c:c8:27:8a:1d:ad:b9:1d:a9:14:0b:82:f0:bb: b7:da:33:fe:e7:03:da:d6:6f:b4:ed:fd:47:3d:96:8c:45:c3: 74:cc:32:91:e7:9f:73:22:b6:1c:51:a8:80:ac:18:a7:9f:06: db:6c:3c:6c:04:e2:77:be:8c:c8:26:49:f0:4c:7e:04:03:e1: a0:7a:33:bf:13:b6:89:b7:bf:03:15:c0:99:f4:f1:fe:4b:c3: 3c:f6:8e:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkVBODExMC8GA1UEBRMoNzc4NDg4MTQ4RTNBRTJGMTRBRDQwODU0RjdBMkZBNTk1 Nzc1QzU3NTAeFw0yNjAxMjUwNjQ3MzlaFw0yNjAyMDEwNjQ3MzlaMBgxFjAUBgNV BAMMDTY5NzViYzhiLTQyNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLdrLNgJmS27jj3gbiUgyRp4SSphCPxbXuOBJMMN/Y+00k3RCJV37NS2RxXL1G XslbqVksp/9e6Am5HVN9xfn7Khbob2sxdqcmfzDYu8QeMR9bsYr9rG5wFfg5geXr qjs94cvmjlq4ZjgVmrZr5r3/1c+JND95YZfVomlOS4UmSLmRNdhcPXpg1l6THKWc pUOpZ4fcuqExdvz1M6B6o++kEGEU8DzjczMuU3eZdM/R0Z+1OTbx8RZ5QRVejWo/ JD1FAB0dWNuEHCx9bfPGGbwMzowKMJSkKu2GBb3+uMyDagSgXdQL3HqL76BRqAkR zV65aNed/HEmsJ1sfZ/m0s3hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1NViUBgN mztnqWj4+0ksUQnnwbkwHwYDVR0jBBgwFoAUd4SIFI464vFK1AhU96L6WVd1xXUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGRUE4LzA2OEU3NjdBQzU5 RjExRjBCMzBENUQ3Q0M0RjlBRTAyL2Q0U0lGSTQ2NHZGSzFBaFU5Nkw2V1ZkMXhY VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZDRTSUZJNDY0dkZLMUFoVTk2TDZXVmQxeFhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG RUE4LzA2OEU3NjdBQzU5RjExRjBCMzBENUQ3Q0M0RjlBRTAyL2Q0U0lGSTQ2NHZG SzFBaFU5Nkw2V1ZkMXhYVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHTMMqsN7kq+2Q4+j8L9E51m15mDNpWyn0CwWvmqqfk6FgciVzjucvQZ LHlznFbqTpz7jWfl//uZntyAEIIVQBg2r0KyFKcm+q+yv6evVxazgr8CQhwFFrBr njm1nN7/l7rIjr0x3x4/N3rmZbiFKbp5KzobFw9w5GyoePm4ZAB/Wzw+Rem0KCEz 3LdFknDxUDYtE3HZaS9SD8oB4UtoP4yevESliRNsyCeKHa25HakUC4Lwu7faM/7n A9rWb7Tt/Uc9loxFw3TMMpHnn3MithxRqICsGKefBttsPGwE4ne+jMgmSfBMfgQD 4aB6M78Ttom3vwMVwJn08f5Lwzz2jtg= -----END CERTIFICATE-----Generated at Sun Jan 25 10:29:54 2026 by rpki-client