This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft File: 2GEUly4wzpwWBYrVn9v2mI0IORk.mft (raw, json) Hash identifier: SfXk+IihIQ3xbgxg7XqJUt6jpu7Ki5wCon1H662o98s= Subject key identifier: 22:87:7E:41:D3:DD:26:70:DD:A2:D6:F8:87:80:D9:0F:00:68:49:00 Authority key identifier: D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 Certificate issuer: /CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Certificate serial: 0754 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft Manifest number: 074D Signing time: Sat 24 Jan 2026 21:02:21 +0000 Manifest this update: Sat 24 Jan 2026 21:02:21 +0000 Manifest next update: Sat 31 Jan 2026 21:02:21 +0000 Files and hashes: 1: 2GEUly4wzpwWBYrVn9v2mI0IORk.crl (hash: 0Waqgddj01r3dpDwk5QmlJJnT3jRSTS2jWVJqzRjJwo=) 2: F87F8298554311EBAAB65382C4F9AE02.roa (hash: nS8BBJyH5MUGObSYJ3dgBqWPEE+Ak2G7WYEplUOFwrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1876 (0x754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1033, serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Validity Not Before: Jan 24 21:02:21 2026 GMT Not After : Jan 31 21:02:21 2026 GMT Subject: CN=6975335d-3052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:ce:d6:64:a3:77:9a:29:86:c8:a4:7e:20: bd:3b:e3:ea:68:1c:98:40:dc:43:79:3b:0f:74:40: a1:b6:8f:07:47:f9:33:11:c0:d9:ca:5c:c4:de:2b: 9e:7c:66:f7:70:62:ba:b2:b3:c2:42:8a:3b:f9:79: df:77:5e:23:80:a2:6d:17:b7:e1:59:3d:b2:1f:98: b5:73:42:00:6b:e0:6e:4e:3a:11:98:fa:26:4e:1b: 2d:1e:22:15:2a:63:e3:94:81:85:60:07:24:32:e9: df:43:8d:fc:eb:f5:33:0d:7a:9b:18:8d:1b:2b:17: 8b:80:ba:e0:71:f6:ee:8a:1b:1e:cb:79:80:d4:65: 2a:b0:fa:ae:e0:a0:41:e4:11:12:ad:c4:3e:00:d3: 60:4d:9e:3d:3c:19:d7:2f:50:87:6f:4f:f8:e3:60: 12:72:2c:4a:d5:4a:ea:21:88:d0:35:c9:99:b9:13: 28:d4:51:c7:67:a8:df:97:0f:f5:8a:04:0e:74:76: 42:b8:c6:96:fc:a2:ad:ef:e0:7b:4a:32:7d:ab:e5: 9c:ca:3e:f9:81:6c:83:6b:41:7d:8e:f3:7a:53:fb: ce:63:13:9f:63:7c:65:63:c7:c9:fd:b6:67:38:7d: 34:f2:6e:7c:40:4e:df:dd:37:38:4b:74:94:65:cb: 2a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:87:7E:41:D3:DD:26:70:DD:A2:D6:F8:87:80:D9:0F:00:68:49:00 X509v3 Authority Key Identifier: keyid:D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:50:a8:2e:a0:3c:73:86:e9:42:03:fb:27:7a:0c:5a:58:aa: f7:0c:7a:5f:90:8e:6b:2b:a2:39:f1:22:13:d5:a2:22:5a:0d: fd:20:9d:d1:c9:37:6b:2e:5b:eb:7d:35:0d:0d:1f:8d:79:dd: ff:86:af:60:c8:93:40:66:30:59:62:c5:92:2e:84:35:4f:e0: 63:b7:c0:aa:68:8b:20:43:30:4b:98:7c:73:9f:0a:85:e9:fe: da:10:05:9d:a1:57:57:c4:dc:c3:08:08:f9:3a:f4:7a:5e:54: 21:69:7a:3b:e1:e5:44:a5:2b:85:a3:bc:85:75:07:e9:de:2c: d5:cb:b6:da:a8:be:06:71:92:fb:78:50:ac:39:6a:25:2f:55: 87:d4:b2:da:17:5c:d5:59:f8:94:6e:06:07:42:6b:f0:51:87: d2:4a:d1:b4:a1:1a:e9:07:04:9b:c7:47:68:48:f4:03:08:b9: f5:81:63:d3:b1:df:f1:02:79:57:29:cc:8a:bf:1e:64:f1:b4: 75:3a:fa:e2:8d:de:24:b1:a3:fa:c9:01:2f:d5:6a:e4:f8:df: 6d:2a:53:c2:c9:dc:3c:26:a6:b1:21:18:7d:5d:96:98:c9:f8: 72:2d:b2:ab:3c:75:01:2e:36:34:7b:61:8d:07:29:21:18:5e: 0c:7d:29:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMzMxMTAvBgNVBAUTKEQ4NjExNDk3MkUzMENFOUMxNjA1OEFENTlGREJGNjk4 OEQwODM5MTkwHhcNMjYwMTI0MjEwMjIxWhcNMjYwMTMxMjEwMjIxWjAYMRYwFAYD VQQDDA02OTc1MzM1ZC0zMDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+XO1mSjd5ophsikfiC9O+PqaByYQNxDeTsPdEChto8HR/kzEcDZylzE3iue fGb3cGK6srPCQoo7+Xnfd14jgKJtF7fhWT2yH5i1c0IAa+BuTjoRmPomThstHiIV KmPjlIGFYAckMunfQ4386/UzDXqbGI0bKxeLgLrgcfbuihsey3mA1GUqsPqu4KBB 5BESrcQ+ANNgTZ49PBnXL1CHb0/442AScixK1UrqIYjQNcmZuRMo1FHHZ6jflw/1 igQOdHZCuMaW/KKt7+B7SjJ9q+Wcyj75gWyDa0F9jvN6U/vOYxOfY3xlY8fJ/bZn OH008m58QE7f3Tc4S3SUZcsqgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKHfkHT 3SZw3aLW+IeA2Q8AaEkAMB8GA1UdIwQYMBaAFNhhFJcuMM6cFgWK1Z/b9piNCDkZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAzMy8zNzhGRERBRTU1 NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pwd1dCWXJWbjl2Mm1JMElP UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJHRVVseTR3enB3V0JZclZuOXYybUkwSU9Say5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAzMy8zNzhGRERBRTU1NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pw d1dCWXJWbjl2Mm1JMElPUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQUKguoDxzhulCA/snegxaWKr3DHpfkI5rK6I58SIT1aIiWg39IJ3R yTdrLlvrfTUNDR+Ned3/hq9gyJNAZjBZYsWSLoQ1T+Bjt8CqaIsgQzBLmHxznwqF 6f7aEAWdoVdXxNzDCAj5OvR6XlQhaXo74eVEpSuFo7yFdQfp3izVy7baqL4GcZL7 eFCsOWolL1WH1LLaF1zVWfiUbgYHQmvwUYfSStG0oRrpBwSbx0doSPQDCLn1gWPT sd/xAnlXKcyKvx5k8bR1Ovrijd4ksaP6yQEv1Wrk+N9tKlPCydw8JqaxIRh9XZaY yfhyLbKrPHUBLjY0e2GNBykhGF4MfSlf -----END CERTIFICATE-----Generated at Sun Jan 25 10:42:31 2026 by rpki-client