This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json) Hash identifier: NrOOXLgyqJq2xD6lbX7w/h5tvYZsKdnisbbMU6brBM0= Subject key identifier: 97:07:A0:6C:AE:C7:D6:B1:5E:6F:D6:95:36:4F:D7:8E:E4:F3:53:30 Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Certificate serial: 31F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft Manifest number: 31D5 Signing time: Sat 24 Jan 2026 15:17:59 +0000 Manifest this update: Sat 24 Jan 2026 15:17:58 +0000 Manifest next update: Sat 31 Jan 2026 15:17:58 +0000 Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: 8tO9OfitXEjTvsgcn/5ddQ+MvIvplYEVcZ16cFS7eKA=) 2: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: /EM/vo0t7hxhR1+u4hOK5kv/a5vaIBeuI2TOpMQ2J6U=) 3: 4B019258F78411F08F54609B4C6F56BC.roa (hash: rHSFrQgJ+OhFOvwIS86c51WqtoELZFmgA6GQCBeb2l4=) 4: 4BEF9ED0F78411F08F54609B4C6F56BC.roa (hash: RCOZO/R0vt1DZeOKkzSP+ObtytYoLYrcRoyxwvbTRVE=) 5: 33036E24BCE311EA953FBB5EC4F9AE02.roa (hash: XqVyekJEjEzuH8hLRjew+hAKZkF1o9oKv8NocJP1RLE=) 6: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: 4L/QBsPDgl5EFK4nBoxi1+onb9ozFugWEl6aDf8ffAI=) 7: 4B7CAC36F78411F08F54609B4C6F56BC.roa (hash: lcVmEQAeS5XlQ1MtPWDksitABUyMj1pg2WbngUTI/uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12784 (0x31f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Validity Not Before: Jan 24 15:17:58 2026 GMT Not After : Jan 31 15:17:58 2026 GMT Subject: CN=6974e2a6-a98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:94:b9:fb:d9:99:72:56:93:7a:d6:9c:06:40: e7:4c:6b:8f:98:c7:4f:5f:4b:da:d5:02:a7:5d:21: d5:ad:46:7b:51:00:30:00:51:e1:2b:6d:4d:f1:1f: 69:ce:fc:83:57:ed:fa:62:57:2b:0d:9f:e3:6c:1a: 1f:77:a5:0c:18:1e:6e:62:bb:4a:7c:21:b2:44:d5: 24:01:be:55:f3:22:4a:d6:e5:7b:4a:01:06:aa:f4: 41:b5:86:13:c2:03:45:2e:7b:7f:fd:8e:73:aa:6c: 46:f8:68:d2:16:45:e6:e0:45:ac:d9:af:68:3a:3e: 0f:33:ea:5d:ea:5e:d6:2d:d3:15:bb:31:51:d4:b3: f6:eb:e6:c8:50:37:14:3f:77:37:4b:e8:f3:42:40: 4c:b2:a3:a7:42:86:c9:25:6f:4e:9a:28:97:f6:f7: 96:37:19:a7:6f:6d:f8:65:18:72:66:a0:59:a9:f0: 23:ca:e4:8d:bf:78:bc:af:db:68:56:a1:08:44:3d: 83:2c:e9:97:28:3f:63:8c:79:6b:e8:31:3e:cd:a1: 52:86:7b:09:5d:02:be:22:20:65:02:1a:68:e6:4c: f9:23:54:da:99:78:b1:c8:60:27:ac:4f:50:7d:62: af:2b:90:f6:ae:ac:7b:11:fd:96:c2:db:4e:a2:b5: 96:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:07:A0:6C:AE:C7:D6:B1:5E:6F:D6:95:36:4F:D7:8E:E4:F3:53:30 X509v3 Authority Key Identifier: keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:77:11:65:ca:78:77:3f:eb:73:42:6c:02:f6:72:11:4a:94: 33:56:42:21:5b:30:63:33:a2:92:77:38:14:57:6d:a2:66:0d: 52:6a:48:32:9e:cf:13:78:ab:33:7e:79:76:d8:57:3d:a0:fc: aa:d7:d7:bb:07:83:e0:51:d1:13:34:73:0f:e3:b4:67:80:00: ab:76:33:94:13:97:9d:15:22:0a:56:80:af:5a:5b:df:54:05: 8f:34:dd:8a:4f:86:d1:8e:b2:c9:75:c0:63:f5:64:77:29:92: 9d:d5:37:6d:c0:da:c0:8e:14:e6:c0:6c:cb:d2:85:88:84:e5: 04:e9:d5:ca:d4:ef:8c:49:78:c4:a0:8c:91:b2:96:d0:c0:e2: 5a:8a:20:3d:a8:41:71:ad:3c:8f:50:05:95:e9:c9:9d:b8:94: aa:15:96:4f:6e:7c:85:0f:36:a6:d5:15:12:60:05:48:38:3c: e4:45:b4:46:5a:4d:55:6d:57:57:de:0a:46:dc:c0:6f:7d:8a: a2:33:28:e3:7f:3c:73:99:71:aa:4e:03:28:ef:9a:76:72:67: 77:09:02:13:41:ed:b1:28:5c:07:14:f2:1c:02:a8:8b:75:5e: a8:9f:66:3f:04:16:8d:42:e5:d9:ef:20:f9:89:4e:20:ef:d3: 8f:c8:12:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG OEJEMEY1QzkwHhcNMjYwMTI0MTUxNzU4WhcNMjYwMTMxMTUxNzU4WjAYMRYwFAYD VQQDDA02OTc0ZTJhNi1hOThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAipS5+9mZclaTetacBkDnTGuPmMdPX0va1QKnXSHVrUZ7UQAwAFHhK21N8R9p zvyDV+36YlcrDZ/jbBofd6UMGB5uYrtKfCGyRNUkAb5V8yJK1uV7SgEGqvRBtYYT wgNFLnt//Y5zqmxG+GjSFkXm4EWs2a9oOj4PM+pd6l7WLdMVuzFR1LP26+bIUDcU P3c3S+jzQkBMsqOnQobJJW9OmiiX9veWNxmnb234ZRhyZqBZqfAjyuSNv3i8r9to VqEIRD2DLOmXKD9jjHlr6DE+zaFShnsJXQK+IiBlAhpo5kz5I1TamXixyGAnrE9Q fWKvK5D2rqx7Ef2WwttOorWWwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcHoGyu x9axXm/WlTZP147k81MwMB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm MEZHWlJjN1VqblQ0dlE5Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVdxFlynh3P+tzQmwC9nIRSpQzVkIhWzBjM6KSdzgUV22iZg1Sakgy ns8TeKszfnl22Fc9oPyq19e7B4PgUdETNHMP47RngACrdjOUE5edFSIKVoCvWlvf VAWPNN2KT4bRjrLJdcBj9WR3KZKd1TdtwNrAjhTmwGzL0oWIhOUE6dXK1O+MSXjE oIyRspbQwOJaiiA9qEFxrTyPUAWV6cmduJSqFZZPbnyFDzam1RUSYAVIODzkRbRG Wk1VbVdX3gpG3MBvfYqiMyjjfzxzmXGqTgMo75p2cmd3CQITQe2xKFwHFPIcAqiL dV6on2Y/BBaNQuXZ7yD5iU4g79OPyBLg -----END CERTIFICATE-----Generated at Sun Jan 25 18:32:03 2026 by rpki-client