This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft File: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft (raw, json) Hash identifier: 8hSKiwUnVbYzGhUANbeZi5GXwuuVH+JnWCYLX+rYGmI= Subject key identifier: FF:9E:21:2B:7D:76:C4:91:F1:1A:D9:7F:53:A5:70:A5:A6:92:C8:5A Authority key identifier: F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 Certificate issuer: /CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08 Certificate serial: 12C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft Manifest number: 12AB Signing time: Sat 24 Jan 2026 16:48:07 +0000 Manifest this update: Sat 24 Jan 2026 16:48:06 +0000 Manifest next update: Sat 31 Jan 2026 16:48:06 +0000 Files and hashes: 1: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl (hash: Q7yqDTrJzjhJ0j/uKsZs2WD9u6QKCCfqDKvYsU7FUMw=) 2: 0AF12B12DDA411E88E25E96FC4F9AE02.roa (hash: u2n7hXJfpPkswx+8ZUw3IUUcjyPvy2JG1QnFE+FNubg=) 3: 801B5CA0D49711EFBF7D3414C4F9AE02.roa (hash: Xzla+9ppUwpzAJZ58gGvDCqRc3koCm2xr8tcv9e/5Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4804 (0x12c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B268A, serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08 Validity Not Before: Jan 24 16:48:06 2026 GMT Not After : Jan 31 16:48:06 2026 GMT Subject: CN=6974f7c7-a37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fc:c5:1f:49:4d:00:38:43:34:53:5a:a9:2b: 84:af:3a:c4:06:1f:97:81:e8:5a:9d:a7:46:1d:05: 9e:80:67:fc:72:ff:05:a8:da:3c:59:12:e4:dd:05: 4f:fb:90:42:7c:5b:d1:7d:ab:cd:08:e1:8c:dd:c9: cd:0e:26:22:24:e2:db:bf:17:c4:5f:cf:c0:7a:0e: 2d:5d:67:0c:ee:34:59:11:54:ed:9c:9e:9c:de:a7: bd:a3:38:e7:e0:45:7b:28:ef:d5:2a:ab:81:09:1e: 16:90:22:98:c0:4d:aa:cc:ed:50:3e:02:98:2c:84: 39:21:24:e0:94:9b:13:08:06:75:29:53:94:2e:09: c3:1e:46:33:46:59:37:0b:8c:fb:4a:a5:c3:39:ad: ab:4d:48:8d:85:77:2a:dc:26:6e:01:be:c6:6d:4d: 1e:45:f6:49:c7:28:34:0d:2f:25:f7:ad:60:5d:d5: 60:48:9e:96:17:ef:a1:87:d2:f9:4a:58:4a:3b:1f: f1:45:1a:7f:71:8c:60:d3:13:4e:07:04:a7:eb:bd: 44:47:cc:fc:5e:99:a4:91:e0:88:1a:9f:e6:70:9c: 61:6e:e7:1a:97:c0:c7:8d:4f:1f:4f:a7:f7:c8:e2: d6:78:78:0b:6c:aa:a6:37:db:15:a0:57:01:10:ef: 12:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9E:21:2B:7D:76:C4:91:F1:1A:D9:7F:53:A5:70:A5:A6:92:C8:5A X509v3 Authority Key Identifier: keyid:F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:3a:c5:e8:3f:b9:36:7b:60:7b:29:ab:be:91:76:e5:3f:da: 97:4f:71:05:6e:2a:d8:0f:60:ca:20:28:8e:eb:36:5d:f5:82: 53:ab:1e:34:2b:6b:8f:c9:85:af:a0:2c:3d:5d:ee:c5:11:20: 9e:ad:9e:42:5e:11:11:f9:35:ca:4c:55:17:8a:37:1d:42:72: b0:a3:5d:e0:b3:f8:6b:ea:7d:ba:a7:36:36:65:4a:2c:a7:3a: 9c:a8:ef:c8:d0:b0:97:23:fa:65:6b:ed:4a:ba:3c:1b:55:b9: 98:82:d0:54:df:a1:93:d9:2f:da:ec:5c:2c:5c:97:f6:e3:fe: 33:4b:ed:48:7d:7f:98:9a:d6:a9:c0:02:c4:f1:ba:25:bd:c8: 62:3d:60:06:35:96:fa:68:81:81:fc:54:f4:eb:c8:f2:74:af: 09:8d:84:9c:3e:c6:c0:3b:71:de:ff:5b:8f:5e:41:01:47:0d: 6b:27:a4:3b:ce:85:e2:9c:b1:27:a5:ae:28:c9:df:84:84:91: 1d:8e:b0:c3:66:b4:f7:f4:77:3d:6a:c7:0a:c6:52:22:f4:0a: fd:0b:78:4d:26:ea:ba:fc:84:99:3a:36:c7:a7:0a:75:5b:b8: 5b:ff:e4:31:47:3d:73:be:1f:66:02:35:e7:7c:92:f2:de:40: 88:4c:1a:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI2OEExMTAvBgNVBAUTKEY4RUVDRTdEM0MwQ0Y1OTIyRUEzRDgwMzU1MzYzODgy M0ZBRUVBMDgwHhcNMjYwMTI0MTY0ODA2WhcNMjYwMTMxMTY0ODA2WjAYMRYwFAYD VQQDDA02OTc0ZjdjNy1hMzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5/zFH0lNADhDNFNaqSuErzrEBh+XgehanadGHQWegGf8cv8FqNo8WRLk3QVP +5BCfFvRfavNCOGM3cnNDiYiJOLbvxfEX8/Aeg4tXWcM7jRZEVTtnJ6c3qe9ozjn 4EV7KO/VKquBCR4WkCKYwE2qzO1QPgKYLIQ5ISTglJsTCAZ1KVOULgnDHkYzRlk3 C4z7SqXDOa2rTUiNhXcq3CZuAb7GbU0eRfZJxyg0DS8l961gXdVgSJ6WF++hh9L5 SlhKOx/xRRp/cYxg0xNOBwSn671ER8z8XpmkkeCIGp/mcJxhbucal8DHjU8fT6f3 yOLWeHgLbKqmN9sVoFcBEO8SgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+eISt9 dsSR8RrZf1OlcKWmkshaMB8GA1UdIwQYMBaAFPjuzn08DPWSLqPYA1U2OII/ruoI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjY4QS84NEZCNEM5Q0RE QTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTlaSXVvOWdEVlRZNGdqLXU2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1PN09mVHdNOVpJdW85Z0RWVFk0Z2otdTZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjY4QS84NEZCNEM5Q0REQTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTla SXVvOWdEVlRZNGdqLXU2Z2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwOsXoP7k2e2B7Kau+kXblP9qXT3EFbirYD2DKICiO6zZd9YJTqx40 K2uPyYWvoCw9Xe7FESCerZ5CXhER+TXKTFUXijcdQnKwo13gs/hr6n26pzY2ZUos pzqcqO/I0LCXI/pla+1KujwbVbmYgtBU36GT2S/a7FwsXJf24/4zS+1IfX+Ymtap wALE8bolvchiPWAGNZb6aIGB/FT068jydK8JjYScPsbAO3He/1uPXkEBRw1rJ6Q7 zoXinLEnpa4oyd+EhJEdjrDDZrT39Hc9ascKxlIi9Ar9C3hNJuq6/ISZOjbHpwp1 W7hb/+QxRz1zvh9mAjXnfJLy3kCITBqo -----END CERTIFICATE-----Generated at Sun Jan 25 10:46:25 2026 by rpki-client