This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft File: 23LIuvHa9pOYGFLuAyIwMF7ICRA.mft (raw, json) Hash identifier: TcPbV7dDvDNeNp840G3a/St65OWNr4pJogPb5TM8jKc= Subject key identifier: A8:6D:9D:83:DB:CC:9E:5A:F1:0C:DF:9E:CA:9A:0B:5C:CE:B0:9F:82 Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 Certificate issuer: /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Certificate serial: 0917 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft Manifest number: 090F Signing time: Sat 24 Jan 2026 19:42:48 +0000 Manifest this update: Sat 24 Jan 2026 19:42:48 +0000 Manifest next update: Sat 31 Jan 2026 19:42:48 +0000 Files and hashes: 1: 23LIuvHa9pOYGFLuAyIwMF7ICRA.crl (hash: P913DxlfZrly2NH59ODAvXHgFB7zevCTc8vCA5PxW2A=) 2: E6F3687CBCE711EAACD6466CC4F9AE02.roa (hash: f4udCcisFsQWGXJxlj4yAW3MNSfW4g1HYUDDKGCbXqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2327 (0x917) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B289C, serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Validity Not Before: Jan 24 19:42:48 2026 GMT Not After : Jan 31 19:42:48 2026 GMT Subject: CN=697520b8-6f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7d:4a:54:72:f6:24:63:f5:ac:fd:46:5e:30: 8c:37:70:1a:b1:b5:6d:fa:a7:4b:e8:6b:89:d5:92: 91:95:94:e6:e2:61:be:87:25:d9:69:6b:94:0d:22: be:e7:6a:7f:68:b0:95:78:69:49:ed:09:4a:ec:1f: 72:40:e2:dc:fe:da:07:02:6b:03:88:3e:39:08:cf: 86:79:8d:3c:aa:74:9a:f9:dc:59:7c:d1:ca:da:2b: cf:89:11:00:9b:bb:07:af:ed:74:86:e6:76:a7:8d: 29:eb:ea:f6:c5:18:46:5d:4f:12:b4:20:3a:4f:a5: 82:79:09:31:2b:98:fd:ec:87:71:56:94:e6:b9:2d: e6:3d:09:4e:25:87:f1:71:c2:3d:1d:94:59:e6:60: 48:7a:01:a1:f7:8a:12:40:e3:dd:d2:ef:25:47:6f: 71:99:95:c2:26:b6:42:c7:48:63:3b:84:14:36:82: da:4f:f9:15:26:57:5b:6c:eb:2a:8c:a9:6a:14:f3: 0a:b4:41:2e:1e:69:bf:32:4c:13:87:f9:96:1a:1f: a1:83:d7:4d:21:46:1b:bb:b5:c2:a9:0c:df:e5:a5: 5d:db:ff:ec:f3:39:15:82:0d:89:4c:79:94:c7:e8: c0:26:1e:d6:7a:92:d1:d4:ff:48:4f:92:9f:76:a5: 76:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6D:9D:83:DB:CC:9E:5A:F1:0C:DF:9E:CA:9A:0B:5C:CE:B0:9F:82 X509v3 Authority Key Identifier: keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:9f:25:13:40:86:ae:ce:6a:9e:3d:f3:5f:9d:09:84:8a:17: 3c:54:e9:c0:93:27:2d:cd:5d:30:d3:bc:08:87:ae:71:33:ef: b1:b4:3b:31:73:a3:3d:1d:ce:c3:01:dc:9a:2c:2f:fd:70:8c: 3b:82:a5:ec:d9:a2:fe:f7:bf:06:24:44:8f:47:3c:ef:cb:ec: ca:e1:82:33:fb:c0:e6:af:5a:a5:ca:27:47:23:cd:55:78:b5: 43:a5:5d:d7:bc:e0:4d:e6:83:84:03:22:c8:f8:1c:ea:b6:2c: a7:0e:44:a6:9b:8f:65:ac:60:2f:13:01:bb:11:2f:66:fe:cb: b4:2d:8e:e4:b3:8e:fa:ed:10:a4:f0:13:d4:a0:ad:d1:dd:8c: 6e:82:c7:7f:be:81:51:75:3b:67:9d:85:40:23:35:3c:1e:80: f8:a5:51:07:b3:1a:42:7d:2e:ce:28:e8:74:9b:0a:16:5c:46: 68:e7:42:55:0e:37:5b:00:f5:99:9f:a9:d1:48:9e:59:09:aa: f7:aa:9a:64:55:16:25:26:d7:25:4f:d0:52:b5:a0:4f:49:84: 02:15:de:68:a1:dc:c2:15:2b:e0:a8:34:3c:dd:ca:31:01:fe: d3:bb:41:89:ae:67:a2:aa:8d:dc:22:e3:72:96:7d:f6:91:0b: 59:3d:87:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI4OUMxMTAvBgNVBAUTKERCNzJDOEJBRjFEQUY2OTM5ODE4NTJFRTAzMjIzMDMw NUVDODA5MTAwHhcNMjYwMTI0MTk0MjQ4WhcNMjYwMTMxMTk0MjQ4WjAYMRYwFAYD VQQDDA02OTc1MjBiOC02ZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1H1KVHL2JGP1rP1GXjCMN3AasbVt+qdL6GuJ1ZKRlZTm4mG+hyXZaWuUDSK+ 52p/aLCVeGlJ7QlK7B9yQOLc/toHAmsDiD45CM+GeY08qnSa+dxZfNHK2ivPiREA m7sHr+10huZ2p40p6+r2xRhGXU8StCA6T6WCeQkxK5j97IdxVpTmuS3mPQlOJYfx ccI9HZRZ5mBIegGh94oSQOPd0u8lR29xmZXCJrZCx0hjO4QUNoLaT/kVJldbbOsq jKlqFPMKtEEuHmm/MkwTh/mWGh+hg9dNIUYbu7XCqQzf5aVd2//s8zkVgg2JTHmU x+jAJh7WepLR1P9IT5KfdqV22QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhtnYPb zJ5a8QzfnsqaC1zOsJ+CMB8GA1UdIwQYMBaAFNtyyLrx2vaTmBhS7gMiMDBeyAkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjg5Qy8zQUIxRTJEQ0JD RTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlwT1lHRkx1QXlJd01GN0lD UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzTEl1dkhhOXBPWUdGTHVBeUl3TUY3SUNSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mjg5Qy8zQUIxRTJEQ0JDRTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlw T1lHRkx1QXlJd01GN0lDUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2nyUTQIauzmqePfNfnQmEihc8VOnAkyctzV0w07wIh65xM++xtDsx c6M9Hc7DAdyaLC/9cIw7gqXs2aL+978GJESPRzzvy+zK4YIz+8Dmr1qlyidHI81V eLVDpV3XvOBN5oOEAyLI+BzqtiynDkSmm49lrGAvEwG7ES9m/su0LY7ks4767RCk 8BPUoK3R3Yxugsd/voFRdTtnnYVAIzU8HoD4pVEHsxpCfS7OKOh0mwoWXEZo50JV DjdbAPWZn6nRSJ5ZCar3qppkVRYlJtclT9BStaBPSYQCFd5oodzCFSvgqDQ83cox Af7Tu0GJrmeiqo3cIuNyln32kQtZPYfN -----END CERTIFICATE-----Generated at Sun Jan 25 07:52:23 2026 by rpki-client