This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft File: 2gNU-zgfRSHBCxY-y9IqCD-3omw.mft (raw, json) Hash identifier: 9f7P/q91lV/mAw8t9KYmlVDhZM9F7dA/UiuPkrsQGIA= Subject key identifier: F5:A6:18:D0:7B:1A:E2:C7:B5:0E:01:CC:8A:93:F6:B0:69:22:6A:09 Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Certificate serial: 1663 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft Manifest number: 1652 Signing time: Sat 24 Jan 2026 16:28:41 +0000 Manifest this update: Sat 24 Jan 2026 16:28:40 +0000 Manifest next update: Sat 31 Jan 2026 16:28:40 +0000 Files and hashes: 1: 2gNU-zgfRSHBCxY-y9IqCD-3omw.crl (hash: tv69ok9z9zCu8WSLPxRZai5kAwcjPz3V4QTTsPfclqc=) 2: 7F3ED5DE9C4411ECBD85CE4FC4F9AE02.roa (hash: IzneJg8uANhMNifeTA7mpjTNJJeW/3cdEs9nqqZnnZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5731 (0x1663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Validity Not Before: Jan 24 16:28:40 2026 GMT Not After : Jan 31 16:28:40 2026 GMT Subject: CN=6974f339-a7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:09:20:bb:f3:f3:fc:fe:b9:a5:8d:6f:dc:a1: a5:f0:74:15:f4:aa:58:25:84:23:c4:d3:48:46:f5: 53:2c:cc:3c:00:07:9c:07:57:bf:a5:e8:5c:2c:ef: 0e:8a:f2:98:bf:a6:4b:9c:d6:04:38:3d:cd:f4:5c: 7d:20:21:7e:ca:da:4d:5a:e6:c3:4b:26:97:7b:52: 79:0a:2a:27:78:89:7c:ea:b5:b7:23:df:6f:22:88: 75:10:dc:14:0f:cc:8b:e3:56:e3:01:e7:4d:87:0f: c8:a7:bb:7e:ec:66:78:ef:d0:56:9f:c5:19:18:7b: ec:11:9d:ce:c6:55:bc:e8:32:b8:a8:bb:e5:e0:8e: 00:9e:04:33:c0:06:3e:a1:76:5f:bc:e6:35:2a:26: 5e:a4:19:bf:a1:92:c3:86:b0:b8:3b:b2:bd:17:bb: 54:1d:85:e5:72:ab:bc:ad:d1:a0:33:d7:0f:7c:f7: da:a0:86:0f:28:e0:72:cc:e5:64:e7:86:34:8c:8b: b1:2e:4a:31:e3:a7:fd:3a:b1:13:19:f9:da:89:b7: 06:78:df:52:9f:40:46:eb:20:8f:46:ef:0f:2c:46: e1:06:71:0d:85:af:02:6c:b5:5f:0f:26:91:9d:a3: 96:0a:97:21:0b:74:15:10:fb:55:3c:9c:72:8a:a4: 42:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A6:18:D0:7B:1A:E2:C7:B5:0E:01:CC:8A:93:F6:B0:69:22:6A:09 X509v3 Authority Key Identifier: keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:e7:b4:7f:b7:69:f6:42:3a:71:b7:ad:22:dc:59:e2:ff:60: c2:ec:12:be:16:41:34:76:0f:d7:ea:8b:a7:d9:5c:fb:e6:c4: d7:66:62:ca:f9:c8:4d:1e:a4:e1:48:24:77:4e:15:95:09:b8: 64:50:49:49:75:78:d7:4d:2a:1a:e5:35:c2:f8:78:ae:8d:73: 8b:cd:f4:e5:0a:5f:02:b6:58:4f:65:c3:54:4b:09:36:ed:8b: 21:e1:34:4d:72:22:97:c8:5d:7e:93:a1:6e:cd:63:bf:01:d1: 3d:4e:a1:ee:32:41:59:72:65:e6:68:06:7e:98:a5:f1:26:8f: f2:d2:76:45:37:e2:ef:06:04:10:94:b7:cd:bc:49:e5:19:b7: 2b:eb:84:9a:db:89:09:e4:76:52:4d:47:07:fe:1b:3f:fa:67: 48:0d:5b:6b:08:42:db:92:af:4d:b0:63:fd:5d:20:17:2e:e8: aa:92:14:e0:90:ef:e1:ab:75:df:fa:9c:f7:db:69:cd:c0:27: bc:b5:b2:d3:14:b4:fe:84:90:8b:67:4b:78:18:ca:86:08:26: 3c:be:63:f2:80:c4:12:a8:b9:99:30:66:2c:8f:60:51:03:10: 4b:f2:6e:30:80:12:e6:06:9d:15:f2:e7:e3:ac:e3:b1:0c:8a: 95:9b:51:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDREExMTAvBgNVBAUTKERBMDM1NEZCMzgxRjQ1MjFDMTBCMTYzRUNCRDIyQTA4 M0ZCN0EyNkMwHhcNMjYwMTI0MTYyODQwWhcNMjYwMTMxMTYyODQwWjAYMRYwFAYD VQQDDA02OTc0ZjMzOS1hN2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Qkgu/Pz/P65pY1v3KGl8HQV9KpYJYQjxNNIRvVTLMw8AAecB1e/pehcLO8O ivKYv6ZLnNYEOD3N9Fx9ICF+ytpNWubDSyaXe1J5CioneIl86rW3I99vIoh1ENwU D8yL41bjAedNhw/Ip7t+7GZ479BWn8UZGHvsEZ3OxlW86DK4qLvl4I4AngQzwAY+ oXZfvOY1KiZepBm/oZLDhrC4O7K9F7tUHYXlcqu8rdGgM9cPfPfaoIYPKOByzOVk 54Y0jIuxLkox46f9OrETGfnaibcGeN9Sn0BG6yCPRu8PLEbhBnENha8CbLVfDyaR naOWCpchC3QVEPtVPJxyiqRCXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWmGNB7 GuLHtQ4BzIqT9rBpImoJMB8GA1UdIwQYMBaAFNoDVPs4H0UhwQsWPsvSKgg/t6Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkNEQS9GNEUyQkFCODI1 QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJTSEJDeFkteTlJcUNELTNv bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnTlUtemdmUlNIQkN4WS15OUlxQ0QtM29tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkNEQS9GNEUyQkFCODI1QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJT SEJDeFkteTlJcUNELTNvbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC57R/t2n2Qjpxt60i3Fni/2DC7BK+FkE0dg/X6oun2Vz75sTXZmLK +chNHqThSCR3ThWVCbhkUElJdXjXTSoa5TXC+HiujXOLzfTlCl8CtlhPZcNUSwk2 7Ysh4TRNciKXyF1+k6FuzWO/AdE9TqHuMkFZcmXmaAZ+mKXxJo/y0nZFN+LvBgQQ lLfNvEnlGbcr64Sa24kJ5HZSTUcH/hs/+mdIDVtrCELbkq9NsGP9XSAXLuiqkhTg kO/hq3Xf+pz322nNwCe8tbLTFLT+hJCLZ0t4GMqGCCY8vmPygMQSqLmZMGYsj2BR AxBL8m4wgBLmBp0V8ufjrOOxDIqVm1HE -----END CERTIFICATE-----Generated at Sun Jan 25 04:36:17 2026 by rpki-client