This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json) Hash identifier: bU/5bxcajmOI2LuqXCSWNglOwNokUPkmh9upN1fLWiw= Subject key identifier: B9:BE:A6:59:98:43:B2:1C:14:9A:56:0E:A6:94:9B:DE:C2:40:E7:DF Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft Manifest number: 01D5 Signing time: Sun 25 Jan 2026 02:07:29 +0000 Manifest this update: Sun 25 Jan 2026 02:07:28 +0000 Manifest next update: Sun 01 Feb 2026 02:07:28 +0000 Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: EpA9W9NTsBgrUp56ArOfKiVQZGymX8BSBOWZuabgPXs=) 2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: OGHGgQb+3PBwou4AsZu2wzKOHXe+QeebDoI1v2VznA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Validity Not Before: Jan 25 02:07:28 2026 GMT Not After : Feb 1 02:07:28 2026 GMT Subject: CN=69757ae0-37af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:11:84:8c:09:fe:58:2e:51:52:f5:65:a7:22: 54:1c:43:e7:c9:4c:e2:1a:b2:b7:38:1e:8c:a1:ac: 23:75:b6:ba:06:b3:5e:b9:35:ff:3c:e7:07:d3:62: d5:73:77:1e:16:9a:63:22:bd:3e:74:50:2e:80:42: fc:7a:79:da:40:9a:df:27:c7:a8:23:60:49:a7:42: af:de:ae:15:b4:7e:99:35:40:a6:1c:b6:2b:1b:8b: 3a:9c:6e:0e:fd:38:fa:6a:be:f9:b6:40:29:7e:f3: b8:a1:ac:b4:76:30:27:88:81:c7:e7:64:16:a4:6f: 40:21:17:64:d8:5b:8f:81:02:f1:fd:5f:73:d3:d2: df:e4:06:1c:01:f8:10:03:8e:b5:92:4b:df:5b:36: 2b:c0:c3:31:30:57:ef:50:9d:2f:31:4c:9d:f3:a7: 4c:25:22:43:b1:25:09:87:83:65:90:ab:2f:5f:ba: a5:d3:eb:19:74:fc:ca:68:cd:56:d9:4d:16:5c:88: 34:a4:38:42:48:e8:64:89:92:d8:16:6c:8d:bd:1c: 96:51:7e:e6:d2:db:4e:65:e2:dd:10:40:1e:28:b9: 7b:c1:64:4b:3b:d8:f1:ff:27:5b:55:5b:07:b5:c0: a8:54:2c:93:56:4b:ce:17:68:41:35:9b:9c:7a:b1: 56:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BE:A6:59:98:43:B2:1C:14:9A:56:0E:A6:94:9B:DE:C2:40:E7:DF X509v3 Authority Key Identifier: keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:a2:f1:0f:e3:7e:c4:ea:4e:ee:21:62:e6:06:0b:63:f7:ee: f5:41:54:b9:1f:16:ed:06:f0:a9:35:85:63:10:91:33:c6:82: a9:d7:f1:b6:00:63:30:9e:17:42:18:85:a3:5a:ff:af:54:b4: b3:f9:8b:cf:aa:78:1f:11:90:5a:57:09:4a:93:e5:45:df:66: a4:91:26:3c:53:93:bc:36:ea:f2:90:c1:c8:07:5a:bd:48:14: 20:f5:fa:e6:f2:06:d2:9f:13:98:ba:a2:cc:d7:1e:44:cf:f6: da:60:31:ae:f7:05:5a:94:83:e5:2f:55:26:ff:67:59:8a:c2: 0f:0e:d2:a7:48:2c:72:86:f0:04:c8:1d:63:6f:d3:c3:f9:3f: 2e:00:74:0f:ef:c2:c4:f1:5f:d8:6c:2c:63:07:0e:db:fc:24: cd:65:b3:32:16:fb:62:55:43:70:77:39:90:ad:09:85:37:a6: 70:47:30:f6:dd:eb:c8:da:d0:a0:dd:1c:ed:63:34:d8:05:51: 0f:77:f2:00:d8:fc:3b:d6:22:65:2c:d2:79:63:cf:38:17:e7: 6a:49:98:39:b9:86:9a:b9:25:58:86:c2:26:ec:a0:83:d2:a8: 37:41:ab:ab:47:69:d8:e6:36:31:fa:46:ee:3e:d6:07:65:21: 7d:f1:7a:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND OEJGREEwRTcwHhcNMjYwMTI1MDIwNzI4WhcNMjYwMjAxMDIwNzI4WjAYMRYwFAYD VQQDDA02OTc1N2FlMC0zN2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RGEjAn+WC5RUvVlpyJUHEPnyUziGrK3OB6Moawjdba6BrNeuTX/POcH02LV c3ceFppjIr0+dFAugEL8ennaQJrfJ8eoI2BJp0Kv3q4VtH6ZNUCmHLYrG4s6nG4O /Tj6ar75tkApfvO4oay0djAniIHH52QWpG9AIRdk2FuPgQLx/V9z09Lf5AYcAfgQ A461kkvfWzYrwMMxMFfvUJ0vMUyd86dMJSJDsSUJh4NlkKsvX7ql0+sZdPzKaM1W 2U0WXIg0pDhCSOhkiZLYFmyNvRyWUX7m0ttOZeLdEEAeKLl7wWRLO9jx/ydbVVsH tcCoVCyTVkvOF2hBNZucerFWGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLm+plmY Q7IcFJpWDqaUm97CQOffMB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du MGpNcHZKa29TaVBJdjlvT2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASovEP437E6k7uIWLmBgtj9+71QVS5HxbtBvCpNYVjEJEzxoKp1/G2 AGMwnhdCGIWjWv+vVLSz+YvPqngfEZBaVwlKk+VF32akkSY8U5O8NurykMHIB1q9 SBQg9frm8gbSnxOYuqLM1x5Ez/baYDGu9wValIPlL1Um/2dZisIPDtKnSCxyhvAE yB1jb9PD+T8uAHQP78LE8V/YbCxjBw7b/CTNZbMyFvtiVUNwdzmQrQmFN6ZwRzD2 3evI2tCg3RztYzTYBVEPd/IA2Pw71iJlLNJ5Y884F+dqSZg5uYaauSVYhsIm7KCD 0qg3QaurR2nY5jYx+kbuPtYHZSF98XpB -----END CERTIFICATE-----Generated at Sun Jan 25 09:22:40 2026 by rpki-client