This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft File: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft (raw, json) Hash identifier: POXaRmO6HnBMXg274ct4PSG4EB46NiutgutvDJtAE3w= Subject key identifier: 13:98:77:56:B6:44:C3:6C:F9:95:45:6F:A6:86:C0:9C:E1:52:EB:7F Authority key identifier: DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 Certificate issuer: /CN=A91B31CB/serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft Manifest number: F2 Signing time: Fri 23 Jan 2026 04:28:51 +0000 Manifest this update: Fri 23 Jan 2026 04:28:50 +0000 Manifest next update: Fri 30 Jan 2026 04:28:50 +0000 Files and hashes: 1: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl (hash: /k2dzqUj6MVbPrnPj+Uk9wChuGk2VF9WX9/ZZB/IBn8=) 2: 67030B7889F111EFB3186A7BC4F9AE02.roa (hash: laasWh8PuYjoERWb0doiSl5kx11xLeI2IUGh595BB8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 04:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B31CB, serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Validity Not Before: Jan 23 04:28:50 2026 GMT Not After : Jan 30 04:28:50 2026 GMT Subject: CN=6972f903-0665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:33:6c:cc:0c:e3:a0:62:cd:a0:6a:8e:77:36: 0d:dd:18:5b:df:5d:5c:e3:e0:56:45:8c:7f:a8:fd: 92:ce:90:13:13:b3:62:8b:99:ee:10:46:9f:62:34: dc:91:a8:de:6d:0c:ea:07:6b:a1:7f:dd:98:84:5b: e7:93:c7:53:c2:5c:16:99:f0:dc:35:6d:5b:4e:38: bf:18:64:4f:b7:69:c7:96:03:0c:5a:4c:f2:fd:d2: 5a:0c:25:d7:11:bd:eb:c6:b4:86:a7:86:16:ce:e3: 75:f2:a2:f9:33:97:d4:c9:6d:1d:1b:22:f6:8e:a5: 60:ac:d3:71:6d:3f:7b:c0:bc:f6:8e:5d:ea:cc:1c: 56:09:ed:e0:79:8d:1c:1d:88:b0:4b:91:dc:7a:8f: 25:56:16:9c:da:d3:0e:9f:4c:95:d5:15:33:91:93: 0b:04:46:78:d6:38:22:2f:d8:0c:a2:98:aa:3b:a8: 3f:12:03:4c:fc:a4:f5:6d:75:ac:c1:54:3a:09:95: 76:54:22:b3:41:7f:aa:c9:11:78:81:ea:17:c1:e5: 13:d8:dc:1f:90:01:35:90:c6:65:cd:68:2a:f6:e9: 02:9d:82:a7:ea:a2:32:28:4c:d1:b6:0c:6e:f9:25: 3a:e7:26:90:37:a9:4a:50:7b:cb:19:09:4e:e6:ab: f4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:98:77:56:B6:44:C3:6C:F9:95:45:6F:A6:86:C0:9C:E1:52:EB:7F X509v3 Authority Key Identifier: keyid:DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:a7:a5:7c:02:9f:ce:06:ad:6b:4f:83:ff:bf:92:8d:b5:55: 8d:24:23:d3:a7:c5:bc:c5:a1:66:84:91:21:b2:29:72:f6:91: 7b:6c:9b:ae:7f:79:0a:b3:e6:78:38:38:dc:6e:de:38:60:49: 21:be:f0:5b:f4:f9:20:f7:c0:cc:84:f5:b9:92:e2:ba:ed:f9: 88:7c:5a:70:18:ae:76:5c:53:ce:4e:c8:ee:de:51:2e:5c:a6: 56:53:7d:8a:ae:1e:0c:7c:25:91:6f:4f:e6:4b:33:3e:7e:18: 9c:0b:30:60:1d:85:b1:c0:42:c5:7f:d4:94:02:97:9c:1e:bc: 7a:f0:18:dc:f1:c6:94:83:4e:47:62:41:bc:c7:86:a3:ad:15: b9:4e:f8:eb:33:2b:d4:76:dd:f7:0e:9d:dc:01:4a:50:65:c6: 21:28:f2:91:7c:ad:e0:e6:9a:52:47:50:a0:75:0f:65:af:af: 4d:64:55:e5:12:3d:cd:12:3b:23:25:63:11:e9:00:da:b5:40: 4f:2a:6a:4a:c7:9e:d6:c7:66:6d:ff:9c:c5:67:78:7c:3a:2e: 4a:79:bb:c9:40:3e:be:f7:b2:85:31:d6:c7:4e:38:e5:ca:4c: a1:88:c5:91:11:5c:93:37:19:b1:d0:68:db:a9:45:94:ed:75: 29:0e:8a:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMxQ0IxMTAvBgNVBAUTKERGRTRBQ0RDQTBBNjIyNDM2NTRCRDIwOTM2ODIwNTc4 RTkyRDI1MjQwHhcNMjYwMTIzMDQyODUwWhcNMjYwMTMwMDQyODUwWjAYMRYwFAYD VQQDDA02OTcyZjkwMy0wNjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zNszAzjoGLNoGqOdzYN3Rhb311c4+BWRYx/qP2SzpATE7Nii5nuEEafYjTc kajebQzqB2uhf92YhFvnk8dTwlwWmfDcNW1bTji/GGRPt2nHlgMMWkzy/dJaDCXX Eb3rxrSGp4YWzuN18qL5M5fUyW0dGyL2jqVgrNNxbT97wLz2jl3qzBxWCe3geY0c HYiwS5Hceo8lVhac2tMOn0yV1RUzkZMLBEZ41jgiL9gMopiqO6g/EgNM/KT1bXWs wVQ6CZV2VCKzQX+qyRF4geoXweUT2NwfkAE1kMZlzWgq9ukCnYKn6qIyKEzRtgxu +SU65yaQN6lKUHvLGQlO5qv00wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOYd1a2 RMNs+ZVFb6aGwJzhUut/MB8GA1UdIwQYMBaAFN/krNygpiJDZUvSCTaCBXjpLSUk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzFDQi9GNDRDQ0Y3RTg5 RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi8zLVNzM0tDbUlrTmxTOUlKTm9JRmVPa3RK U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMtU3MzS0NtSWtObFM5SUpOb0lGZU9rdEpTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzFDQi9GNDRDQ0Y3RTg5RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi8zLVNzM0tDbUlr TmxTOUlKTm9JRmVPa3RKU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBop6V8Ap/OBq1rT4P/v5KNtVWNJCPTp8W8xaFmhJEhsily9pF7bJuu f3kKs+Z4ODjcbt44YEkhvvBb9Pkg98DMhPW5kuK67fmIfFpwGK52XFPOTsju3lEu XKZWU32Krh4MfCWRb0/mSzM+fhicCzBgHYWxwELFf9SUApecHrx68Bjc8caUg05H YkG8x4ajrRW5TvjrMyvUdt33Dp3cAUpQZcYhKPKRfK3g5ppSR1CgdQ9lr69NZFXl Ej3NEjsjJWMR6QDatUBPKmpKx57Wx2Zt/5zFZ3h8Oi5KebvJQD6+97KFMdbHTjjl ykyhiMWREVyTNxmx0GjbqUWU7XUpDop0 -----END CERTIFICATE-----Generated at Sun Jan 25 04:27:04 2026 by rpki-client