This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft File: Ddq78x7saHZu9mmvlzUkDDiZNFk.mft (raw, json) Hash identifier: VaGdk9Kjc3UvZESUPolyVPnMcbMJw1EEJAyYix7I/jk= Subject key identifier: BE:9D:5C:64:2C:4C:8C:F2:59:37:BC:83:C3:76:60:68:C4:91:A6:94 Authority key identifier: 0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 Certificate issuer: /CN=A91B3247/serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft Manifest number: 62 Signing time: Fri 23 Jan 2026 06:12:45 +0000 Manifest this update: Fri 23 Jan 2026 06:12:45 +0000 Manifest next update: Fri 30 Jan 2026 06:12:45 +0000 Files and hashes: 1: Ddq78x7saHZu9mmvlzUkDDiZNFk.crl (hash: 3S1AQuQpIcwMS5oAJ2ki92swe1fxd/NlUbTyhIEn1nQ=) 2: 095B5200A5B111F09CCCE85FC4F9AE02.roa (hash: 9Zb0Av6EsVPUvpAr5Wo6+2kZEuOjOMIuyYuVnzvL3ro=) 3: 44C226F2A5B111F095806166C4F9AE02.roa (hash: Z5IARCPdVB3zQ2o9DruEtHimglf8XZQg6KsX+TluqNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3247, serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Validity Not Before: Jan 23 06:12:45 2026 GMT Not After : Jan 30 06:12:45 2026 GMT Subject: CN=6973115d-a3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b7:12:a6:92:db:19:84:13:53:fd:f3:bc:62: 06:ad:06:08:5b:dc:ed:23:d4:c5:4a:0d:72:80:e6: dc:58:cb:f3:b4:81:d9:db:a2:78:0b:83:8f:be:f4: 48:e2:33:77:2a:70:1f:a9:34:ce:56:f9:81:5a:ac: 5f:1b:45:51:5d:77:c2:1b:05:1a:f6:af:83:23:ef: 20:e2:b6:5e:95:f0:2c:e1:62:fd:3e:33:f2:55:18: 6a:07:b3:90:ed:bb:03:b8:3a:e5:8f:c1:de:4e:72: 82:9e:4c:22:48:c9:de:7c:d3:1b:62:d0:8f:14:b0: 58:0d:e5:77:39:36:3a:15:e0:0e:f3:43:04:ae:16: b2:80:3c:ff:cf:65:69:ea:f0:d4:be:27:c7:78:77: 38:6c:2b:75:5e:2c:7e:6e:75:e7:f4:cb:3a:39:9f: ba:25:45:37:71:dc:75:28:70:07:05:1e:51:c9:f6: 27:43:eb:6f:51:da:30:e3:71:06:66:01:90:f9:5a: e2:89:13:8b:91:a2:e0:f0:92:d2:3b:1c:41:60:ca: 19:b2:97:37:27:14:13:7b:74:ef:bb:a5:3c:32:0a: fd:d0:1a:1e:8e:2b:4e:74:65:30:ae:ec:dd:62:46: 35:77:e5:bf:73:72:7f:07:61:e4:cd:cf:8a:52:fa: 68:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9D:5C:64:2C:4C:8C:F2:59:37:BC:83:C3:76:60:68:C4:91:A6:94 X509v3 Authority Key Identifier: keyid:0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:cd:79:ec:bf:db:1c:18:c2:01:eb:a1:d5:88:f2:46:0b:c4: 70:9f:3f:0f:24:c0:3c:14:de:5b:af:ac:b7:cf:07:05:05:4d: c2:2e:19:8a:09:10:5c:82:9e:63:c5:7f:9c:47:4d:bc:f0:db: c9:bf:4d:3e:68:83:1a:81:6c:f1:75:3d:94:53:dd:3b:49:d4: 75:85:d0:81:59:4a:17:fd:75:00:71:4a:63:48:2f:12:1a:4e: 5c:bc:79:ae:e2:6f:5c:8f:6b:dc:95:f6:62:1b:2e:d8:11:c8: c3:c2:56:b0:2f:94:31:19:2a:55:c9:05:07:9d:78:23:6a:01: 99:b5:7c:0b:69:01:80:e9:70:10:fe:5f:12:39:a9:0c:29:87: 7f:86:3a:88:05:40:cf:75:c2:16:38:93:83:e9:a3:8c:f1:fb: 7f:25:3d:73:74:b2:22:6b:c8:2d:e6:f7:bb:1d:11:89:31:c8: e6:ca:a1:dc:f7:20:63:aa:2c:02:2c:30:77:79:b3:39:33:eb: 7a:26:06:ed:86:14:25:46:71:c8:24:d1:58:d8:d8:92:85:d5: 74:c5:5d:bf:d2:53:74:5a:64:a5:e1:a5:43:44:55:11:38:0a: 98:62:d0:d3:25:73:d8:58:8d:3b:c0:58:89:25:1d:d5:93:1d: 77:b9:79:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzI0NzExMC8GA1UEBRMoMEREQUJCRjMxRUVDNjg3NjZFRjY2OUFGOTczNTI0MEMz ODk5MzQ1OTAeFw0yNjAxMjMwNjEyNDVaFw0yNjAxMzAwNjEyNDVaMBgxFjAUBgNV BAMMDTY5NzMxMTVkLWEzY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqtxKmktsZhBNT/fO8YgatBghb3O0j1MVKDXKA5txYy/O0gdnbongLg4++9Eji M3cqcB+pNM5W+YFarF8bRVFdd8IbBRr2r4Mj7yDitl6V8CzhYv0+M/JVGGoHs5Dt uwO4OuWPwd5OcoKeTCJIyd580xti0I8UsFgN5Xc5NjoV4A7zQwSuFrKAPP/PZWnq 8NS+J8d4dzhsK3VeLH5udef0yzo5n7olRTdx3HUocAcFHlHJ9idD629R2jDjcQZm AZD5WuKJE4uRouDwktI7HEFgyhmylzcnFBN7dO+7pTwyCv3QGh6OK050ZTCu7N1i RjV35b9zcn8HYeTNz4pS+mjvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvp1cZCxM jPJZN7yDw3ZgaMSRppQwHwYDVR0jBBgwFoAUDdq78x7saHZu9mmvlzUkDDiZNFkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzMjQ3LzMyMDQ0QkZFNzFF RTExRjA5M0MyMkUxOEM0RjlBRTAyL0RkcTc4eDdzYUhadTltbXZselVrRERpWk5G ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRGRxNzh4N3NhSFp1OW1tdmx6VWtERGlaTkZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz MjQ3LzMyMDQ0QkZFNzFFRTExRjA5M0MyMkUxOEM0RjlBRTAyL0RkcTc4eDdzYUha dTltbXZselVrRERpWk5Gay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAvNeey/2xwYwgHrodWI8kYLxHCfPw8kwDwU3luvrLfPBwUFTcIuGYoJ EFyCnmPFf5xHTbzw28m/TT5ogxqBbPF1PZRT3TtJ1HWF0IFZShf9dQBxSmNILxIa Tly8ea7ib1yPa9yV9mIbLtgRyMPCVrAvlDEZKlXJBQedeCNqAZm1fAtpAYDpcBD+ XxI5qQwph3+GOogFQM91whY4k4Ppo4zx+38lPXN0siJryC3m97sdEYkxyObKodz3 IGOqLAIsMHd5szkz63omBu2GFCVGccgk0VjY2JKF1XTFXb/SU3RaZKXhpUNEVRE4 Cphi0NMlc9hYjTvAWIklHdWTHXe5eUQ= -----END CERTIFICATE-----Generated at Sun Jan 25 02:57:14 2026 by rpki-client