This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft File: d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json) Hash identifier: BgfgFIzeapZHA2nnLXlEkHf7hHkPY+LCbwRkDUWylfY= Subject key identifier: E7:0F:CD:E9:8B:D4:CE:46:3F:C2:22:86:0C:46:67:03:4E:B3:7B:BC Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 Certificate issuer: /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Certificate serial: 3506 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft Manifest number: 3502 Signing time: Sat 24 Jan 2026 15:09:08 +0000 Manifest this update: Sat 24 Jan 2026 15:09:07 +0000 Manifest next update: Sat 31 Jan 2026 15:09:07 +0000 Files and hashes: 1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: 9sqi5HsIlL0yZo8IUMmb0a9IPzkiXhP0bn5JJk8i8pU=) 2: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (hash: u0SIiLxxmi81N8BSICKYYu8IJ84iSOv3GERY4hpV5jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13574 (0x3506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B352F, serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Validity Not Before: Jan 24 15:09:07 2026 GMT Not After : Jan 31 15:09:07 2026 GMT Subject: CN=6974e094-bc9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:78:ca:28:e1:ad:c8:44:10:54:2b:39:c8:ec: 46:63:67:4f:bb:9d:30:d6:e6:1e:4a:e0:a5:44:50: 84:85:41:05:f9:9a:4f:21:0d:0b:79:13:97:98:03: c6:47:bb:94:93:10:14:76:63:9c:2d:bd:2b:98:69: ad:74:59:54:e0:d0:8d:de:ac:45:38:10:f9:9a:5e: fe:af:4e:71:c8:98:cd:79:2e:87:43:73:49:aa:3e: 1a:21:5c:e8:df:0f:db:ae:39:95:bf:c0:40:51:78: 3f:20:44:62:5f:e2:69:a9:0e:e0:2b:cd:4a:db:c6: 7e:1f:ce:e1:1d:5a:5f:e2:06:a4:5a:83:e5:90:bc: 2b:e8:2a:35:36:a1:4b:2e:17:08:4a:97:eb:5c:74: d6:75:9e:3a:4c:99:e4:6d:ef:df:35:49:a6:69:39: ea:32:57:a0:26:d9:12:cb:54:c3:48:1c:9a:81:b0: 7e:f3:77:aa:01:fa:72:2b:14:d7:cf:c3:98:00:63: 6c:72:6c:52:6c:f6:e5:dc:7b:d4:f7:a3:08:ab:d1: 78:f4:0f:b6:1b:00:9b:de:cc:01:67:9f:0b:3d:d8: 14:19:c6:3b:1b:c6:90:5f:5a:8d:56:c6:43:4f:fb: 81:7f:5d:02:71:e5:d1:bd:09:75:e7:ce:cd:d2:f7: 79:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0F:CD:E9:8B:D4:CE:46:3F:C2:22:86:0C:46:67:03:4E:B3:7B:BC X509v3 Authority Key Identifier: keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:4e:3d:12:63:c9:7c:4a:56:b3:ea:6a:eb:92:5c:35:7a:98: 79:f9:37:e9:52:66:f0:e9:a6:5b:d5:f3:25:4e:45:6f:47:0b: 54:1e:34:80:f8:02:f2:f6:58:e6:4a:b4:7d:d9:43:5b:4d:2c: 33:aa:70:26:a8:47:ec:f7:ce:9b:dd:5e:6c:b5:60:8b:6d:ab: 3d:b0:26:73:2d:b8:01:db:a8:0d:4d:26:ee:da:81:41:c4:59: c2:ed:31:f6:88:41:81:85:e2:48:d4:f8:18:d6:1a:0c:8b:43: 75:b8:24:5e:80:1a:1a:c4:2d:5d:40:c2:0d:b7:53:34:0f:60: c7:de:f9:39:56:c2:83:d5:9d:d8:e4:5d:d2:e4:ef:ff:83:26: 24:06:ab:c4:14:83:34:60:1d:47:aa:21:4d:00:bc:8a:a4:15: 94:be:e6:01:0f:64:36:c5:bd:1a:cc:48:8d:79:e9:ac:50:b2: e3:88:ae:79:ab:f6:2e:1f:c4:b1:4b:61:82:a0:f0:18:7a:d8: 19:d3:4f:b9:04:00:65:da:15:36:79:23:b8:df:c7:9b:69:49: 0d:a1:54:d5:7d:7e:4c:5e:6f:17:e3:bc:bd:b6:6c:e1:0e:33: fb:57:bb:4c:ba:fb:11:24:59:27:e3:29:ce:89:78:b3:52:a1: 10:26:52:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QjM1MkYxMTAvBgNVBAUTKDc3RTk0NkQwQkQyOUFBMjE3QkYxQjFDNUFGMEIzMTUz NkMxNDdBNzEwHhcNMjYwMTI0MTUwOTA3WhcNMjYwMTMxMTUwOTA3WjAYMRYwFAYD VQQDDA02OTc0ZTA5NC1iYzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HjKKOGtyEQQVCs5yOxGY2dPu50w1uYeSuClRFCEhUEF+ZpPIQ0LeROXmAPG R7uUkxAUdmOcLb0rmGmtdFlU4NCN3qxFOBD5ml7+r05xyJjNeS6HQ3NJqj4aIVzo 3w/brjmVv8BAUXg/IERiX+JpqQ7gK81K28Z+H87hHVpf4gakWoPlkLwr6Co1NqFL LhcISpfrXHTWdZ46TJnkbe/fNUmmaTnqMlegJtkSy1TDSByagbB+83eqAfpyKxTX z8OYAGNscmxSbPbl3HvU96MIq9F49A+2GwCb3swBZ58LPdgUGcY7G8aQX1qNVsZD T/uBf10CceXRvQl1587N0vd5oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcPzemL 1M5GP8IihgxGZwNOs3u8MB8GA1UdIwQYMBaAFHfpRtC9Kaohe/Gxxa8LMVNsFHpx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzUyRi9GNkZGRTI5RTFE QTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFpRjc4YkhGcndzeFUyd1Vl bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QtbEcwTDBwcWlGNzhiSEZyd3N4VTJ3VWVuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzUyRi9GNkZGRTI5RTFEQTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFp Rjc4YkhGcndzeFUyd1VlbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzTj0SY8l8Slaz6mrrklw1eph5+TfpUmbw6aZb1fMlTkVvRwtUHjSA +ALy9ljmSrR92UNbTSwzqnAmqEfs986b3V5stWCLbas9sCZzLbgB26gNTSbu2oFB xFnC7TH2iEGBheJI1PgY1hoMi0N1uCRegBoaxC1dQMINt1M0D2DH3vk5VsKD1Z3Y 5F3S5O//gyYkBqvEFIM0YB1HqiFNALyKpBWUvuYBD2Q2xb0azEiNeemsULLjiK55 q/YuH8SxS2GCoPAYetgZ00+5BABl2hU2eSO438ebaUkNoVTVfX5MXm8X47y9tmzh DjP7V7tMuvsRJFkn4ynOiXizUqEQJlL0 -----END CERTIFICATE-----Generated at Sun Jan 25 15:35:03 2026 by rpki-client