This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: zLF+aGrR3arYCE+Q6VrZLUzID0pjzwvZnyABVgaumpw= Subject key identifier: 08:68:97:5B:E7:22:E3:BD:33:BD:52:88:F4:88:40:B7:5A:0D:B5:97 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: FE Signing time: Fri 23 Jan 2026 04:30:44 +0000 Manifest this update: Fri 23 Jan 2026 04:30:43 +0000 Manifest next update: Fri 30 Jan 2026 04:30:43 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: VepLczKhv9nFZhJBliFL9z0MJPGvu4Hl5ZzgCulmjYM=) 2: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: 6QhOrmpvijFEWyqTsDtifgxnnuoD+8QgUKOe4kzD4+Y=) 3: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: XCruC0xKn6ivsUEsNjfTmIOISSTMaA8fgFUqBnZykII=) 4: 9B3123BEC38C11F0A8D49A37C4F9AE02.roa (hash: ghxwV1wLR6LJsj8L1EVuyF3FDUdkp9SAyCxkwGXF0Ac=) 5: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: OQ/guaL+54MthYgFWH5vV+2qqkhoKOGTMDARqMovmDI=) 6: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: /pCleS8hdGGbLBEH6XJqZL1n8cMzpSzBKrLM7XIsvnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 04:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Jan 23 04:30:43 2026 GMT Not After : Jan 30 04:30:43 2026 GMT Subject: CN=6972f974-73a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:53:c3:b8:33:b2:5c:0e:ca:a5:0e:1d:48:25: c9:64:1e:1b:b1:1c:ab:dd:d5:4a:07:e7:53:41:4d: 08:71:6c:87:4b:cc:8a:ed:8c:37:a2:7e:14:69:86: b9:14:c0:b4:c6:25:f5:53:82:aa:dd:23:64:5b:7b: b1:87:26:6a:8a:af:b0:b1:82:4e:b8:be:a5:bd:b4: a6:b3:f7:6c:25:d9:7c:9a:73:20:28:0c:82:0a:39: 21:b9:c0:71:7b:03:58:0b:3f:4f:67:32:f3:d6:74: c0:c5:ea:25:e2:c9:d5:be:6c:bc:f1:7e:98:b2:44: 47:11:62:b3:f1:0d:02:5c:59:3c:d8:68:0f:25:35: c7:11:4f:ae:46:0a:6e:d5:51:32:06:80:41:57:be: e9:f0:8b:6c:ba:c5:16:09:46:3e:43:d3:2e:44:ac: 7d:22:bd:7e:58:74:70:82:d2:34:78:a3:9c:2c:35: 0d:6c:84:0f:aa:c3:1c:e2:6c:63:57:4a:a2:f8:3f: 90:34:2d:4a:a4:00:3d:ea:a2:c7:b2:7d:54:82:5e: 76:57:9f:1f:0e:64:ee:42:39:a3:12:70:7d:96:69: a2:c7:33:ee:99:ca:55:81:72:8b:10:71:ac:30:d0: 71:b0:01:1a:56:c9:2c:f5:e9:44:82:14:7f:db:30: 19:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:68:97:5B:E7:22:E3:BD:33:BD:52:88:F4:88:40:B7:5A:0D:B5:97 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:93:12:0f:fe:cf:8c:a2:d6:fb:d4:ff:b6:46:df:2c:73:f0: eb:24:58:ad:78:8b:5a:2f:2a:a9:d2:58:fa:8d:f2:66:ec:6a: 5e:73:e0:0b:ed:79:51:c1:69:24:76:44:6b:35:09:df:0a:c0: 3a:2d:df:0e:14:66:c9:fe:4e:f7:6a:42:dd:9a:ab:20:0d:ce: bb:93:5b:1f:51:22:f8:99:ae:0e:f0:45:cd:97:a0:ce:bf:1e: 35:9a:46:5e:27:5c:fb:e6:66:47:88:54:02:b4:c7:d1:d9:b7: e3:cc:fa:74:56:28:49:6b:ea:03:4b:8b:ee:1e:88:0d:0d:e5: 47:f3:d7:af:33:12:09:d7:22:34:9f:8c:99:5f:43:23:c9:0e: f6:80:b8:da:3f:88:16:ff:95:af:ec:0c:18:27:bb:8c:33:9d: a1:12:89:7a:3e:6d:12:48:03:c6:09:88:91:4b:24:8e:5a:76: 4f:69:57:9d:f2:20:c4:2c:25:53:2b:fa:bb:19:35:22:1d:ab: 93:c0:6e:d5:30:5f:cc:2e:62:bb:ea:d2:da:04:65:b8:f3:47: a8:cc:70:59:12:d6:6a:41:1f:4a:9d:c8:ee:9a:6b:d4:52:ee: cd:9a:0d:80:51:24:b0:d4:47:47:83:16:26:0a:66:e8:60:38: 58:78:38:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjYwMTIzMDQzMDQzWhcNMjYwMTMwMDQzMDQzWjAYMRYwFAYD VQQDDA02OTcyZjk3NC03M2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlPDuDOyXA7KpQ4dSCXJZB4bsRyr3dVKB+dTQU0IcWyHS8yK7Yw3on4UaYa5 FMC0xiX1U4Kq3SNkW3uxhyZqiq+wsYJOuL6lvbSms/dsJdl8mnMgKAyCCjkhucBx ewNYCz9PZzLz1nTAxeol4snVvmy88X6YskRHEWKz8Q0CXFk82GgPJTXHEU+uRgpu 1VEyBoBBV77p8ItsusUWCUY+Q9MuRKx9Ir1+WHRwgtI0eKOcLDUNbIQPqsMc4mxj V0qi+D+QNC1KpAA96qLHsn1Ugl52V58fDmTuQjmjEnB9lmmixzPumcpVgXKLEHGs MNBxsAEaVsks9elEghR/2zAZNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhol1vn IuO9M71SiPSIQLdaDbWXMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4kxIP/s+Motb71P+2Rt8sc/DrJFiteItaLyqp0lj6jfJm7Gpec+AL 7XlRwWkkdkRrNQnfCsA6Ld8OFGbJ/k73akLdmqsgDc67k1sfUSL4ma4O8EXNl6DO vx41mkZeJ1z75mZHiFQCtMfR2bfjzPp0VihJa+oDS4vuHogNDeVH89evMxIJ1yI0 n4yZX0MjyQ72gLjaP4gW/5Wv7AwYJ7uMM52hEol6Pm0SSAPGCYiRSySOWnZPaVed 8iDELCVTK/q7GTUiHauTwG7VMF/MLmK76tLaBGW480eozHBZEtZqQR9KncjummvU Uu7Nmg2AUSSw1EdHgxYmCmboYDhYeDi8 -----END CERTIFICATE-----Generated at Sun Jan 25 03:02:47 2026 by rpki-client