This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft File: toNIsZBwY8BERWnOsijqUkbQLxk.mft (raw, json) Hash identifier: mFOrusnbR9usSzgEnynXQeJoqdbNbcOjuX+nLa6lX4Q= Subject key identifier: 75:C8:C2:DB:02:FF:46:3A:BB:0D:17:08:2D:07:0D:B6:8B:EA:E4:C4 Authority key identifier: B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 Certificate issuer: /CN=A91B3CB5/serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft Manifest number: 28 Signing time: Sat 24 Jan 2026 17:54:15 +0000 Manifest this update: Sat 24 Jan 2026 17:54:15 +0000 Manifest next update: Sat 31 Jan 2026 17:54:15 +0000 Files and hashes: 1: toNIsZBwY8BERWnOsijqUkbQLxk.crl (hash: Tg9z2n3s9Xz9d9PyApq5j/MmNRVCe5rnx2V6Rj9OCTU=) 2: 3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa (hash: ubVdeZPf6OneoRvNqezniKDm+qaCd4tbWJlkLoTSud4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Validity Not Before: Jan 24 17:54:15 2026 GMT Not After : Jan 31 17:54:15 2026 GMT Subject: CN=69750747-488e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:df:89:0e:9a:58:fa:6a:4c:7b:d1:44:26:a8: 1b:5e:db:64:f6:45:1d:ef:85:e2:34:21:2d:14:de: 13:c3:89:36:4c:ca:c5:2f:de:35:1f:84:4a:27:b5: 4c:ad:5e:45:d9:ee:a5:62:63:87:8d:3c:c2:fa:be: 03:ef:81:38:dc:ea:6b:14:2a:90:2f:02:e7:03:5f: 4e:93:67:08:04:83:20:66:bc:ff:8f:c3:8d:7f:75: 11:2b:20:eb:b9:c2:00:20:8f:ae:8e:de:13:84:0e: 38:a8:31:00:9c:19:e3:5a:29:53:fd:30:fb:a9:00: 71:1b:93:82:7d:1a:92:25:1f:99:9c:c6:b3:63:72: 88:89:84:c1:88:81:36:c0:e3:04:c7:a2:52:2c:e9: 22:6d:21:9c:f7:fe:93:b7:d8:95:ff:e9:62:8b:ee: 04:6a:cd:fe:e8:b1:b4:3f:64:8d:b8:0c:f9:16:f7: 03:fe:fd:cd:91:6d:c4:15:7b:c7:0e:d8:2f:ae:bc: 3f:a8:bf:58:fe:d7:96:d3:10:16:03:0f:66:6e:56: d4:fb:ec:d6:9e:94:84:60:c5:68:27:05:72:8a:04: 25:11:fa:71:fe:73:94:04:9c:25:c7:d8:b7:5a:c2: 3d:0b:4a:a0:7e:3a:b7:bf:d7:f8:3d:62:18:f0:79: 42:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C8:C2:DB:02:FF:46:3A:BB:0D:17:08:2D:07:0D:B6:8B:EA:E4:C4 X509v3 Authority Key Identifier: keyid:B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2a:69:b0:e0:45:ef:07:a1:55:a9:a6:26:e1:6a:9a:53:11: 24:d4:0e:ec:59:30:0c:2b:fb:48:e9:33:01:86:15:a9:8e:2c: 70:b3:61:73:75:e5:5a:79:a3:6d:60:39:0c:ea:61:f4:fe:4a: 55:5a:95:4b:0b:3d:a6:3b:22:48:4f:93:54:cc:4d:06:b0:cc: 1a:cd:ac:09:b7:a2:45:20:c5:13:75:61:49:75:be:5f:dc:cf: ff:55:c5:9a:1d:47:50:3f:5a:b2:5d:98:73:ea:88:66:84:db: 50:f4:bb:72:55:60:7e:76:de:17:37:8c:fd:75:bc:5f:69:71: 95:ea:f2:a3:a5:58:25:a5:58:98:78:e2:4d:f2:23:f2:65:08: c3:0d:de:65:1a:aa:71:f0:74:42:a9:d7:0c:9a:e5:70:b5:97: 9d:b4:e8:4d:49:ac:d2:f9:29:a2:46:71:c3:ef:e7:70:6e:96: 8a:70:7d:72:94:7d:15:f1:6f:52:0b:06:67:27:da:3b:31:22: 74:2d:bb:a5:33:76:c4:42:eb:4e:54:27:55:8a:8a:6c:9e:b5: 9d:fc:37:53:02:b8:c6:c8:ed:7b:9e:cb:77:20:37:bb:3e:bd: ef:5a:ea:a2:c5:61:88:e0:28:ad:70:76:1e:be:d9:87:f0:eb: 2d:bc:c1:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0NCNTExMC8GA1UEBRMoQjY4MzQ4QjE5MDcwNjNDMDQ0NDU2OUNFQjIyOEVBNTI0 NkQwMkYxOTAeFw0yNjAxMjQxNzU0MTVaFw0yNjAxMzExNzU0MTVaMBgxFjAUBgNV BAMMDTY5NzUwNzQ3LTQ4OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt34kOmlj6akx70UQmqBte22T2RR3vheI0IS0U3hPDiTZMysUv3jUfhEontUyt XkXZ7qViY4eNPML6vgPvgTjc6msUKpAvAucDX06TZwgEgyBmvP+Pw41/dRErIOu5 wgAgj66O3hOEDjioMQCcGeNaKVP9MPupAHEbk4J9GpIlH5mcxrNjcoiJhMGIgTbA 4wTHolIs6SJtIZz3/pO32JX/6WKL7gRqzf7osbQ/ZI24DPkW9wP+/c2RbcQVe8cO 2C+uvD+ov1j+15bTEBYDD2ZuVtT77NaelIRgxWgnBXKKBCUR+nH+c5QEnCXH2Lda wj0LSqB+Ore/1/g9YhjweUJZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdcjC2wL/ Rjq7DRcILQcNtovq5MQwHwYDVR0jBBgwFoAUtoNIsZBwY8BERWnOsijqUkbQLxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzQ0I1L0VEMjI1NTMyQzQz NDExRjBBODI3QTU3REM0RjlBRTAyL3RvTklzWkJ3WThCRVJXbk9zaWpxVWtiUUx4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdG9OSXNaQndZOEJFUlduT3NpanFVa2JRTHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz Q0I1L0VEMjI1NTMyQzQzNDExRjBBODI3QTU3REM0RjlBRTAyL3RvTklzWkJ3WThC RVJXbk9zaWpxVWtiUUx4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJoqabDgRe8HoVWppibhappTESTUDuxZMAwr+0jpMwGGFamOLHCzYXN1 5Vp5o21gOQzqYfT+SlValUsLPaY7IkhPk1TMTQawzBrNrAm3okUgxRN1YUl1vl/c z/9VxZodR1A/WrJdmHPqiGaE21D0u3JVYH523hc3jP11vF9pcZXq8qOlWCWlWJh4 4k3yI/JlCMMN3mUaqnHwdEKp1wya5XC1l5206E1JrNL5KaJGccPv53BulopwfXKU fRXxb1ILBmcn2jsxInQtu6UzdsRC605UJ1WKimyetZ38N1MCuMbI7Xuey3cgN7s+ ve9a6qLFYYjgKK1wdh6+2Yfw6y28wTw= -----END CERTIFICATE-----Generated at Sun Jan 25 18:31:07 2026 by rpki-client