This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft File: H8Tf0A2sNKjrhGPTlRwio0WDesk.mft (raw, json) Hash identifier: 24j428md+KOyKXRKX13FjWRbrsbEU1eCf2iVCB2IFjA= Subject key identifier: E9:DC:3B:DF:D5:46:CB:92:E4:6C:0E:03:AF:86:1C:B3:B8:1D:0D:D4 Authority key identifier: 1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 Certificate issuer: /CN=A91B477B/serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Certificate serial: 071F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft Manifest number: 0710 Signing time: Sat 24 Jan 2026 21:13:40 +0000 Manifest this update: Sat 24 Jan 2026 21:13:40 +0000 Manifest next update: Sat 31 Jan 2026 21:13:40 +0000 Files and hashes: 1: H8Tf0A2sNKjrhGPTlRwio0WDesk.crl (hash: g8GHBg1p2wphQs2NOrVSQ0Vxv19aNut+9bTWwTpTupI=) 2: 535436609D0511F0BAF1837CC4F9AE02.roa (hash: 5BOUZnIceKppG/eOWr9McqTQMkFI46F0FXPhmOPQ3MY=) 3: 22F72E28725311EBA9C51756C4F9AE02.roa (hash: Td9ZRXmDLCaOWu5C2VPY0G2nu6GZr9orup/Cn82OpN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1823 (0x71f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B477B, serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Validity Not Before: Jan 24 21:13:40 2026 GMT Not After : Jan 31 21:13:40 2026 GMT Subject: CN=69753604-ba20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e3:bc:e0:ca:3a:03:0a:13:52:c2:c0:49:94: 35:9a:da:94:96:07:77:ea:09:1e:eb:f8:c0:5c:fe: 0b:44:7b:73:ea:93:5c:74:c0:7b:47:f3:f7:d2:f6: 02:ca:e1:97:af:c2:fb:8f:d4:ce:0f:93:d9:d6:56: 6c:b8:5c:f8:40:7e:76:28:1d:8c:09:5e:e3:ea:8e: 5e:6d:b0:98:42:e7:12:96:87:db:98:f8:6b:df:80: 29:ef:14:aa:8d:22:4e:a6:de:76:f4:70:51:e1:fa: dd:ad:a4:03:fe:92:d4:68:86:81:cd:25:24:45:91: d8:80:f6:4b:23:f5:e3:34:1a:67:a3:1b:ef:e9:cc: d5:4f:56:7c:14:2e:d5:70:ea:7c:00:bf:7e:c1:27: 65:5b:e3:73:21:49:75:ac:b4:53:90:3b:00:ed:27: d6:a3:0f:95:db:3b:22:64:8e:38:95:05:e5:80:c7: ba:07:9f:9e:cd:e3:08:5a:91:dd:f6:0b:97:3f:74: 2f:66:42:4a:43:25:0a:3a:c0:49:b3:c3:66:72:9c: 57:d5:1a:da:cb:b6:7a:ef:b9:58:32:d9:e0:0a:0d: 89:46:b7:71:e7:57:50:b4:44:cd:0d:ed:4c:c8:62: 89:55:12:ed:28:1c:42:67:7a:08:95:e5:71:ff:c3: 0b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DC:3B:DF:D5:46:CB:92:E4:6C:0E:03:AF:86:1C:B3:B8:1D:0D:D4 X509v3 Authority Key Identifier: keyid:1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a9:89:d5:7a:f5:48:fe:ca:8b:7c:17:18:c9:32:08:4c:8a: c0:06:4b:af:96:20:56:2a:e7:d8:35:71:e5:92:86:45:82:09: 94:84:d5:2b:24:03:a0:53:89:6f:6b:8a:95:05:98:fd:3b:0a: b7:a2:36:5e:18:0b:d6:d7:3e:4e:23:c6:19:cd:dd:64:d1:be: 58:5b:07:c7:9d:ff:b4:86:17:2d:15:c7:52:6f:f4:87:44:a2: 64:01:f9:df:29:12:b8:3b:28:62:9f:db:c8:03:ab:09:33:5f: 4e:93:b7:10:b0:17:b2:16:e5:ae:dc:3f:de:b7:1a:62:20:87: 49:02:7c:10:25:b1:c7:44:6e:e8:87:43:0c:35:a7:75:99:3e: de:99:94:56:4d:b1:4c:52:a4:e5:c9:ee:fd:be:3b:ef:dc:c7: 6f:29:20:3d:cb:e8:a0:0f:8e:f4:b3:ed:6b:18:50:b8:35:4e: 5a:43:63:ec:f0:a5:2f:fb:cb:08:6c:c6:83:be:5a:fa:8c:ec: 21:b9:e4:be:3d:b0:77:bf:96:d8:30:b9:0d:36:e0:ce:6f:e9: 40:8d:be:3c:80:20:89:22:23:d7:4f:87:4b:d3:d8:d2:a0:87: e8:ce:9a:a3:57:8d:b9:ac:f1:59:6c:67:a7:f9:e2:41:91:68: 31:3d:0d:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ3N0IxMTAvBgNVBAUTKDFGQzRERkQwMERBQzM0QThFQjg0NjNEMzk1MUMyMkEz NDU4MzdBQzkwHhcNMjYwMTI0MjExMzQwWhcNMjYwMTMxMjExMzQwWjAYMRYwFAYD VQQDDA02OTc1MzYwNC1iYTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjuO84Mo6AwoTUsLASZQ1mtqUlgd36gke6/jAXP4LRHtz6pNcdMB7R/P30vYC yuGXr8L7j9TOD5PZ1lZsuFz4QH52KB2MCV7j6o5ebbCYQucSlofbmPhr34Ap7xSq jSJOpt529HBR4frdraQD/pLUaIaBzSUkRZHYgPZLI/XjNBpnoxvv6czVT1Z8FC7V cOp8AL9+wSdlW+NzIUl1rLRTkDsA7SfWow+V2zsiZI44lQXlgMe6B5+ezeMIWpHd 9guXP3QvZkJKQyUKOsBJs8NmcpxX1Rray7Z677lYMtngCg2JRrdx51dQtETNDe1M yGKJVRLtKBxCZ3oIleVx/8MLewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOncO9/V RsuS5GwOA6+GHLO4HQ3UMB8GA1UdIwQYMBaAFB/E39ANrDSo64Rj05UcIqNFg3rJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDc3Qi8xQzI1NjI3MDcy NTAxMUVCQjY0OEY4NEVDNEY5QUUwMi9IOFRmMEEyc05LanJoR1BUbFJ3aW8wV0Rl c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4VGYwQTJzTktqcmhHUFRsUndpbzBXRGVzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDc3Qi8xQzI1NjI3MDcyNTAxMUVCQjY0OEY4NEVDNEY5QUUwMi9IOFRmMEEyc05L anJoR1BUbFJ3aW8wV0Rlc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATqYnVevVI/sqLfBcYyTIITIrABkuvliBWKufYNXHlkoZFggmUhNUr JAOgU4lva4qVBZj9Owq3ojZeGAvW1z5OI8YZzd1k0b5YWwfHnf+0hhctFcdSb/SH RKJkAfnfKRK4Oyhin9vIA6sJM19Ok7cQsBeyFuWu3D/etxpiIIdJAnwQJbHHRG7o h0MMNad1mT7emZRWTbFMUqTlye79vjvv3MdvKSA9y+igD470s+1rGFC4NU5aQ2Ps 8KUv+8sIbMaDvlr6jOwhueS+PbB3v5bYMLkNNuDOb+lAjb48gCCJIiPXT4dL09jS oIfozpqjV425rPFZbGen+eJBkWgxPQ2y -----END CERTIFICATE-----Generated at Sun Jan 25 11:18:48 2026 by rpki-client