This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft File: U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft (raw, json) Hash identifier: VQ2xwJHw6vz0gDt+ZJtGC1oXm5SMdftxitBaZthycvc= Subject key identifier: CC:38:6B:9C:D0:A8:53:BB:65:82:E9:5F:42:C0:3D:17:D6:AC:2E:BD Authority key identifier: 53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 Certificate issuer: /CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Certificate serial: 35EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft Manifest number: 3563 Signing time: Sat 24 Jan 2026 14:23:54 +0000 Manifest this update: Sat 24 Jan 2026 14:23:54 +0000 Manifest next update: Sat 31 Jan 2026 14:23:54 +0000 Files and hashes: 1: U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl (hash: JS38QiCzQMCj1xcywDhnh+H8lcJBbnAgwEOBVVssZSU=) 2: D0886954188811EC8E86754FC4F9AE02.roa (hash: 6VbOvgdK5CTvuRLAoKi7F+0CDGeRIa2tmkBoLvAgouA=) 3: 491E49AECDCA11ED8F57D386C4F9AE02.roa (hash: eobj/eFuFNpYpHWfoCh4R2f9ILietn5YmlGo8HxPsps=) 4: 9F3A919468D811EFB2FE405FC4F9AE02.roa (hash: nVehuPJuIkWIOjh795nZonFcwqqWF8/uu32Co6wlMr4=) 5: AB9889725E5E11EDB5361D3BC4F9AE02.roa (hash: Co7SE3g9/ARrpsRXeCTg4P0jRRisbdn9kOGmwejTlBg=) 6: DF8602D05E5B11ED994E491CC4F9AE02.roa (hash: 6nK3GoLVaSP0VSJQQ8fMNbxkXH0UKpIkFpkEB95EEy0=) 7: 99CF729E221011ED980A6F47C4F9AE02.roa (hash: atHB41zC9ox7WEbx/oU2a0/b1MGieqCzosX2UKLPzlk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13803 (0x35eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F47, serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Validity Not Before: Jan 24 14:23:54 2026 GMT Not After : Jan 31 14:23:54 2026 GMT Subject: CN=6974d5fa-63ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:01:d6:0e:7f:db:94:ca:34:d7:b0:c1:9b:4d: e8:35:eb:22:2d:44:9c:4a:fa:45:e9:1a:98:69:a2: 77:d1:c9:af:19:86:a4:fd:7a:7f:b4:72:95:84:b6: 11:79:f4:69:bb:15:4c:69:b6:05:ef:8e:92:ec:04: 26:a5:e8:16:57:47:bb:75:5e:1c:2b:d4:b8:30:17: f8:0f:6a:8b:46:3c:e6:52:16:97:10:08:69:f5:22: dd:bd:0d:c9:51:87:cf:cc:6f:3f:47:cb:98:91:26: 6f:a9:9d:60:e0:c7:44:04:ae:b9:12:29:eb:67:9a: d1:0b:87:a1:66:fc:0a:0e:6f:a3:11:e1:d7:31:99: f2:16:57:75:40:7a:37:4e:fd:fd:7a:33:72:08:42: f3:23:1b:10:74:e3:e2:6a:5d:2c:14:3f:8f:17:8e: 79:48:b5:42:20:b5:18:2f:09:ee:19:3b:56:31:9a: 3d:1a:dd:a4:06:30:4f:83:00:26:07:00:9e:9b:cf: fc:b4:68:0c:fe:ae:9c:8f:d9:7d:3b:20:83:2c:c8: 2f:af:a1:6c:ab:7d:f6:55:17:49:fb:d6:ce:e8:7d: f5:51:ca:18:a0:05:6b:df:59:62:5d:e3:9e:19:1f: b5:72:07:d8:a6:9d:58:d8:ce:0e:43:6a:34:03:51: 7f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:38:6B:9C:D0:A8:53:BB:65:82:E9:5F:42:C0:3D:17:D6:AC:2E:BD X509v3 Authority Key Identifier: keyid:53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:26:e7:b4:9a:72:de:79:ae:04:09:78:b9:a9:3a:70:b3:1f: aa:c0:5a:cb:79:63:31:83:61:fc:df:ac:85:fb:1c:ec:c1:d4: f3:01:96:6c:73:98:50:ba:82:5b:56:d5:84:37:b2:fd:60:6d: 1f:74:28:e8:11:b0:1a:f1:a5:ce:75:f8:a9:c3:07:83:4a:da: 70:a5:9f:0d:3b:1e:62:ff:c1:d4:09:ab:b4:43:77:aa:c1:c0: d8:bd:94:88:15:f6:e5:e2:6c:98:78:b9:81:0e:ea:3d:d4:8e: af:53:f7:e4:c3:16:3f:55:b4:ca:8c:34:62:25:87:1b:6a:5a: 05:72:36:4d:37:9c:6f:eb:3d:c0:b3:23:08:eb:7f:a0:83:91: 76:55:a1:bb:80:ef:51:44:bc:a1:b7:6b:58:15:fd:ec:d9:c9: 26:d1:c8:82:26:43:fb:d6:4d:a5:52:c3:18:74:a1:6e:79:e8: a7:fd:52:cc:74:e6:a5:44:f4:fb:09:43:66:35:44:33:02:cc: ac:06:b7:13:8b:75:30:0f:ba:bb:99:a8:6b:5a:0c:70:dc:04: 63:92:6e:0d:80:8b:42:61:eb:69:90:a9:d1:e7:07:d9:c2:33: 23:f6:b9:fa:21:d6:1e:51:f5:fe:00:21:a4:2b:ad:73:22:db: b6:c9:29:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNDcxMTAvBgNVBAUTKDUzOEIwNzZFMEFBREQ4RkFFMjk3MEM5NTQzRTg0OUE5 MEZFNzM3NTIwHhcNMjYwMTI0MTQyMzU0WhcNMjYwMTMxMTQyMzU0WjAYMRYwFAYD VQQDDA02OTc0ZDVmYS02M2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQHWDn/blMo017DBm03oNesiLUScSvpF6RqYaaJ30cmvGYak/Xp/tHKVhLYR efRpuxVMabYF746S7AQmpegWV0e7dV4cK9S4MBf4D2qLRjzmUhaXEAhp9SLdvQ3J UYfPzG8/R8uYkSZvqZ1g4MdEBK65EinrZ5rRC4ehZvwKDm+jEeHXMZnyFld1QHo3 Tv39ejNyCELzIxsQdOPial0sFD+PF455SLVCILUYLwnuGTtWMZo9Gt2kBjBPgwAm BwCem8/8tGgM/q6cj9l9OyCDLMgvr6Fsq332VRdJ+9bO6H31UcoYoAVr31liXeOe GR+1cgfYpp1Y2M4OQ2o0A1F/mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMw4a5zQ qFO7ZYLpX0LAPRfWrC69MB8GA1UdIwQYMBaAFFOLB24Krdj64pcMlUPoSakP5zdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY0Ny9CNEE4NkMzODFE ODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQcmlsd3lWUS1oSnFRX25O MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0c0hiZ3F0MlByaWx3eVZRLWhKcVFfbk4xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY0Ny9CNEE4NkMzODFEODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQ cmlsd3lWUS1oSnFRX25OMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfJue0mnLeea4ECXi5qTpwsx+qwFrLeWMxg2H836yF+xzswdTzAZZs c5hQuoJbVtWEN7L9YG0fdCjoEbAa8aXOdfipwweDStpwpZ8NOx5i/8HUCau0Q3eq wcDYvZSIFfbl4myYeLmBDuo91I6vU/fkwxY/VbTKjDRiJYcbaloFcjZNN5xv6z3A syMI63+gg5F2VaG7gO9RRLyht2tYFf3s2ckm0ciCJkP71k2lUsMYdKFueein/VLM dOalRPT7CUNmNUQzAsysBrcTi3UwD7q7mahrWgxw3ARjkm4NgItCYetpkKnR5wfZ wjMj9rn6IdYeUfX+ACGkK61zItu2ySkL -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:14 2026 by rpki-client