This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: d8gOg40lz3xN9fj7tbPthuhuQy1NoVdWE4Y6JsWqz54= Subject key identifier: B3:52:2B:AA:B6:5D:7B:D9:6B:F3:7F:5A:66:B5:AC:C6:0C:45:8F:28 Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 09E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 0972 Signing time: Sat 24 Jan 2026 19:44:56 +0000 Manifest this update: Sat 24 Jan 2026 19:44:55 +0000 Manifest next update: Sat 31 Jan 2026 19:44:55 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: 1i+IFdmiKOy8wxbaHEGk4xaJrjak8qn1iVkCfLhoKSk=) 2: 9672E862793811EE92C54834C4F9AE02.roa (hash: UGwpdFjyj5op9VWtjdDebDyJLyb7++gFQLq7ibC5Zo8=) 3: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: Y7HIfK+dgei476aRla7phi/541mDTNFxZ1eh4K1sDYk=) 4: 781C64FAF58611ED89273159C4F9AE02.roa (hash: lwV/ynteCUHJi+p3z2mrWfc4T5PCrXOSxxmLmNk4dP0=) 5: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: 6eLBLTiRLG59b19Vh6VakQSbL4yifX/0CdBZxWB4WEY=) 6: 501941C093F211EEA029A113C4F9AE02.roa (hash: FhESrn/DCqUnNSrnrcCxTem1wxJCB6TNgEsA8vGhFD0=) 7: A8896B1892E811F0A5E48134C4F9AE02.roa (hash: xCyhd7BrMRSo37r2kc8C1tCVJGoR2T+Kqf1BZgUiJL0=) 8: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: /znaKV3KjWiiYiywi65esGpUip1B0gcKXgL7UimYW5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2528 (0x9e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: Jan 24 19:44:55 2026 GMT Not After : Jan 31 19:44:55 2026 GMT Subject: CN=69752138-6f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:a9:b1:fa:21:19:ff:3e:8e:7d:f4:fa:b9: be:7e:24:32:85:d8:72:3c:8c:80:e1:da:e6:f0:68: 68:97:43:90:82:c8:bf:15:6b:ae:b6:4d:0d:94:23: 6b:d5:a4:c8:53:e5:47:73:30:ab:74:ef:f6:c4:b2: 90:84:17:22:39:56:da:1e:a2:84:fb:f8:88:c6:5c: a0:19:0c:39:42:8c:57:cb:0b:f4:e9:f9:63:a9:bf: 80:13:1a:80:98:f9:d4:18:79:8a:27:01:e5:38:a4: 0e:1d:82:19:75:6c:3e:89:4a:af:e2:71:e0:d4:5c: ab:f0:a3:5f:f7:b1:65:d2:be:03:d7:e3:6e:ab:da: d6:fa:9e:ed:51:60:bb:7b:2f:a3:57:cd:e5:7b:c7: 32:57:8b:47:be:23:14:e1:0d:b8:6f:36:e2:ba:af: 4f:a0:d6:b5:47:f7:7f:31:54:19:e1:f0:a5:9d:7f: 0a:25:5d:08:8b:31:78:04:0a:00:90:dd:8b:aa:e1: f3:3f:bd:16:65:d5:3e:4a:f4:23:c0:85:10:64:da: 2b:de:5b:cb:35:6b:6d:a8:51:64:8a:2c:ce:b3:b0: 1a:b0:c3:34:da:8c:1a:d5:a4:61:fb:08:0f:91:10: b8:87:5d:b0:fd:be:00:c8:e6:ae:74:da:49:e5:6f: d3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:52:2B:AA:B6:5D:7B:D9:6B:F3:7F:5A:66:B5:AC:C6:0C:45:8F:28 X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:68:81:91:7a:d1:60:22:91:51:5c:90:f5:a8:be:91:2c:b5: ec:59:89:71:55:18:c2:6b:4e:3b:83:29:3f:a2:4e:ac:86:9c: 2b:69:6c:d5:5f:53:42:fa:d4:54:bb:7d:ea:7f:3f:34:4a:ab: d0:0a:da:fe:d6:2c:63:a9:cc:f9:dd:d5:9b:65:f4:fa:be:21: c2:77:7e:e0:c5:63:d7:fc:b0:b7:2e:ba:41:74:0e:25:7e:5d: ce:b3:31:e1:d3:8d:5f:39:fb:b3:03:e0:86:2c:30:37:57:90: 97:32:70:24:4d:eb:e4:ff:38:24:11:9d:4b:f9:37:39:5a:08: 55:1c:4f:2e:86:48:26:e1:31:80:40:e4:15:ea:d2:a9:82:e9: 97:7a:81:50:69:0c:9d:74:09:61:e2:7b:9f:eb:c3:e6:86:31: 50:8b:5d:90:be:a3:8c:be:06:ec:52:fb:45:ab:34:45:ff:9e: 15:60:ce:3d:32:78:08:e1:e9:7a:8b:a1:e4:5b:01:d8:1b:5e: 89:68:f2:22:f5:d9:8b:08:c2:85:34:0b:0a:ec:11:2f:55:5b: 3d:e3:6b:b0:fa:9e:27:6c:37:48:49:32:1e:bd:fe:b0:8e:13: 59:7e:f6:87:5e:02:d9:51:74:58:b0:da:f2:dd:86:11:99:fd: d1:b5:42:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjYwMTI0MTk0NDU1WhcNMjYwMTMxMTk0NDU1WjAYMRYwFAYD VQQDDA02OTc1MjEzOC02ZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6epsfohGf8+jn30+rm+fiQyhdhyPIyA4drm8Ghol0OQgsi/FWuutk0NlCNr 1aTIU+VHczCrdO/2xLKQhBciOVbaHqKE+/iIxlygGQw5QoxXywv06fljqb+AExqA mPnUGHmKJwHlOKQOHYIZdWw+iUqv4nHg1Fyr8KNf97Fl0r4D1+Nuq9rW+p7tUWC7 ey+jV83le8cyV4tHviMU4Q24bzbiuq9PoNa1R/d/MVQZ4fClnX8KJV0IizF4BAoA kN2LquHzP70WZdU+SvQjwIUQZNor3lvLNWttqFFkiizOs7AasMM02owa1aRh+wgP kRC4h12w/b4AyOaudNpJ5W/TxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNSK6q2 XXvZa/N/Wma1rMYMRY8oMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtaIGRetFgIpFRXJD1qL6RLLXsWYlxVRjCa047gyk/ok6shpwraWzV X1NC+tRUu33qfz80SqvQCtr+1ixjqcz53dWbZfT6viHCd37gxWPX/LC3LrpBdA4l fl3OszHh041fOfuzA+CGLDA3V5CXMnAkTevk/zgkEZ1L+Tc5WghVHE8uhkgm4TGA QOQV6tKpgumXeoFQaQyddAlh4nuf68PmhjFQi12QvqOMvgbsUvtFqzRF/54VYM49 MngI4el6i6HkWwHYG16JaPIi9dmLCMKFNAsK7BEvVVs942uw+p4nbDdISTIevf6w jhNZfvaHXgLZUXRYsNry3YYRmf3RtUJV -----END CERTIFICATE-----Generated at Sun Jan 25 12:35:05 2026 by rpki-client