This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft File: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json) Hash identifier: Ot+sereO5ddc+IJqr5OuGh3NwK8fsMGnTdrCgcNLllQ= Subject key identifier: 94:B8:18:81:1D:FC:7A:03:73:60:EE:EE:09:58:E1:99:EA:53:5F:5E Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 Certificate issuer: /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Certificate serial: 0233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft Manifest number: 022A Signing time: Sun 25 Jan 2026 01:22:23 +0000 Manifest this update: Sun 25 Jan 2026 01:22:23 +0000 Manifest next update: Sun 01 Feb 2026 01:22:23 +0000 Files and hashes: 1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: ixQ3DAFuqnJQu/Q9Xt0pwVH49nL77xSz+dsDA2KqAMI=) 2: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: jVsOkESQWaLXR1oAo7YvVLXTH7CGZNa6Fnq6GGFvuF4=) 3: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: 9uR9cVnp9mE1i5KXBSkkfpXEwSfx3/BMoE6xrI/LuMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 563 (0x233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Validity Not Before: Jan 25 01:22:23 2026 GMT Not After : Feb 1 01:22:23 2026 GMT Subject: CN=6975704f-e4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c6:d3:53:05:d6:06:7f:c6:0e:a7:db:1b:35: 18:67:ab:78:c1:1e:16:1a:74:f3:bd:21:a0:c1:49: ee:c1:5b:d4:21:d4:01:46:e9:d3:18:5c:66:e5:2b: de:58:43:3d:f1:90:60:8a:4b:91:c1:2e:a8:f4:ab: 1f:e5:74:a8:2d:56:af:3b:65:3d:d9:3c:fd:03:ee: b7:22:db:3f:33:c1:af:01:e5:37:f7:03:5f:7a:35: c9:26:44:39:46:36:b1:b6:70:5e:fd:75:cf:15:4b: f1:fb:af:cf:7d:54:07:11:5e:97:6f:ff:59:0a:e8: e8:e3:c4:f3:8a:f6:af:ca:94:dc:7b:9a:43:18:98: 28:da:f7:16:fc:ac:96:a4:2a:7f:05:5a:95:bc:00: f8:46:31:a0:ae:55:43:3f:04:74:41:05:23:04:34: 9f:3f:2d:cc:22:63:85:d2:17:f1:ff:c1:b2:49:f6: 35:5e:11:41:a5:4c:81:26:69:cf:87:3e:99:fd:5b: 78:92:bb:4b:c9:d9:ae:89:b2:38:42:bb:f7:84:c4: 88:c4:64:bb:94:19:a7:70:0c:59:6e:90:56:20:20: f0:69:53:df:c9:49:9d:72:8b:91:bc:87:24:71:8e: b8:8a:62:90:21:8a:ba:e6:14:ff:ef:89:52:fc:bd: 46:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B8:18:81:1D:FC:7A:03:73:60:EE:EE:09:58:E1:99:EA:53:5F:5E X509v3 Authority Key Identifier: keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c2:cb:27:5d:02:f0:ed:19:85:3e:6c:2f:fe:d2:63:e2:a4: c3:08:8f:47:07:f6:11:66:f8:c3:7e:d7:db:2c:08:b2:d1:3a: 02:b3:ca:86:4b:2a:aa:ee:4b:c9:9a:ff:61:4c:4c:56:0f:67: be:05:b1:91:38:fe:b9:b2:b3:d6:3a:60:ab:cd:3d:b5:24:3f: 26:07:45:c7:a0:38:f8:2d:47:b0:42:b3:00:c9:6a:43:26:ee: 8c:3e:09:7c:72:c5:6c:f6:e1:6c:73:94:13:66:2a:5a:7d:c7: c5:45:c8:e2:bc:34:c6:6c:fe:d3:28:68:40:7c:8c:b9:6c:d4: e7:a5:62:82:24:a1:26:4b:9e:d9:e5:94:34:05:c1:46:1d:c3: 10:98:b0:0d:8d:14:fe:26:ac:ca:39:21:e8:39:e5:2e:f4:10: 0f:63:3c:bd:1d:1a:10:f2:fa:c5:09:1a:89:dd:76:1f:2a:27: ed:a8:d3:22:94:2a:4e:82:53:c2:ed:43:78:87:9d:df:7a:d5: 77:c3:d8:02:22:c9:45:08:ca:21:46:50:47:58:96:4a:ba:63: b8:85:0e:28:38:62:f5:10:45:af:6c:71:71:40:be:3a:21:49: 90:39:84:f0:75:9f:8b:91:78:d7:39:0d:42:0f:ab:ee:08:d5: 3f:3c:d4:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgzNEQxMTAvBgNVBAUTKEQwRTU0NDA1QjAzRDNEMTIzNDU5REUwMUJCNDAwRjRE N0E4MzI5RDAwHhcNMjYwMTI1MDEyMjIzWhcNMjYwMjAxMDEyMjIzWjAYMRYwFAYD VQQDDA02OTc1NzA0Zi1lNGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28bTUwXWBn/GDqfbGzUYZ6t4wR4WGnTzvSGgwUnuwVvUIdQBRunTGFxm5Sve WEM98ZBgikuRwS6o9Ksf5XSoLVavO2U92Tz9A+63Its/M8GvAeU39wNfejXJJkQ5 RjaxtnBe/XXPFUvx+6/PfVQHEV6Xb/9ZCujo48TzivavypTce5pDGJgo2vcW/KyW pCp/BVqVvAD4RjGgrlVDPwR0QQUjBDSfPy3MImOF0hfx/8GySfY1XhFBpUyBJmnP hz6Z/Vt4krtLydmuibI4Qrv3hMSIxGS7lBmncAxZbpBWICDwaVPfyUmdcouRvIck cY64imKQIYq65hT/74lS/L1GaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJS4GIEd /HoDc2Du7glY4ZnqU19eMB8GA1UdIwQYMBaAFNDlRAWwPT0SNFneAbtAD016gynQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODM0RC8zQTJDNTE5NkFE QTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBSSTBXZDRCdTBBUFRYcURL ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBPVkVCYkE5UFJJMFdkNEJ1MEFQVFhxREtkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODM0RC8zQTJDNTE5NkFEQTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBS STBXZDRCdTBBUFRYcURLZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfwssnXQLw7RmFPmwv/tJj4qTDCI9HB/YRZvjDftfbLAiy0ToCs8qG Syqq7kvJmv9hTExWD2e+BbGROP65srPWOmCrzT21JD8mB0XHoDj4LUewQrMAyWpD Ju6MPgl8csVs9uFsc5QTZipafcfFRcjivDTGbP7TKGhAfIy5bNTnpWKCJKEmS57Z 5ZQ0BcFGHcMQmLANjRT+JqzKOSHoOeUu9BAPYzy9HRoQ8vrFCRqJ3XYfKiftqNMi lCpOglPC7UN4h53fetV3w9gCIslFCMohRlBHWJZKumO4hQ4oOGL1EEWvbHFxQL46 IUmQOYTwdZ+LkXjXOQ1CD6vuCNU/PNQr -----END CERTIFICATE-----Generated at Sun Jan 25 13:51:47 2026 by rpki-client