This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft File: 4NxstwnusRvCB181LrbtToGK5wU.mft (raw, json) Hash identifier: twkB4IL4HP8OF0BJlsm+tnivsJ0tLEWJ5B1Hyq8jqfw= Subject key identifier: C8:44:C0:32:81:48:8E:A8:61:8B:B7:4E:BD:A7:8A:FA:E3:1C:72:DA Authority key identifier: E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 Certificate issuer: /CN=A91B87FC/serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft Manifest number: F2 Signing time: Sun 25 Jan 2026 04:31:23 +0000 Manifest this update: Sun 25 Jan 2026 04:31:22 +0000 Manifest next update: Sun 01 Feb 2026 04:31:22 +0000 Files and hashes: 1: 4NxstwnusRvCB181LrbtToGK5wU.crl (hash: wxfLKOJGgk1gkGvo1CZI+x0ExOYOCwG1Jzrdr91Q0OI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Validity Not Before: Jan 25 04:31:22 2026 GMT Not After : Feb 1 04:31:22 2026 GMT Subject: CN=69759c9b-2c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:81:b8:b2:4a:3e:02:26:68:2f:e1:6d:63:c4: 2d:bb:e3:0c:c0:6f:0a:72:06:42:57:68:12:ca:8e: 91:90:a9:3d:fb:d5:72:be:68:e9:a5:21:4a:2f:cd: 43:08:7a:30:3e:f2:71:08:ca:10:ad:5a:01:ef:bb: 8d:c5:52:69:2b:e9:c7:71:63:e9:91:d9:09:d8:b4: 3d:83:96:c2:93:d2:e4:8e:99:b0:64:9e:bf:1a:63: 9f:c5:52:64:97:b6:b8:a5:17:a5:77:b3:37:42:9c: 6a:0b:1d:10:9d:0b:57:3d:39:f5:9d:d0:24:9f:09: 1b:80:4c:2e:21:8d:c6:f1:0f:26:c0:ad:09:e6:59: a6:6d:4a:27:01:d5:39:d9:04:15:4c:42:9f:02:b0: 21:cb:03:cf:82:19:71:f4:69:22:a9:f8:3d:88:59: 5b:ee:bd:ef:be:e6:66:94:10:cc:67:83:9e:1d:a0: 10:c2:4c:76:f1:3e:d9:c1:d4:d8:96:c6:d0:24:cf: ec:fc:be:4d:20:80:35:b6:88:cd:60:1b:7a:ef:f2: 91:81:46:8a:5a:38:b4:9c:60:55:fa:a8:27:7f:3f: 68:80:95:19:e9:68:47:d3:ad:37:72:04:f7:4c:1b: 47:a8:2e:e7:25:3f:b4:fc:7c:3c:c5:f4:5f:77:fd: 44:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:44:C0:32:81:48:8E:A8:61:8B:B7:4E:BD:A7:8A:FA:E3:1C:72:DA X509v3 Authority Key Identifier: keyid:E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:46:f7:45:f1:43:54:b9:8d:1a:83:64:32:1e:59:20:19:6f: 4b:29:c8:9e:3d:cf:e2:b1:7c:1b:0e:4e:d8:01:60:d0:64:44: 6a:52:13:9f:8e:db:66:24:90:c6:38:0c:51:48:66:2d:75:24: 89:63:89:82:a2:e4:8b:c6:70:a3:bc:ea:a7:a2:f1:01:e1:97: 59:37:6f:89:6e:fe:95:f2:ca:99:f4:16:6f:14:f4:a5:f5:c3: 53:04:2e:66:7a:92:8b:12:3f:5e:a5:a3:43:4d:37:e3:25:97: 0c:4a:99:96:3e:8e:5f:28:fc:13:ec:4d:f3:b7:dd:07:75:91: 24:cf:65:00:e9:c4:e0:59:7d:ab:ab:93:3b:2b:38:df:02:e4: b6:64:68:e7:21:79:08:7d:37:32:f9:75:55:34:37:e0:e9:2a: 15:cf:59:44:d3:b9:4c:c3:76:60:f5:6a:01:d9:7d:15:b7:28: b4:83:fb:3c:9b:32:6c:fb:c2:da:b1:54:ec:c0:65:2e:43:b3: a2:9b:be:8b:1f:b1:76:00:dd:bb:34:ce:79:88:b2:e7:54:af: 51:b9:51:58:8e:4f:ef:67:e1:6d:59:78:ce:f7:2d:42:3f:00: 3e:2f:2e:4f:09:4b:77:3b:0c:1a:40:d1:b4:ba:82:d6:f2:d0: 77:76:bb:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKEUwREM2Q0I3MDlFRUIxMUJDMjA3NUYzNTJFQjZFRDRF ODE4QUU3MDUwHhcNMjYwMTI1MDQzMTIyWhcNMjYwMjAxMDQzMTIyWjAYMRYwFAYD VQQDDA02OTc1OWM5Yi0yYzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24G4sko+AiZoL+FtY8Qtu+MMwG8KcgZCV2gSyo6RkKk9+9VyvmjppSFKL81D CHowPvJxCMoQrVoB77uNxVJpK+nHcWPpkdkJ2LQ9g5bCk9LkjpmwZJ6/GmOfxVJk l7a4pReld7M3QpxqCx0QnQtXPTn1ndAknwkbgEwuIY3G8Q8mwK0J5lmmbUonAdU5 2QQVTEKfArAhywPPghlx9Gkiqfg9iFlb7r3vvuZmlBDMZ4OeHaAQwkx28T7ZwdTY lsbQJM/s/L5NIIA1tojNYBt67/KRgUaKWji0nGBV+qgnfz9ogJUZ6WhH0603cgT3 TBtHqC7nJT+0/Hw8xfRfd/1EIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhEwDKB SI6oYYu3Tr2nivrjHHLaMB8GA1UdIwQYMBaAFODcbLcJ7rEbwgdfNS627U6BiucF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy80MkE5QkI1NDg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNSdkNCMTgxTHJidFRvR0s1 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROeHN0d251c1J2Q0IxODFMcmJ0VG9HSzV3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy80MkE5QkI1NDg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNS dkNCMTgxTHJidFRvR0s1d1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQRvdF8UNUuY0ag2QyHlkgGW9LKciePc/isXwbDk7YAWDQZERqUhOf jttmJJDGOAxRSGYtdSSJY4mCouSLxnCjvOqnovEB4ZdZN2+Jbv6V8sqZ9BZvFPSl 9cNTBC5mepKLEj9epaNDTTfjJZcMSpmWPo5fKPwT7E3zt90HdZEkz2UA6cTgWX2r q5M7KzjfAuS2ZGjnIXkIfTcy+XVVNDfg6SoVz1lE07lMw3Zg9WoB2X0Vtyi0g/s8 mzJs+8LasVTswGUuQ7Oim76LH7F2AN27NM55iLLnVK9RuVFYjk/vZ+FtWXjO9y1C PwA+Ly5PCUt3OwwaQNG0uoLW8tB3drsp -----END CERTIFICATE-----Generated at Sun Jan 25 14:01:35 2026 by rpki-client