This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft File: U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json) Hash identifier: 0AQbBGXP1LVrBBXEPT51j4pI5Uu40PwkcoXelbacqes= Subject key identifier: F2:23:CC:F5:DC:FD:82:31:FC:EB:9E:9B:AE:89:35:6B:8E:F3:F7:B1 Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Certificate serial: 0DCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft Manifest number: 0D6A Signing time: Sat 24 Jan 2026 17:41:07 +0000 Manifest this update: Sat 24 Jan 2026 17:41:06 +0000 Manifest next update: Sat 31 Jan 2026 17:41:06 +0000 Files and hashes: 1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: d7MEBc3TusEENTaMcvynOBskYyvb4lwGGoehPfLR520=) 2: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: /zMIu4aAire5r9mqMzQqAKINeMM11LU3wVsWK0GAqus=) 3: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: 0Xwi/bmW9haZc7tjAjEkhhMp/mPsR+cSlzidnrV+hJs=) 4: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: r/UrHR4/pq4iERDjBjufQuU/vYCRg4tIHiAlT6J6epA=) 5: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: 2NctsSqYgRdhlX1YbDvI69B+W9MaM7MaZOBeltGDVHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3530 (0xdca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Validity Not Before: Jan 24 17:41:06 2026 GMT Not After : Jan 31 17:41:06 2026 GMT Subject: CN=69750432-9ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cd:bb:25:c6:b1:d1:99:5c:ba:f4:5d:bf:a7: 35:77:e0:7e:dc:db:09:79:08:ca:06:86:57:45:6d: b2:55:a2:9d:44:67:49:de:e6:cf:f4:59:ff:32:82: 16:81:13:07:15:83:03:b4:36:a4:67:67:3b:15:0e: f3:bc:94:b6:7c:16:8c:d7:8d:1e:e3:c6:da:ae:cd: ea:4a:50:be:ae:b6:ee:8b:17:66:75:9b:cb:7a:52: 1a:74:42:63:fb:2a:9e:b8:ed:8c:a0:8b:6c:c4:1e: 56:e9:3e:27:6e:a2:2d:62:42:ef:2f:1e:a8:ab:f7: 96:98:3d:a1:1b:8f:19:4f:cb:43:c1:af:c8:3c:4f: f0:90:f8:fe:61:3f:34:3b:5a:20:b3:87:e0:20:2c: dc:73:f1:1c:62:44:e6:6c:5c:93:a8:f0:33:51:cd: 54:eb:01:a8:28:1a:80:fe:8f:7d:9c:3c:ee:c3:82: 12:9a:32:af:f3:da:60:a1:1e:44:30:17:d8:d2:ed: f6:9c:d9:06:1c:e8:b0:d5:05:f0:42:94:15:ce:3b: 44:a8:36:b7:27:b3:43:ef:ff:ab:3e:a8:c5:38:3b: cf:bf:b5:33:4a:73:60:f9:17:d7:08:75:56:b3:22: 30:ad:32:7d:5d:05:f2:ec:14:d2:10:7e:d5:3f:50: 0f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:23:CC:F5:DC:FD:82:31:FC:EB:9E:9B:AE:89:35:6B:8E:F3:F7:B1 X509v3 Authority Key Identifier: keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:f9:3e:58:69:1b:98:37:41:c5:21:2d:a5:4f:49:32:fa:7c: 9d:31:cd:e9:da:28:6a:01:8e:cf:a9:b5:a9:c9:7d:1a:6e:d0: 34:08:74:8d:8e:22:77:94:83:17:20:14:8c:8d:f0:ce:93:62: a1:64:14:df:d4:de:bb:f8:04:06:41:6e:14:29:2e:70:53:d1: 5e:d5:49:09:2e:e1:74:29:e4:17:20:f3:aa:0b:00:fc:9d:7a: bf:73:94:19:e3:0b:5c:72:53:e0:d3:2c:10:a9:68:a9:d5:d8: ee:7b:e9:3d:92:b1:e0:83:81:4a:86:32:0f:27:23:bc:08:ad: d2:07:f2:d1:71:5d:62:44:0e:75:0e:2b:93:89:95:f4:3c:03: 81:a4:d4:f6:21:90:34:ca:8f:41:e7:cd:08:00:18:30:9a:e0: a2:3e:01:e1:ba:4d:f5:52:29:48:d4:99:21:96:f1:d3:63:58: fa:1e:ff:ee:73:70:aa:96:b0:dd:21:52:27:0f:d3:fe:59:98: 6c:b1:13:ad:2d:aa:1b:b3:29:6f:a0:fe:5a:af:53:19:d5:eb: 44:f1:6f:b1:d2:db:33:e0:1d:88:fe:2d:64:27:7f:76:6e:b5: db:3d:86:9c:e5:80:c0:86:21:6f:c1:ec:3a:06:ac:32:37:7e: a3:83:49:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4NUMxMTAvBgNVBAUTKDUzNzRDNkU3NUYxODYwNTI0NTVBMkQ4REE1MjkyRkVG MDA5Q0M5QUYwHhcNMjYwMTI0MTc0MTA2WhcNMjYwMTMxMTc0MTA2WjAYMRYwFAYD VQQDDA02OTc1MDQzMi05ZWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxc27Jcax0ZlcuvRdv6c1d+B+3NsJeQjKBoZXRW2yVaKdRGdJ3ubP9Fn/MoIW gRMHFYMDtDakZ2c7FQ7zvJS2fBaM140e48bars3qSlC+rrbuixdmdZvLelIadEJj +yqeuO2MoItsxB5W6T4nbqItYkLvLx6oq/eWmD2hG48ZT8tDwa/IPE/wkPj+YT80 O1ogs4fgICzcc/EcYkTmbFyTqPAzUc1U6wGoKBqA/o99nDzuw4ISmjKv89pgoR5E MBfY0u32nNkGHOiw1QXwQpQVzjtEqDa3J7ND7/+rPqjFODvPv7UzSnNg+RfXCHVW syIwrTJ9XQXy7BTSEH7VP1APiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIjzPXc /YIx/Ouem66JNWuO8/exMB8GA1UdIwQYMBaAFFN0xudfGGBSRVotjaUpL+8AnMmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODg1Qy81QzE5Rjg0MkYy NjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlGSkZXaTJOcFNrdjd3Q2N5 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UzVEc1MThZWUZKRldpMk5wU2t2N3dDY3lhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODg1Qy81QzE5Rjg0MkYyNjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlG SkZXaTJOcFNrdjd3Q2N5YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW+T5YaRuYN0HFIS2lT0ky+nydMc3p2ihqAY7PqbWpyX0abtA0CHSN jiJ3lIMXIBSMjfDOk2KhZBTf1N67+AQGQW4UKS5wU9Fe1UkJLuF0KeQXIPOqCwD8 nXq/c5QZ4wtcclPg0ywQqWip1djue+k9krHgg4FKhjIPJyO8CK3SB/LRcV1iRA51 DiuTiZX0PAOBpNT2IZA0yo9B580IABgwmuCiPgHhuk31UilI1JkhlvHTY1j6Hv/u c3CqlrDdIVInD9P+WZhssROtLaobsylvoP5ar1MZ1etE8W+x0tsz4B2I/i1kJ392 brXbPYac5YDAhiFvwew6BqwyN36jg0kk -----END CERTIFICATE-----Generated at Sun Jan 25 21:43:31 2026 by rpki-client