This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft File: J38SJEpQvGVO5WP-c5_k63GZZrY.mft (raw, json) Hash identifier: kK+MPqIN+1WKnhKuK/sDaA2HBl+ZqhhY/svaOchaB50= Subject key identifier: DC:82:8F:63:DC:B0:0A:B4:32:F2:32:AB:D3:02:BC:F0:4F:37:CC:70 Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6 Certificate issuer: /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft Manifest number: DD Signing time: Sun 25 Jan 2026 04:57:30 +0000 Manifest this update: Sun 25 Jan 2026 04:57:29 +0000 Manifest next update: Sun 01 Feb 2026 04:57:29 +0000 Files and hashes: 1: J38SJEpQvGVO5WP-c5_k63GZZrY.crl (hash: nLoP5nYc5SM6UuwJmrtVbwax3meqzbU6oGQv8LT/zH0=) 2: 50B13360267F11F0A061882DC4F9AE02.roa (hash: wZklMFDoQMrom29zHe2kxQjdWsUnZaq+ROOmp4NlaH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B89AA, serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6 Validity Not Before: Jan 25 04:57:29 2026 GMT Not After : Feb 1 04:57:29 2026 GMT Subject: CN=6975a2b9-5a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cf:67:a5:4f:15:f2:b7:ad:2b:5c:31:94:8d: bf:53:da:9f:05:8b:31:ef:0d:14:0e:d7:28:75:12: 53:96:f8:70:25:f5:8b:2f:8c:1f:00:35:a3:5c:e4: 61:05:f9:38:03:14:c4:89:0d:32:cc:69:4d:76:7b: f6:6c:80:bd:1c:22:1d:03:91:22:4b:7d:e3:ee:37: 94:b3:ae:23:8e:7e:4a:cd:e8:a8:2c:04:a1:a9:e8: 67:38:4d:1d:cb:c8:c9:aa:68:60:7d:2f:11:c8:bf: 20:c0:8c:c0:87:22:6b:fb:dc:69:1b:fc:17:d6:6f: cb:4c:26:32:7b:70:48:ca:e0:6c:6d:dd:38:10:fb: 97:15:60:17:9a:20:80:8d:2e:f4:bc:09:7c:a8:5c: 6d:bc:9a:bf:d8:39:a3:34:8d:94:6d:02:b2:74:82: 7e:1c:9a:97:fb:bc:5a:86:cd:c5:97:e6:36:56:cd: 4e:ca:c1:89:c4:3f:a7:b3:47:11:bc:f2:b7:12:d9: 20:34:67:02:c3:47:75:fe:d5:76:ad:d5:60:f8:b4: 19:fe:cb:59:9f:fc:e8:25:33:f4:c0:f9:93:6e:18: f3:f3:ee:0d:24:8a:da:86:0f:1b:0a:d7:68:9f:a9: a8:91:f9:66:21:9e:78:69:8e:0d:0c:b0:b3:be:13: d5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:82:8F:63:DC:B0:0A:B4:32:F2:32:AB:D3:02:BC:F0:4F:37:CC:70 X509v3 Authority Key Identifier: keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:11:c0:19:5e:42:b7:74:28:da:bb:57:05:41:26:5f:50:e4: 9c:c7:d1:28:fe:c3:5c:37:a0:4a:e4:9f:fe:d5:bf:e0:a1:f2: a9:9e:d7:e8:45:44:59:22:fc:b1:94:1d:23:ee:0d:ab:f4:38: 9e:aa:dc:3f:a4:cb:a2:3d:54:e6:27:c2:cc:88:1f:9c:1a:5a: 46:91:94:8d:6f:65:4c:7a:e5:ed:c9:3c:91:8b:6c:cb:37:f3: f9:cb:b5:09:28:d2:40:26:1d:15:98:d5:e4:ae:23:b8:f2:0c: 22:b4:46:5c:53:79:bd:cd:17:08:10:93:43:d4:53:ce:2d:7f: c5:57:a7:ef:56:81:9a:2b:2f:0a:18:2e:62:86:ec:c3:99:32: fd:08:44:01:ba:53:42:78:a9:50:7a:12:de:10:a0:a0:bc:2f: bb:84:68:31:f9:b4:04:5c:62:02:d3:a6:9b:57:e3:34:74:fe: 90:11:f0:9f:22:71:47:27:26:7a:b4:1c:25:69:3e:f9:77:92: 4c:cf:df:27:1d:47:1a:95:73:fc:2c:c5:f8:6d:ee:25:e0:72: 95:c9:8b:bd:3d:a9:bc:e7:d4:8c:c6:6b:f6:02:0c:b3:07:34: b1:b2:36:a2:a4:c3:09:ea:1a:78:31:7b:50:65:54:8d:3a:e8: 09:3e:7a:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg5QUExMTAvBgNVBAUTKDI3N0YxMjI0NEE1MEJDNjU0RUU1NjNGRTczOUZFNEVC NzE5OTY2QjYwHhcNMjYwMTI1MDQ1NzI5WhcNMjYwMjAxMDQ1NzI5WjAYMRYwFAYD VQQDDA02OTc1YTJiOS01YTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApc9npU8V8retK1wxlI2/U9qfBYsx7w0UDtcodRJTlvhwJfWLL4wfADWjXORh Bfk4AxTEiQ0yzGlNdnv2bIC9HCIdA5EiS33j7jeUs64jjn5KzeioLAShqehnOE0d y8jJqmhgfS8RyL8gwIzAhyJr+9xpG/wX1m/LTCYye3BIyuBsbd04EPuXFWAXmiCA jS70vAl8qFxtvJq/2DmjNI2UbQKydIJ+HJqX+7xahs3Fl+Y2Vs1OysGJxD+ns0cR vPK3EtkgNGcCw0d1/tV2rdVg+LQZ/stZn/zoJTP0wPmTbhjz8+4NJIrahg8bCtdo n6mokflmIZ54aY4NDLCzvhPVqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyCj2Pc sAq0MvIyq9MCvPBPN8xwMB8GA1UdIwQYMBaAFCd/EiRKULxlTuVj/nOf5OtxmWa2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODlBQS84NUQwRjM0NkJD NjIxMUVGOUE3ODM3NTFDNEY5QUUwMi9KMzhTSkVwUXZHVk81V1AtYzVfazYzR1pa clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozOFNKRXBRdkdWTzVXUC1jNV9rNjNHWlpyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODlBQS84NUQwRjM0NkJDNjIxMUVGOUE3ODM3NTFDNEY5QUUwMi9KMzhTSkVwUXZH Vk81V1AtYzVfazYzR1paclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmEcAZXkK3dCjau1cFQSZfUOScx9Eo/sNcN6BK5J/+1b/gofKpntfo RURZIvyxlB0j7g2r9Dieqtw/pMuiPVTmJ8LMiB+cGlpGkZSNb2VMeuXtyTyRi2zL N/P5y7UJKNJAJh0VmNXkriO48gwitEZcU3m9zRcIEJND1FPOLX/FV6fvVoGaKy8K GC5ihuzDmTL9CEQBulNCeKlQehLeEKCgvC+7hGgx+bQEXGIC06abV+M0dP6QEfCf InFHJyZ6tBwlaT75d5JMz98nHUcalXP8LMX4be4l4HKVyYu9Pam859SMxmv2Agyz BzSxsjaipMMJ6hp4MXtQZVSNOugJPnr/ -----END CERTIFICATE-----Generated at Sun Jan 25 21:01:16 2026 by rpki-client