This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft File: c8BwFxdufsG_l34xFvWB9RFNA2A.mft (raw, json) Hash identifier: lbbLM9hPu0oEU3eLrbzJMkcrHGhGq5aeM7oWG8Y8BSQ= Subject key identifier: EC:19:B1:E7:5A:30:52:8A:EF:43:66:BC:B3:F2:65:29:22:6D:C4:69 Authority key identifier: 73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 Certificate issuer: /CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft Manifest number: 01FA Signing time: Sun 25 Jan 2026 01:43:47 +0000 Manifest this update: Sun 25 Jan 2026 01:43:47 +0000 Manifest next update: Sun 01 Feb 2026 01:43:47 +0000 Files and hashes: 1: c8BwFxdufsG_l34xFvWB9RFNA2A.crl (hash: RKlMgeoR5eZk2+s6kFG4QiSqV+vWl0S1GOGovNaH070=) 2: 0A195CD4EDCE11ED994B437AC4F9AE02.roa (hash: tnhVbAfny5ry4j6HJiWID5oWjAmaD653liAgf81aO1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9101, serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Validity Not Before: Jan 25 01:43:47 2026 GMT Not After : Feb 1 01:43:47 2026 GMT Subject: CN=69757553-a66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:07:b0:c6:65:1a:d0:d6:f6:e1:f9:3e:d3: 91:7f:58:3e:cc:27:7f:ef:ce:7f:3c:9a:33:57:a2: 8f:07:b3:cf:96:fa:b5:ea:96:c9:e0:50:40:8c:a9: b2:6b:c3:8a:f9:03:44:46:9e:12:8a:c0:9f:80:8a: f6:1a:3d:c1:dc:3a:93:56:5a:b2:c8:9a:bc:f6:e5: 7d:d0:41:9d:96:26:9f:a5:03:94:f1:7d:b3:60:a5: f1:11:ea:5c:84:08:c5:a1:36:93:1d:60:b6:63:9f: c1:e5:f1:30:9c:b0:78:f9:78:44:d2:af:d1:a9:68: b9:14:a2:8c:2e:e0:86:e3:1e:60:95:d2:7f:05:cb: 26:14:34:5f:f0:8e:a3:79:4e:4e:f5:54:cb:da:e1: a1:55:d7:c5:5d:18:03:15:a2:c8:0d:27:10:2c:9f: c1:60:9e:2b:fd:c9:0b:98:4c:f9:5c:5b:91:3e:7d: f2:c3:bf:0f:2a:6d:2f:e5:c3:d5:22:63:df:a8:9d: c5:2c:bc:7c:a3:ea:be:c6:63:0f:6b:a9:60:70:74: fa:b0:0a:11:29:4d:2b:58:60:64:23:86:fd:56:2c: bf:0c:d1:e0:03:57:83:d3:8b:4b:95:5b:4a:a4:8a: a6:39:1e:e5:6f:7c:76:17:b8:87:da:cc:3c:c3:5f: f4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:19:B1:E7:5A:30:52:8A:EF:43:66:BC:B3:F2:65:29:22:6D:C4:69 X509v3 Authority Key Identifier: keyid:73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b2:f1:a2:ac:16:b8:8f:8c:7c:d4:02:d9:4a:b7:5d:75:44: 8e:78:14:11:ce:a7:ed:f3:3d:3e:96:f6:5c:2b:fc:6a:12:7d: 0c:af:21:5b:92:f6:a7:e4:80:80:5e:f6:8c:46:e4:6e:b4:0c: 51:39:9f:cc:22:16:50:8e:bb:d2:10:39:c2:81:54:d0:dd:c4: e6:ec:9f:42:6c:fb:d6:2b:70:49:8d:72:90:52:8d:9f:68:25: fe:a4:cd:32:09:b3:22:f9:0c:fa:58:06:38:f9:c7:0e:34:a8: 4a:d8:a3:26:b2:85:ef:78:51:89:5d:aa:f8:1c:ce:f5:65:fd: e5:35:00:ac:ba:e9:19:8f:43:c0:fa:ef:00:14:d8:06:80:21: 4f:fa:59:1b:a1:c3:44:c5:b5:94:e2:d0:4c:6d:46:47:17:fe: 80:0e:50:9c:96:95:45:95:b6:f4:a5:ce:9e:e2:e5:12:43:4e: 7b:6d:6c:27:ef:d1:5b:98:7f:82:f8:bd:7d:bc:1c:49:74:bb: 79:2b:af:b8:3c:45:12:d2:34:fd:7e:69:be:94:fe:ea:f3:37: 18:25:97:fa:bd:24:3b:64:21:eb:d8:a1:dc:74:33:8a:e0:d5: 32:ed:d2:2d:f0:14:01:78:6a:dd:2f:cd:0f:79:2b:b8:f0:8f: 7d:e9:8a:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkxMDExMTAvBgNVBAUTKDczQzA3MDE3MTc2RTdFQzFCRjk3N0UzMTE2RjU4MUY1 MTE0RDAzNjAwHhcNMjYwMTI1MDE0MzQ3WhcNMjYwMjAxMDE0MzQ3WjAYMRYwFAYD VQQDDA02OTc1NzU1My1hNjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKYHsMZlGtDW9uH5PtORf1g+zCd/785/PJozV6KPB7PPlvq16pbJ4FBAjKmy a8OK+QNERp4SisCfgIr2Gj3B3DqTVlqyyJq89uV90EGdliafpQOU8X2zYKXxEepc hAjFoTaTHWC2Y5/B5fEwnLB4+XhE0q/RqWi5FKKMLuCG4x5gldJ/BcsmFDRf8I6j eU5O9VTL2uGhVdfFXRgDFaLIDScQLJ/BYJ4r/ckLmEz5XFuRPn3yw78PKm0v5cPV ImPfqJ3FLLx8o+q+xmMPa6lgcHT6sAoRKU0rWGBkI4b9Viy/DNHgA1eD04tLlVtK pIqmOR7lb3x2F7iH2sw8w1/0OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwZseda MFKK70NmvLPyZSkibcRpMB8GA1UdIwQYMBaAFHPAcBcXbn7Bv5d+MRb1gfURTQNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTEwMS83NzI4ODgyMkVE QzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZzR19sMzR4RnZXQjlSRk5B MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4QndGeGR1ZnNHX2wzNHhGdldCOVJGTkEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTEwMS83NzI4ODgyMkVEQzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZz R19sMzR4RnZXQjlSRk5BMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBysvGirBa4j4x81ALZSrdddUSOeBQRzqft8z0+lvZcK/xqEn0MryFb kvan5ICAXvaMRuRutAxROZ/MIhZQjrvSEDnCgVTQ3cTm7J9CbPvWK3BJjXKQUo2f aCX+pM0yCbMi+Qz6WAY4+ccONKhK2KMmsoXveFGJXar4HM71Zf3lNQCsuukZj0PA +u8AFNgGgCFP+lkbocNExbWU4tBMbUZHF/6ADlCclpVFlbb0pc6e4uUSQ057bWwn 79FbmH+C+L19vBxJdLt5K6+4PEUS0jT9fmm+lP7q8zcYJZf6vSQ7ZCHr2KHcdDOK 4NUy7dIt8BQBeGrdL80PeSu48I996Yp2 -----END CERTIFICATE-----Generated at Sun Jan 25 07:46:45 2026 by rpki-client