This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft File: 6WkLu582wJ1MLtT2bPVdw1J1-3I.mft (raw, json) Hash identifier: ODbdGwcoSN0U4INsaltgBqGS05qxGjGpKvZ+p7FRLDM= Subject key identifier: CA:FB:E7:3C:F9:8E:D7:33:E0:21:B8:C4:9B:06:09:ED:56:6A:B5:7C Authority key identifier: E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72 Certificate issuer: /CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72 Certificate serial: 0D06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft Manifest number: 0CDF Signing time: Sat 24 Jan 2026 17:49:52 +0000 Manifest this update: Sat 24 Jan 2026 17:49:51 +0000 Manifest next update: Sat 31 Jan 2026 17:49:51 +0000 Files and hashes: 1: 6WkLu582wJ1MLtT2bPVdw1J1-3I.crl (hash: YBVqRswngLlWtXc1Jss5wZm2pr3r4BgasB8F8Cs7kr0=) 2: 843F754669EA11EE90D6585BC4F9AE02.roa (hash: JzYOC6lX/mEpxkty6VDIE3Zxqj0b88u+IzzJMZUEq3s=) 3: DBED3B7C011411EAAB0EF153C4F9AE02.roa (hash: Om0jdNklpNSJZKsNEHd4KcWViukVVvJhi2Cyd/8/qjc=) 4: DB63CF9A011411EAAB0EF153C4F9AE02.roa (hash: wGD4GgZYH8Wu637cB2mtopho5iC5QPWCCDSkj49GCdU=) 5: DC79515C011411EAAB0EF153C4F9AE02.roa (hash: S09PILGMyTlUME8baJPdO5/QImyMfRyviwRhAxvfwcM=) 6: 703918CC69EA11EE83318C50C4F9AE02.roa (hash: sl3iOiIpHmamaoTiyabLQSY+b6gx0pCXz/Ji33uFHt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3334 (0xd06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA9CE, serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72 Validity Not Before: Jan 24 17:49:51 2026 GMT Not After : Jan 31 17:49:51 2026 GMT Subject: CN=6975063f-0c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a5:fc:d2:e0:4a:cd:87:63:6f:46:b2:ce:17: 68:87:37:45:72:fa:58:74:ff:f9:96:b9:01:77:73: 1a:3c:c3:cc:5b:cc:c8:fb:ee:4b:37:57:a5:d5:41: 34:4a:0b:d9:d6:7b:0e:5f:06:34:af:df:b0:3e:45: 53:99:e6:26:08:3e:71:e3:d3:9a:a0:3e:99:89:a4: 6c:bf:c7:2c:0a:87:1f:51:c0:95:1a:56:65:11:19: 99:a2:93:68:a9:7c:7c:6d:24:a7:3f:0d:71:fc:7b: 94:f8:80:1e:69:81:a1:7c:58:d1:8f:63:8e:6f:d7: ce:8f:bd:e9:55:f0:40:71:ea:9a:3f:56:b6:89:8a: 9a:2d:19:88:3b:79:49:a4:56:b7:22:3a:54:ec:f5: e4:23:e9:25:98:39:a3:96:0f:7b:9f:69:28:b9:69: dd:c3:cd:e4:5c:37:a1:79:38:73:d1:06:be:9a:ae: 15:01:6a:3c:11:9c:7c:7a:5d:56:21:79:c7:d6:a5: 1d:8f:ab:60:4a:08:0f:c4:7c:e6:b3:c6:47:60:ad: f5:9a:ec:ba:eb:cb:70:2d:a4:aa:f4:ef:a4:85:71: 99:05:7c:a3:3e:ba:84:20:6e:7c:f9:31:a3:bd:d0: 97:6e:de:e0:0e:2e:0d:ba:b7:cd:6c:d1:02:f4:8c: 5b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FB:E7:3C:F9:8E:D7:33:E0:21:B8:C4:9B:06:09:ED:56:6A:B5:7C X509v3 Authority Key Identifier: keyid:E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:ff:40:e6:fc:d7:77:4e:24:61:f2:3a:f8:92:e0:6d:7e:6b: c1:7f:43:78:8e:4f:f1:e9:9e:84:88:61:ec:10:77:52:b8:d8: a5:2a:da:ca:7b:96:4b:06:12:b5:70:d4:3b:47:51:9c:98:28: 7c:0a:a7:06:fb:f0:f5:16:93:ff:07:75:ac:de:11:9b:93:98: b7:19:96:ca:e4:c9:77:94:26:b1:96:60:7c:27:d4:f7:e3:bb: c2:e8:0c:40:85:d3:b6:be:fa:46:43:eb:a2:5e:15:40:42:75: be:5a:78:37:f5:b4:47:e5:7c:2d:a2:d2:fb:bd:b3:3b:4c:87: 56:5e:0e:38:ef:f3:0d:a3:bf:70:c7:b1:3b:36:0c:8c:15:2a: 00:23:9c:c1:0c:02:0c:b4:cf:df:c3:b5:96:6b:69:c0:cc:1f: c7:5f:f2:60:8b:9d:da:36:cc:e1:03:0e:53:8f:02:85:d3:10: c9:0b:e4:87:05:60:77:05:db:b4:ce:a2:52:e8:e5:23:54:cc: d1:3e:31:3e:32:cd:a5:5c:5c:0a:13:cc:22:15:b7:d6:ce:66: 98:de:c4:52:be:82:17:e6:01:27:18:c6:81:06:70:4e:52:1b: b4:92:02:41:48:36:91:1e:92:32:ea:33:ba:cd:f4:41:41:da: e8:09:81:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE5Q0UxMTAvBgNVBAUTKEU5NjkwQkJCOUYzNkMwOUQ0QzJFRDRGNjZDRjU1REMz NTI3NUZCNzIwHhcNMjYwMTI0MTc0OTUxWhcNMjYwMTMxMTc0OTUxWjAYMRYwFAYD VQQDDA02OTc1MDYzZi0wYzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqX80uBKzYdjb0ayzhdohzdFcvpYdP/5lrkBd3MaPMPMW8zI++5LN1el1UE0 SgvZ1nsOXwY0r9+wPkVTmeYmCD5x49OaoD6ZiaRsv8csCocfUcCVGlZlERmZopNo qXx8bSSnPw1x/HuU+IAeaYGhfFjRj2OOb9fOj73pVfBAceqaP1a2iYqaLRmIO3lJ pFa3IjpU7PXkI+klmDmjlg97n2kouWndw83kXDeheThz0Qa+mq4VAWo8EZx8el1W IXnH1qUdj6tgSggPxHzms8ZHYK31muy668twLaSq9O+khXGZBXyjPrqEIG58+TGj vdCXbt7gDi4NurfNbNEC9IxbFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMr75zz5 jtcz4CG4xJsGCe1WarV8MB8GA1UdIwQYMBaAFOlpC7ufNsCdTC7U9mz1XcNSdfty MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTlDRS81NEYxNURBNDAx MTExMUVBQkQ0RjBBNDlDNEY5QUUwMi82V2tMdTU4MndKMU1MdFQyYlBWZHcxSjEt M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZXa0x1NTgyd0oxTUx0VDJiUFZkdzFKMS0zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTlDRS81NEYxNURBNDAxMTExMUVBQkQ0RjBBNDlDNEY5QUUwMi82V2tMdTU4MndK MU1MdFQyYlBWZHcxSjEtM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW/0Dm/Nd3TiRh8jr4kuBtfmvBf0N4jk/x6Z6EiGHsEHdSuNilKtrK e5ZLBhK1cNQ7R1GcmCh8CqcG+/D1FpP/B3Ws3hGbk5i3GZbK5Ml3lCaxlmB8J9T3 47vC6AxAhdO2vvpGQ+uiXhVAQnW+Wng39bRH5XwtotL7vbM7TIdWXg447/MNo79w x7E7NgyMFSoAI5zBDAIMtM/fw7WWa2nAzB/HX/Jgi53aNszhAw5TjwKF0xDJC+SH BWB3Bdu0zqJS6OUjVMzRPjE+Ms2lXFwKE8wiFbfWzmaY3sRSvoIX5gEnGMaBBnBO Uhu0kgJBSDaRHpIy6jO6zfRBQdroCYFI -----END CERTIFICATE-----Generated at Sun Jan 25 07:44:14 2026 by rpki-client