This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json) Hash identifier: 5sn3zoZymNKDJQoFgDW5Ly2DEocpQB68JSugBbhvvwo= Subject key identifier: 76:5C:5C:A8:2D:AA:B3:91:2B:2B:91:AD:7B:CC:95:0C:A8:6A:28:84 Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Certificate serial: 07F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft Manifest number: 07CF Signing time: Sat 24 Jan 2026 20:38:57 +0000 Manifest this update: Sat 24 Jan 2026 20:38:57 +0000 Manifest next update: Sat 31 Jan 2026 20:38:57 +0000 Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: vOHNOj1rozkVt1l7QfM2xcSCJYmGX1va/XpdJONpxOE=) 2: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: KN4CWPFNBhIIjqsGJhbyUP98ulbl0SGTkd2fLpRZk+I=) 3: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: lZu5pdaUasH8/fasxCeSUbAtaYZZr63nIN4QhjX8ELY=) 4: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: D4Cs5JY9tNHVDlAQoZ8zXAojWJ56gds9kQSJUSLXkfU=) 5: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: dCRsUxTYQfbVmR8r076QUZHUhBb4kgZRsGIm5GyZ/CI=) 6: FAA525207A4411EB804B7430C4F9AE02.roa (hash: BhSHDdRG8/0Zm5EF7nED+w+EERbxSAwCaFSs3AEh7LU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2032 (0x7f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Validity Not Before: Jan 24 20:38:57 2026 GMT Not After : Jan 31 20:38:57 2026 GMT Subject: CN=69752de1-3c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:67:86:e6:dd:16:08:f6:b4:2b:22:31:be:92: 9d:f7:9c:25:10:61:35:fd:c3:0f:d4:53:24:fc:c7: 85:08:a9:61:b8:c7:0a:34:aa:db:b1:48:91:75:8e: d1:67:b4:e0:b1:09:6a:96:c7:3f:99:d0:cd:0d:ff: 73:cd:73:22:16:70:d3:5e:f6:44:e4:5f:40:e7:65: 16:77:fa:d7:9e:11:5b:a9:79:a7:0f:5e:53:c6:b4: fa:1e:77:20:c0:99:19:65:1d:0f:7a:df:2b:0a:73: fa:3d:05:6a:70:89:ca:22:8b:0a:ff:70:36:48:13: ea:ef:95:11:dc:69:88:4b:5c:dd:ed:ea:34:df:bb: 57:0d:1a:4c:13:6b:53:37:c1:65:04:f7:01:f4:7a: 1f:ce:87:ad:02:c6:13:f6:29:7d:a2:24:39:f0:11: 28:b0:ba:11:af:7e:a9:b6:21:bb:ca:6e:87:b4:53: 9b:83:09:fb:c4:43:a3:ce:d5:7e:37:30:a9:25:85: cd:90:32:f8:1d:c9:76:28:bb:20:03:fa:9d:6f:9f: 44:86:ff:d7:2c:e6:94:ed:a9:63:2e:4e:7e:d0:94: 9d:4f:f0:1d:d5:9f:a2:44:58:dc:83:b2:1f:55:f5: dd:04:d7:5a:8c:82:94:2a:92:19:cc:28:e9:a2:fb: 7d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5C:5C:A8:2D:AA:B3:91:2B:2B:91:AD:7B:CC:95:0C:A8:6A:28:84 X509v3 Authority Key Identifier: keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e0:a9:20:4d:72:f6:85:97:7e:bd:84:15:eb:1f:be:14:58: 6a:55:60:f1:20:01:26:f9:bb:ee:27:49:20:72:b8:65:f6:26: 31:f0:6d:43:69:98:95:0f:0f:e0:bd:ac:4a:47:bd:8b:b4:e1: c4:db:69:32:51:f7:d6:20:50:d2:35:41:f7:d5:05:11:d0:ee: f2:f6:e5:9e:cb:a4:cc:6e:a8:1b:a3:88:75:b7:2f:f7:67:5b: 65:2b:79:64:dd:a3:0e:3e:2f:4f:11:70:5c:79:6e:39:7a:aa: cc:0e:d6:ff:16:4a:ed:6b:44:05:7f:19:f1:78:da:1e:94:a2: 9c:e9:63:2b:4d:69:ec:df:02:fc:80:c1:ca:ea:c4:85:dc:b8: 58:ae:c9:0f:59:42:6b:53:04:b5:b0:dd:3f:11:c3:79:7f:64: cb:6d:cb:43:08:03:23:2c:f4:43:3f:c2:5a:41:6e:40:86:6f: 63:06:ed:b3:06:76:bb:4c:a8:77:da:52:57:80:e8:e3:ca:0f: a5:d8:37:fa:fe:d2:d8:69:28:ba:91:a9:f5:cb:07:78:bb:dc: 6d:7c:8c:65:12:38:56:d8:dc:f1:18:39:03:d7:99:14:a9:f8: 27:7a:57:52:95:4b:62:d6:99:e0:4d:56:e6:53:62:e0:4d:18: 25:36:1d:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex MEEyMTQ3QjIwHhcNMjYwMTI0MjAzODU3WhcNMjYwMTMxMjAzODU3WjAYMRYwFAYD VQQDDA02OTc1MmRlMS0zYzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GeG5t0WCPa0KyIxvpKd95wlEGE1/cMP1FMk/MeFCKlhuMcKNKrbsUiRdY7R Z7TgsQlqlsc/mdDNDf9zzXMiFnDTXvZE5F9A52UWd/rXnhFbqXmnD15TxrT6Hncg wJkZZR0Pet8rCnP6PQVqcInKIosK/3A2SBPq75UR3GmIS1zd7eo037tXDRpME2tT N8FlBPcB9HofzoetAsYT9il9oiQ58BEosLoRr36ptiG7ym6HtFObgwn7xEOjztV+ NzCpJYXNkDL4Hcl2KLsgA/qdb59Ehv/XLOaU7aljLk5+0JSdT/Ad1Z+iRFjcg7If VfXdBNdajIKUKpIZzCjpovt9wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZcXKgt qrORKyuRrXvMlQyoaiiEMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjk0RC8yQzcxNjJDQzIzMjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAz bHpnRk1WUUl6Y29Rb2hSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf4KkgTXL2hZd+vYQV6x++FFhqVWDxIAEm+bvuJ0kgcrhl9iYx8G1D aZiVDw/gvaxKR72LtOHE22kyUffWIFDSNUH31QUR0O7y9uWey6TMbqgbo4h1ty/3 Z1tlK3lk3aMOPi9PEXBceW45eqrMDtb/Fkrta0QFfxnxeNoelKKc6WMrTWns3wL8 gMHK6sSF3LhYrskPWUJrUwS1sN0/EcN5f2TLbctDCAMjLPRDP8JaQW5Ahm9jBu2z Bna7TKh32lJXgOjjyg+l2Df6/tLYaSi6kan1ywd4u9xtfIxlEjhW2NzxGDkD15kU qfgneldSlUti1pngTVbmU2LgTRglNh1c -----END CERTIFICATE-----Generated at Sun Jan 25 06:17:30 2026 by rpki-client