This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft File: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json) Hash identifier: x7pzCxec7kxxrOx8cqp34WK/T6sfPFfUtCOr2ssMNnA= Subject key identifier: D8:ED:1D:06:6C:AB:A6:34:92:C1:D3:41:0F:37:5E:DC:75:62:0A:AA Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Certificate serial: 0D2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft Manifest number: 0CF2 Signing time: Sat 24 Jan 2026 17:55:40 +0000 Manifest this update: Sat 24 Jan 2026 17:55:40 +0000 Manifest next update: Sat 31 Jan 2026 17:55:40 +0000 Files and hashes: 1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: ahGrh9zLvC8Waxdj/T3wEZRxak88tOqAAS7L0ylyQMw=) 2: 22E63812221211EF9624DB0CC4F9AE02.roa (hash: tEtTFQOPTziC3M/Up8UOSv6VFGJx+4dP/cUQCVWj4l4=) 3: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: e/Kuo5QdtsaM/mztDHYG4XkizjKIPPrgUEb1ap1W45w=) 4: 12561046368911EEA0CB766BC4F9AE02.roa (hash: ZsNiLxfxjjXIOR9efOK6g19RpsthQOBE4XYCmM1hnq8=) 5: 21A9C2D4221211EF9624DB0CC4F9AE02.roa (hash: UuY5qtUwk8Dlu801YZxvnO/xKQaWGop0bKAvOOHuar0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3370 (0xd2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Validity Not Before: Jan 24 17:55:40 2026 GMT Not After : Jan 31 17:55:40 2026 GMT Subject: CN=6975079c-c547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a3:45:83:38:67:60:2c:7a:af:c9:68:e3:d3: 1e:33:06:8f:ff:de:d1:73:14:a8:7d:88:ae:9e:59: 8f:f9:57:fe:a6:4f:55:22:f6:9f:5c:01:4c:42:67: 27:4f:be:0a:44:9c:b9:5e:5c:3d:aa:33:26:90:5b: 73:5c:51:ad:cd:1c:28:21:b3:b5:8e:ee:b9:40:13: cb:68:12:38:74:bb:46:10:1d:fd:00:7f:46:28:31: 62:47:df:b1:4a:b4:45:3c:25:3f:9b:0e:39:00:e4: 91:1e:c8:8d:29:c6:7d:2c:79:d6:29:b2:a7:03:a8: 48:77:44:ec:ce:ca:20:fc:89:6c:1a:da:a4:2c:e5: a9:b8:89:85:bd:31:bf:4e:bc:99:b3:46:71:7f:0e: fb:d0:fd:af:21:70:f8:20:2f:07:9e:fd:eb:b7:1a: ad:a3:43:af:d2:03:12:1b:fe:2f:a4:2e:dc:a8:da: 3c:5e:c5:ff:a9:33:92:3d:42:a3:67:3e:06:1b:e1: 85:1b:49:92:2d:a8:6a:d1:92:a7:ed:25:01:1d:cd: 9f:aa:6d:d1:66:85:f3:d1:15:9f:b6:2c:c9:29:a7: d8:4a:4d:73:57:97:45:57:de:f0:1d:b7:b3:15:dd: d2:f0:1a:fe:ce:1f:ea:78:f9:ff:b2:61:21:23:38: c7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:ED:1D:06:6C:AB:A6:34:92:C1:D3:41:0F:37:5E:DC:75:62:0A:AA X509v3 Authority Key Identifier: keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:25:28:9c:68:68:d2:7d:e7:94:6d:4f:e9:33:a2:fd:86:62: f1:02:db:f4:7d:69:a9:39:b3:01:7e:89:07:4c:85:c6:51:32: d3:83:37:36:b6:6f:2b:da:14:fe:b8:d2:4c:15:e0:d8:7f:a3: 89:4b:a2:90:96:15:cb:e7:5e:04:13:39:0e:e4:32:83:f7:60: f4:f8:2e:1b:19:2d:17:be:80:b1:a7:fe:76:91:5e:06:c9:91: e3:22:24:f2:56:ee:ae:fc:02:b1:00:70:1f:76:33:94:f2:13: 2e:df:44:b9:93:d6:56:e4:1e:60:9e:58:c9:47:f5:ac:22:13: 50:83:a9:ce:62:2b:8a:0a:49:46:b4:33:bb:76:1f:10:c5:b4: 28:bb:1b:c0:65:6b:b4:1c:0b:d3:f2:ac:98:9b:09:19:71:34: e6:26:cc:04:69:1a:0f:1b:f8:05:3d:01:6a:cf:eb:75:b1:f5: 51:10:5a:a1:e9:0c:bc:ee:45:61:f0:84:c3:6c:ce:10:4c:e1: 1a:4a:7a:e5:f2:c5:53:04:c7:23:ab:d2:ee:4c:ee:5b:db:56: f2:cd:02:14:fa:7b:87:40:1d:f0:b3:18:7f:0b:fe:f7:20:f8: fc:cb:fd:39:fc:88:8c:c7:ad:ed:51:dd:cf:1a:e1:bd:4e:06: 10:59:9c:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBODAxMTAvBgNVBAUTKDA2MEY3RTc3QzAwQUNCRTA4NjhEQzBCOEZDQTIzRDRB NUYwN0Q3N0EwHhcNMjYwMTI0MTc1NTQwWhcNMjYwMTMxMTc1NTQwWjAYMRYwFAYD VQQDDA02OTc1MDc5Yy1jNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjaNFgzhnYCx6r8lo49MeMwaP/97RcxSofYiunlmP+Vf+pk9VIvafXAFMQmcn T74KRJy5Xlw9qjMmkFtzXFGtzRwoIbO1ju65QBPLaBI4dLtGEB39AH9GKDFiR9+x SrRFPCU/mw45AOSRHsiNKcZ9LHnWKbKnA6hId0Tszsog/IlsGtqkLOWpuImFvTG/ TryZs0Zxfw770P2vIXD4IC8Hnv3rtxqto0Ov0gMSG/4vpC7cqNo8XsX/qTOSPUKj Zz4GG+GFG0mSLahq0ZKn7SUBHc2fqm3RZoXz0RWftizJKafYSk1zV5dFV97wHbez Fd3S8Br+zh/qePn/smEhIzjH5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjtHQZs q6Y0ksHTQQ83Xtx1YgqqMB8GA1UdIwQYMBaAFAYPfnfACsvgho3AuPyiPUpfB9d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE4MC9COThFODFENjA1 QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3ktQ0dqY0M0X0tJOVNsOEgx M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnOS1kOEFLeS1DR2pjQzRfS0k5U2w4SDEzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkE4MC9COThFODFENjA1QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3kt Q0dqY0M0X0tJOVNsOEgxM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5JSicaGjSfeeUbU/pM6L9hmLxAtv0fWmpObMBfokHTIXGUTLTgzc2 tm8r2hT+uNJMFeDYf6OJS6KQlhXL514EEzkO5DKD92D0+C4bGS0XvoCxp/52kV4G yZHjIiTyVu6u/AKxAHAfdjOU8hMu30S5k9ZW5B5gnljJR/WsIhNQg6nOYiuKCklG tDO7dh8QxbQouxvAZWu0HAvT8qyYmwkZcTTmJswEaRoPG/gFPQFqz+t1sfVREFqh 6Qy87kVh8ITDbM4QTOEaSnrl8sVTBMcjq9LuTO5b21byzQIU+nuHQB3wsxh/C/73 IPj8y/05/IiMx63tUd3PGuG9TgYQWZx6 -----END CERTIFICATE-----Generated at Sun Jan 25 04:36:42 2026 by rpki-client