This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft File: T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json) Hash identifier: dnjTbSYelSY11CZJ+cpzLY0MaDPxVxBY/6B1iYFQ3Zs= Subject key identifier: 0C:17:C4:5D:C9:85:77:77:FC:7B:76:B1:F9:D4:A6:F5:32:8F:A0:00 Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Certificate serial: 090B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft Manifest number: 08FD Signing time: Sat 24 Jan 2026 19:45:21 +0000 Manifest this update: Sat 24 Jan 2026 19:45:21 +0000 Manifest next update: Sat 31 Jan 2026 19:45:21 +0000 Files and hashes: 1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: 5YJwWNgg4+GTVz/85H2knX8QfeSb9a7Rx6cFnZI98xg=) 2: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: X7RAgT98H5oJW9AeQBUUPea1LvMkZ7ZMcojcd1ujO/c=) 3: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: JF8OUqEZ4z+S+pWuRQJ1GwisWg+I2Q1w/kc9aPua3PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2315 (0x90b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Validity Not Before: Jan 24 19:45:21 2026 GMT Not After : Jan 31 19:45:21 2026 GMT Subject: CN=69752151-d970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:12:e7:39:ca:5a:19:73:56:af:2c:5b:03:91: 44:c1:d6:1e:b0:25:f3:fd:99:0f:9d:75:76:bb:06: e2:80:16:4c:bd:84:75:ff:63:1f:b3:40:a2:75:2b: de:60:7a:8a:17:d1:bc:71:26:d9:ea:3b:a4:b1:04: 90:7f:15:a2:02:96:95:e5:61:5e:90:f2:c9:20:63: fe:fb:03:8d:8e:13:e3:83:c5:2f:23:3d:56:f2:30: b6:f4:0d:c3:8c:e6:e0:a6:36:d3:02:86:16:9c:5d: 61:36:7b:ab:bb:0c:5d:a2:3d:bf:5c:a4:a4:4b:82: 55:50:eb:1e:ab:53:b3:1b:5e:1b:66:d8:1b:71:56: d8:74:2e:38:7f:d9:85:ec:74:37:bf:0b:55:ac:f3: 4a:f9:d9:d5:15:38:89:36:8a:61:70:58:a5:e6:9b: 16:c3:1d:02:76:e7:b7:a0:c5:02:00:7b:f3:f2:ec: bd:c1:81:58:6a:7c:d0:b5:f4:05:e4:43:79:25:8e: 70:3e:ed:11:d4:ed:c7:cb:d1:47:23:ff:be:fa:75: a2:ed:51:6b:16:26:fb:1f:ac:68:44:c1:80:80:d6: 8e:bc:2a:48:61:b5:6f:e7:fb:4c:66:72:63:18:63: 27:c1:d3:9b:c6:f3:30:ae:91:6f:dd:bf:0e:86:4f: 22:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:17:C4:5D:C9:85:77:77:FC:7B:76:B1:F9:D4:A6:F5:32:8F:A0:00 X509v3 Authority Key Identifier: keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:b2:52:81:f9:7e:10:38:e2:27:cd:9b:25:f2:21:7f:a2:9d: 81:d7:30:4d:f7:60:b7:38:75:24:f6:bf:74:a0:fb:82:1e:cb: 18:1f:56:e8:64:b8:ed:79:0c:29:c4:9b:a0:67:a0:e3:64:3c: 96:af:99:d6:54:a6:18:e8:69:df:80:67:96:08:cc:80:ba:57: fb:f5:1b:c2:d9:6b:7d:2d:23:44:19:af:ed:1d:d4:55:6c:99: 34:22:7a:17:35:0e:96:d1:70:ad:01:90:f1:54:54:d9:f9:37: 99:61:5b:6f:71:02:f2:8f:2f:90:bd:eb:55:da:bd:f1:60:63: 67:9f:1c:76:a6:68:b7:fa:d7:bd:2e:aa:2a:a4:0b:ae:e0:b5: 98:0d:77:1d:65:0a:5b:d3:fd:cf:6d:cd:df:16:bd:ae:7f:4f: d3:76:8e:79:59:37:29:b9:2f:0f:74:0a:27:c4:97:f8:da:f0: 37:53:99:1e:38:73:c6:9e:de:47:ac:5f:18:3d:4c:68:69:fd: 99:05:89:8b:b5:0f:b4:8b:d7:3b:37:e1:77:df:45:ab:05:30: aa:d5:c0:47:ef:5d:ae:a3:79:f1:78:54:c2:47:df:aa:d7:f1: 2e:f3:e1:fa:cf:fb:58:0d:c1:26:a9:6e:0e:2e:53:f2:ae:dd: ce:d4:b8:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2REQxMTAvBgNVBAUTKDRGREQxQzkzQTEzQ0JBOTFCNEY4QjdGMkM2NTE4RjQ4 QkExNzBCQUQwHhcNMjYwMTI0MTk0NTIxWhcNMjYwMTMxMTk0NTIxWjAYMRYwFAYD VQQDDA02OTc1MjE1MS1kOTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hLnOcpaGXNWryxbA5FEwdYesCXz/ZkPnXV2uwbigBZMvYR1/2Mfs0CidSve YHqKF9G8cSbZ6juksQSQfxWiApaV5WFekPLJIGP++wONjhPjg8UvIz1W8jC29A3D jObgpjbTAoYWnF1hNnuruwxdoj2/XKSkS4JVUOseq1OzG14bZtgbcVbYdC44f9mF 7HQ3vwtVrPNK+dnVFTiJNophcFil5psWwx0Cdue3oMUCAHvz8uy9wYFYanzQtfQF 5EN5JY5wPu0R1O3Hy9FHI/+++nWi7VFrFib7H6xoRMGAgNaOvCpIYbVv5/tMZnJj GGMnwdObxvMwrpFv3b8Ohk8iOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwXxF3J hXd3/Ht2sfnUpvUyj6AAMB8GA1UdIwQYMBaAFE/dHJOhPLqRtPi38sZRj0i6Fwut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZERC9GM0ZCOTA1NkMw RjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVwRzAtTGZ5eGxHUFNMb1hD NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5MGNrNkU4dXBHMC1MZnl4bEdQU0xvWEM2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZERC9GM0ZCOTA1NkMwRjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVw RzAtTGZ5eGxHUFNMb1hDNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXslKB+X4QOOInzZsl8iF/op2B1zBN92C3OHUk9r90oPuCHssYH1bo ZLjteQwpxJugZ6DjZDyWr5nWVKYY6GnfgGeWCMyAulf79RvC2Wt9LSNEGa/tHdRV bJk0InoXNQ6W0XCtAZDxVFTZ+TeZYVtvcQLyjy+QvetV2r3xYGNnnxx2pmi3+te9 LqoqpAuu4LWYDXcdZQpb0/3Pbc3fFr2uf0/Tdo55WTcpuS8PdAonxJf42vA3U5ke OHPGnt5HrF8YPUxoaf2ZBYmLtQ+0i9c7N+F330WrBTCq1cBH712uo3nxeFTCR9+q 1/Eu8+H6z/tYDcEmqW4OLlPyrt3O1LgH -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:07 2026 by rpki-client