This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: EHckU78OzoL/jR+HqpuN6jSk1ZxWwDG+5nTfTLE6FRI= Subject key identifier: 35:C9:98:2B:A6:70:A1:22:C6:26:9D:12:F0:CA:45:E4:C5:8E:83:66 Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 019C Signing time: Sun 25 Jan 2026 02:40:11 +0000 Manifest this update: Sun 25 Jan 2026 02:40:11 +0000 Manifest next update: Sun 01 Feb 2026 02:40:11 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: izaLshd9YmWnAOdZ7L2Tw2vLwcV6FyM+ZDXCseneSRI=) 2: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: JbS9HkiswWZnIjVLHQ7U/IfLENyl8w12PWlq4/4YX4g=) 3: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: V7HVXcdZqekDWFKQPL+tYLxRmvuZTdFk8E168KA3XsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: Jan 25 02:40:11 2026 GMT Not After : Feb 1 02:40:11 2026 GMT Subject: CN=6975828b-268d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:44:09:8f:dd:ce:76:a8:b4:0a:ab:59:44:10: b5:7f:4e:93:bb:a8:92:16:68:60:5b:f6:1d:a6:e6: 13:4a:26:ce:41:f5:d4:d7:c1:b9:3b:1b:5d:fd:a7: 03:1b:e2:ac:9d:b3:33:04:f3:ee:f0:12:83:36:03: fe:07:7c:92:64:42:4d:7c:1f:75:f9:b8:64:8e:8d: ea:e5:7d:7c:d3:27:9c:ef:8c:87:00:77:6e:d7:80: 9d:94:d6:79:70:25:c0:6d:8c:3c:ee:ca:56:88:b5: 23:c3:92:07:ea:65:e8:cd:d9:93:c6:d5:40:56:44: 50:25:40:19:be:cc:a6:f4:60:09:50:8e:4f:b5:e5: 4c:fc:80:fe:33:4c:ba:75:26:eb:81:99:91:92:08: a2:1f:76:54:0c:9b:86:1d:bb:0a:24:61:70:2d:c6: 53:af:0f:a8:28:5a:cd:1b:6b:40:af:43:76:e6:14: 5e:69:38:52:a3:e9:13:c2:ed:7a:3c:41:b0:7b:ab: 6e:03:c2:b7:96:9e:94:10:97:16:bb:3f:c2:d0:87: c1:bb:69:1c:56:0a:c2:75:f3:b1:82:01:41:fe:c2: 32:63:79:df:14:c0:04:42:55:ed:5f:91:1c:2d:28: 83:1c:5b:6b:66:b6:2f:e9:55:d4:d9:4b:78:24:18: 13:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C9:98:2B:A6:70:A1:22:C6:26:9D:12:F0:CA:45:E4:C5:8E:83:66 X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:0a:82:e5:64:e1:15:fb:43:d6:d1:49:7a:52:d6:ce:fa:ff: ce:c8:8f:ec:1e:23:53:0d:dc:d6:23:79:b0:61:a3:78:ae:79: f7:dc:fd:f6:99:36:89:f5:69:20:dc:b3:00:90:7f:4c:c5:92: 83:c8:b8:9f:5e:93:eb:c1:04:6f:3b:56:65:2c:e5:2d:71:c4: d9:2b:dd:7a:d8:3c:73:d8:16:1a:ab:ae:59:64:6f:d9:3d:5b: 62:ba:99:d1:9c:32:0d:22:30:57:b9:bc:7e:dc:71:20:19:8a: 5f:fa:8d:c5:2d:b3:cf:75:e6:d5:f5:4c:de:57:0f:6b:26:72: 68:cb:30:46:9c:12:76:2a:9c:46:61:1d:26:ef:51:ee:ea:a3: fa:35:4e:89:79:7e:fc:bc:54:30:ac:a2:75:cc:5e:c8:a3:61: 5b:cd:b8:ae:45:0a:f5:b4:a6:5d:fe:76:9c:19:10:9c:3c:ad: 6e:e7:88:7c:2f:09:d3:c8:a1:f1:55:2a:51:f6:e2:c0:3a:df: a1:cd:b1:36:38:72:ef:66:5c:21:48:b0:6a:2a:32:14:69:4c: 30:56:3c:d3:d8:0b:a9:dc:07:81:cf:e6:b1:3d:aa:9c:80:b8: f4:e3:20:11:4e:c5:d6:fc:fb:a1:fa:4f:02:a8:bc:48:cd:b6: fb:bb:cf:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjYwMTI1MDI0MDExWhcNMjYwMjAxMDI0MDExWjAYMRYwFAYD VQQDDA02OTc1ODI4Yi0yNjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EQJj93Odqi0CqtZRBC1f06Tu6iSFmhgW/YdpuYTSibOQfXU18G5Oxtd/acD G+KsnbMzBPPu8BKDNgP+B3ySZEJNfB91+bhkjo3q5X180yec74yHAHdu14CdlNZ5 cCXAbYw87spWiLUjw5IH6mXozdmTxtVAVkRQJUAZvsym9GAJUI5PteVM/ID+M0y6 dSbrgZmRkgiiH3ZUDJuGHbsKJGFwLcZTrw+oKFrNG2tAr0N25hReaThSo+kTwu16 PEGwe6tuA8K3lp6UEJcWuz/C0IfBu2kcVgrCdfOxggFB/sIyY3nfFMAEQlXtX5Ec LSiDHFtrZrYv6VXU2Ut4JBgTBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXJmCum cKEixiadEvDKReTFjoNmMB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPCoLlZOEV+0PW0Ul6UtbO+v/OyI/sHiNTDdzWI3mwYaN4rnn33P32 mTaJ9Wkg3LMAkH9MxZKDyLifXpPrwQRvO1ZlLOUtccTZK9162Dxz2BYaq65ZZG/Z PVtiupnRnDINIjBXubx+3HEgGYpf+o3FLbPPdebV9UzeVw9rJnJoyzBGnBJ2KpxG YR0m71Hu6qP6NU6JeX78vFQwrKJ1zF7Io2FbzbiuRQr1tKZd/nacGRCcPK1u54h8 LwnTyKHxVSpR9uLAOt+hzbE2OHLvZlwhSLBqKjIUaUwwVjzT2Aup3AeBz+axPaqc gLj04yARTsXW/Puh+k8CqLxIzbb7u89x -----END CERTIFICATE-----Generated at Sun Jan 25 10:43:15 2026 by rpki-client