This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json) Hash identifier: U56M4r06ogR7cgTigsyIz+S3x+Dqh44p1zn+k0dqBiY= Subject key identifier: 87:82:BF:7F:BE:9F:F5:DE:92:3B:D8:DC:BB:EF:8A:93:3F:BD:12:58 Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 0A21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft Manifest number: 0A02 Signing time: Sat 24 Jan 2026 19:19:58 +0000 Manifest this update: Sat 24 Jan 2026 19:19:57 +0000 Manifest next update: Sat 31 Jan 2026 19:19:57 +0000 Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: zM4Rdgt3KlyYghcODTmpE6wXp2oK4rkHaDBRkne9AEo=) 2: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: 2sxpt/g5gNqtTqTR0//y7KZEd6jiqpJM3aKw8HB7Xls=) 3: E5D4B662020C11EF924D0064C4F9AE02.roa (hash: BXcqasQCDpSPCMLjPpItU74zJy4ZQFyEgdMbABvSE9g=) 4: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (hash: REd5n9ojLIIJvlk71OgJyuH2KKoqE6St2Z433Eqsv2Y=) 5: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: ZHA3YfptASWK2BxsBZtNS+ivRKQaplGmuWVnUSQkmxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2593 (0xa21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: Jan 24 19:19:57 2026 GMT Not After : Jan 31 19:19:57 2026 GMT Subject: CN=69751b5e-6c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cc:7a:69:9c:54:c7:4e:14:35:31:6e:83:c9: b4:15:17:47:cd:b4:81:c7:b3:5a:0b:bb:33:c8:22: 05:b6:38:a8:e5:a3:36:82:2a:cd:f3:64:97:93:f8: 73:b1:3e:67:fa:76:7f:65:0f:c0:43:28:92:3b:10: f0:a5:cc:ce:15:5c:63:b2:8d:d6:40:a6:82:14:21: ce:7b:c5:7e:d6:75:9f:63:f9:76:a0:b4:4a:70:2a: a5:0d:b9:f9:b6:63:33:37:bb:be:bc:11:1e:69:e7: c4:dc:ab:ea:44:e4:a7:9e:ce:28:0a:19:71:91:e5: 1e:ff:ce:03:31:8e:e2:70:99:e8:4f:c2:c3:82:c3: fa:3c:e5:35:af:e8:27:4c:e4:c2:97:6d:76:7d:91: c0:71:92:a0:60:cb:a1:94:df:b0:85:4d:12:4e:28: e0:31:12:a2:5a:98:92:eb:07:1b:81:f9:b6:38:0b: ab:90:1a:fb:08:d0:a9:8a:c4:b4:cc:5a:8e:ef:3b: 4c:2f:60:9d:1d:96:80:e2:87:14:ee:f4:ff:56:33: 76:a1:9f:df:84:96:5c:c6:85:c4:27:ba:a2:9b:fa: f6:3b:54:ce:ea:ea:73:43:41:b7:44:27:2a:67:75: 84:c0:e2:17:de:b3:cf:7f:10:c0:65:a2:e8:83:0c: 13:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:82:BF:7F:BE:9F:F5:DE:92:3B:D8:DC:BB:EF:8A:93:3F:BD:12:58 X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5f:ed:7a:04:d3:5e:ea:e3:08:8c:24:0c:5f:55:08:b3:84: 5a:60:0b:e4:a2:7c:c4:73:61:7a:f0:1a:f5:6e:10:b0:4f:e4: c0:6f:32:f1:fd:08:2a:e6:ba:eb:e9:b4:b2:c2:ad:7e:20:bf: 66:d8:f3:40:2b:58:57:31:63:be:19:43:03:e8:41:f3:3c:3a: 35:b4:4d:e6:fa:00:e9:7e:34:b2:ca:8a:5e:b4:2c:66:c8:d4: cd:06:d2:34:8f:32:b0:67:18:51:c3:c6:c8:cc:44:9f:64:9a: 9a:f1:b6:e2:3c:67:01:2a:52:dc:c6:50:07:f8:28:e0:44:cc: c0:91:25:b6:6b:47:47:5f:0d:5f:c1:b2:64:bf:a3:2c:f1:46: 06:59:f0:33:05:2c:b6:f0:bc:9e:6a:5e:56:7d:95:da:ca:e4: b0:64:07:39:31:a2:5e:c5:2e:e2:8d:09:1a:43:cf:14:93:66: 97:6c:74:77:5f:b7:a9:21:e0:11:43:9a:52:aa:6c:40:31:59: c5:9d:bb:cc:2b:a4:05:64:f2:c9:ab:f8:52:ae:b9:7f:c3:2b: fa:2d:04:24:26:84:3a:de:e3:cb:fd:38:0a:0d:a4:a8:81:66: 6c:b1:2f:3a:0b:2d:90:6e:85:fd:63:c9:45:f4:81:aa:ed:ca: 4c:8b:5a:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjYwMTI0MTkxOTU3WhcNMjYwMTMxMTkxOTU3WjAYMRYwFAYD VQQDDA02OTc1MWI1ZS02YzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkcx6aZxUx04UNTFug8m0FRdHzbSBx7NaC7szyCIFtjio5aM2girN82SXk/hz sT5n+nZ/ZQ/AQyiSOxDwpczOFVxjso3WQKaCFCHOe8V+1nWfY/l2oLRKcCqlDbn5 tmMzN7u+vBEeaefE3KvqROSnns4oChlxkeUe/84DMY7icJnoT8LDgsP6POU1r+gn TOTCl212fZHAcZKgYMuhlN+whU0STijgMRKiWpiS6wcbgfm2OAurkBr7CNCpisS0 zFqO7ztML2CdHZaA4ocU7vT/VjN2oZ/fhJZcxoXEJ7qim/r2O1TO6upzQ0G3RCcq Z3WEwOIX3rPPfxDAZaLogwwTqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIeCv3++ n/XekjvY3LvvipM/vRJYMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUExNC9GN0U4NjQ0NjhGQkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2Qy V0sxYnlfNDJKa29hWWRad2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMX+16BNNe6uMIjCQMX1UIs4RaYAvkonzEc2F68Br1bhCwT+TAbzLx /Qgq5rrr6bSywq1+IL9m2PNAK1hXMWO+GUMD6EHzPDo1tE3m+gDpfjSyyopetCxm yNTNBtI0jzKwZxhRw8bIzESfZJqa8bbiPGcBKlLcxlAH+CjgRMzAkSW2a0dHXw1f wbJkv6Ms8UYGWfAzBSy28Lyeal5WfZXayuSwZAc5MaJexS7ijQkaQ88Uk2aXbHR3 X7epIeARQ5pSqmxAMVnFnbvMK6QFZPLJq/hSrrl/wyv6LQQkJoQ63uPL/TgKDaSo gWZssS86Cy2QboX9Y8lF9IGq7cpMi1rV -----END CERTIFICATE-----Generated at Sun Jan 25 14:12:50 2026 by rpki-client