This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft File: wxmve7T5gWEa0Awy-KNX3mNT3DY.mft (raw, json) Hash identifier: jrTnrOZpBTqUa3yoANvzDnlOQtukF06dpmAPbhpQGhQ= Subject key identifier: 3E:FB:8B:2A:D1:36:3F:DB:F8:38:DA:60:F2:41:DC:B2:0C:B5:B6:D8 Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 Certificate issuer: /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Certificate serial: 142A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft Manifest number: 1401 Signing time: Sat 24 Jan 2026 16:40:42 +0000 Manifest this update: Sat 24 Jan 2026 16:40:41 +0000 Manifest next update: Sat 31 Jan 2026 16:40:41 +0000 Files and hashes: 1: wxmve7T5gWEa0Awy-KNX3mNT3DY.crl (hash: Xeb4jovRSqECBYfviI8gO15FsQDz83iC8+A1CzTe5a8=) 2: 56F161A6E4E911EEBC24E249C4F9AE02.roa (hash: WJIW7/5aYkkVFVY9R0KtJZquDdQN3OhnT/M95kjVAHM=) 3: 7A6DC1B2ED5011F0BF908D85516F56BC.roa (hash: GjrCJowEf04GbHyW1KgTH63aBjKCuBNkj/tXL8FJiyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5162 (0x142a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DB8, serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Validity Not Before: Jan 24 16:40:41 2026 GMT Not After : Jan 31 16:40:41 2026 GMT Subject: CN=6974f60a-c428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d5:9a:ba:fb:66:54:b8:e9:5f:c1:81:42:4d: f0:e6:53:38:32:5e:9c:6d:d5:90:11:de:b8:ff:b1: fb:13:f9:bc:51:ea:05:84:6c:e8:90:79:a6:99:1f: 72:e3:0e:2a:00:ce:f5:f0:12:c6:a2:36:a6:3f:7b: f5:b1:37:67:c0:5d:37:08:25:d7:d2:00:0c:90:4c: 18:46:12:34:40:97:fc:82:02:ad:98:57:99:ac:71: 8c:09:5e:ba:53:08:b5:f9:7a:42:26:49:42:10:64: 76:06:44:00:57:dd:d4:21:b7:04:ef:4a:0e:6c:7d: a8:76:b9:1b:00:93:8a:60:73:3f:fe:f5:cc:b4:14: 4c:00:fc:5f:d2:63:f1:a2:53:d0:b4:88:26:6a:eb: ed:14:2c:d3:93:8e:a4:c3:19:c9:2e:5a:f4:0d:8c: 7b:d1:16:84:77:2a:15:33:27:f8:3b:5e:45:45:02: 34:d8:06:af:e3:26:96:f8:21:ac:16:89:10:a5:bc: 7a:3b:24:a8:53:4e:11:cf:79:cc:04:0c:8b:6b:6c: 79:30:81:2e:a6:e3:77:dd:97:36:cd:d7:13:4c:ee: a5:e7:a7:31:90:0d:de:c8:27:8c:64:d4:24:4d:6b: 5f:4a:ec:59:99:3e:77:15:c7:92:ca:fc:19:f6:fc: b0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FB:8B:2A:D1:36:3F:DB:F8:38:DA:60:F2:41:DC:B2:0C:B5:B6:D8 X509v3 Authority Key Identifier: keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2b:65:5f:f4:8b:51:7d:10:d3:4f:51:cc:d3:c3:82:79:ce: b6:04:d7:4c:33:3d:9a:f7:57:22:96:2a:b5:02:c1:96:c1:0c: 09:29:57:d5:31:c0:b6:a8:c6:c8:b1:23:7d:7d:4e:3d:8f:9f: 60:14:ac:52:9a:56:dc:f6:44:a5:1d:80:9e:1f:ed:03:4d:9f: a3:bd:f7:51:19:57:ef:a1:64:74:b8:4f:4c:cd:fd:96:1b:9e: be:50:2e:cd:71:48:6f:15:ae:b5:a8:11:77:45:7c:3a:0a:3c: 58:e2:0d:91:a0:0e:08:44:79:ec:6f:93:5b:b9:03:ce:85:1c: b1:84:f1:71:32:e1:08:73:0e:1c:db:e5:c7:b9:9d:a2:88:09: ba:0d:30:77:c1:75:53:f0:83:a6:50:a8:d7:d8:e0:1f:cf:47: 16:5b:fc:65:52:53:fa:2a:e4:0d:b6:91:64:c5:b0:94:95:cd: b0:03:d5:27:da:c9:26:7f:06:a4:87:db:73:fe:7e:e2:65:a8: 99:e1:e0:3c:c0:5c:33:b7:a1:48:e9:85:3d:09:99:f3:b9:81: 77:18:24:84:22:2b:dc:3a:db:ae:8c:c8:05:e5:27:01:19:8d: 13:22:3c:61:ec:0f:55:7b:e8:72:77:af:62:8f:c3:5a:18:d7: 78:b1:99:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQjgxMTAvBgNVBAUTKEMzMTlBRjdCQjRGOTgxNjExQUQwMEMzMkY4QTM1N0RF NjM1M0RDMzYwHhcNMjYwMTI0MTY0MDQxWhcNMjYwMTMxMTY0MDQxWjAYMRYwFAYD VQQDDA02OTc0ZjYwYS1jNDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9WauvtmVLjpX8GBQk3w5lM4Ml6cbdWQEd64/7H7E/m8UeoFhGzokHmmmR9y 4w4qAM718BLGojamP3v1sTdnwF03CCXX0gAMkEwYRhI0QJf8ggKtmFeZrHGMCV66 Uwi1+XpCJklCEGR2BkQAV93UIbcE70oObH2odrkbAJOKYHM//vXMtBRMAPxf0mPx olPQtIgmauvtFCzTk46kwxnJLlr0DYx70RaEdyoVMyf4O15FRQI02Aav4yaW+CGs FokQpbx6OySoU04Rz3nMBAyLa2x5MIEupuN33Zc2zdcTTO6l56cxkA3eyCeMZNQk TWtfSuxZmT53FceSyvwZ9vywSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD77iyrR Nj/b+DjaYPJB3LIMtbbYMB8GA1UdIwQYMBaAFMMZr3u0+YFhGtAMMvijV95jU9w2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8xNkNCQzA1NEEx MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdXRWEwQXd5LUtOWDNtTlQz RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4bXZlN1Q1Z1dFYTBBd3ktS05YM21OVDNEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURCOC8xNkNCQzA1NEExMUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdX RWEwQXd5LUtOWDNtTlQzRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbK2Vf9ItRfRDTT1HM08OCec62BNdMMz2a91ciliq1AsGWwQwJKVfV McC2qMbIsSN9fU49j59gFKxSmlbc9kSlHYCeH+0DTZ+jvfdRGVfvoWR0uE9Mzf2W G56+UC7NcUhvFa61qBF3RXw6CjxY4g2RoA4IRHnsb5NbuQPOhRyxhPFxMuEIcw4c 2+XHuZ2iiAm6DTB3wXVT8IOmUKjX2OAfz0cWW/xlUlP6KuQNtpFkxbCUlc2wA9Un 2skmfwakh9tz/n7iZaiZ4eA8wFwzt6FI6YU9CZnzuYF3GCSEIivcOtuujMgF5ScB GY0TIjxh7A9Ve+hyd69ij8NaGNd4sZlZ -----END CERTIFICATE-----Generated at Sun Jan 25 22:03:12 2026 by rpki-client