This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json) Hash identifier: 9RfYY+w1VpuVX2qMAkKeBnsk6tpOKzuOwFAePJg/gvA= Subject key identifier: 29:29:61:26:0F:EC:26:4E:C3:16:65:4F:4B:BE:9A:DD:61:F0:AA:2F Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft Manifest number: F3 Signing time: Sun 25 Jan 2026 04:31:15 +0000 Manifest this update: Sun 25 Jan 2026 04:31:14 +0000 Manifest next update: Sun 01 Feb 2026 04:31:14 +0000 Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: fvTqknzny18QWxNi7l3FNr2zpw+G3mhBr+3Cy1hVMxs=) 2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: svxCNz/PtUeVtTEkfJI0UGnsP9Tbd78MIluuCyhiaVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Validity Not Before: Jan 25 04:31:14 2026 GMT Not After : Feb 1 04:31:14 2026 GMT Subject: CN=69759c92-c8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d5:b9:20:4c:60:b3:04:a2:9a:33:aa:1b:22: 8d:a9:a0:43:67:b0:da:b6:2f:25:2b:d2:9d:9d:d6: 66:e6:6d:25:35:31:bf:cc:55:3c:6e:32:0f:d7:bf: 1d:11:62:92:05:c8:6b:b7:a6:6a:1f:32:df:c2:1c: 4f:23:1a:f2:25:89:f1:1b:eb:5b:05:90:63:4b:e4: 01:c2:24:b1:91:4f:c9:a6:ce:2d:4b:16:ef:97:d8: 7f:26:eb:c0:9c:74:70:ec:8b:69:ab:ca:36:b3:ac: de:c4:8d:16:bb:d6:6b:3f:2c:ad:17:c2:c9:ea:0e: 62:02:75:e1:a7:dc:8a:48:0b:b0:ab:c7:da:57:ae: c4:72:d9:f3:f5:5b:0f:60:5e:24:49:41:d2:a1:70: 8b:e0:d1:1c:d3:f2:16:68:91:63:df:94:81:b9:18: dc:a2:d8:d7:3c:5f:b5:ca:7b:e4:cf:a7:06:47:9f: 4c:c6:58:a8:8b:d2:65:bc:8b:67:b2:37:2d:e7:2b: 90:fb:c4:dc:8c:33:76:a4:ba:48:4f:c2:6b:9c:b4: bd:3f:cd:4c:ff:28:f2:37:c8:0a:81:95:76:27:16: eb:61:fb:f3:6f:6f:21:6b:0a:99:31:c9:bf:83:55: e0:5f:5b:56:8b:44:27:43:fb:db:dc:7e:0b:f5:5c: 5e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:29:61:26:0F:EC:26:4E:C3:16:65:4F:4B:BE:9A:DD:61:F0:AA:2F X509v3 Authority Key Identifier: keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:50:83:33:5a:2c:ba:a4:70:61:3f:59:dc:92:79:8d:d0:1f: f9:48:6d:40:5c:3a:cc:8a:a9:bd:fb:13:5f:f4:46:8e:21:ca: 93:78:cd:42:e2:b9:52:85:b8:a2:68:a4:87:0b:d0:d0:16:66: 20:b2:b7:75:9a:48:8f:7f:87:da:66:14:29:a6:27:26:89:8a: 04:f6:01:59:ca:3b:b2:f7:6e:2b:0e:00:16:68:03:4c:92:c7: 25:18:75:9d:1c:9d:ae:3e:2b:48:cb:52:1e:26:59:81:82:c5: 10:37:2b:60:02:21:c9:b9:9e:d6:4d:cc:78:c3:9e:31:6f:08: fa:8d:63:e3:f8:08:af:79:df:d2:5a:03:29:25:85:21:ed:c2: 70:21:53:18:c6:ff:df:04:b5:5d:65:22:c9:77:b4:d5:da:74: 5a:10:da:85:69:e9:1f:81:bb:c1:97:b1:cf:83:80:24:3f:5d: 3c:3c:7f:63:e6:dd:b8:90:cb:45:61:8d:63:a0:29:30:45:3f: 3c:86:60:ad:a7:4f:56:73:bb:d7:f7:13:ef:a3:7a:b5:b8:11: 3e:cd:92:47:0e:c1:46:9a:c1:c7:45:79:c9:53:e9:b1:c4:cb: 6a:04:f5:d7:35:dd:ad:3a:c1:2a:74:a1:f9:66:b3:1f:09:98: cc:dc:b7:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJGOEMxMTAvBgNVBAUTKDAxN0Q4REI4QTc4ODc0QUIyRjlBRDk3REU1N0FGREUx QkUxNjdENDQwHhcNMjYwMTI1MDQzMTE0WhcNMjYwMjAxMDQzMTE0WjAYMRYwFAYD VQQDDA02OTc1OWM5Mi1jOGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodW5IExgswSimjOqGyKNqaBDZ7Dati8lK9KdndZm5m0lNTG/zFU8bjIP178d EWKSBchrt6ZqHzLfwhxPIxryJYnxG+tbBZBjS+QBwiSxkU/Jps4tSxbvl9h/JuvA nHRw7Itpq8o2s6zexI0Wu9ZrPyytF8LJ6g5iAnXhp9yKSAuwq8faV67Ectnz9VsP YF4kSUHSoXCL4NEc0/IWaJFj35SBuRjcotjXPF+1ynvkz6cGR59Mxlioi9JlvItn sjct5yuQ+8TcjDN2pLpIT8JrnLS9P81M/yjyN8gKgZV2JxbrYfvzb28hawqZMcm/ g1XgX1tWi0QnQ/vb3H4L9Vxe/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkpYSYP 7CZOwxZlT0u+mt1h8KovMB8GA1UdIwQYMBaAFAF9jbiniHSrL5rZfeV6/eG+Fn1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkY4Qy81NTc5QjlCMDg2 RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRLc3ZtdGw5NVhyOTRiNFdm VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkY4Qy81NTc5QjlCMDg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRL c3ZtdGw5NVhyOTRiNFdmVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeUIMzWiy6pHBhP1ncknmN0B/5SG1AXDrMiqm9+xNf9EaOIcqTeM1C 4rlShbiiaKSHC9DQFmYgsrd1mkiPf4faZhQppicmiYoE9gFZyjuy924rDgAWaANM ksclGHWdHJ2uPitIy1IeJlmBgsUQNytgAiHJuZ7WTcx4w54xbwj6jWPj+Aived/S WgMpJYUh7cJwIVMYxv/fBLVdZSLJd7TV2nRaENqFaekfgbvBl7HPg4AkP108PH9j 5t24kMtFYY1joCkwRT88hmCtp09Wc7vX9xPvo3q1uBE+zZJHDsFGmsHHRXnJU+mx xMtqBPXXNd2tOsEqdKH5ZrMfCZjM3Lej -----END CERTIFICATE-----Generated at Sun Jan 25 21:46:53 2026 by rpki-client