This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft File: y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json) Hash identifier: MIhz2YRpNkNhm/0kOt+4UMpOqPbtGDAz76LpXnIE55c= Subject key identifier: 63:7F:FE:51:5A:0B:C1:FF:FD:53:2C:2D:F0:80:4C:FE:CC:5C:94:E5 Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Certificate serial: 268E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft Manifest number: 2676 Signing time: Sat 24 Jan 2026 15:32:49 +0000 Manifest this update: Sat 24 Jan 2026 15:32:49 +0000 Manifest next update: Sat 31 Jan 2026 15:32:49 +0000 Files and hashes: 1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: 9myL1o3dYUL5XUydw+Mel/OSVe4tSXCseUoTQ/yVhTY=) 2: 767655BE561A11E79F98831DC4F9AE02.roa (hash: P+PfKZViTXpdAD+kS52Q6Ob31BSdpQPHLlD8B4hw+rM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9870 (0x268e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Validity Not Before: Jan 24 15:32:49 2026 GMT Not After : Jan 31 15:32:49 2026 GMT Subject: CN=6974e621-2e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:de:a6:1f:d1:8f:9c:56:bb:e8:90:9e:ac:b1: 36:26:26:78:cb:14:ca:ad:9e:f4:e0:ce:29:aa:20: 90:9a:81:aa:d3:38:2d:01:ab:27:75:24:a8:8b:25: 10:57:29:08:75:14:83:6e:42:e9:ce:15:f0:18:7c: 6f:f6:ca:cf:2e:2f:7e:1a:bb:8b:6a:4c:f6:c0:b2: 44:82:50:22:b4:a5:a5:0d:e0:f8:b8:d2:3f:d6:e6: 43:a5:0d:fa:9c:07:e1:57:d1:44:8f:86:12:52:04: 7c:35:5e:ff:8e:40:bd:df:49:99:26:67:03:a0:3b: 65:ec:82:e7:5e:66:28:c5:c6:b0:e4:ae:c1:34:70: 83:1b:cb:11:49:6e:08:b6:3a:a6:b6:b4:c3:a8:bc: bf:ef:c6:6e:9f:3a:95:6d:e8:89:39:aa:e0:b3:86: 27:de:a2:49:93:bf:ab:10:eb:d9:e9:8d:9f:ac:f6: 26:0f:bf:53:f5:71:9d:61:59:15:e3:d4:8f:4a:e6: 58:de:80:d7:96:a9:74:c1:be:9e:32:e4:87:a2:38: b8:29:7e:ad:cc:c2:61:0a:7b:6f:f9:73:55:13:7b: ba:ad:5f:2b:66:55:87:f0:3d:96:7d:d0:c3:99:34: 3d:c0:80:dc:25:37:a8:00:e6:75:12:ea:76:48:e2: c4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7F:FE:51:5A:0B:C1:FF:FD:53:2C:2D:F0:80:4C:FE:CC:5C:94:E5 X509v3 Authority Key Identifier: keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:54:4d:33:6f:17:eb:36:0f:2b:49:9c:d8:c5:e2:55:02:f4: 86:01:a0:8f:a0:0d:f7:3e:f3:82:b2:5f:3e:cb:5a:77:7b:e0: 3c:fe:f7:aa:92:76:70:d7:25:0f:d9:89:a6:8c:02:70:eb:10: c5:b9:6c:44:3a:33:28:4f:2d:3d:75:ec:7b:a2:07:e3:41:78: b6:60:4e:f8:cd:72:28:64:c1:bd:54:1a:14:5c:af:e2:28:47: 75:cb:35:11:e1:e9:9c:70:24:43:a1:d7:c7:d2:37:11:ea:ca: 3e:8a:0e:b6:2e:1b:3c:cf:f6:ee:f8:a4:f7:d7:62:88:aa:33: 02:fa:fe:bb:d4:aa:85:cf:ea:12:e8:cf:36:c1:47:f1:3e:2e: 7b:63:46:de:13:29:5f:2a:a2:2c:df:64:f1:d1:a7:bf:1d:08: 79:1c:db:e1:5b:34:d2:dd:a4:3a:84:68:27:2a:85:62:ee:b9: 68:7b:60:66:e1:39:9f:77:f2:27:42:87:4a:c0:c9:38:c0:f9: f7:9f:6e:19:ea:e1:8b:75:a5:79:18:56:58:fe:57:d7:3e:42: 52:81:76:57:d9:9a:32:70:d1:60:e2:93:34:2d:bc:18:6e:a3: c4:f2:c0:7a:47:0b:29:a5:43:ce:11:3b:c1:b6:22:4c:57:40: 35:4b:48:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QzNBNzQxMTAvBgNVBAUTKENCN0I4REI0MjQ4MjRDNzFBODcwM0JCRkI5NDJBMzE1 MjkxNTQzNjMwHhcNMjYwMTI0MTUzMjQ5WhcNMjYwMTMxMTUzMjQ5WjAYMRYwFAYD VQQDDA02OTc0ZTYyMS0yZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwN6mH9GPnFa76JCerLE2JiZ4yxTKrZ704M4pqiCQmoGq0zgtAasndSSoiyUQ VykIdRSDbkLpzhXwGHxv9srPLi9+GruLakz2wLJEglAitKWlDeD4uNI/1uZDpQ36 nAfhV9FEj4YSUgR8NV7/jkC930mZJmcDoDtl7ILnXmYoxcaw5K7BNHCDG8sRSW4I tjqmtrTDqLy/78ZunzqVbeiJOargs4Yn3qJJk7+rEOvZ6Y2frPYmD79T9XGdYVkV 49SPSuZY3oDXlql0wb6eMuSHoji4KX6tzMJhCntv+XNVE3u6rV8rZlWH8D2WfdDD mTQ9wIDcJTeoAOZ1Eup2SOLE3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGN//lFa C8H//VMsLfCATP7MXJTlMB8GA1UdIwQYMBaAFMt7jbQkgkxxqHA7v7lCoxUpFUNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83Q0I0QTA1NkZE M0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RIR29jRHVfdVVLakZTa1ZR Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzdU50Q1NDVEhHb2NEdV91VUtqRlNrVlEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0E3NC83Q0I0QTA1NkZEM0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RI R29jRHVfdVVLakZTa1ZRMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOVE0zbxfrNg8rSZzYxeJVAvSGAaCPoA33PvOCsl8+y1p3e+A8/veq knZw1yUP2YmmjAJw6xDFuWxEOjMoTy09dex7ogfjQXi2YE74zXIoZMG9VBoUXK/i KEd1yzUR4emccCRDodfH0jcR6so+ig62Lhs8z/bu+KT312KIqjMC+v671KqFz+oS 6M82wUfxPi57Y0beEylfKqIs32Tx0ae/HQh5HNvhWzTS3aQ6hGgnKoVi7rloe2Bm 4Tmfd/InQodKwMk4wPn3n24Z6uGLdaV5GFZY/lfXPkJSgXZX2ZoycNFg4pM0LbwY bqPE8sB6RwsppUPOETvBtiJMV0A1S0h2 -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:39 2026 by rpki-client