This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: dV3EWxmPJoj2607mzPiSOIoY9KYO0HOnWlQ10lMipSM= Subject key identifier: 3C:F5:DC:04:5E:EC:B5:88:AA:55:9D:94:B2:8F:0F:95:C4:F7:CB:6B Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 043C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 0421 Signing time: Sat 24 Jan 2026 23:34:44 +0000 Manifest this update: Sat 24 Jan 2026 23:34:43 +0000 Manifest next update: Sat 31 Jan 2026 23:34:43 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: wAeWAkL/TkynrWkRD/1yR22a++Qtg8uzpO7jbtxzk4Y=) 2: 513415BC400011EE88B66B4FC4F9AE02.roa (hash: La9bIBXUn7Pcc0HHfxEl2RzNwtBMPkoEmLR0KZnlaWs=) 3: DF49B4400B4B11EEBAD3047AC4F9AE02.roa (hash: 5EplJ/qwJeqGMd35PNuR9x2zdZw/zJYIhHM0ma+2rK4=) 4: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: PgsogDDZQkDovTqfqAZnCJjtewKfx64pNU23F3h3LOI=) 5: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: xABbFnxjesSqqxHb5Z3LU/MaNyiAYDrCsWPlJjK46gQ=) 6: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (hash: U0JaFB8CVVgKbLBmTTRMW+oeZZCXLA9kdsldXtwigwA=) 7: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: yWfAEaYcbh5fjpOL87NsV9hi8Cg9epFjV+c+Su0AUew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1084 (0x43c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: Jan 24 23:34:43 2026 GMT Not After : Jan 31 23:34:43 2026 GMT Subject: CN=69755714-ffc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0c:b0:97:fe:d7:9e:6e:de:25:19:67:54:66: a1:29:a5:46:11:5f:1d:b2:b5:68:9d:bf:81:83:9c: ce:8a:e1:0e:5b:4a:10:99:e3:9e:e5:2f:9e:6b:15: 89:8a:30:9e:2c:85:32:a0:80:bd:b8:5a:94:4e:fe: c3:6d:92:36:ed:30:7c:37:07:f1:ad:3f:56:da:0d: 4e:0c:83:34:64:56:f5:7c:41:2e:b2:a9:0e:62:7c: c2:92:c4:da:ff:b9:3a:3d:e3:b4:e8:f9:4e:0e:56: 9e:7e:0a:c8:26:a8:63:ab:f0:54:a9:b8:4e:1e:1c: 25:70:25:2b:d5:1b:b4:9a:e8:14:fc:98:20:d0:89: 84:9d:3e:2b:a6:81:bb:39:06:dc:48:6a:51:f4:10: 34:fe:d1:87:23:75:73:b3:70:9b:d7:48:37:96:93: 41:3f:d7:88:ba:83:d7:75:02:be:8d:4a:a7:f2:8d: 25:0e:53:e1:f7:bd:60:49:40:ee:89:4c:11:53:9d: 1c:6e:16:4c:fd:5d:94:9d:22:c3:46:7b:94:d9:63: 90:3f:0f:ef:ee:e5:ee:f4:aa:27:51:69:a1:61:ca: c6:26:a6:b5:4c:03:b8:bb:86:a9:3e:9c:65:c1:92: 6e:5b:b8:87:9b:67:07:cc:6b:54:04:8a:f1:00:b2: 71:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F5:DC:04:5E:EC:B5:88:AA:55:9D:94:B2:8F:0F:95:C4:F7:CB:6B X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:fd:9c:00:21:80:64:0f:bb:21:4c:e9:73:a2:48:57:8f:ca: 80:ee:83:14:62:ff:d1:c4:c5:7f:f8:a2:ac:85:c8:28:8e:09: 94:fb:58:01:5e:70:a0:f3:43:5d:3e:ff:55:29:4d:0b:c1:ae: 41:e3:63:bf:81:1a:56:76:48:26:97:2b:73:d7:e6:64:25:24: 60:24:aa:2a:a4:9a:3c:7b:c5:38:42:95:ef:86:21:5b:5b:bb: ff:f6:8e:3f:45:9c:3f:7a:96:9f:0f:a5:b8:71:1b:cf:4f:58: a4:6a:46:76:7f:66:99:54:43:28:a1:1e:41:11:c3:d7:d5:8e: ff:bc:1d:df:0c:c9:9a:b7:fb:48:d8:8a:77:99:c0:ef:30:3f: 8e:a3:30:e4:96:17:60:a8:92:7b:1c:38:66:ba:72:15:f4:32: 48:14:7a:81:8d:a2:c5:7d:07:7d:db:1f:fd:cf:04:fe:ba:d4: 48:38:d5:12:44:fe:a3:9c:27:2f:d1:bf:04:1f:18:30:14:53: 0a:f3:a2:70:c6:41:0d:03:99:0f:2d:c5:c0:59:42:a7:1a:ee: 7a:50:90:05:e0:41:16:13:9a:3e:ec:da:57:32:9b:9e:4f:35: 03:b8:27:9c:6f:26:fa:ee:0e:fa:9b:af:48:a1:c6:ad:5a:c2: 91:c0:22:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjYwMTI0MjMzNDQzWhcNMjYwMTMxMjMzNDQzWjAYMRYwFAYD VQQDDA02OTc1NTcxNC1mZmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygywl/7Xnm7eJRlnVGahKaVGEV8dsrVonb+Bg5zOiuEOW0oQmeOe5S+eaxWJ ijCeLIUyoIC9uFqUTv7DbZI27TB8NwfxrT9W2g1ODIM0ZFb1fEEusqkOYnzCksTa /7k6PeO06PlODlaefgrIJqhjq/BUqbhOHhwlcCUr1Ru0mugU/Jgg0ImEnT4rpoG7 OQbcSGpR9BA0/tGHI3Vzs3Cb10g3lpNBP9eIuoPXdQK+jUqn8o0lDlPh971gSUDu iUwRU50cbhZM/V2UnSLDRnuU2WOQPw/v7uXu9KonUWmhYcrGJqa1TAO4u4apPpxl wZJuW7iHm2cHzGtUBIrxALJxUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDz13ARe 7LWIqlWdlLKPD5XE98trMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK/ZwAIYBkD7shTOlzokhXj8qA7oMUYv/RxMV/+KKshcgojgmU+1gB XnCg80NdPv9VKU0Lwa5B42O/gRpWdkgmlytz1+ZkJSRgJKoqpJo8e8U4QpXvhiFb W7v/9o4/RZw/epafD6W4cRvPT1ikakZ2f2aZVEMooR5BEcPX1Y7/vB3fDMmat/tI 2Ip3mcDvMD+OozDklhdgqJJ7HDhmunIV9DJIFHqBjaLFfQd92x/9zwT+utRIONUS RP6jnCcv0b8EHxgwFFMK86JwxkENA5kPLcXAWUKnGu56UJAF4EEWE5o+7NpXMpue TzUDuCecbyb67g76m69IocatWsKRwCLl -----END CERTIFICATE-----Generated at Sun Jan 25 10:53:44 2026 by rpki-client