This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json) Hash identifier: cD07miZJpCsXTB0MhFqahdHFAwd+NKTG504Ndp1DriE= Subject key identifier: CC:04:91:45:A5:90:0E:BC:2E:B0:EC:7E:CF:9A:D0:6B:C6:54:83:EA Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft Manifest number: 01D1 Signing time: Sun 25 Jan 2026 02:10:09 +0000 Manifest this update: Sun 25 Jan 2026 02:10:08 +0000 Manifest next update: Sun 01 Feb 2026 02:10:08 +0000 Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: suk41XbiDN9EaTjg0kZQ/Ds6+UyJXlJ6q62sEGhHsFM=) 2: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: qRwojUTlxnLhuw/Mk800h2tw73R4wHeoNMLoVaIWLSQ=) 3: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: n7d+wfVovpgFh/VPuHK0Be+tZJiAokXkxVBH6z58Cdo=) 4: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: FSryM40tOFsx9/9SakfMh/QfDHk+qmxC9WGqNR/nxQA=) 5: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: O7wU5uPOsDFh8TlK1r/cSTqhuO+kftwlxz4zNibCfJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: Jan 25 02:10:08 2026 GMT Not After : Feb 1 02:10:08 2026 GMT Subject: CN=69757b80-c813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bc:24:0e:8f:08:61:aa:bf:19:19:ad:d4:f9: c8:22:a3:23:0e:7c:7b:e9:ce:c6:a8:58:95:9a:d4: e6:34:25:c0:32:28:8b:b5:5b:fb:6f:38:09:fe:db: 7d:c4:91:80:50:9f:2e:32:55:6e:bc:b9:a4:cd:75: 77:2b:f4:33:fa:55:a6:a8:cd:88:83:01:8a:9b:a3: d0:36:78:70:71:bc:b0:3e:b8:0a:65:57:69:38:f7: ae:c4:6a:e8:de:5a:0c:13:e8:b3:98:29:0e:b1:80: 8e:81:fc:48:46:fd:fe:01:6c:97:eb:bd:b7:db:20: d4:4f:f5:e6:3b:48:04:ab:6b:c5:25:e0:08:86:ea: a6:37:5d:de:a9:ab:76:7c:38:c7:c7:e4:68:0d:f0: 2b:65:43:f3:55:18:85:6b:81:6e:84:1e:f3:1c:f6: 98:bc:47:71:b4:ea:11:f5:49:61:fa:40:4f:8a:58: f1:df:b4:02:ac:62:65:dd:35:c7:d5:8d:ec:0f:a3: e8:f8:6c:97:73:92:58:93:8c:49:0b:d8:4b:ce:4d: 2c:1e:e2:67:05:93:8d:09:5d:df:17:2c:77:40:d7: f8:85:1e:62:93:1e:16:08:81:3d:af:39:e7:8e:b1: 5c:47:17:9a:0a:65:bb:2f:25:32:f1:c1:56:f0:72: d7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:04:91:45:A5:90:0E:BC:2E:B0:EC:7E:CF:9A:D0:6B:C6:54:83:EA X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:76:38:84:02:04:68:da:78:c8:fe:f3:f6:6e:a2:dc:2a:c1: 0f:48:ab:7f:5c:51:32:eb:b4:85:3a:57:93:8a:de:3f:9b:21: 63:68:9e:2a:c1:24:0b:2e:16:85:2c:ec:dd:e9:06:a7:d3:4d: c3:b5:b6:77:73:62:ad:d5:e7:45:4a:e7:30:2e:5c:86:6a:da: cf:fb:0b:b5:36:6f:ae:a0:0d:93:01:7a:90:f6:71:38:0a:d3: 72:9c:ea:dc:5d:89:55:4a:60:72:05:44:95:95:1c:72:59:7e: d9:a2:5f:97:fe:4e:db:66:28:9e:66:fe:e2:fc:0e:40:2e:3e: eb:78:42:06:02:9e:23:35:b3:29:64:b2:d3:b2:76:8a:f5:0c: 60:fb:0a:0d:14:28:c1:a8:0e:0d:f5:77:35:e8:be:2b:34:67: f7:49:65:8b:90:3c:3d:b6:87:be:9b:90:0d:e7:74:e1:fb:29: 00:cb:4f:a9:f7:0b:4b:27:2b:06:ea:8b:c9:02:df:08:4e:6c: 07:12:7b:f4:94:2a:8a:5a:3a:1a:e9:58:5f:c6:78:cc:57:b4: 55:c3:ef:a8:91:30:d9:01:67:bc:79:2e:c7:41:f6:bc:fc:e3: 97:41:8e:ff:8d:37:db:58:3d:44:0f:09:3d:f0:9e:59:b6:cf: 9c:32:cf:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjYwMTI1MDIxMDA4WhcNMjYwMjAxMDIxMDA4WjAYMRYwFAYD VQQDDA02OTc1N2I4MC1jODEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7wkDo8IYaq/GRmt1PnIIqMjDnx76c7GqFiVmtTmNCXAMiiLtVv7bzgJ/tt9 xJGAUJ8uMlVuvLmkzXV3K/Qz+lWmqM2IgwGKm6PQNnhwcbywPrgKZVdpOPeuxGro 3loME+izmCkOsYCOgfxIRv3+AWyX67232yDUT/XmO0gEq2vFJeAIhuqmN13eqat2 fDjHx+RoDfArZUPzVRiFa4FuhB7zHPaYvEdxtOoR9Ulh+kBPiljx37QCrGJl3TXH 1Y3sD6Po+GyXc5JYk4xJC9hLzk0sHuJnBZONCV3fFyx3QNf4hR5ikx4WCIE9rznn jrFcRxeaCmW7LyUy8cFW8HLXKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwEkUWl kA68LrDsfs+a0GvGVIPqMB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9N bzNUWnFEekV6NURkYlBJZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1djiEAgRo2njI/vP2bqLcKsEPSKt/XFEy67SFOleTit4/myFjaJ4q wSQLLhaFLOzd6Qan003DtbZ3c2Kt1edFSucwLlyGatrP+wu1Nm+uoA2TAXqQ9nE4 CtNynOrcXYlVSmByBUSVlRxyWX7Zol+X/k7bZiieZv7i/A5ALj7reEIGAp4jNbMp ZLLTsnaK9Qxg+woNFCjBqA4N9Xc16L4rNGf3SWWLkDw9toe+m5AN53Th+ykAy0+p 9wtLJysG6ovJAt8ITmwHEnv0lCqKWjoa6VhfxnjMV7RVw++okTDZAWe8eS7HQfa8 /OOXQY7/jTfbWD1EDwk98J5Zts+cMs9p -----END CERTIFICATE-----Generated at Sun Jan 25 15:34:05 2026 by rpki-client