This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json) Hash identifier: yIzH8cAwEjU1FwBEOy0Ze6T3YffBvMrDwEiLdN5oQsQ= Subject key identifier: B2:20:19:CA:F9:5D:11:F3:92:6F:26:3E:D9:1C:B4:0C:96:E3:74:16 Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Certificate serial: 21EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft Manifest number: 21E5 Signing time: Sat 24 Jan 2026 15:43:20 +0000 Manifest this update: Sat 24 Jan 2026 15:43:20 +0000 Manifest next update: Sat 31 Jan 2026 15:43:20 +0000 Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: nPZhJ3WLvddVllCKphyH6XjagepZvI+H16PK2TjgAeU=) 2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: PxUOEDED+JHKJelWKhOvajOHx5KTZi4sFxCqv9/Wuds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8687 (0x21ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C77BD, serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Validity Not Before: Jan 24 15:43:20 2026 GMT Not After : Jan 31 15:43:20 2026 GMT Subject: CN=6974e898-1973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:70:1d:27:2b:97:fb:20:84:5e:5d:18:6e:cf: bd:28:9a:16:18:f2:0d:92:04:24:54:0e:25:e4:43: 21:b9:7c:e3:2f:c0:27:01:7b:de:54:bf:2d:85:93: 20:95:71:84:3c:e6:7b:b4:7c:ae:f0:73:48:55:16: 2c:a6:30:30:5a:65:8d:18:8a:6c:9f:73:b6:fc:ce: 04:14:16:12:cd:95:65:1b:d9:9d:3f:17:28:78:ba: 3f:dd:20:b8:d0:24:20:9c:83:41:ca:d9:fc:f7:70: 51:a2:7a:15:10:8e:45:54:a5:7d:a4:55:74:70:49: c6:52:cd:9c:2d:d8:ce:65:dd:e8:cf:6d:cc:6b:94: f2:f0:84:3d:dc:22:c4:e3:21:21:91:2e:e4:95:f4: f5:43:f5:27:38:90:e5:ed:9b:5c:6d:34:f0:6d:e8: 9e:69:43:ad:2e:44:93:48:96:d5:01:a0:b8:eb:8c: bc:d6:3e:f4:2b:0e:b5:ef:e4:b0:da:ce:d5:07:56: ef:b7:6a:0c:d5:9c:4d:16:87:c1:53:9b:5c:0d:d8: 49:df:93:e9:e0:aa:1a:6e:3b:b9:61:f3:63:1d:6c: 72:20:ce:64:f9:41:06:09:23:f8:a5:1c:f2:1a:bd: 4d:60:b5:56:68:59:2b:0a:eb:30:e2:cb:18:6e:33: a5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:20:19:CA:F9:5D:11:F3:92:6F:26:3E:D9:1C:B4:0C:96:E3:74:16 X509v3 Authority Key Identifier: keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:ba:ba:fe:00:ba:59:77:01:51:e6:eb:51:66:37:48:2a:2a: f0:d9:76:67:93:32:ff:d3:04:a5:55:79:4f:df:73:4d:ec:c9: 89:75:54:62:4f:87:95:a2:9a:63:d9:47:4b:78:e0:64:0b:c3: 72:42:14:f8:33:51:e9:cf:64:4a:a2:46:8b:95:99:9e:37:d8: d7:cf:f4:a9:3a:7d:e4:80:0e:82:f5:d3:0a:4e:f5:12:d9:37: a9:3f:02:e4:26:ba:ba:7e:93:71:28:56:e3:47:35:ff:e4:69: 14:b7:eb:09:7a:75:3d:a7:c0:e7:b2:e9:58:49:ff:0e:d9:b7: 36:4a:46:5d:4e:b4:73:ca:75:11:bd:78:db:95:b3:45:d9:9b: 56:80:43:80:a4:98:9c:32:ec:2a:f3:31:09:82:05:b3:11:7d: c5:97:6e:d9:18:87:bd:90:ed:c7:ed:59:bb:5b:80:b9:75:c1: 3c:5a:8e:26:f8:ba:b3:83:30:70:ff:f5:65:d2:09:91:88:a8: b6:fa:a2:26:fe:cf:1d:92:86:c3:8f:4e:21:91:95:4b:4a:57: ca:33:54:11:3b:35:55:1d:3d:df:50:a6:2e:6c:6e:45:07:c3: 17:52:e5:63:a7:a4:3e:a1:02:fe:fc:28:3b:d7:a4:69:25:ae: d7:fd:71:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3QkQxMTAvBgNVBAUTKEEzRUI3QzQzNTA2M0JDNTREMzU3M0Q4MURCREMxODcz OTg3NjYzRTAwHhcNMjYwMTI0MTU0MzIwWhcNMjYwMTMxMTU0MzIwWjAYMRYwFAYD VQQDDA02OTc0ZTg5OC0xOTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXAdJyuX+yCEXl0Ybs+9KJoWGPINkgQkVA4l5EMhuXzjL8AnAXveVL8thZMg lXGEPOZ7tHyu8HNIVRYspjAwWmWNGIpsn3O2/M4EFBYSzZVlG9mdPxcoeLo/3SC4 0CQgnINBytn893BRonoVEI5FVKV9pFV0cEnGUs2cLdjOZd3oz23Ma5Ty8IQ93CLE 4yEhkS7klfT1Q/UnOJDl7ZtcbTTwbeieaUOtLkSTSJbVAaC464y81j70Kw617+Sw 2s7VB1bvt2oM1ZxNFofBU5tcDdhJ35Pp4Koabju5YfNjHWxyIM5k+UEGCSP4pRzy Gr1NYLVWaFkrCusw4ssYbjOlTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIgGcr5 XRHzkm8mPtkctAyW43QWMB8GA1UdIwQYMBaAFKPrfENQY7xU01c9gdvcGHOYdmPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzdCRC8zODkzNzE5OERG NDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZGVFRWejJCMjl3WWM1aDJZ LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28tdDhRMUJqdkZUVFZ6MkIyOXdZYzVoMlktQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzdCRC8zODkzNzE5OERGNDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZG VFRWejJCMjl3WWM1aDJZLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBourr+ALpZdwFR5utRZjdIKirw2XZnkzL/0wSlVXlP33NN7MmJdVRi T4eVoppj2UdLeOBkC8NyQhT4M1Hpz2RKokaLlZmeN9jXz/SpOn3kgA6C9dMKTvUS 2TepPwLkJrq6fpNxKFbjRzX/5GkUt+sJenU9p8DnsulYSf8O2bc2SkZdTrRzynUR vXjblbNF2ZtWgEOApJicMuwq8zEJggWzEX3Fl27ZGIe9kO3H7Vm7W4C5dcE8Wo4m +LqzgzBw//Vl0gmRiKi2+qIm/s8dkobDj04hkZVLSlfKM1QROzVVHT3fUKYubG5F B8MXUuVjp6Q+oQL+/Cg716RpJa7X/XGk -----END CERTIFICATE-----Generated at Sun Jan 25 03:02:49 2026 by rpki-client