This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft File: 3CH4ZzeyOX3SsmCej7QGhuPI92E.mft (raw, json) Hash identifier: coHLkRGC1hdScgBIQcU+HzaAi+o9h84zxJ4niwZ2qMw= Subject key identifier: 6D:6E:7F:80:52:52:EF:BA:EB:5F:C4:7E:25:91:D3:FE:5E:86:67:C7 Authority key identifier: DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 Certificate issuer: /CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Certificate serial: 07FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft Manifest number: 07F7 Signing time: Sat 24 Jan 2026 20:29:36 +0000 Manifest this update: Sat 24 Jan 2026 20:29:35 +0000 Manifest next update: Sat 31 Jan 2026 20:29:35 +0000 Files and hashes: 1: 3CH4ZzeyOX3SsmCej7QGhuPI92E.crl (hash: HdKJYpGEcsRMpg8jR/LuHI4At4eUlgGq7ncHLhKF2Cw=) 2: 9F5F0EC6135911EBBC97C718C4F9AE02.roa (hash: imNkq8XQxZVZMsDU3mPUK40x8JASLF6aPVu+y75IcBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C799C, serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Validity Not Before: Jan 24 20:29:35 2026 GMT Not After : Jan 31 20:29:35 2026 GMT Subject: CN=69752bb0-2f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:78:f4:45:e9:3b:c9:25:73:c8:0c:55:af: f0:7c:be:a9:28:d5:54:06:a4:c1:06:4f:59:1b:ca: b5:99:1a:2e:77:44:d3:e9:9e:c8:97:eb:44:6d:da: 7f:0b:fd:22:df:6a:c8:ed:ae:b3:2e:ba:b2:46:80: a4:b8:2a:8a:88:a5:e6:1e:d3:00:9f:6d:78:2e:66: 6f:de:b4:85:9d:be:1b:02:eb:15:2c:71:75:e5:6c: e0:8b:57:74:26:cc:ab:22:1c:f8:c2:7e:4b:5a:24: b0:13:e0:0d:f5:2f:bc:46:2f:b9:18:1f:7d:62:9d: 60:11:ca:22:47:d3:60:83:1f:23:71:ad:04:2a:f7: 34:66:1a:92:f7:db:19:7d:28:fc:22:71:b1:2c:e7: b9:a5:bc:77:0e:ce:25:97:18:47:41:d0:51:b5:ae: 4c:e1:31:32:b7:3b:59:16:50:56:6e:bb:d9:e2:a6: 85:96:10:b2:d3:32:58:87:e6:f3:5a:cb:84:1c:15: 8b:f1:73:d1:08:c0:27:b2:be:d5:4e:54:be:02:cf: 63:50:4e:a6:22:df:f3:51:0d:12:33:97:69:55:14: 9b:d3:6f:5e:c6:bb:0a:27:b8:5f:45:6b:7e:72:bd: 79:ef:9f:95:07:2e:4e:3f:f5:38:c5:90:ab:00:8c: 40:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6E:7F:80:52:52:EF:BA:EB:5F:C4:7E:25:91:D3:FE:5E:86:67:C7 X509v3 Authority Key Identifier: keyid:DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:cc:2e:09:e2:62:e9:ee:55:b6:f3:3b:f0:67:a2:bb:1f:29: b6:16:49:fd:3e:22:92:40:b3:ea:af:b7:0e:14:42:03:58:5c: 35:f6:f4:13:0c:71:47:9b:e4:52:3a:05:fe:5a:67:5a:4f:7f: 43:1e:c9:a8:a4:72:c9:32:c0:79:d5:cc:27:bf:01:cc:06:df: b1:ad:9e:c4:42:9b:2b:06:36:c9:2a:79:35:75:4a:c4:0e:09: 7a:ea:cb:36:80:6a:9e:e0:fd:c9:a9:a6:0a:25:72:a7:cc:c3: 39:80:ba:08:97:fe:1d:dd:1f:b2:be:3d:02:4a:3e:53:8e:70: 54:ad:b3:a6:1f:63:ac:6d:3d:21:31:1d:a3:a3:0c:53:28:f3: f4:3e:1d:ca:24:d4:1f:23:82:40:9d:c2:54:b3:96:72:07:c6: 50:87:32:83:7d:71:4a:e0:30:a6:ef:6d:1d:b5:ad:79:69:17: 2d:d7:0b:91:4e:1f:3a:7f:c5:7f:bb:51:f1:c3:b4:55:ac:26: 7b:42:59:8b:93:26:fd:9e:87:93:cd:d7:9e:83:fd:f6:17:07: ec:f4:d2:2a:b9:b8:bc:c1:c1:db:61:0f:bb:90:f3:3a:60:5c: 9c:fe:3b:b0:19:cc:2d:84:c2:38:f0:b1:c3:1d:0d:70:fe:7c: 26:09:62:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx Qzc5OUMxMTAvBgNVBAUTKERDMjFGODY3MzdCMjM5N0REMkIyNjA5RThGQjQwNjg2 RTNDOEY3NjEwHhcNMjYwMTI0MjAyOTM1WhcNMjYwMTMxMjAyOTM1WjAYMRYwFAYD VQQDDA02OTc1MmJiMC0yZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtJ49EXpO8klc8gMVa/wfL6pKNVUBqTBBk9ZG8q1mRoud0TT6Z7Il+tEbdp/ C/0i32rI7a6zLrqyRoCkuCqKiKXmHtMAn214LmZv3rSFnb4bAusVLHF15Wzgi1d0 JsyrIhz4wn5LWiSwE+AN9S+8Ri+5GB99Yp1gEcoiR9Nggx8jca0EKvc0ZhqS99sZ fSj8InGxLOe5pbx3Ds4llxhHQdBRta5M4TEytztZFlBWbrvZ4qaFlhCy0zJYh+bz WsuEHBWL8XPRCMAnsr7VTlS+As9jUE6mIt/zUQ0SM5dpVRSb029exrsKJ7hfRWt+ cr1575+VBy5OP/U4xZCrAIxAvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1uf4BS Uu+661/EfiWR0/5ehmfHMB8GA1UdIwQYMBaAFNwh+Gc3sjl90rJgno+0BobjyPdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5Qy9BMkRGQjMzNjEz NTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9YM1NzbUNlajdRR2h1UEk5 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDSDRaemV5T1gzU3NtQ2VqN1FHaHVQSTkyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5Qy9BMkRGQjMzNjEzNTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9Y M1NzbUNlajdRR2h1UEk5MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCczC4J4mLp7lW28zvwZ6K7Hym2Fkn9PiKSQLPqr7cOFEIDWFw19vQT DHFHm+RSOgX+WmdaT39DHsmopHLJMsB51cwnvwHMBt+xrZ7EQpsrBjbJKnk1dUrE Dgl66ss2gGqe4P3JqaYKJXKnzMM5gLoIl/4d3R+yvj0CSj5TjnBUrbOmH2OsbT0h MR2jowxTKPP0Ph3KJNQfI4JAncJUs5ZyB8ZQhzKDfXFK4DCm720dta15aRct1wuR Th86f8V/u1Hxw7RVrCZ7QlmLkyb9noeTzdeeg/32Fwfs9NIqubi8wcHbYQ+7kPM6 YFyc/juwGcwthMI48LHDHQ1w/nwmCWLY -----END CERTIFICATE-----Generated at Sun Jan 25 17:04:37 2026 by rpki-client