This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft File: WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft (raw, json) Hash identifier: GYdsx1GOArL3FtClMRHK99M2LGWGorIpOxJsdr6fg/s= Subject key identifier: AB:12:33:31:AE:BF:61:FE:E9:5B:AA:DA:18:80:DC:83:0B:3D:48:D7 Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 Certificate issuer: /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft Manifest number: 0243 Signing time: Sat 24 Jan 2026 16:36:09 +0000 Manifest this update: Sat 24 Jan 2026 16:36:09 +0000 Manifest next update: Sat 31 Jan 2026 16:36:09 +0000 Files and hashes: 1: WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl (hash: x5wzakUlMVOcEBZMhJzXTadaKPTKmHGtmsFVPZ7/3XY=) 2: 04594232DEA011EE91181415C4F9AE02.roa (hash: ux/yn18OibC6Db2VOykrM0n0NcvF/7PYrwCoPjjFpC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Validity Not Before: Jan 24 16:36:09 2026 GMT Not After : Jan 31 16:36:09 2026 GMT Subject: CN=6974f4f9-f094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:01:62:5c:83:b1:50:e3:75:93:06:d1:f0:c8: 55:90:2e:37:d0:2f:c2:ca:6b:05:7c:3e:32:3d:4b: 82:9e:b3:59:1e:49:e5:76:dc:c9:89:a4:00:b0:04: b9:78:b0:8c:de:c3:a5:5f:9b:dc:49:42:95:33:9f: ec:d3:75:3a:95:6a:72:de:eb:af:39:95:0c:3c:4b: 82:3a:6e:67:cf:83:cb:7f:5d:06:2e:a5:ff:b2:c6: b3:a5:10:a3:25:2a:3b:2f:cc:83:53:fd:bd:ec:0e: b4:b8:5c:9f:1f:60:c7:7f:7e:e5:e4:96:e8:70:86: 76:e3:77:26:c5:77:34:09:c0:00:b4:0e:00:01:ed: 98:87:01:cb:af:ad:e2:d9:e6:96:78:62:de:fd:2a: 7e:2f:5b:ef:00:26:b3:00:3e:5a:da:76:c9:5e:fd: 82:0d:cc:3a:68:52:33:7b:55:14:2b:b7:53:70:e5: 36:4a:05:cc:3b:4c:6f:e5:04:f9:8e:08:9c:fd:2d: 18:cf:45:48:b9:5c:31:66:d9:56:4a:fe:76:c9:6b: 45:a3:53:3f:ef:4b:5c:1d:ab:6b:29:4a:13:83:db: 01:5f:ef:63:c1:ea:29:a0:59:06:1f:45:9e:76:5d: 17:74:62:3c:4a:21:5b:3e:d0:fc:21:bb:6a:8e:d6: 46:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:12:33:31:AE:BF:61:FE:E9:5B:AA:DA:18:80:DC:83:0B:3D:48:D7 X509v3 Authority Key Identifier: keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:9d:96:f4:79:ab:5b:cb:1b:1c:7d:9d:ed:19:d6:49:0e:36: f9:8f:bd:70:93:05:8d:9f:58:c0:f7:c0:9b:37:6b:9d:35:80: 79:78:b2:51:d3:e2:e0:b5:0a:bb:34:5b:1a:39:f0:15:8b:6a: c3:bc:2f:17:04:70:f9:29:5f:65:96:67:97:a9:ce:a4:2a:6e: 0a:b3:28:3b:64:b7:41:fe:6b:e3:63:2b:43:ec:1c:02:c7:37: 6b:46:04:3f:fb:04:82:b3:75:e6:00:e0:ba:58:06:14:ad:8f: 3d:39:e3:f0:e4:be:31:d1:e2:22:7f:42:66:4d:07:0c:54:2c: 47:20:aa:99:54:ac:ca:c7:b0:4b:4f:e0:0d:3b:1e:95:87:e7: 57:07:ce:f5:68:9b:0b:13:dd:f3:4e:97:76:a7:a3:f7:28:9b: 01:7d:e7:e1:a7:88:15:ac:79:12:c1:9a:6c:d1:53:2a:5c:cf: 26:38:8e:17:b9:39:ec:f0:fe:15:78:33:77:c1:3f:22:87:5a: b3:34:52:97:13:f6:bc:08:95:30:94:79:a2:ef:8a:ef:f5:70: ce:29:18:cb:bf:cc:96:fd:4a:d1:23:79:6f:73:57:c2:d2:26: 70:3c:35:da:7d:fb:02:97:f2:6e:07:c4:89:ca:b4:40:cb:e1: 33:22:ca:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKDU4MEU0NjZCN0Q0RkE4NjQ5RDJFMEIyNzM3NUVBMjg2 QzZDNTQ1ODQwHhcNMjYwMTI0MTYzNjA5WhcNMjYwMTMxMTYzNjA5WjAYMRYwFAYD VQQDDA02OTc0ZjRmOS1mMDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAFiXIOxUON1kwbR8MhVkC430C/CymsFfD4yPUuCnrNZHknldtzJiaQAsAS5 eLCM3sOlX5vcSUKVM5/s03U6lWpy3uuvOZUMPEuCOm5nz4PLf10GLqX/ssazpRCj JSo7L8yDU/297A60uFyfH2DHf37l5JbocIZ243cmxXc0CcAAtA4AAe2YhwHLr63i 2eaWeGLe/Sp+L1vvACazAD5a2nbJXv2CDcw6aFIze1UUK7dTcOU2SgXMO0xv5QT5 jgic/S0Yz0VIuVwxZtlWSv52yWtFo1M/70tcHatrKUoTg9sBX+9jweopoFkGH0We dl0XdGI8SiFbPtD8IbtqjtZGrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsSMzGu v2H+6Vuq2hiA3IMLPUjXMB8GA1UdIwQYMBaAFFgORmt9T6hknS4LJzdeoobGxUWE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS8zMjZFQjBCNDhE RUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFHU2RMZ3NuTjE2aWhzYkZS WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1dBNUdhMzFQcUdTZExnc25OMTZpaHNiRlJZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS8zMjZFQjBCNDhERUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFH U2RMZ3NuTjE2aWhzYkZSWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJnZb0eatbyxscfZ3tGdZJDjb5j71wkwWNn1jA98CbN2udNYB5eLJR 0+LgtQq7NFsaOfAVi2rDvC8XBHD5KV9llmeXqc6kKm4Ksyg7ZLdB/mvjYytD7BwC xzdrRgQ/+wSCs3XmAOC6WAYUrY89OePw5L4x0eIif0JmTQcMVCxHIKqZVKzKx7BL T+ANOx6Vh+dXB871aJsLE93zTpd2p6P3KJsBfefhp4gVrHkSwZps0VMqXM8mOI4X uTns8P4VeDN3wT8ih1qzNFKXE/a8CJUwlHmi74rv9XDOKRjLv8yW/UrRI3lvc1fC 0iZwPDXaffsCl/JuB8SJyrRAy+EzIsrg -----END CERTIFICATE-----Generated at Sun Jan 25 20:35:44 2026 by rpki-client