This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft File: wsFz12JIhbwL1vwZPvvO6VQ_okM.mft (raw, json) Hash identifier: 3BJO8ulzatiU8wDOzvgDPUSdKQMFeT7IlE3rl8nLLIo= Subject key identifier: 22:45:03:BB:C7:1C:10:73:C2:A5:1F:5F:0B:5B:DD:47:60:DC:C9:D9 Authority key identifier: C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43 Certificate issuer: /CN=A91C8DF1/serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft Manifest number: 35 Signing time: Fri 23 Jan 2026 06:33:06 +0000 Manifest this update: Fri 23 Jan 2026 06:33:06 +0000 Manifest next update: Fri 30 Jan 2026 06:33:06 +0000 Files and hashes: 1: wsFz12JIhbwL1vwZPvvO6VQ_okM.crl (hash: fQHbNFZt/EGYnJmvHRY8wAdnmCsFJFV7bwwOkBM/q4A=) 2: BD37307CAAD011F0ACA9F95DC4F9AE02.roa (hash: EBR7I5Emy01zmCBxXGGOXl37lY5pYBdqwHQoDpK1N3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8DF1, serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243 Validity Not Before: Jan 23 06:33:06 2026 GMT Not After : Jan 30 06:33:06 2026 GMT Subject: CN=69731622-da34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:61:6c:6a:9e:a4:26:ba:61:78:30:f2:e5:58: 7c:e6:73:80:2a:4f:1e:6f:3b:fe:90:52:d6:c4:57: 1f:55:8f:6d:f4:77:30:97:c9:27:36:78:90:7b:a4: c7:01:ab:77:ae:e1:5a:51:7a:b8:d5:84:0a:44:7d: 21:62:60:e7:0e:ee:0c:70:ee:cb:c4:3d:51:f7:2c: 3e:9c:86:4a:bd:31:12:2f:06:bf:a1:22:60:1b:97: bb:3a:67:29:71:2e:a5:07:9c:1a:56:b4:f6:ba:d4: e4:ca:d3:55:6b:b5:3b:d2:5d:48:b0:44:f9:14:65: a9:83:5b:93:bf:ae:4d:9c:70:f3:e3:2e:80:5e:bb: d9:d1:01:b5:23:be:f7:60:cb:e4:75:75:bd:c2:2a: 22:84:eb:4a:35:84:b0:4c:27:96:f2:51:c8:44:5b: c3:8d:53:61:39:da:ee:3a:16:21:0c:d5:0d:18:18: 36:4a:55:0e:89:4f:86:33:a0:08:90:d1:7a:be:5e: d1:4c:c8:e6:3f:88:e5:c2:f9:e7:08:a2:9f:2f:9f: b4:ee:69:b5:55:eb:35:d3:f1:57:19:f1:e0:0f:97: f4:ca:fc:61:51:0e:82:a2:63:b2:b6:c8:47:4d:00: 99:99:e7:df:b2:b2:96:5e:69:97:aa:e3:f1:4b:0a: 8b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:45:03:BB:C7:1C:10:73:C2:A5:1F:5F:0B:5B:DD:47:60:DC:C9:D9 X509v3 Authority Key Identifier: keyid:C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:1a:ff:f4:7d:c7:77:40:d6:49:53:44:bc:8a:4f:ef:e2:a4: 15:9b:25:d3:d7:f8:16:32:f8:e0:2d:a4:5f:ce:db:32:f5:38: c0:46:8c:59:f6:12:b7:87:a6:61:59:6d:0b:3b:92:89:dc:8a: fb:7f:09:bd:70:a9:b4:94:b6:81:2b:8c:52:27:66:85:dc:b8: dc:e7:5d:50:2a:6e:d9:9b:c9:95:aa:02:7a:44:bb:ab:89:22: 53:84:65:63:67:82:b7:9a:63:8c:88:6d:26:cd:24:12:96:cc: 6d:39:61:13:ee:3a:26:da:5f:6a:b9:88:38:74:00:26:02:09: c0:bf:45:b3:c2:2d:c5:20:4e:44:5c:f2:bd:d6:9a:f5:26:70: b9:d9:36:72:e7:45:74:0c:50:7f:cb:2d:72:5d:f4:32:eb:5d: 63:f4:4a:d0:5c:71:5b:bf:75:d8:4e:67:8e:96:39:42:3a:dd: 53:b4:68:51:de:71:b6:85:60:16:92:13:ee:ae:f3:72:8a:0a: 8b:2f:33:9b:7e:84:0c:d6:8c:02:7d:ea:aa:cc:3d:33:88:f3: 2b:d9:75:24:9a:db:cc:19:3a:a6:55:79:08:04:1d:6d:41:f1: 8b:e7:27:1a:3b:57:6a:4a:4f:c7:51:5e:4a:66:98:ad:3e:4d: 20:dd:48:bb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OERGMTExMC8GA1UEBRMoQzJDMTczRDc2MjQ4ODVCQzBCRDZGQzE5M0VGQkNFRTk1 NDNGQTI0MzAeFw0yNjAxMjMwNjMzMDZaFw0yNjAxMzAwNjMzMDZaMBgxFjAUBgNV BAMMDTY5NzMxNjIyLWRhMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTYWxqnqQmumF4MPLlWHzmc4AqTx5vO/6QUtbEVx9Vj230dzCXySc2eJB7pMcB q3eu4VpRerjVhApEfSFiYOcO7gxw7svEPVH3LD6chkq9MRIvBr+hImAbl7s6Zylx LqUHnBpWtPa61OTK01VrtTvSXUiwRPkUZamDW5O/rk2ccPPjLoBeu9nRAbUjvvdg y+R1db3CKiKE60o1hLBMJ5byUchEW8ONU2E52u46FiEM1Q0YGDZKVQ6JT4YzoAiQ 0Xq+XtFMyOY/iOXC+ecIop8vn7TuabVV6zXT8VcZ8eAPl/TK/GFRDoKiY7K2yEdN AJmZ59+yspZeaZeq4/FLCovxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIkUDu8cc EHPCpR9fC1vdR2DcydkwHwYDVR0jBBgwFoAUwsFz12JIhbwL1vwZPvvO6VQ/okMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4REYxL0U2MTdBRDkyQUFD RjExRjBCQjExRkI1QkM0RjlBRTAyL3dzRnoxMkpJaGJ3TDF2d1pQdnZPNlZRX29r TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd3NGejEySkloYndMMXZ3WlB2dk82VlFfb2tNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 REYxL0U2MTdBRDkyQUFDRjExRjBCQjExRkI1QkM0RjlBRTAyL3dzRnoxMkpJaGJ3 TDF2d1pQdnZPNlZRX29rTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJca//R9x3dA1klTRLyKT+/ipBWbJdPX+BYy+OAtpF/O2zL1OMBGjFn2 EreHpmFZbQs7koncivt/Cb1wqbSUtoErjFInZoXcuNznXVAqbtmbyZWqAnpEu6uJ IlOEZWNngreaY4yIbSbNJBKWzG05YRPuOibaX2q5iDh0ACYCCcC/RbPCLcUgTkRc 8r3WmvUmcLnZNnLnRXQMUH/LLXJd9DLrXWP0StBccVu/ddhOZ46WOUI63VO0aFHe cbaFYBaSE+6u83KKCosvM5t+hAzWjAJ96qrMPTOI8yvZdSSa28wZOqZVeQgEHW1B 8YvnJxo7V2pKT8dRXkpmmK0+TSDdSLs= -----END CERTIFICATE-----Generated at Sun Jan 25 02:50:55 2026 by rpki-client