This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft File: tkP-swMnQhSPOvnDU5M41VSTcig.mft (raw, json) Hash identifier: sofaEuzIjtQmu6iiJ88sKuhHYN9/PPmLUHr65VO76QU= Subject key identifier: B3:2C:FA:F5:9D:5E:E7:92:F9:25:21:F2:6C:BF:05:14:4A:B7:47:A7 Authority key identifier: B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28 Certificate issuer: /CN=A91CD0DE/serialNumber=B643FEB3032742148F3AF9C3539338D554937228 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft Manifest number: 35 Signing time: Sun 25 Jan 2026 06:34:43 +0000 Manifest this update: Sun 25 Jan 2026 06:34:42 +0000 Manifest next update: Sun 01 Feb 2026 06:34:42 +0000 Files and hashes: 1: tkP-swMnQhSPOvnDU5M41VSTcig.crl (hash: bKvTCE65wOE8COIuOGoFkCecc9snSDJ8vjfL5F+4pRQ=) 2: 341BBBECA99411F093BBAA15C4F9AE02.roa (hash: TNOMyUTzIQDmtZMNg4RAepXI8EHziIAFioU9/cJC+ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD0DE, serialNumber=B643FEB3032742148F3AF9C3539338D554937228 Validity Not Before: Jan 25 06:34:42 2026 GMT Not After : Feb 1 06:34:42 2026 GMT Subject: CN=6975b982-7f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ce:f5:f4:a3:12:d1:a5:7f:ca:0f:aa:da:70: 83:22:07:a7:b5:8c:7d:86:d5:2b:32:a7:25:82:05: f2:a1:1f:e6:cc:69:aa:ff:ed:c6:75:9f:b1:51:14: 0f:9e:01:4c:f2:3c:8c:82:1d:cd:b9:c6:ff:5b:d0: 93:46:0c:03:56:6b:c6:77:e6:a8:db:ec:99:7c:78: ee:4a:1b:97:f1:da:7a:73:ec:7a:7d:94:a9:23:bb: 4b:62:0a:ad:27:cb:33:46:b7:ea:2c:7b:e0:5f:cc: 5e:fd:81:cc:5e:68:ae:d7:a9:8e:16:e1:16:7a:b4: b5:1e:10:fb:2d:96:3d:a0:0b:b7:e0:c0:f0:67:50: a1:61:f0:d4:df:7f:22:99:d2:6b:ac:3d:b1:03:9f: c2:16:c1:a6:e4:f3:54:1d:a0:10:03:d0:58:b6:94: 30:d8:14:a4:a5:44:37:37:75:13:b8:31:c6:a0:fc: e5:c0:d5:6c:69:82:34:cf:fb:4d:d3:a7:2a:4d:57: b1:02:5e:01:3a:d7:8c:30:a3:f3:f7:f1:00:ea:e0: d1:6e:66:fa:5a:ac:1a:c5:a8:29:3e:77:2f:16:30: 02:f8:b4:eb:67:1a:12:52:5d:9c:da:8f:ce:9c:30: 25:c6:38:15:ae:06:8e:e8:25:d4:6b:c6:a9:75:21: 07:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2C:FA:F5:9D:5E:E7:92:F9:25:21:F2:6C:BF:05:14:4A:B7:47:A7 X509v3 Authority Key Identifier: keyid:B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:61:ed:42:10:0c:68:76:e4:98:8e:23:27:76:19:c8:b6:ef: 46:54:83:94:80:db:76:d7:d4:ab:b7:82:5d:d1:9f:c5:f5:4c: 3d:6c:86:26:fc:cb:3b:81:c8:58:15:44:9a:32:45:8a:ef:a4: 33:6c:3c:c0:42:1f:84:a5:80:31:cd:e2:71:be:8a:03:45:42: 1d:42:da:21:f0:84:4e:ec:8c:90:02:29:f8:fc:51:56:94:39: ed:a1:f3:43:c9:7c:b3:de:63:c1:48:49:c9:fc:3d:85:68:5c: 61:b0:c9:21:98:2c:6b:62:ed:42:40:c3:b9:bd:ba:04:b9:b5: e6:ad:bf:61:ec:b6:32:3f:c5:f7:e1:68:db:34:55:c9:fe:44: 1b:71:ab:f9:93:df:ac:69:31:b7:28:8c:b0:29:f3:2c:02:2c: b2:01:97:f8:50:4e:50:99:7a:94:41:b7:83:86:6c:b4:2f:94: 91:2a:ab:f5:45:85:13:b7:56:e3:42:f6:a6:2f:07:1b:b9:15: b1:35:f4:58:76:8e:63:09:79:97:72:28:81:78:2f:7a:40:82: 52:99:2b:af:07:19:76:f5:4a:ff:e1:a1:a2:cb:2e:4e:35:da: 7e:c6:8d:75:f6:59:82:a0:6e:1c:8d:d6:70:8d:27:d4:8f:d9: 7c:ea:c1:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDBERTExMC8GA1UEBRMoQjY0M0ZFQjMwMzI3NDIxNDhGM0FGOUMzNTM5MzM4RDU1 NDkzNzIyODAeFw0yNjAxMjUwNjM0NDJaFw0yNjAyMDEwNjM0NDJaMBgxFjAUBgNV BAMMDTY5NzViOTgyLTdmNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCozvX0oxLRpX/KD6racIMiB6e1jH2G1SsypyWCBfKhH+bMaar/7cZ1n7FRFA+e AUzyPIyCHc25xv9b0JNGDANWa8Z35qjb7Jl8eO5KG5fx2npz7Hp9lKkju0tiCq0n yzNGt+ose+BfzF79gcxeaK7XqY4W4RZ6tLUeEPstlj2gC7fgwPBnUKFh8NTffyKZ 0musPbEDn8IWwabk81QdoBAD0Fi2lDDYFKSlRDc3dRO4Mcag/OXA1WxpgjTP+03T pypNV7ECXgE614wwo/P38QDq4NFuZvparBrFqCk+dy8WMAL4tOtnGhJSXZzaj86c MCXGOBWuBo7oJdRrxql1IQffAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsyz69Z1e 55L5JSHybL8FFEq3R6cwHwYDVR0jBBgwFoAUtkP+swMnQhSPOvnDU5M41VSTcigw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMERFLzRGNzY5RDU4QTk4 RjExRjBCMUZBNTA2NkM0RjlBRTAyL3RrUC1zd01uUWhTUE92bkRVNU00MVZTVGNp Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdGtQLXN3TW5RaFNQT3ZuRFU1TTQxVlNUY2lnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MERFLzRGNzY5RDU4QTk4RjExRjBCMUZBNTA2NkM0RjlBRTAyL3RrUC1zd01uUWhT UE92bkRVNU00MVZTVGNpZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH9h7UIQDGh25JiOIyd2Gci270ZUg5SA23bX1Ku3gl3Rn8X1TD1shib8 yzuByFgVRJoyRYrvpDNsPMBCH4SlgDHN4nG+igNFQh1C2iHwhE7sjJACKfj8UVaU Oe2h80PJfLPeY8FIScn8PYVoXGGwySGYLGti7UJAw7m9ugS5teatv2HstjI/xffh aNs0Vcn+RBtxq/mT36xpMbcojLAp8ywCLLIBl/hQTlCZepRBt4OGbLQvlJEqq/VF hRO3VuNC9qYvBxu5FbE19Fh2jmMJeZdyKIF4L3pAglKZK68HGXb1Sv/hoaLLLk41 2n7GjXX2WYKgbhyN1nCNJ9SP2XzqweQ= -----END CERTIFICATE-----Generated at Sun Jan 25 11:52:29 2026 by rpki-client