This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft File: Y3kC4bqWiB1HLuyt-kW1V348HDE.mft (raw, json) Hash identifier: tYVGRVEUFSw/cFFSqGXp54rDWMGQPjyU6+j0YpImM98= Subject key identifier: 5F:11:64:E3:58:C5:F0:D3:23:DA:A2:E2:B4:73:BA:D8:DD:F5:B2:EC Authority key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 Certificate issuer: /CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft Manifest number: 0197 Signing time: Fri 23 Jan 2026 02:39:16 +0000 Manifest this update: Fri 23 Jan 2026 02:39:15 +0000 Manifest next update: Fri 30 Jan 2026 02:39:15 +0000 Files and hashes: 1: Y3kC4bqWiB1HLuyt-kW1V348HDE.crl (hash: ynrqA6h4Nk0NrOPaf+gM7KjANd/LZhI3a30J3V5NeNs=) 2: FF1FE402898011EEB3403779C4F9AE02.roa (hash: kfUd7cLCmHmQ/k7ENeRjEkFUrum5OXV/qc4Vt8EOcIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 02:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE524, serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Validity Not Before: Jan 23 02:39:15 2026 GMT Not After : Jan 30 02:39:15 2026 GMT Subject: CN=6972df53-fb3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:92:27:b8:6d:8d:44:73:72:6d:23:d8:15:bf: 49:74:73:01:22:30:1d:b9:64:c5:7d:93:55:06:bc: 60:c5:0e:5e:07:84:26:00:30:6c:48:4d:ca:34:07: c7:24:3b:41:8c:5d:fd:57:d3:0a:72:f5:b2:91:6a: 24:61:84:99:c9:b0:ba:5f:8e:8c:88:6a:73:fe:d9: 5b:49:5e:f6:bb:77:45:b4:42:d6:74:6b:a1:07:9c: 63:83:9e:55:4a:80:b5:9c:37:9d:b2:76:61:0c:88: 4b:ea:31:6e:9c:6c:58:4c:7a:a7:2e:18:2d:d2:97: a1:97:bd:4d:4d:11:21:7d:e5:c3:fb:e7:ed:80:a6: a4:8f:a9:b7:e5:05:f7:31:3b:d0:cb:4f:b3:38:f4: cc:5d:53:a5:59:2f:1d:47:08:d1:f1:a6:4d:05:4c: df:80:63:5e:6c:dc:00:55:f0:18:2a:7d:81:5e:08: 01:69:87:70:76:1a:6b:2c:ce:dc:5e:29:0d:06:6b: a4:ed:5c:9b:3b:7c:57:d7:90:67:1e:6a:cb:4a:cf: b4:ec:f6:6a:64:70:59:cc:37:a4:b5:ab:da:59:25: be:9e:4a:18:17:dc:7a:cd:95:dc:fd:0a:d1:a4:cd: 03:a8:ca:f9:76:bd:f1:b3:41:d3:99:08:72:11:70: 60:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:11:64:E3:58:C5:F0:D3:23:DA:A2:E2:B4:73:BA:D8:DD:F5:B2:EC X509v3 Authority Key Identifier: keyid:63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:66:c6:84:b0:8e:d7:20:0c:15:2e:ca:d3:7b:e0:71:de:0a: 2e:22:76:c2:95:26:9c:81:db:38:6d:e2:91:8f:a6:8e:b0:b6: 1d:7c:b9:41:89:d6:23:02:8e:98:13:ab:27:cd:0e:a0:ab:3a: 11:7a:f2:37:45:11:e8:a9:8c:7f:32:22:1e:9c:9c:26:24:cc: 08:b5:24:d3:c4:a8:95:2c:81:6b:07:0b:ac:0e:62:bc:94:a8: 84:ef:92:bf:86:82:62:27:bd:c1:fc:61:6d:fb:71:e9:ea:84: 3a:37:c1:8d:d5:22:6e:af:76:f8:76:3f:3e:b6:01:02:2c:ec: 02:22:83:56:8a:29:5b:ac:c8:fe:4b:3a:f6:94:b6:4f:27:c4: ca:60:df:2a:ab:ed:0f:94:ac:5f:52:5a:66:f2:4a:c7:3a:09: 45:92:da:07:a9:ff:16:a9:9a:6f:69:b5:c4:91:79:9a:98:6d: 21:c3:1a:0a:27:5e:06:f3:00:8a:5b:73:87:fd:10:be:d8:18: 15:ae:89:51:73:22:c4:59:fd:46:d4:b0:3b:40:5a:53:31:18: ba:42:a4:0e:dc:1e:2a:9e:91:76:77:77:02:4b:67:20:3d:6f: 55:de:3e:ba:d7:c9:49:83:ac:cc:31:04:82:c2:7f:bc:29:42: 75:cc:c0:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MjQxMTAvBgNVBAUTKDYzNzkwMkUxQkE5Njg4MUQ0NzJFRUNBREZBNDVCNTU3 N0UzQzFDMzEwHhcNMjYwMTIzMDIzOTE1WhcNMjYwMTMwMDIzOTE1WjAYMRYwFAYD VQQDDA02OTcyZGY1My1mYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJInuG2NRHNybSPYFb9JdHMBIjAduWTFfZNVBrxgxQ5eB4QmADBsSE3KNAfH JDtBjF39V9MKcvWykWokYYSZybC6X46MiGpz/tlbSV72u3dFtELWdGuhB5xjg55V SoC1nDedsnZhDIhL6jFunGxYTHqnLhgt0pehl71NTREhfeXD++ftgKakj6m35QX3 MTvQy0+zOPTMXVOlWS8dRwjR8aZNBUzfgGNebNwAVfAYKn2BXggBaYdwdhprLM7c XikNBmuk7VybO3xX15BnHmrLSs+07PZqZHBZzDektavaWSW+nkoYF9x6zZXc/QrR pM0DqMr5dr3xs0HTmQhyEXBg1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8RZONY xfDTI9qi4rRzutjd9bLsMB8GA1UdIwQYMBaAFGN5AuG6logdRy7srfpFtVd+PBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUyNC8wQzJDMkJENjg4 QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lCMUhMdXl0LWtXMVYzNDhI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kza0M0YnFXaUIxSEx1eXQta1cxVjM0OEhERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUyNC8wQzJDMkJENjg4QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lC MUhMdXl0LWtXMVYzNDhIREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7ZsaEsI7XIAwVLsrTe+Bx3gouInbClSacgds4beKRj6aOsLYdfLlB idYjAo6YE6snzQ6gqzoRevI3RRHoqYx/MiIenJwmJMwItSTTxKiVLIFrBwusDmK8 lKiE75K/hoJiJ73B/GFt+3Hp6oQ6N8GN1SJur3b4dj8+tgECLOwCIoNWiilbrMj+ Szr2lLZPJ8TKYN8qq+0PlKxfUlpm8krHOglFktoHqf8WqZpvabXEkXmamG0hwxoK J14G8wCKW3OH/RC+2BgVrolRcyLEWf1G1LA7QFpTMRi6QqQO3B4qnpF2d3cCS2cg PW9V3j6618lJg6zMMQSCwn+8KUJ1zMDh -----END CERTIFICATE-----Generated at Sun Jan 25 04:34:28 2026 by rpki-client