This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft File: Bjfls4xh34PrszAgk7tXbLMdmxA.mft (raw, json) Hash identifier: tu/7MBR2bhqpfldkkTM7CanTExwTowUcD7A37juOJ/U= Subject key identifier: 97:53:C8:44:F2:DB:D7:E1:A9:03:86:4D:A0:F7:35:68:99:9E:22:44 Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10 Certificate issuer: /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10 Certificate serial: 04F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft Manifest number: 1A0D Signing time: Sat 24 Jan 2026 16:33:46 +0000 Manifest this update: Sat 24 Jan 2026 16:33:46 +0000 Manifest next update: Sat 31 Jan 2026 16:33:46 +0000 Files and hashes: 1: Bjfls4xh34PrszAgk7tXbLMdmxA.crl (hash: UfXwxGvBgyvVD6RVU593AXq9VUJxn87LFD74YIzSApk=) 2: 2A53DA54332011EF89CABD61C4F9AE02.roa (hash: XAFmHRo+hO35GWVsWHHscFE/9w85d60jx9W3Sf7aA0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1268 (0x4f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10 Validity Not Before: Jan 24 16:33:46 2026 GMT Not After : Jan 31 16:33:46 2026 GMT Subject: CN=6974f46a-9c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ae:c6:34:89:a6:f2:98:fb:a7:22:51:6e:72: 87:fd:b9:28:e7:c6:44:a7:17:77:f0:f7:92:b7:4d: 2d:ec:38:6b:f3:58:b1:e5:35:cf:a0:bc:70:bb:e7: 46:5a:87:f8:9e:b6:37:54:c4:a4:fb:a9:93:46:b2: e8:11:28:9f:c7:a5:68:07:cb:a5:d8:5d:ac:0b:c7: bc:ba:3a:60:40:37:b6:70:f1:37:c2:d2:7d:ca:56: 4a:a1:01:96:30:6f:cf:4b:38:2a:4b:23:8d:ba:d0: 8c:d9:24:8f:4c:47:f6:bf:ff:ad:68:eb:d3:8e:b3: b5:2c:b8:4b:46:b0:7c:41:c3:dc:99:79:84:5f:bb: 2b:91:af:ff:b8:8e:c8:ca:dc:78:c1:99:12:69:97: 59:d3:0b:14:99:fc:93:ab:97:39:13:f9:6b:3a:40: 1a:44:ae:17:cd:e5:67:6d:55:9e:b9:65:ac:23:12: 42:2d:60:5e:4a:ec:56:7b:71:21:18:ac:67:98:55: 18:69:eb:c6:6f:06:fa:47:7e:e7:0c:6e:08:26:f4: ae:bc:6f:35:8a:9f:c5:62:05:59:1a:c4:4a:92:b8: 26:34:9e:1b:a9:a3:df:7f:f5:9e:e9:8a:9a:6c:42: a1:5a:03:af:a5:da:c4:4d:13:dc:a3:e8:17:95:27: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:53:C8:44:F2:DB:D7:E1:A9:03:86:4D:A0:F7:35:68:99:9E:22:44 X509v3 Authority Key Identifier: keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:ad:84:25:49:51:4d:c4:97:c8:92:bf:c3:2f:0b:aa:df:c8: 37:4a:8b:a9:48:44:24:49:f5:70:d8:fe:92:4c:c2:42:c8:83: d2:a4:2a:44:8b:8e:ef:44:33:00:82:a0:9b:ef:b9:ab:4e:28: b0:89:9c:55:98:30:12:14:b7:35:b2:1e:5e:d8:2c:38:71:5d: 94:1e:ee:c0:9e:79:64:98:dc:21:6c:4d:0b:43:13:04:f6:44: ea:22:42:ad:5c:e4:d9:a9:ac:48:64:9c:75:cf:48:0c:4e:3b: 36:ff:59:5f:3a:ce:05:7f:81:83:8a:54:58:52:b9:05:86:22: b5:37:5f:07:de:40:ea:4f:ae:dd:c0:73:75:6e:12:0e:60:a0: 93:64:f2:34:28:50:c5:9a:ee:fb:2a:01:d7:f3:24:64:55:cb: 53:6a:7b:b5:28:de:bb:39:95:7c:12:f3:d1:f1:f7:55:b7:03: 10:dd:9d:11:cd:56:a9:cf:df:75:ec:7f:bd:e5:a2:b1:db:04: 13:16:6f:a0:69:22:bf:b7:12:f3:be:59:bf:93:46:0d:c2:88: 5c:60:e4:53:47:da:34:8c:bc:4a:07:43:62:ae:f8:4d:8f:31: 94:3f:69:de:dc:16:e1:b3:21:a4:57:5b:fc:5c:69:c1:a2:98: 06:a9:89:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MjExMTAvBgNVBAUTKDA2MzdFNUIzOEM2MURGODNFQkIzMzAyMDkzQkI1NzZD QjMxRDlCMTAwHhcNMjYwMTI0MTYzMzQ2WhcNMjYwMTMxMTYzMzQ2WjAYMRYwFAYD VQQDDA02OTc0ZjQ2YS05YzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3a7GNImm8pj7pyJRbnKH/bko58ZEpxd38PeSt00t7Dhr81ix5TXPoLxwu+dG Wof4nrY3VMSk+6mTRrLoESifx6VoB8ul2F2sC8e8ujpgQDe2cPE3wtJ9ylZKoQGW MG/PSzgqSyONutCM2SSPTEf2v/+taOvTjrO1LLhLRrB8QcPcmXmEX7srka//uI7I ytx4wZkSaZdZ0wsUmfyTq5c5E/lrOkAaRK4XzeVnbVWeuWWsIxJCLWBeSuxWe3Eh GKxnmFUYaevGbwb6R37nDG4IJvSuvG81ip/FYgVZGsRKkrgmNJ4bqaPff/We6Yqa bEKhWgOvpdrETRPco+gXlSfX+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdTyETy 29fhqQOGTaD3NWiZniJEMB8GA1UdIwQYMBaAFAY35bOMYd+D67MwIJO7V2yzHZsQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw NTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0UHJzekFnazd0WGJMTWRt eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JqZmxzNHhoMzRQcnN6QWdrN3RYYkxNZG14QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0 UHJzekFnazd0WGJMTWRteEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhrYQlSVFNxJfIkr/DLwuq38g3SoupSEQkSfVw2P6STMJCyIPSpCpE i47vRDMAgqCb77mrTiiwiZxVmDASFLc1sh5e2Cw4cV2UHu7AnnlkmNwhbE0LQxME 9kTqIkKtXOTZqaxIZJx1z0gMTjs2/1lfOs4Ff4GDilRYUrkFhiK1N18H3kDqT67d wHN1bhIOYKCTZPI0KFDFmu77KgHX8yRkVctTanu1KN67OZV8EvPR8fdVtwMQ3Z0R zVapz9917H+95aKx2wQTFm+gaSK/txLzvlm/k0YNwohcYORTR9o0jLxKB0NirvhN jzGUP2ne3BbhsyGkV1v8XGnBopgGqYnz -----END CERTIFICATE-----Generated at Sun Jan 25 09:25:37 2026 by rpki-client