This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: qkG0U4cq6CySu9NCIQswjXsLtLj2uzAYn4qwfhRHTtM= Subject key identifier: 01:64:72:82:17:8F:6D:24:4F:CD:0B:1B:A5:A6:37:0B:38:18:28:0F Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0EF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0EE8 Signing time: Sat 24 Jan 2026 17:18:24 +0000 Manifest this update: Sat 24 Jan 2026 17:18:24 +0000 Manifest next update: Sat 31 Jan 2026 17:18:24 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: 0ux7q3cENwB5SsbMoMZ15reIDWqGVgU+mNcMk0e4z/w=) 2: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: HpSAa7XFiaGNFG3GQ/oBDendvmphyHVtYS6J+660tyc=) 3: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: aQnXnhdg8oX1nnoz3IdT+IsXlHOgRbi5z4h0+f1hayI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3833 (0xef9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: Jan 24 17:18:24 2026 GMT Not After : Jan 31 17:18:24 2026 GMT Subject: CN=6974fee0-9a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:24:a1:2b:da:e1:f2:e3:81:e8:6e:b1:e1:fe: 9a:bf:f4:db:be:f9:84:41:e4:d2:68:2a:80:88:32: 95:e6:df:dc:2f:c9:59:ba:0e:d5:83:d9:67:5d:a0: a6:c4:42:fc:91:a1:0b:f6:27:dd:4b:68:1f:57:75: 29:1e:68:ff:43:ba:0c:c2:ce:c7:0a:59:6e:ba:a4: 10:30:b9:94:4c:64:69:8b:10:5f:19:73:12:a4:05: d2:40:99:c7:a4:49:a4:4f:56:5c:1d:fa:6d:c4:0c: cd:ae:e3:b6:db:4b:e0:fd:e0:07:e7:06:15:7b:4b: 25:cd:97:63:02:46:80:c4:8b:47:e8:80:e4:b6:93: 1c:8f:24:8c:33:58:43:42:dd:e5:7b:65:13:18:a1: 8a:dd:69:f3:b0:35:4e:c3:3a:47:eb:11:cb:de:5f: 9c:7a:1c:70:e7:89:05:31:c1:6a:f2:0d:01:59:aa: 66:4b:a3:39:bb:80:8c:ab:2b:06:31:eb:fc:c0:f4: 02:e5:c2:37:26:32:d2:7f:f8:da:10:b0:74:df:90: 77:de:ae:1b:5b:c4:e2:4f:d9:f3:1a:98:e2:de:36: 7b:75:cc:1e:30:f9:ec:23:8e:74:8c:07:2e:26:d8: fa:a0:a7:52:2f:49:a1:08:36:d4:b2:0d:67:20:d7: 8f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:64:72:82:17:8F:6D:24:4F:CD:0B:1B:A5:A6:37:0B:38:18:28:0F X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:c9:bc:b4:9d:fa:04:da:45:15:98:38:84:5d:09:80:52:37: 15:3d:0b:8b:0a:57:07:eb:9e:0a:29:1e:45:66:87:4b:95:ea: 9e:5b:13:60:28:56:16:b1:f8:04:cd:7f:2f:78:9f:81:cd:86: 57:c1:75:22:59:e9:c4:56:10:6a:6b:08:a5:37:aa:ab:a5:cc: 08:b6:a0:1b:a4:0d:f3:c8:94:90:6a:bb:4c:73:25:ad:fe:49: f4:b9:b6:bd:64:43:a6:ee:1c:ab:74:02:09:b0:d3:58:1d:6a: c2:6a:d5:6c:d1:d1:c2:fb:45:42:b1:e1:06:46:84:c4:e4:d1: b1:49:9f:a5:59:b7:d0:5c:e5:27:9a:4e:39:2a:2b:41:5c:be: 75:f8:b3:ac:f4:eb:a1:60:bb:81:7a:f3:7d:a8:47:f7:9b:f7: 42:2c:9f:37:8d:5e:a4:2c:2a:0a:66:22:0c:97:84:eb:97:78: ee:2c:06:50:bb:05:42:ad:a2:4e:16:6a:c8:72:90:49:69:5d: ae:1f:3f:d1:78:b3:d4:c8:4c:70:b5:16:f8:dc:69:66:6f:65: a5:8e:a1:3a:c6:c2:8c:7f:74:9e:5e:6d:5a:c2:1b:1a:54:b9: a4:1a:80:39:e0:31:5a:09:e1:ce:89:df:57:12:b9:2d:10:f9: 1f:9c:f5:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjYwMTI0MTcxODI0WhcNMjYwMTMxMTcxODI0WjAYMRYwFAYD VQQDDA02OTc0ZmVlMC05YTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjSShK9rh8uOB6G6x4f6av/TbvvmEQeTSaCqAiDKV5t/cL8lZug7Vg9lnXaCm xEL8kaEL9ifdS2gfV3UpHmj/Q7oMws7HClluuqQQMLmUTGRpixBfGXMSpAXSQJnH pEmkT1ZcHfptxAzNruO220vg/eAH5wYVe0slzZdjAkaAxItH6IDktpMcjySMM1hD Qt3le2UTGKGK3WnzsDVOwzpH6xHL3l+cehxw54kFMcFq8g0BWapmS6M5u4CMqysG Mev8wPQC5cI3JjLSf/jaELB035B33q4bW8TiT9nzGpji3jZ7dcweMPnsI450jAcu Jtj6oKdSL0mhCDbUsg1nINePnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFkcoIX j20kT80LG6WmNws4GCgPMB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUyby0nfoE2kUVmDiEXQmAUjcVPQuLClcH654KKR5FZodLleqeWxNg KFYWsfgEzX8veJ+BzYZXwXUiWenEVhBqawilN6qrpcwItqAbpA3zyJSQartMcyWt /kn0uba9ZEOm7hyrdAIJsNNYHWrCatVs0dHC+0VCseEGRoTE5NGxSZ+lWbfQXOUn mk45KitBXL51+LOs9OuhYLuBevN9qEf3m/dCLJ83jV6kLCoKZiIMl4Trl3juLAZQ uwVCraJOFmrIcpBJaV2uHz/ReLPUyExwtRb43Glmb2WljqE6xsKMf3SeXm1awhsa VLmkGoA54DFaCeHOid9XErktEPkfnPUM -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:50 2026 by rpki-client