This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft File: SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft (raw, json) Hash identifier: xr7KX88N8QseFNMGVxyp0AXijYDUHLwknMjWKC7Cs9A= Subject key identifier: BA:3B:C7:21:21:4F:1E:3F:DB:81:9E:21:C2:0D:2D:41:4E:8C:F5:77 Authority key identifier: 4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 Certificate issuer: /CN=A91CF364/serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Certificate serial: 09AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft Manifest number: 09A6 Signing time: Sat 24 Jan 2026 19:26:08 +0000 Manifest this update: Sat 24 Jan 2026 19:26:08 +0000 Manifest next update: Sat 31 Jan 2026 19:26:08 +0000 Files and hashes: 1: SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl (hash: Ya8bM6yyuxEC5CgNApedRqRHgjqj06HPjUIIm3SX2xo=) 2: 1DEAACDA9F8511EABAA10F3BC4F9AE02.roa (hash: SCNejdxnpcaaKKmMwjhiNM0xWAEADnWJttQDspq42Vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2477 (0x9ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF364, serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Validity Not Before: Jan 24 19:26:08 2026 GMT Not After : Jan 31 19:26:08 2026 GMT Subject: CN=69751cd0-6df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:43:c8:87:83:65:0e:be:d6:fb:3d:27:da:40: d2:06:40:b7:eb:2a:4c:61:dd:3d:08:1e:4a:e4:ae: d3:8d:b8:a0:b2:5e:d4:35:fe:ba:f5:59:93:91:36: 3d:e1:e9:69:10:96:91:8a:81:e9:f3:ce:6d:c9:ce: c4:43:6c:93:11:2d:0d:b8:fc:75:7b:94:1e:71:f4: 92:0a:84:1e:ff:4b:5b:b4:fe:32:0b:98:6d:67:72: 39:1f:29:78:9b:b5:de:54:ff:26:52:ce:60:3d:34: d5:d5:54:7f:fe:cd:d5:9c:bb:4b:aa:3c:11:4d:fb: f9:33:ff:22:b3:41:22:7e:55:79:c6:d8:f2:bf:de: 10:c0:66:3f:3a:b3:1b:ad:35:72:9b:29:a0:03:58: 2d:ce:79:e0:78:92:79:af:fa:54:8b:53:9f:6a:51: 0c:a4:ce:aa:ca:fb:aa:ef:b4:18:ed:4e:bf:97:c4: a3:6e:1e:e8:8a:59:5d:67:e0:80:58:71:e6:5f:5d: a1:70:4a:af:52:27:7b:ef:d0:18:d2:15:9f:ac:be: 0d:cb:a1:3d:75:c8:41:23:24:2d:77:db:d9:1e:cd: 77:aa:a2:8a:40:cb:1d:06:99:45:99:49:4a:40:76: be:cc:f8:83:b5:b1:c1:a9:4a:a0:ea:bc:09:b7:01: 77:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3B:C7:21:21:4F:1E:3F:DB:81:9E:21:C2:0D:2D:41:4E:8C:F5:77 X509v3 Authority Key Identifier: keyid:4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:f6:09:99:e8:cb:0b:b3:3e:35:d5:79:9b:08:19:7f:85:01: 9d:04:c6:f0:cb:b0:2f:01:e3:70:72:ee:2b:79:9c:ae:d9:20: d5:8a:04:97:5d:8e:ed:ca:2c:cf:2c:3a:de:4b:66:f5:22:58: ed:f3:74:2d:d4:29:65:cd:0f:80:65:44:f6:11:14:64:e8:5f: 19:dd:a0:72:84:bc:2b:73:64:40:a0:ef:f2:a7:0b:60:aa:68: fb:18:c9:f0:16:de:22:34:f2:ed:41:8b:54:02:70:fd:15:2d: cc:b6:66:fc:4f:99:10:9d:40:df:80:71:56:e0:c0:1d:68:9d: db:85:2f:8b:9f:ac:64:30:07:78:0e:11:ef:70:f5:50:ea:1b: a1:d4:ba:9f:ac:cd:e6:dc:e6:bb:e5:16:dd:33:98:a6:02:87: 62:26:e4:d4:5d:b7:de:d4:8c:91:6b:d2:7f:45:65:0d:18:4d: 73:64:e1:d7:df:ad:a3:4b:52:90:d1:41:4c:db:0f:e3:58:af: 26:6f:89:c1:5f:2b:4f:e5:38:2e:56:41:2f:ab:5b:0d:56:2b: 5f:2f:9b:b0:9c:8f:de:bb:75:b1:85:6e:af:c0:f4:c0:52:9b: 36:36:d5:e2:6f:56:57:cc:2f:53:b3:4c:8f:fc:59:7a:ce:4a: 6e:1a:97:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YzNjQxMTAvBgNVBAUTKDRBNzNCMTZEMkVFOUU5Q0Q0QzNGQzBCRDYxMDkxQzQ4 OTA1M0Q0MzYwHhcNMjYwMTI0MTkyNjA4WhcNMjYwMTMxMTkyNjA4WjAYMRYwFAYD VQQDDA02OTc1MWNkMC02ZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UPIh4NlDr7W+z0n2kDSBkC36ypMYd09CB5K5K7Tjbigsl7UNf669VmTkTY9 4elpEJaRioHp885tyc7EQ2yTES0NuPx1e5QecfSSCoQe/0tbtP4yC5htZ3I5Hyl4 m7XeVP8mUs5gPTTV1VR//s3VnLtLqjwRTfv5M/8is0EiflV5xtjyv94QwGY/OrMb rTVymymgA1gtznngeJJ5r/pUi1OfalEMpM6qyvuq77QY7U6/l8Sjbh7oilldZ+CA WHHmX12hcEqvUid779AY0hWfrL4Ny6E9dchBIyQtd9vZHs13qqKKQMsdBplFmUlK QHa+zPiDtbHBqUqg6rwJtwF3DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLo7xyEh Tx4/24GeIcINLUFOjPV3MB8GA1UdIwQYMBaAFEpzsW0u6enNTD/AvWEJHEiQU9Q2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjM2NC83MTZBNTlBQzlG ODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZjMU1QOEM5WVFrY1NKQlQx RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NuT3hiUzdwNmMxTVA4QzlZUWtjU0pCVDFEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjM2NC83MTZBNTlBQzlGODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZj MU1QOEM5WVFrY1NKQlQxRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp9gmZ6MsLsz411XmbCBl/hQGdBMbwy7AvAeNwcu4reZyu2SDVigSX XY7tyizPLDreS2b1Iljt83Qt1CllzQ+AZUT2ERRk6F8Z3aByhLwrc2RAoO/ypwtg qmj7GMnwFt4iNPLtQYtUAnD9FS3Mtmb8T5kQnUDfgHFW4MAdaJ3bhS+Ln6xkMAd4 DhHvcPVQ6huh1LqfrM3m3Oa75RbdM5imAodiJuTUXbfe1IyRa9J/RWUNGE1zZOHX 362jS1KQ0UFM2w/jWK8mb4nBXytP5TguVkEvq1sNVitfL5uwnI/eu3WxhW6vwPTA Ups2NtXib1ZXzC9Ts0yP/Fl6zkpuGpfV -----END CERTIFICATE-----Generated at Sun Jan 25 14:10:16 2026 by rpki-client