This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft File: IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft (raw, json) Hash identifier: 22VDRylbeJkH8htt1ExXPXiUx773nbhpIsXNZryDrqI= Subject key identifier: 38:B9:2F:09:57:98:B0:6B:D2:12:0B:62:67:B8:9A:72:61:12:B2:84 Authority key identifier: 22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 Certificate issuer: /CN=A91CFFCB/serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft Manifest number: 79 Signing time: Sun 25 Jan 2026 05:54:46 +0000 Manifest this update: Sun 25 Jan 2026 05:54:46 +0000 Manifest next update: Sun 01 Feb 2026 05:54:46 +0000 Files and hashes: 1: IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl (hash: wvsx/lqUKosDBrkVS7ONmKTM+OPlHTF46LRn2NKM8Vw=) 2: BAEA3A3C497B11F096DCA14EC4F9AE02.roa (hash: NGudT5ffYxQaLDuPITb3DSyOtSWSbubIZoe2i4vUMeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Validity Not Before: Jan 25 05:54:46 2026 GMT Not After : Feb 1 05:54:46 2026 GMT Subject: CN=6975b026-8729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f5:4f:2b:47:cd:95:d7:70:53:aa:eb:d9:41: 67:72:2a:e5:4d:08:8b:8b:5e:f2:94:4b:a3:66:ae: 55:2b:7f:c7:0b:a8:e6:13:b8:ef:1f:c8:3c:a3:dc: 45:fa:61:d8:7e:be:27:2d:67:59:ff:38:a7:df:c9: c0:fe:df:33:d9:8c:70:3c:a4:d7:ab:56:d3:1b:e2: 01:90:51:24:0c:d8:0c:d1:a9:45:af:ee:5f:4c:80: 0b:76:aa:37:66:32:0d:f9:3d:6d:50:80:12:ee:22: 75:01:26:2a:44:11:5b:e7:2f:e1:e2:57:62:41:bb: fd:07:d8:d4:72:91:ef:de:1f:1f:ca:04:e0:6e:99: 4b:fa:9d:68:58:1f:46:2e:21:86:c1:c8:50:38:89: 88:3c:06:71:0f:d8:e9:7d:34:79:01:a9:05:e3:20: 64:0d:91:6a:81:88:10:3b:03:ff:90:59:f7:11:86: 41:b0:ec:e7:82:af:a9:36:53:48:69:2c:7d:9f:2d: da:8e:80:c4:b4:a1:6c:22:4e:15:5d:94:40:67:d1: 4f:e1:1b:b9:dc:4e:dd:8b:a5:2f:64:5e:47:69:ec: 35:5e:09:76:f6:75:25:ed:49:e0:30:fd:f7:43:bc: 75:90:32:b0:10:15:bb:55:96:5b:af:31:35:50:85: f9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B9:2F:09:57:98:B0:6B:D2:12:0B:62:67:B8:9A:72:61:12:B2:84 X509v3 Authority Key Identifier: keyid:22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:3e:a2:6a:cc:ec:6c:76:17:55:d7:cb:bf:10:6a:23:55:70: 3c:c7:af:10:ac:a3:60:33:97:0d:d3:74:da:77:4f:79:2a:35: 5f:29:4a:eb:4b:7a:0b:55:6c:bb:e2:68:98:41:83:2d:21:c9: c9:42:4c:bf:94:84:2d:8a:4e:a2:c5:35:35:88:ff:fa:e8:48: 28:70:c5:c7:70:3e:79:d4:2d:ab:01:ba:19:08:83:f5:f0:99: 3d:d5:b9:6f:c9:de:5b:b4:e4:f1:b9:cd:e2:98:eb:74:d1:ee: 28:5c:56:c3:1e:e9:64:64:65:fc:ac:97:59:96:dd:35:5b:06: 58:08:22:47:25:b6:c3:87:8c:b7:ea:fb:06:b3:b9:14:5b:fd: a0:90:96:ad:0e:7a:a9:77:28:dc:41:eb:69:52:61:2a:71:11: c0:e3:fa:46:54:f0:8d:1f:52:9c:fe:62:55:a3:66:aa:cc:75: 2e:39:76:84:bd:36:9e:05:54:86:f2:61:37:49:dc:66:7c:49: ef:ba:cb:d3:e3:b7:63:45:c6:8d:c8:5d:cf:12:64:f9:8d:b8: 52:0f:eb:48:94:41:e8:49:40:63:19:c5:9d:e2:b7:87:ee:80: f6:3d:e0:2c:a0:7a:2c:24:c0:42:49:b9:b3:52:c8:09:3f:29: 01:e6:58:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkZDQjExMC8GA1UEBRMoMjIyNDI5NDQxNkI4NDY1NzA2NTU0QjUyQ0JDNTZGNDQ5 QkM0NkM4OTAeFw0yNjAxMjUwNTU0NDZaFw0yNjAyMDEwNTU0NDZaMBgxFjAUBgNV BAMMDTY5NzViMDI2LTg3MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP9U8rR82V13BTquvZQWdyKuVNCIuLXvKUS6NmrlUrf8cLqOYTuO8fyDyj3EX6 Ydh+victZ1n/OKffycD+3zPZjHA8pNerVtMb4gGQUSQM2AzRqUWv7l9MgAt2qjdm Mg35PW1QgBLuInUBJipEEVvnL+HiV2JBu/0H2NRyke/eHx/KBOBumUv6nWhYH0Yu IYbByFA4iYg8BnEP2Ol9NHkBqQXjIGQNkWqBiBA7A/+QWfcRhkGw7OeCr6k2U0hp LH2fLdqOgMS0oWwiThVdlEBn0U/hG7ncTt2LpS9kXkdp7DVeCXb2dSXtSeAw/fdD vHWQMrAQFbtVlluvMTVQhfnxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOLkvCVeY sGvSEgtiZ7iacmESsoQwHwYDVR0jBBgwFoAUIiQpRBa4RlcGVUtSy8VvRJvEbIkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGRkNCL0VEMEYxMUY0NDIw NTExRjBCRjdBODcxMUM0RjlBRTAyL0lpUXBSQmE0UmxjR1ZVdFN5OFZ2Ukp2RWJJ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWlRcFJCYTRSbGNHVlV0U3k4VnZSSnZFYklrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG RkNCL0VEMEYxMUY0NDIwNTExRjBCRjdBODcxMUM0RjlBRTAyL0lpUXBSQmE0Umxj R1ZVdFN5OFZ2Ukp2RWJJay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACM+omrM7Gx2F1XXy78QaiNVcDzHrxCso2Azlw3TdNp3T3kqNV8pSutL egtVbLviaJhBgy0hyclCTL+UhC2KTqLFNTWI//roSChwxcdwPnnULasBuhkIg/Xw mT3VuW/J3lu05PG5zeKY63TR7ihcVsMe6WRkZfysl1mW3TVbBlgIIkcltsOHjLfq +wazuRRb/aCQlq0Oeql3KNxB62lSYSpxEcDj+kZU8I0fUpz+YlWjZqrMdS45doS9 Np4FVIbyYTdJ3GZ8Se+6y9Pjt2NFxo3IXc8SZPmNuFIP60iUQehJQGMZxZ3it4fu gPY94CygeiwkwEJJubNSyAk/KQHmWLI= -----END CERTIFICATE-----Generated at Sun Jan 25 11:51:55 2026 by rpki-client