This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft File: D1kUy7lqcNoGsR7z3StjyeQHsxw.mft (raw, json) Hash identifier: 2giPhEVW6/Az2k4XbIabAHGGbu+eBOFkg7YvpfymQe0= Subject key identifier: 6E:C2:01:E2:31:09:7A:FF:09:D0:BF:3F:E7:74:B0:F4:BD:27:FF:80 Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C Certificate issuer: /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft Manifest number: 013A Signing time: Fri 23 Jan 2026 03:38:45 +0000 Manifest this update: Fri 23 Jan 2026 03:38:44 +0000 Manifest next update: Fri 30 Jan 2026 03:38:44 +0000 Files and hashes: 1: D1kUy7lqcNoGsR7z3StjyeQHsxw.crl (hash: e8eyKA4IhzjOOpcuaj7bD5utIqhyTDFgiOBMXdVwfzg=) 2: 4FFFD8D41D7211EFA095B25AC4F9AE02.roa (hash: 7t/pdYKTKmwUGR/lE+qnEM4TrcYeXROZCsv49aYTSqk=) 3: 507C31C21D7211EFA095B25AC4F9AE02.roa (hash: c1LdcyfxBkh65MfHEWuLe4Y+neliIailfDFE8qX4bKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 03:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Validity Not Before: Jan 23 03:38:44 2026 GMT Not After : Jan 30 03:38:44 2026 GMT Subject: CN=6972ed45-d62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c6:f7:ec:ea:ff:cf:cb:da:e5:17:9c:71:d9: 87:e3:ee:c4:84:e2:55:6d:e6:76:25:11:bf:d8:57: da:3a:4d:04:e8:c3:e3:55:aa:31:0c:6d:f3:87:24: b2:1a:da:8c:45:02:28:a9:d5:12:57:81:84:c8:fe: a7:f7:43:86:9b:1d:f9:00:43:b7:f0:08:ae:50:c8: 0a:e7:3f:8e:56:ca:58:4d:7f:14:bb:72:0e:ef:43: 73:3f:ab:b2:ff:b1:c8:9b:ed:0c:38:01:33:7e:f7: e4:56:64:93:fd:8b:d1:20:a9:53:21:bd:ae:3b:c9: 6e:38:d5:d5:a6:5a:58:c3:f7:e8:a7:f4:c2:4f:2d: 38:d2:b3:92:84:4a:c6:32:9c:b1:74:44:5e:44:34: e7:46:a8:80:90:01:1f:33:c4:e5:22:4e:5a:b6:14: 0a:1d:35:b7:6f:44:97:d0:d4:1b:19:fc:17:b5:3a: f9:fd:7b:4b:83:03:d8:69:71:58:06:76:61:f5:0e: b8:6b:76:c1:7f:31:6e:73:89:9f:38:be:57:97:a8: 93:b9:8b:0f:50:98:3b:ce:60:f9:e8:cd:ad:7c:74: e4:3a:c1:64:5c:92:ae:4f:f5:b7:88:96:66:19:ea: 25:ce:e8:be:4e:e5:19:bf:a3:8d:7e:eb:e4:c6:e7: d3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C2:01:E2:31:09:7A:FF:09:D0:BF:3F:E7:74:B0:F4:BD:27:FF:80 X509v3 Authority Key Identifier: keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:ef:55:5d:4f:22:7a:27:cb:e5:60:5a:aa:db:63:71:df:b8: 9a:ec:98:d3:95:c6:82:ce:3c:d4:de:00:6d:c8:47:79:01:3a: 58:53:65:9e:e6:db:6a:a0:a4:47:ae:58:f9:66:04:e4:a6:fd: ed:32:4d:62:d7:2f:f4:28:f3:c7:72:97:15:ea:27:87:7a:01: f1:9a:86:ea:8e:4b:6a:b1:71:11:c6:7a:bc:c9:37:7a:60:a0: 12:d5:88:af:57:92:65:0d:60:51:bb:0f:5c:11:1b:c0:34:e8: 0e:cf:98:19:8b:db:b2:04:ce:bf:16:50:f7:86:9a:57:5d:c1: e5:a7:a4:eb:18:69:fb:62:43:f6:18:da:be:a7:09:b7:37:a7: 99:2f:65:61:51:43:50:6d:ad:a8:31:aa:c9:c1:98:40:c7:a7: 4e:b5:ca:15:d5:88:4b:e4:a7:af:89:53:67:3a:eb:50:4d:40: da:34:47:7a:15:c4:28:4a:20:f2:13:1e:b9:45:96:ed:74:e2: 9b:1f:3a:25:00:e7:f1:51:b0:10:c9:20:88:ff:6b:20:97:46: 8d:fe:4a:68:ee:c8:71:7a:f9:32:5e:86:41:aa:35:6b:50:1c: 58:01:37:d5:d5:b6:37:cf:c6:91:eb:56:fb:01:69:e8:fe:ee: ea:61:ee:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRkMxMTAvBgNVBAUTKDBGNTkxNENCQjk2QTcwREEwNkIxMUVGM0REMkI2M0M5 RTQwN0IzMUMwHhcNMjYwMTIzMDMzODQ0WhcNMjYwMTMwMDMzODQ0WjAYMRYwFAYD VQQDDA02OTcyZWQ0NS1kNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Mb37Or/z8va5ReccdmH4+7EhOJVbeZ2JRG/2FfaOk0E6MPjVaoxDG3zhySy GtqMRQIoqdUSV4GEyP6n90OGmx35AEO38AiuUMgK5z+OVspYTX8Uu3IO70NzP6uy /7HIm+0MOAEzfvfkVmST/YvRIKlTIb2uO8luONXVplpYw/fop/TCTy040rOShErG MpyxdEReRDTnRqiAkAEfM8TlIk5athQKHTW3b0SX0NQbGfwXtTr5/XtLgwPYaXFY BnZh9Q64a3bBfzFuc4mfOL5Xl6iTuYsPUJg7zmD56M2tfHTkOsFkXJKuT/W3iJZm Geolzui+TuUZv6ONfuvkxufT5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7CAeIx CXr/CdC/P+d0sPS9J/+AMB8GA1UdIwQYMBaAFA9ZFMu5anDaBrEe890rY8nkB7Mc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNGQy9DN0IwOTM1NjFE NzExMUVGOTVFMjY4NDBDNEY5QUUwMi9EMWtVeTdscWNOb0dzUjd6M1N0anllUUhz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Qxa1V5N2xxY05vR3NSN3ozU3RqeWVRSHN4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDNGQy9DN0IwOTM1NjFENzExMUVGOTVFMjY4NDBDNEY5QUUwMi9EMWtVeTdscWNO b0dzUjd6M1N0anllUUhzeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ71VdTyJ6J8vlYFqq22Nx37ia7JjTlcaCzjzU3gBtyEd5ATpYU2We 5ttqoKRHrlj5ZgTkpv3tMk1i1y/0KPPHcpcV6ieHegHxmobqjktqsXERxnq8yTd6 YKAS1YivV5JlDWBRuw9cERvANOgOz5gZi9uyBM6/FlD3hppXXcHlp6TrGGn7YkP2 GNq+pwm3N6eZL2VhUUNQba2oMarJwZhAx6dOtcoV1YhL5KeviVNnOutQTUDaNEd6 FcQoSiDyEx65RZbtdOKbHzolAOfxUbAQySCI/2sgl0aN/kpo7shxevkyXoZBqjVr UBxYATfV1bY3z8aR61b7AWno/u7qYe5t -----END CERTIFICATE-----Generated at Sun Jan 25 02:58:15 2026 by rpki-client