This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json) Hash identifier: PTkTJnXFYQAsSEh7feUIBSSwutu4Oo4L1uwjCiPpnuY= Subject key identifier: 3E:4D:9F:02:B2:89:14:35:1F:43:9D:5F:DC:B6:21:66:E1:6E:4C:43 Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D Certificate issuer: /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D Certificate serial: 088E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft Manifest number: 0BEE Signing time: Sat 24 Jan 2026 19:56:03 +0000 Manifest this update: Sat 24 Jan 2026 19:56:03 +0000 Manifest next update: Sat 31 Jan 2026 19:56:03 +0000 Files and hashes: 1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: /mSCtHsaz3HUCEWeXVEAmDpE/vntU3lkULagtYzHJKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2190 (0x88e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=A59D836E1C31623CC586448AA752B746853B841D Validity Not Before: Jan 24 19:56:03 2026 GMT Not After : Jan 31 19:56:03 2026 GMT Subject: CN=697523d3-a3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:51:3f:4b:1a:16:78:24:d5:8d:20:a4:02:a5: 5e:94:64:81:d2:df:1b:f4:db:2b:a9:78:05:31:28: 0f:8b:70:f3:01:6b:e5:26:d1:00:85:75:3f:ed:35: 08:da:ec:5c:20:d7:44:0a:7e:83:4d:2d:b9:f0:00: 88:ea:96:87:f4:d8:4d:68:de:84:31:f3:6e:38:9b: 58:7a:5a:cd:c8:d4:49:9c:63:d3:3c:92:ae:b7:71: c8:bf:11:12:60:bf:aa:0b:7e:1b:2f:40:25:67:e9: 6e:c9:42:f5:df:67:d2:60:aa:b7:da:39:e7:59:e5: 18:cc:1f:2c:f2:b9:da:c0:79:b4:07:ff:39:bd:c8: 57:fc:7b:2a:bd:84:38:ba:96:ed:b9:0a:60:ea:bf: d8:7f:fa:ba:d8:16:e7:01:f9:6d:54:7a:be:7e:82: e1:af:4d:4a:d4:14:46:66:00:c3:a7:3f:95:2d:57: 35:5d:36:06:dc:47:b2:79:0e:02:9b:76:16:8b:17: 95:10:b9:8f:7e:53:7f:28:7b:de:7a:e3:2c:3f:47: a2:5b:3b:27:07:92:90:b1:92:bc:39:ff:d3:e0:b1: 06:54:53:bd:d3:4b:87:67:c2:21:a3:da:f6:0e:2f: 40:f0:3c:ef:1a:5c:ed:5b:da:71:28:5b:48:72:ea: 42:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4D:9F:02:B2:89:14:35:1F:43:9D:5F:DC:B6:21:66:E1:6E:4C:43 X509v3 Authority Key Identifier: keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:7e:4d:db:3d:30:cd:69:64:c3:72:13:1f:2a:e1:e8:05:40: a1:86:ff:60:d4:31:a0:04:d1:6f:a8:ea:5e:8e:4d:49:6f:33: e3:83:01:19:98:1f:a6:3c:c7:34:3c:43:bc:26:81:de:0c:17: 3b:20:6d:70:cd:7e:3d:18:1d:0f:be:b9:58:96:c6:57:ce:ea: 37:66:cf:72:9a:f9:02:41:6f:88:47:93:11:e5:8e:40:c1:49: 88:ff:3d:98:24:f9:ba:dd:8e:d5:bf:dd:ed:6b:85:5b:fe:c3: d9:37:73:0b:3b:15:22:13:cc:7a:f7:eb:9a:43:98:f7:ed:84: 41:36:12:5f:61:59:7f:48:b4:24:8a:a8:a3:ed:09:48:4a:fb: f9:9e:bb:3e:b7:f4:bf:c7:62:50:79:c7:f7:6a:46:73:38:12: 5d:e3:d2:05:d0:6b:2f:d3:c3:51:eb:15:a8:a1:ea:12:f2:1e: 01:db:c0:2e:d6:b5:6b:5f:b8:26:57:1e:cf:d0:b6:01:e4:52: f0:eb:da:ff:d2:60:6c:7c:55:55:dd:6f:a3:a4:5b:45:73:8c: 8e:1a:3d:70:a9:c9:8c:9e:20:dd:21:30:24:aa:98:d3:ac:26: e9:15:40:13:3e:6b:98:1e:58:df:b5:02:d9:94:d8:b2:11:f4: 98:13:ea:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEE1OUQ4MzZFMUMzMTYyM0NDNTg2NDQ4QUE3NTJCNzQ2 ODUzQjg0MUQwHhcNMjYwMTI0MTk1NjAzWhcNMjYwMTMxMTk1NjAzWjAYMRYwFAYD VQQDDA02OTc1MjNkMy1hM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi1E/SxoWeCTVjSCkAqVelGSB0t8b9NsrqXgFMSgPi3DzAWvlJtEAhXU/7TUI 2uxcINdECn6DTS258ACI6paH9NhNaN6EMfNuOJtYelrNyNRJnGPTPJKut3HIvxES YL+qC34bL0AlZ+luyUL132fSYKq32jnnWeUYzB8s8rnawHm0B/85vchX/HsqvYQ4 upbtuQpg6r/Yf/q62BbnAfltVHq+foLhr01K1BRGZgDDpz+VLVc1XTYG3EeyeQ4C m3YWixeVELmPflN/KHveeuMsP0eiWzsnB5KQsZK8Of/T4LEGVFO900uHZ8Iho9r2 Di9A8DzvGlztW9pxKFtIcupCbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5NnwKy iRQ1H0OdX9y2IWbhbkxDMB8GA1UdIwQYMBaAFKWdg24cMWI8xYZEiqdSt0aFO4Qd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlqekZoa1NLcDFLM1JvVTdo QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BaMkRiaHd4WWp6RmhrU0twMUszUm9VN2hCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlq ekZoa1NLcDFLM1JvVTdoQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCfk3bPTDNaWTDchMfKuHoBUChhv9g1DGgBNFvqOpejk1JbzPjgwEZ mB+mPMc0PEO8JoHeDBc7IG1wzX49GB0PvrlYlsZXzuo3Zs9ymvkCQW+IR5MR5Y5A wUmI/z2YJPm63Y7Vv93ta4Vb/sPZN3MLOxUiE8x69+uaQ5j37YRBNhJfYVl/SLQk iqij7QlISvv5nrs+t/S/x2JQecf3akZzOBJd49IF0Gsv08NR6xWooeoS8h4B28Au 1rVrX7gmVx7P0LYB5FLw69r/0mBsfFVV3W+jpFtFc4yOGj1wqcmMniDdITAkqpjT rCbpFUATPmuYHljftQLZlNiyEfSYE+o2 -----END CERTIFICATE-----Generated at Sun Jan 25 23:39:35 2026 by rpki-client