This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft File: 4G_oQca7SYofv2fuOqjIqcU4fQ8.mft (raw, json) Hash identifier: 0HVludE00MFIiCQrduyRJl3NgzcJlvpHs3pGrPQ31T8= Subject key identifier: 09:C9:BD:6D:49:3C:04:CF:81:C4:FA:5B:DD:8A:FC:F3:21:8E:E2:3D Authority key identifier: E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F Certificate issuer: /CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft Manifest number: 011E Signing time: Sun 25 Jan 2026 04:02:26 +0000 Manifest this update: Sun 25 Jan 2026 04:02:26 +0000 Manifest next update: Sun 01 Feb 2026 04:02:26 +0000 Files and hashes: 1: 4G_oQca7SYofv2fuOqjIqcU4fQ8.crl (hash: tv1g0i6UfVYVMduMk7ovKG2mFQMdVAkOZ1pXuRFX5DU=) 2: 47C532D045B911EF93633071C4F9AE02.roa (hash: uQR7RmX7Xfc/Wb1Z+yXuWo+LPPhXlbiX07M6Ua6vFhs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0, serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Validity Not Before: Jan 25 04:02:26 2026 GMT Not After : Feb 1 04:02:26 2026 GMT Subject: CN=697595d2-2df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:74:c9:a6:ee:d2:9a:c8:3f:1e:aa:00:1a:31: 77:a6:b1:5a:0e:13:5a:c4:14:a1:d4:e7:cc:5d:42: 64:97:6a:cd:c4:f4:a5:d5:b2:f2:b2:c7:0d:dc:95: ff:fa:0d:3f:cc:f7:7a:ae:5d:5f:61:36:2c:b7:1e: a0:c5:69:e5:b9:84:25:cd:b1:66:81:da:e4:a6:ed: 6d:90:97:98:16:e4:1b:58:e4:91:1b:0a:25:fb:79: 89:b1:28:32:04:c8:ad:64:44:be:10:d1:84:74:85: 7f:3d:36:33:fe:6e:f8:6d:50:a3:99:5c:93:5b:80: 0a:1f:6c:74:87:43:66:f3:36:3f:b1:8e:02:ad:87: 38:0d:65:8e:e2:7b:35:60:08:fd:13:1c:b4:31:df: 24:bf:e8:0a:00:7a:51:69:40:08:9c:f2:93:a7:d1: 74:60:45:9b:bf:e4:9b:7f:a4:47:1f:94:b5:5a:b3: a4:0a:b5:a2:cf:56:01:16:b2:5e:47:94:2e:9f:e0: 26:a5:d1:b7:fd:37:ed:e9:3b:6e:f8:e6:82:ca:4e: 1c:d1:70:60:05:75:95:0f:0a:6f:43:89:73:3c:f7: 09:86:27:6f:0a:a6:ff:fb:a3:87:38:8e:42:1c:69: cb:53:41:db:55:d5:c3:3c:a1:21:3c:94:7c:5e:49: b6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C9:BD:6D:49:3C:04:CF:81:C4:FA:5B:DD:8A:FC:F3:21:8E:E2:3D X509v3 Authority Key Identifier: keyid:E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:41:35:12:84:f9:3d:2d:ce:82:2d:a0:85:c6:bb:85:67:03: 47:73:2e:78:64:f8:ed:d5:f6:01:b4:cb:3b:fb:80:20:f7:bb: 3e:1e:56:6c:96:36:41:24:28:cd:ec:41:79:87:f2:05:f6:73: 9a:a8:1b:0b:bb:bb:57:12:4c:97:9f:4a:c7:b7:76:ee:1c:88: be:15:34:d8:7d:4a:8b:7e:94:d9:1e:33:3c:0e:c1:32:7f:41: f9:72:31:61:3a:73:7b:43:6d:a9:7f:65:7f:db:42:60:af:26: 33:0e:80:ca:8d:3e:65:70:74:b5:a9:aa:63:b6:49:17:1c:40: 3d:ff:fb:f3:f8:8d:cb:f0:ac:f1:bf:bc:0f:c2:a0:3b:38:6b: 3d:09:0f:e2:73:79:76:25:7e:1d:3f:e0:a9:46:fe:a5:1d:d4: c4:05:5b:21:5c:00:57:5e:d5:05:d9:63:67:d1:5b:6b:96:18: d5:60:1e:e2:64:00:70:f5:13:61:b0:72:cb:82:2b:28:eb:af: 58:52:a6:13:84:17:59:23:df:e7:00:b4:69:ff:a0:94:b8:87: b2:21:1f:3a:9a:26:76:64:8c:52:d6:05:fd:a7:93:9b:2c:c8: 69:3b:45:17:73:8f:02:94:2c:52:10:52:97:5b:b9:7e:fd:19: 2a:d8:f0:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RDM0RDAxMTAvBgNVBAUTKEUwNkZFODQxQzZCQjQ5OEExRkJGNjdFRTNBQThDOEE5 QzUzODdEMEYwHhcNMjYwMTI1MDQwMjI2WhcNMjYwMjAxMDQwMjI2WjAYMRYwFAYD VQQDDA02OTc1OTVkMi0yZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunTJpu7Smsg/HqoAGjF3prFaDhNaxBSh1OfMXUJkl2rNxPSl1bLysscN3JX/ +g0/zPd6rl1fYTYstx6gxWnluYQlzbFmgdrkpu1tkJeYFuQbWOSRGwol+3mJsSgy BMitZES+ENGEdIV/PTYz/m74bVCjmVyTW4AKH2x0h0Nm8zY/sY4CrYc4DWWO4ns1 YAj9Exy0Md8kv+gKAHpRaUAInPKTp9F0YEWbv+Sbf6RHH5S1WrOkCrWiz1YBFrJe R5Qun+AmpdG3/Tft6Ttu+OaCyk4c0XBgBXWVDwpvQ4lzPPcJhidvCqb/+6OHOI5C HGnLU0HbVdXDPKEhPJR8Xkm2FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnJvW1J PATPgcT6W92K/PMhjuI9MB8GA1UdIwQYMBaAFOBv6EHGu0mKH79n7jqoyKnFOH0P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzREMC9FQ0Y4MEY4NjQ1 QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi80R19vUWNhN1NZb2Z2MmZ1T3FqSXFjVTRm UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRHX29RY2E3U1lvZnYyZnVPcWpJcWNVNGZROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9FQ0Y4MEY4NjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi80R19vUWNhN1NZ b2Z2MmZ1T3FqSXFjVTRmUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/QTUShPk9Lc6CLaCFxruFZwNHcy54ZPjt1fYBtMs7+4Ag97s+HlZs ljZBJCjN7EF5h/IF9nOaqBsLu7tXEkyXn0rHt3buHIi+FTTYfUqLfpTZHjM8DsEy f0H5cjFhOnN7Q22pf2V/20JgryYzDoDKjT5lcHS1qapjtkkXHEA9//vz+I3L8Kzx v7wPwqA7OGs9CQ/ic3l2JX4dP+CpRv6lHdTEBVshXABXXtUF2WNn0VtrlhjVYB7i ZABw9RNhsHLLgiso669YUqYThBdZI9/nALRp/6CUuIeyIR86miZ2ZIxS1gX9p5Ob LMhpO0UXc48ClCxSEFKXW7l+/Rkq2PCT -----END CERTIFICATE-----Generated at Sun Jan 25 21:46:06 2026 by rpki-client