This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft File: Fq85Z82e72n-cs9m28bg-wDKONQ.mft (raw, json) Hash identifier: JWUwj9mXHUT7qIzOn6QYT7ZqX0g3n8n/wx6vPEshRXc= Subject key identifier: A7:1F:9F:9C:AF:8D:CE:9B:E3:A3:4E:8E:CD:4A:2C:A3:E0:9F:82:C7 Authority key identifier: 16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 Certificate issuer: /CN=A91D34D0/serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft Manifest number: 011C Signing time: Sun 25 Jan 2026 04:02:24 +0000 Manifest this update: Sun 25 Jan 2026 04:02:23 +0000 Manifest next update: Sun 01 Feb 2026 04:02:23 +0000 Files and hashes: 1: Fq85Z82e72n-cs9m28bg-wDKONQ.crl (hash: YjjwQPxpw5+OBSUGux+s7ICky0ZUBj+keK4N2OIJoDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0, serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Validity Not Before: Jan 25 04:02:23 2026 GMT Not After : Feb 1 04:02:23 2026 GMT Subject: CN=697595cf-8b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ec:b9:25:c6:a6:68:c4:cf:09:b9:98:0f:30: 7f:a0:46:fe:de:f6:d4:24:bc:69:24:6c:30:61:3f: f8:97:9b:dc:85:f6:5f:c7:71:9f:c7:be:e8:7b:55: f7:77:b5:74:7e:db:da:90:5a:f1:bc:81:bc:fa:9f: 4f:bb:35:4a:91:5f:7d:0c:6a:4d:09:b9:00:5e:5f: 82:90:20:a3:9a:29:3b:4c:e3:80:6c:bb:51:7b:ac: 98:a2:f1:95:6d:69:1d:72:64:ae:78:aa:b1:3e:83: 6f:a8:49:f1:fd:d8:68:ee:8d:6e:96:a3:f7:c6:91: fd:73:46:fe:65:1d:c9:67:5f:47:da:35:41:72:75: 86:bc:cc:cd:99:38:a1:36:9f:02:ab:8c:96:0e:87: cf:bf:98:cc:cf:3c:2c:92:cc:85:c4:37:c1:ba:36: 9d:ba:8a:d3:c8:88:62:f3:34:ba:ba:8c:c3:61:a3: 3a:3d:85:58:65:82:95:06:17:55:ca:74:ee:44:20: 4b:32:1d:00:f2:70:f8:3d:96:99:ad:09:71:0d:75: d5:fc:04:f2:10:30:30:2b:bb:01:88:15:0a:53:f4: cf:e5:d6:f1:51:55:22:c0:96:97:b9:0b:7d:97:e5: 36:b5:c1:ed:59:3d:61:67:29:98:12:d6:2c:ee:18: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1F:9F:9C:AF:8D:CE:9B:E3:A3:4E:8E:CD:4A:2C:A3:E0:9F:82:C7 X509v3 Authority Key Identifier: keyid:16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:9d:c7:4d:11:29:52:62:ff:71:f3:01:c3:b3:35:c3:bc:f9: 21:b0:78:ba:28:80:fa:6e:a8:98:1a:57:a0:30:53:12:13:a1: 4e:14:71:b8:bf:cf:ee:d5:09:d7:e4:0e:5b:4c:cd:f4:6b:c9: 5b:f0:57:c3:c8:4a:31:ea:d8:9c:e0:25:95:43:29:e4:46:59: 2f:da:d3:f5:7c:bb:15:22:8b:3b:71:36:92:51:5c:bc:6c:0d: 05:fc:42:6b:fd:48:8e:76:0c:b2:91:27:3e:2b:97:be:c5:4b: c1:b0:82:a7:bc:c1:87:3e:09:9d:ca:38:94:da:77:78:f8:87: 26:8f:84:61:30:91:b5:8a:cb:80:09:48:2e:dc:a4:cf:4a:a0: 6f:c2:05:f3:fc:40:b0:a2:6d:f3:4b:21:2f:5d:a8:99:f7:b2: c2:7f:b1:a3:1a:f1:6b:71:ef:14:e2:b1:d2:5d:3c:7d:e0:a4: 40:f2:c4:c0:b0:2a:cb:67:03:bf:b6:77:56:e0:2e:49:77:82: 87:1b:d4:80:83:f2:00:3a:15:f8:83:5f:41:e0:20:7c:52:71: 5e:3a:b5:fc:6b:93:04:a8:ed:b0:31:13:46:7c:4e:35:fe:b5: 17:ce:8c:d2:d2:a5:0d:f6:2d:79:f6:f7:a6:59:54:e7:15:e3: 21:e3:a5:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RDM0RDAxMTAvBgNVBAUTKDE2QUYzOTY3Q0Q5RUVGNjlGRTcyQ0Y2NkRCQzZFMEZC MDBDQTM4RDQwHhcNMjYwMTI1MDQwMjIzWhcNMjYwMjAxMDQwMjIzWjAYMRYwFAYD VQQDDA02OTc1OTVjZi04YjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhuy5JcamaMTPCbmYDzB/oEb+3vbUJLxpJGwwYT/4l5vchfZfx3Gfx77oe1X3 d7V0ftvakFrxvIG8+p9PuzVKkV99DGpNCbkAXl+CkCCjmik7TOOAbLtRe6yYovGV bWkdcmSueKqxPoNvqEnx/dho7o1ulqP3xpH9c0b+ZR3JZ19H2jVBcnWGvMzNmTih Np8Cq4yWDofPv5jMzzwsksyFxDfBujaduorTyIhi8zS6uozDYaM6PYVYZYKVBhdV ynTuRCBLMh0A8nD4PZaZrQlxDXXV/ATyEDAwK7sBiBUKU/TP5dbxUVUiwJaXuQt9 l+U2tcHtWT1hZymYEtYs7hifewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcfn5yv jc6b46NOjs1KLKPgn4LHMB8GA1UdIwQYMBaAFBavOWfNnu9p/nLPZtvG4PsAyjjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzREMC9GNTQwM0VGMjQ1 QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcybi1jczltMjhiZy13REtP TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxODVaODJlNzJuLWNzOW0yOGJnLXdES09OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9GNTQwM0VGMjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcy bi1jczltMjhiZy13REtPTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuncdNESlSYv9x8wHDszXDvPkhsHi6KID6bqiYGlegMFMSE6FOFHG4 v8/u1QnX5A5bTM30a8lb8FfDyEox6tic4CWVQynkRlkv2tP1fLsVIos7cTaSUVy8 bA0F/EJr/UiOdgyykSc+K5e+xUvBsIKnvMGHPgmdyjiU2nd4+Icmj4RhMJG1isuA CUgu3KTPSqBvwgXz/ECwom3zSyEvXaiZ97LCf7GjGvFrce8U4rHSXTx94KRA8sTA sCrLZwO/tndW4C5Jd4KHG9SAg/IAOhX4g19B4CB8UnFeOrX8a5MEqO2wMRNGfE41 /rUXzozS0qUN9i159vemWVTnFeMh46X+ -----END CERTIFICATE-----Generated at Sun Jan 25 14:01:08 2026 by rpki-client