This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: ahfEYLJuow81B3bbZTQ+YXpVtgXg9q7ecsdQz2FyOG0= Subject key identifier: 36:DB:8C:1E:17:20:D6:6F:66:8C:32:70:5E:9B:AA:EE:B4:5E:0F:4B Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 0446 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 043E Signing time: Sat 24 Jan 2026 23:28:06 +0000 Manifest this update: Sat 24 Jan 2026 23:28:05 +0000 Manifest next update: Sat 31 Jan 2026 23:28:05 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: dGInyI6Mxkb8AFJNSs+OjXv8s8EFqNBeTQHc0ndSlsU=) 2: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: EDOt0WGEdnT9+FI7T0IrxIQR/uJ+FjweoW8YpKMKOQA=) 3: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cu8wLYBxbGfRWUV9Ye7bg1eRpOLSnTYKjsEY2WUidXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1094 (0x446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: Jan 24 23:28:05 2026 GMT Not After : Jan 31 23:28:05 2026 GMT Subject: CN=69755586-1e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ec:25:00:13:16:fb:76:34:eb:be:8f:c1:4b: 20:4c:39:11:15:04:2d:61:bd:e0:d7:4a:26:c1:42: d0:9a:e6:64:34:3e:17:5d:7a:b6:cb:89:ab:4d:40: 85:99:c5:27:e0:e9:05:ac:8d:63:6c:33:bd:09:c1: 60:bf:ef:26:5b:40:6e:71:5a:49:ea:61:85:49:1c: 95:21:67:fe:1b:b0:29:05:84:b9:1a:76:ee:61:e6: 49:a6:26:4a:4e:c9:63:e9:fb:15:e6:42:f7:f9:e2: 48:e7:58:9a:4c:5d:d6:dc:84:1d:49:d9:e4:30:32: b5:72:08:49:34:72:4b:39:d8:d2:45:ce:f9:6e:3e: 88:ee:d4:13:44:1a:92:52:04:fc:b8:8b:86:51:e7: bc:89:6b:ca:2d:72:41:b4:06:54:2c:1a:54:d0:b6: 2c:eb:d5:3c:ab:76:36:6f:43:80:b5:e9:5c:ad:ad: 10:ea:5b:d8:77:df:a0:f5:2d:e9:0f:ed:80:33:c7: 0f:2f:0e:02:f6:38:0b:e9:cb:ff:56:3b:ad:76:7d: 02:64:a2:a7:70:00:05:22:a6:f2:3e:28:6e:cc:e0: b6:41:a7:69:5d:9b:b6:f6:eb:bc:90:17:e5:3f:42: 89:ae:bc:16:81:b9:df:59:16:5b:94:90:ea:37:6e: aa:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DB:8C:1E:17:20:D6:6F:66:8C:32:70:5E:9B:AA:EE:B4:5E:0F:4B X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:a0:d0:b2:4d:28:d4:00:3c:dc:f4:c8:67:f3:21:21:95:55: 61:b5:ab:1d:89:47:60:ff:71:d1:62:e1:c2:4e:a7:0b:26:38: 88:9f:91:5d:15:56:c9:cb:97:7d:c0:b0:02:15:f2:52:14:ca: 42:cd:b0:5a:29:36:68:a7:e2:fb:fd:da:47:98:46:db:2c:0b: 86:a7:25:a3:c7:0a:6f:0b:40:fa:83:af:89:ed:c7:62:1b:bc: 32:a8:3e:62:03:fd:fd:1c:73:07:3e:ab:57:60:66:dc:8a:5e: 47:f6:9d:e2:bc:5d:b5:71:24:c3:ba:91:b1:16:3a:ba:f2:6a: fd:e9:6b:55:b8:59:61:ce:68:64:7a:d6:16:0b:af:81:ad:ad: 95:2e:5c:e6:7a:7f:21:f5:43:e0:3c:e4:0b:36:46:f7:02:a0: 94:4c:6a:d9:0f:e3:91:27:94:70:f3:c8:ce:b5:fe:43:55:df: bd:f2:bf:c3:3d:9b:e4:48:6e:e1:7f:b3:dc:26:2f:91:61:d5: a1:8b:54:6b:32:f2:87:25:e6:ec:bb:b0:4d:7e:d9:67:57:52: 80:a4:9d:83:e2:3a:48:5a:49:e9:9f:0a:1f:f2:8f:9b:ea:31: 2d:c1:23:28:7b:cb:12:ff:6a:b5:d5:f4:0f:6c:1d:7d:a6:34: f1:12:fb:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjYwMTI0MjMyODA1WhcNMjYwMTMxMjMyODA1WjAYMRYwFAYD VQQDDA02OTc1NTU4Ni0xZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkuwlABMW+3Y0676PwUsgTDkRFQQtYb3g10omwULQmuZkND4XXXq2y4mrTUCF mcUn4OkFrI1jbDO9CcFgv+8mW0BucVpJ6mGFSRyVIWf+G7ApBYS5GnbuYeZJpiZK Tslj6fsV5kL3+eJI51iaTF3W3IQdSdnkMDK1cghJNHJLOdjSRc75bj6I7tQTRBqS UgT8uIuGUee8iWvKLXJBtAZULBpU0LYs69U8q3Y2b0OAtelcra0Q6lvYd9+g9S3p D+2AM8cPLw4C9jgL6cv/Vjutdn0CZKKncAAFIqbyPihuzOC2QadpXZu29uu8kBfl P0KJrrwWgbnfWRZblJDqN26qUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbbjB4X INZvZowycF6bqu60Xg9LMB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUoNCyTSjUADzc9Mhn8yEhlVVhtasdiUdg/3HRYuHCTqcLJjiIn5Fd FVbJy5d9wLACFfJSFMpCzbBaKTZop+L7/dpHmEbbLAuGpyWjxwpvC0D6g6+J7cdi G7wyqD5iA/39HHMHPqtXYGbcil5H9p3ivF21cSTDupGxFjq68mr96WtVuFlhzmhk etYWC6+Bra2VLlzmen8h9UPgPOQLNkb3AqCUTGrZD+ORJ5Rw88jOtf5DVd+98r/D PZvkSG7hf7PcJi+RYdWhi1RrMvKHJebsu7BNftlnV1KApJ2D4jpIWknpnwof8o+b 6jEtwSMoe8sS/2q11fQPbB19pjTxEvuR -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:54 2026 by rpki-client