This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft File: EAslNUZkaB2quQXO_0pNp0nE64o.mft (raw, json) Hash identifier: tmvJpcioYNOhnXbcgI4mMHEjRoPv6Gwf48dfcfL+JYY= Subject key identifier: 90:64:D0:AF:07:BD:A1:70:5D:33:13:E3:B4:7C:1F:EB:7A:D1:FC:EF Authority key identifier: 10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A Certificate issuer: /CN=A91D488C/serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft Manifest number: 67 Signing time: Sun 25 Jan 2026 06:13:08 +0000 Manifest this update: Sun 25 Jan 2026 06:13:08 +0000 Manifest next update: Sun 01 Feb 2026 06:13:08 +0000 Files and hashes: 1: EAslNUZkaB2quQXO_0pNp0nE64o.crl (hash: DaaU5s8BPtjDc4pEZs9U1GXO+M3e8+kQGEEOMMu+Oww=) 2: 8B9109C06B8911F0A0F62851C4F9AE02.roa (hash: MQngZQ/wU1MkMIqSO6wrur4Hqr2/VRq/8pjF4hDEg7I=) 3: 4DA7A7766C6611F0883DC646C4F9AE02.roa (hash: RPf9NqAE6pLl+9GCTFNlsn+MgSYDmDceWR0KK3K6OCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D488C, serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A Validity Not Before: Jan 25 06:13:08 2026 GMT Not After : Feb 1 06:13:08 2026 GMT Subject: CN=6975b474-c07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:d1:67:b8:b3:5e:3f:d1:7d:db:bb:c3:20: 95:d5:b4:ba:bc:3e:36:d6:4a:40:88:24:62:d2:85: dd:a7:f0:be:1f:68:23:76:f3:69:e5:b9:7f:77:7d: a0:89:db:ef:1d:09:19:b3:ba:a8:57:d8:9d:48:e9: 4a:90:e3:8f:b1:37:ee:b7:09:67:73:f9:b8:3f:36: 6d:82:04:60:d5:aa:24:ba:2d:64:86:0c:7c:52:1f: 5c:60:3f:f7:f4:c1:68:4d:8a:2e:45:c2:f8:d9:1b: 85:26:11:cc:16:5d:1f:31:84:b5:84:bc:dc:b6:36: 2f:80:d4:50:22:10:f5:a2:1a:bd:f0:fe:07:46:42: 4a:ce:68:72:10:8f:0a:97:ee:7a:fa:56:6a:94:fb: 14:97:4a:a6:b0:0f:9b:e4:a1:55:41:34:43:94:76: 86:94:6e:5e:36:96:f2:3c:ad:c7:e8:33:29:94:a6: ab:4d:14:16:36:3f:ee:8a:9c:73:09:17:cb:17:05: a0:d3:a6:ff:c6:27:1b:3c:7a:8a:b0:31:0e:5b:06: 62:e9:db:ed:ef:54:f3:9d:e6:4e:b5:e1:82:26:88: 24:2c:24:ac:8c:31:a9:22:ba:99:ad:9f:da:10:36: 7d:91:4c:10:ed:b7:61:4c:4a:65:93:e0:da:ef:6f: 70:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:64:D0:AF:07:BD:A1:70:5D:33:13:E3:B4:7C:1F:EB:7A:D1:FC:EF X509v3 Authority Key Identifier: keyid:10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e7:bb:bc:b5:4f:a2:6b:9f:1c:32:24:55:32:8c:1c:7f:dd: 09:14:01:3d:17:b5:4d:d6:96:4e:d3:0e:05:28:86:a7:b8:06: 4c:61:82:a5:cd:17:08:5a:93:b8:c3:d0:62:2a:98:5f:75:38: 41:23:29:2a:7b:93:a1:aa:45:c0:43:e5:c2:64:e0:ae:4e:38: 53:f5:e8:4b:16:d1:10:82:08:79:89:5f:4b:35:c5:28:57:20: 4e:11:dd:3d:2b:6f:19:48:5e:6c:87:5c:ce:c1:64:9b:ce:95: b2:37:13:55:f6:8e:b0:3e:0c:e9:39:9f:aa:bf:30:48:f7:d8: 22:16:2a:11:9b:b0:66:a8:e7:ee:12:fc:94:86:33:fa:a6:ee: 17:68:3b:62:7e:41:4e:d3:80:e3:c8:9d:53:a5:3d:9b:cb:ca: 95:61:c4:28:cb:af:78:2c:03:44:0c:91:68:bb:aa:ef:84:d0: 20:08:c2:09:15:29:ae:da:29:bf:c8:b2:8d:d7:59:16:d1:6a: 5c:81:d6:d9:47:13:fb:9d:bb:3b:2e:72:be:74:85:a6:6b:30: 3c:55:d3:92:35:72:1a:b0:d6:95:43:2d:77:97:dc:e4:d3:0f: 8d:47:a5:65:96:a4:6e:66:c0:50:2b:3a:de:72:ee:eb:b7:35: e3:04:fd:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDg4QzExMC8GA1UEBRMoMTAwQjI1MzU0NjY0NjgxREFBQjkwNUNFRkY0QTREQTc0 OUM0RUI4QTAeFw0yNjAxMjUwNjEzMDhaFw0yNjAyMDEwNjEzMDhaMBgxFjAUBgNV BAMMDTY5NzViNDc0LWMwN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1UNFnuLNeP9F927vDIJXVtLq8PjbWSkCIJGLShd2n8L4faCN282nluX93faCJ 2+8dCRmzuqhX2J1I6UqQ44+xN+63CWdz+bg/Nm2CBGDVqiS6LWSGDHxSH1xgP/f0 wWhNii5FwvjZG4UmEcwWXR8xhLWEvNy2Ni+A1FAiEPWiGr3w/gdGQkrOaHIQjwqX 7nr6VmqU+xSXSqawD5vkoVVBNEOUdoaUbl42lvI8rcfoMymUpqtNFBY2P+6KnHMJ F8sXBaDTpv/GJxs8eoqwMQ5bBmLp2+3vVPOd5k614YImiCQsJKyMMakiupmtn9oQ Nn2RTBDtt2FMSmWT4Nrvb3AnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkGTQrwe9 oXBdMxPjtHwf63rR/O8wHwYDVR0jBBgwFoAUEAslNUZkaB2quQXO/0pNp0nE64ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0ODhDLzQ2QjAwNTA0NkI4 OTExRjA5NUYxMTAyQkM0RjlBRTAyL0VBc2xOVVprYUIycXVRWE9fMHBOcDBuRTY0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUFzbE5VWmthQjJxdVFYT18wcE5wMG5FNjRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 ODhDLzQ2QjAwNTA0NkI4OTExRjA5NUYxMTAyQkM0RjlBRTAyL0VBc2xOVVprYUIy cXVRWE9fMHBOcDBuRTY0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABznu7y1T6JrnxwyJFUyjBx/3QkUAT0XtU3Wlk7TDgUohqe4BkxhgqXN Fwhak7jD0GIqmF91OEEjKSp7k6GqRcBD5cJk4K5OOFP16EsW0RCCCHmJX0s1xShX IE4R3T0rbxlIXmyHXM7BZJvOlbI3E1X2jrA+DOk5n6q/MEj32CIWKhGbsGao5+4S /JSGM/qm7hdoO2J+QU7TgOPInVOlPZvLypVhxCjLr3gsA0QMkWi7qu+E0CAIwgkV Ka7aKb/Iso3XWRbRalyB1tlHE/uduzsucr50haZrMDxV05I1chqw1pVDLXeX3OTT D41HpWWWpG5mwFArOt5y7uu3NeME/a4= -----END CERTIFICATE-----Generated at Sun Jan 25 11:03:11 2026 by rpki-client