This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft File: 3Y89lj-o0fItV_Tfspq9cNJVjjc.mft (raw, json) Hash identifier: yvyuIsBJhSeqzpIQTEJ0bZC6Y6WbrvyMdNZ1DvSN6Y8= Subject key identifier: 60:64:98:3F:A3:D2:84:15:E0:CE:95:CB:5F:B9:7E:55:94:CC:4C:9F Authority key identifier: DD:8F:3D:96:3F:A8:D1:F2:2D:57:F4:DF:B2:9A:BD:70:D2:55:8E:37 Certificate issuer: /CN=A91D506C/serialNumber=DD8F3D963FA8D1F22D57F4DFB29ABD70D2558E37 Certificate serial: 0336 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft Manifest number: 0332 Signing time: Sun 25 Jan 2026 00:13:02 +0000 Manifest this update: Sun 25 Jan 2026 00:13:02 +0000 Manifest next update: Sun 01 Feb 2026 00:13:02 +0000 Files and hashes: 1: 3Y89lj-o0fItV_Tfspq9cNJVjjc.crl (hash: ZYfLzhX8hNluGwK5lHKZWnwDkY7rryvsZaR6/2876Gc=) 2: 76C5241CF47311EC8721C33DC4F9AE02.roa (hash: k+SbCpllhZI/PId+36V/JG+wlkp2Gdvk2xv/XzOQ3v8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.crl rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:13:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 822 (0x336) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D506C, serialNumber=DD8F3D963FA8D1F22D57F4DFB29ABD70D2558E37 Validity Not Before: Jan 25 00:13:02 2026 GMT Not After : Feb 1 00:13:02 2026 GMT Subject: CN=6975600e-0b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f8:3e:d1:32:66:47:cf:83:b7:89:3a:b3:9f: f4:bb:36:d8:a6:d7:ab:5e:b8:14:90:be:5a:6a:be: 5e:0d:32:0c:fb:33:01:3b:3c:d8:81:8d:8f:e7:d5: 02:3d:d2:92:4d:c0:54:8f:41:37:81:05:75:2a:7b: aa:52:5b:17:0c:03:25:8d:c0:1f:3d:39:83:a3:e3: b6:98:86:50:37:b1:62:84:77:94:7e:07:92:02:d1: 95:af:22:17:6c:22:6a:17:21:61:19:19:7f:dc:e0: 3d:6b:41:9d:46:6d:88:5d:2b:13:44:33:de:e2:a8: 28:c8:61:9c:d3:b2:78:27:2c:df:2d:7a:cb:b3:b9: b2:bc:c6:22:8a:4c:46:63:80:cd:d8:26:51:07:5b: e0:33:0b:27:85:b9:c2:88:5f:20:71:07:b0:62:2a: d8:8c:1d:96:2a:e3:09:ab:75:c4:a9:c1:3d:d2:bf: d7:af:3e:ed:40:cf:dd:ea:cb:88:25:98:ca:c4:9d: cd:1d:de:49:69:1c:90:9a:ec:5b:83:6d:a6:5a:27: f3:42:82:c1:f8:c9:fd:61:8b:07:ee:dd:ab:9d:56: 8e:51:ce:5b:09:4e:9f:94:69:1a:82:84:d6:ca:90: 88:ff:1f:87:73:b9:61:a2:93:4d:a8:f9:3f:98:b6: 50:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:64:98:3F:A3:D2:84:15:E0:CE:95:CB:5F:B9:7E:55:94:CC:4C:9F X509v3 Authority Key Identifier: keyid:DD:8F:3D:96:3F:A8:D1:F2:2D:57:F4:DF:B2:9A:BD:70:D2:55:8E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:f1:6d:25:48:09:de:90:0a:41:f4:7f:85:f7:59:ca:84:cb: 65:d0:5b:e5:47:e9:08:f8:7a:c9:63:50:57:cb:d8:10:f8:ef: 3b:7b:5b:00:d6:98:c3:7e:4a:f9:6b:c9:56:54:72:5b:cf:3a: 0c:4b:17:41:50:46:fa:eb:26:5b:cc:96:3e:18:10:d7:de:2b: 2f:31:55:5d:6d:16:e6:d9:f3:a9:ed:63:6e:a0:19:d7:9e:9b: 91:6a:5f:a3:08:21:d6:b5:55:06:88:92:48:d8:71:41:70:3d: 58:36:a0:5f:98:db:aa:9a:ac:81:f1:1a:c7:20:cc:ad:df:c0: bc:c3:a8:a9:28:79:15:01:3e:78:72:25:27:f1:ba:c4:63:12: 1e:93:f6:59:9a:b1:16:b6:61:03:fb:90:a2:6b:fa:79:64:9d: af:17:e7:98:0a:e3:0c:44:37:88:7f:d4:c9:57:3e:24:7c:0b: dd:31:b2:93:99:72:e2:46:35:9a:b0:d6:87:6a:0c:1d:79:c2: db:81:4f:df:e0:a7:ee:c1:86:32:b6:4b:64:b8:7d:64:1b:4a: 2e:78:3a:d3:8b:90:1e:6b:c9:4b:cd:d7:51:2b:86:ae:86:03: 59:dc:29:b1:ef:86:c3:09:dc:ab:bd:d7:83:e7:d7:b7:0a:8b: a8:93:ee:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwNkMxMTAvBgNVBAUTKEREOEYzRDk2M0ZBOEQxRjIyRDU3RjRERkIyOUFCRDcw RDI1NThFMzcwHhcNMjYwMTI1MDAxMzAyWhcNMjYwMjAxMDAxMzAyWjAYMRYwFAYD VQQDDA02OTc1NjAwZS0wYjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5fg+0TJmR8+Dt4k6s5/0uzbYpterXrgUkL5aar5eDTIM+zMBOzzYgY2P59UC PdKSTcBUj0E3gQV1KnuqUlsXDAMljcAfPTmDo+O2mIZQN7FihHeUfgeSAtGVryIX bCJqFyFhGRl/3OA9a0GdRm2IXSsTRDPe4qgoyGGc07J4JyzfLXrLs7myvMYiikxG Y4DN2CZRB1vgMwsnhbnCiF8gcQewYirYjB2WKuMJq3XEqcE90r/Xrz7tQM/d6suI JZjKxJ3NHd5JaRyQmuxbg22mWifzQoLB+Mn9YYsH7t2rnVaOUc5bCU6flGkagoTW ypCI/x+Hc7lhopNNqPk/mLZQ3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBkmD+j 0oQV4M6Vy1+5flWUzEyfMB8GA1UdIwQYMBaAFN2PPZY/qNHyLVf037KavXDSVY43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTA2Qy80NjYxOEIxQ0Y0 NkUxMUVDOEM2MDcwMEZDNEY5QUUwMi8zWTg5bGotbzBmSXRWX1Rmc3BxOWNOSlZq amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZODlsai1vMGZJdFZfVGZzcHE5Y05KVmpqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTA2Qy80NjYxOEIxQ0Y0NkUxMUVDOEM2MDcwMEZDNEY5QUUwMi8zWTg5bGotbzBm SXRWX1Rmc3BxOWNOSlZqamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ8W0lSAnekApB9H+F91nKhMtl0FvlR+kI+HrJY1BXy9gQ+O87e1sA 1pjDfkr5a8lWVHJbzzoMSxdBUEb66yZbzJY+GBDX3isvMVVdbRbm2fOp7WNuoBnX npuRal+jCCHWtVUGiJJI2HFBcD1YNqBfmNuqmqyB8RrHIMyt38C8w6ipKHkVAT54 ciUn8brEYxIek/ZZmrEWtmED+5Cia/p5ZJ2vF+eYCuMMRDeIf9TJVz4kfAvdMbKT mXLiRjWasNaHagwdecLbgU/f4KfuwYYytktkuH1kG0oueDrTi5Aea8lLzddRK4au hgNZ3Cmx74bDCdyrvdeD59e3Couok+5d -----END CERTIFICATE-----Generated at Sun Jan 25 10:51:02 2026 by rpki-client