This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft File: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft (raw, json) Hash identifier: vjM1M8lY2rTgnwNClSFrsZLJhNps00IqSYBUSXvXF4o= Subject key identifier: 89:85:21:11:A6:25:C1:93:FD:90:05:3C:91:A8:1D:35:80:BA:EA:36 Authority key identifier: D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 Certificate issuer: /CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft Manifest number: 01D2 Signing time: Sun 25 Jan 2026 02:07:52 +0000 Manifest this update: Sun 25 Jan 2026 02:07:51 +0000 Manifest next update: Sun 01 Feb 2026 02:07:51 +0000 Files and hashes: 1: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl (hash: 6+1hXoGwYarlCT6YUbFBpCj1FFLI0IoltOf+b3cvNHk=) 2: 98DB93A4301011EEA92BE919C4F9AE02.roa (hash: MrKs9S+pIK9ruhlRFpWtUpK3GffZ/Q4iUqs1HpDuQLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BDA, serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Validity Not Before: Jan 25 02:07:51 2026 GMT Not After : Feb 1 02:07:51 2026 GMT Subject: CN=69757af8-e648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:88:3e:7b:e8:85:d3:41:7c:f7:5c:72:fd:cc: c6:6b:2f:07:86:33:af:a1:a4:e3:47:5b:d4:7f:ff: 76:c5:f9:a9:d9:c5:ed:97:d5:2c:e4:0c:8f:f2:9b: 73:51:eb:ed:45:03:ca:b3:34:f1:29:e4:4f:c6:0d: 73:f9:1f:af:ea:88:94:86:c9:30:2d:54:cf:2f:5c: ae:4c:2b:33:07:c8:e0:98:47:f4:87:25:5f:63:04: fa:e6:db:d2:4a:10:5b:1b:76:a0:bb:eb:41:c5:09: f8:15:e6:c4:b4:d5:81:3d:10:21:9b:59:b5:10:dd: 65:9a:36:84:69:64:71:04:11:93:27:6a:c6:9c:ed: 9a:a8:34:2f:3c:a7:56:b2:13:f9:43:ea:ae:61:32: 56:b7:db:c5:8d:11:2c:d0:8d:6b:5c:26:af:76:5f: 09:29:aa:4c:0d:6c:1e:bd:c4:d6:fb:4e:3c:86:6e: 34:72:14:c5:ca:cc:4f:dc:e8:b0:8a:4e:d8:e6:53: bb:ac:f8:38:9a:44:58:df:79:a6:8c:e7:b5:b3:c1: 37:0b:19:65:4e:62:db:77:03:fc:55:3e:11:a4:de: 4e:12:2a:95:70:fd:36:c6:19:a8:88:11:d6:3b:38: 5f:a9:15:16:1a:b1:0a:3c:94:4c:ab:77:21:86:08: 00:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:85:21:11:A6:25:C1:93:FD:90:05:3C:91:A8:1D:35:80:BA:EA:36 X509v3 Authority Key Identifier: keyid:D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:8c:78:6e:b3:20:65:36:60:9e:29:ff:aa:38:b3:20:ac:85: d6:f7:18:0f:35:7c:c5:de:2d:4d:99:3a:5c:a4:df:33:1c:dc: 55:56:08:d0:ab:f2:6a:fd:fe:94:45:50:3a:cf:64:4a:74:c0: 7f:24:47:d2:16:10:06:8c:0a:81:66:93:1c:e1:14:ef:86:df: 41:05:b3:5a:86:15:ee:9a:0c:be:4d:d2:55:63:c0:4e:0e:da: 62:0a:d2:48:60:11:6d:b9:91:82:ea:5f:5d:84:4a:79:07:f6: 70:10:6b:ac:4f:5f:d0:79:1e:03:20:ae:22:77:40:57:9a:c2: 12:85:42:55:13:ff:2b:2c:1e:52:84:6e:62:a6:c8:f2:5f:a3: 06:ae:9f:8d:bc:2e:03:2d:df:b3:72:63:73:30:c8:b1:9f:3c: 20:e8:b0:24:79:fb:6e:ce:42:ce:d4:8a:87:e5:18:89:2d:b5: 71:6a:44:05:60:86:00:40:5c:15:5e:f1:5d:86:7a:ea:f4:cd: d3:85:28:73:25:e4:44:ce:64:c9:f6:c3:6e:a5:e6:88:b2:eb: 6a:ae:4a:c3:80:81:4b:c6:c5:06:a5:1f:a6:a8:9a:39:8e:47: 29:0f:f3:6f:b1:1c:2f:96:d0:7d:38:95:71:93:80:af:25:77: 8f:14:87:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCREExMTAvBgNVBAUTKEQ4QUYwN0Q0M0E5QjhCQkI4MUQ2MEU0QzE3N0VBODE4 RUM4QjczRTUwHhcNMjYwMTI1MDIwNzUxWhcNMjYwMjAxMDIwNzUxWjAYMRYwFAYD VQQDDA02OTc1N2FmOC1lNjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIg+e+iF00F891xy/czGay8HhjOvoaTjR1vUf/92xfmp2cXtl9Us5AyP8ptz UevtRQPKszTxKeRPxg1z+R+v6oiUhskwLVTPL1yuTCszB8jgmEf0hyVfYwT65tvS ShBbG3agu+tBxQn4FebEtNWBPRAhm1m1EN1lmjaEaWRxBBGTJ2rGnO2aqDQvPKdW shP5Q+quYTJWt9vFjREs0I1rXCavdl8JKapMDWwevcTW+048hm40chTFysxP3Oiw ik7Y5lO7rPg4mkRY33mmjOe1s8E3CxllTmLbdwP8VT4RpN5OEiqVcP02xhmoiBHW OzhfqRUWGrEKPJRMq3chhggAtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImFIRGm JcGT/ZAFPJGoHTWAuuo2MB8GA1UdIwQYMBaAFNivB9Q6m4u7gdYOTBd+qBjsi3Pl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJEQS9GNzNGMjBBNjMw MEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3dUIxZzVNRjM2b0dPeUxj LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLOEgxRHFiaTd1QjFnNU1GMzZvR095TGMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJEQS9GNzNGMjBBNjMwMEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3 dUIxZzVNRjM2b0dPeUxjLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBejHhusyBlNmCeKf+qOLMgrIXW9xgPNXzF3i1NmTpcpN8zHNxVVgjQ q/Jq/f6URVA6z2RKdMB/JEfSFhAGjAqBZpMc4RTvht9BBbNahhXumgy+TdJVY8BO DtpiCtJIYBFtuZGC6l9dhEp5B/ZwEGusT1/QeR4DIK4id0BXmsIShUJVE/8rLB5S hG5ipsjyX6MGrp+NvC4DLd+zcmNzMMixnzwg6LAkeftuzkLO1IqH5RiJLbVxakQF YIYAQFwVXvFdhnrq9M3ThShzJeREzmTJ9sNupeaIsutqrkrDgIFLxsUGpR+mqJo5 jkcpD/NvsRwvltB9OJVxk4CvJXePFIfC -----END CERTIFICATE-----Generated at Sun Jan 25 04:35:12 2026 by rpki-client