This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft File: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft (raw, json) Hash identifier: gQ8J5lCBoVRhDFg3hqWhE3CO4QJ10o/EfWebPgZ1q1Y= Subject key identifier: 90:0A:09:7C:0B:6D:1C:A0:75:8C:95:54:34:91:46:A0:9C:AD:8C:C3 Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 Certificate issuer: /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Certificate serial: 0AB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft Manifest number: 0AAF Signing time: Sat 24 Jan 2026 18:59:38 +0000 Manifest this update: Sat 24 Jan 2026 18:59:38 +0000 Manifest next update: Sat 31 Jan 2026 18:59:38 +0000 Files and hashes: 1: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl (hash: WhHW4ny6pcI/gE75lE0YVOf85/bZGtm6YQYJl6FOO8Y=) 2: 47772F946C2011EAA5965B3CC4F9AE02.roa (hash: VtwEbio1gRB7Ch5LlsoNkh9yhOMrAAqsTjIWAhPZFj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2742 (0xab6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76BE, serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Validity Not Before: Jan 24 18:59:38 2026 GMT Not After : Jan 31 18:59:38 2026 GMT Subject: CN=6975169a-caab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:18:c5:2e:13:9e:19:9a:67:85:67:e2:27:68: fc:59:42:f1:72:73:2d:fe:54:ae:32:a1:86:a4:b1: 60:1a:2c:2b:f4:b9:b8:2f:45:9b:70:cb:4b:b2:ba: 70:65:e2:96:31:fc:88:a4:19:2b:2b:4e:b8:c5:3f: d6:e7:3f:3e:02:95:48:09:f4:90:41:e1:75:66:e7: e9:f3:8f:ae:83:0d:3b:3e:c5:f4:76:e6:75:24:c7: 66:4f:e0:9d:ea:10:11:48:20:1c:94:1e:75:20:68: 77:47:f2:75:3c:7b:28:37:4f:f7:cd:ea:57:04:1a: 7d:65:59:8c:65:f5:5f:d9:d2:8c:d9:fc:e3:1b:01: 7c:39:65:de:4c:9a:9d:bc:ae:db:75:22:0b:ac:e1: 5c:44:4b:fb:22:2a:56:57:6d:b5:4e:f3:87:cc:c9: 5a:fb:28:44:47:c0:eb:12:4a:62:09:9b:f4:6a:6f: 55:b9:b5:4d:95:d5:f8:b5:01:6d:4e:db:ec:4a:0b: db:9a:cb:09:ba:b0:49:d5:5c:0a:a4:d1:66:c2:ff: b7:71:0e:e3:01:70:e6:e8:94:c2:7b:a2:f2:be:e9: 5d:f6:b4:ed:f2:a9:5d:50:64:ca:94:d4:ae:0a:9e: 88:e8:a6:19:00:03:34:4f:19:81:58:43:e1:cf:d4: 30:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0A:09:7C:0B:6D:1C:A0:75:8C:95:54:34:91:46:A0:9C:AD:8C:C3 X509v3 Authority Key Identifier: keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:f1:f6:72:ab:3a:9a:06:4e:4b:61:7f:bf:5e:e4:94:c8:55: b8:09:c9:c3:26:b4:96:ef:cc:66:28:f6:da:63:7a:ae:f7:bd: 63:c8:5d:40:dd:39:77:9f:b6:55:70:f5:33:df:68:62:fa:a6: 30:b1:99:a3:21:36:c1:44:c8:1e:73:a8:9f:9c:8f:5b:58:1d: ee:7c:a4:00:5b:5a:3f:b0:49:9d:34:98:f2:2c:ad:64:09:52: 2c:23:fc:52:52:4f:10:db:ef:f6:8a:2f:20:58:30:43:76:9f: dd:5c:44:7b:6c:56:61:da:33:7a:7d:5f:09:55:0e:cf:c7:74: 06:b9:33:7d:b3:72:d0:c8:3b:af:9f:fd:fe:2e:d5:3c:ea:0f: c1:a6:fd:9c:5a:17:a9:c5:21:05:16:55:11:54:e3:fd:71:7e: 62:d8:40:47:79:61:00:7d:4f:21:7b:0b:36:61:78:d2:48:a3: 9d:d4:5f:91:9c:fa:b3:9d:ad:d8:e3:e4:11:c4:9b:81:b3:6f: 70:27:79:36:84:41:51:85:62:f2:d4:72:3c:97:ac:32:96:04: 29:a8:2a:70:c5:9a:e1:98:4a:33:00:a8:f4:d5:6f:3a:04:b7: 6e:07:ea:1c:ec:73:55:77:e9:f7:17:42:1c:b9:2e:be:cc:15: 77:71:15:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2QkUxMTAvBgNVBAUTKEREMTE4QkJCMzQ5RjJDOUI0MEREOUJCNzFBNUI2MUM2 NEJEQjNFMTEwHhcNMjYwMTI0MTg1OTM4WhcNMjYwMTMxMTg1OTM4WjAYMRYwFAYD VQQDDA02OTc1MTY5YS1jYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBjFLhOeGZpnhWfiJ2j8WULxcnMt/lSuMqGGpLFgGiwr9Lm4L0WbcMtLsrpw ZeKWMfyIpBkrK064xT/W5z8+ApVICfSQQeF1Zufp84+ugw07PsX0duZ1JMdmT+Cd 6hARSCAclB51IGh3R/J1PHsoN0/3zepXBBp9ZVmMZfVf2dKM2fzjGwF8OWXeTJqd vK7bdSILrOFcREv7IipWV221TvOHzMla+yhER8DrEkpiCZv0am9VubVNldX4tQFt TtvsSgvbmssJurBJ1VwKpNFmwv+3cQ7jAXDm6JTCe6Lyvuld9rTt8qldUGTKlNSu Cp6I6KYZAAM0TxmBWEPhz9QwOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAKCXwL bRygdYyVVDSRRqCcrYzDMB8GA1UdIwQYMBaAFN0Ri7s0nyybQN2btxpbYcZL2z4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZCRS80NEMyOUUwRTZC NzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxKdEEzWnUzR2x0aHhrdmJQ aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNSR0x1elNmTEp0QTNadTNHbHRoeGt2YlBoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZCRS80NEMyOUUwRTZCNzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxK dEEzWnUzR2x0aHhrdmJQaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk8fZyqzqaBk5LYX+/XuSUyFW4CcnDJrSW78xmKPbaY3qu971jyF1A 3Tl3n7ZVcPUz32hi+qYwsZmjITbBRMgec6ifnI9bWB3ufKQAW1o/sEmdNJjyLK1k CVIsI/xSUk8Q2+/2ii8gWDBDdp/dXER7bFZh2jN6fV8JVQ7Px3QGuTN9s3LQyDuv n/3+LtU86g/Bpv2cWhepxSEFFlURVOP9cX5i2EBHeWEAfU8hews2YXjSSKOd1F+R nPqzna3Y4+QRxJuBs29wJ3k2hEFRhWLy1HI8l6wylgQpqCpwxZrhmEozAKj01W86 BLduB+oc7HNVd+n3F0IcuS6+zBV3cRUX -----END CERTIFICATE-----Generated at Sun Jan 25 09:53:19 2026 by rpki-client