This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft File: -iKAHFKuKl_EkbfL6-aO_KLI0dk.mft (raw, json) Hash identifier: wq5Q1eMsSJ4xElzXLBXuNgeuyQ26KgX4nXTo7OhLtDk= Subject key identifier: 95:79:1F:D4:59:A4:BE:BB:99:A3:C5:D2:5F:0A:CB:E0:DA:A5:F8:85 Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 Certificate issuer: /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft Manifest number: D3 Signing time: Sun 25 Jan 2026 04:57:03 +0000 Manifest this update: Sun 25 Jan 2026 04:57:02 +0000 Manifest next update: Sun 01 Feb 2026 04:57:02 +0000 Files and hashes: 1: -iKAHFKuKl_EkbfL6-aO_KLI0dk.crl (hash: t30AFUABs1i2fH7LKUB8JmFiVSFAV+fCMBzfH6cNkqQ=) 2: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (hash: Vr8pXD8G4eSp3CxAKl8qQ0s6JHPMaTbvSElZhIh+h1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D837B, serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Validity Not Before: Jan 25 04:57:02 2026 GMT Not After : Feb 1 04:57:02 2026 GMT Subject: CN=6975a29f-7c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:00:c6:45:c0:37:0d:fa:7f:51:6f:4e:8b:a5: de:bb:97:f7:92:fb:3c:04:3d:89:9e:f8:15:f2:21: f7:45:1a:d8:98:a5:3e:f3:cb:40:88:2b:d0:60:6a: 2a:1e:8a:1a:4d:6d:bf:73:28:c7:f0:c9:69:e0:8a: d9:8e:7c:52:f7:9c:73:c3:9c:7f:6b:d5:a4:ff:25: 2e:3c:08:27:99:ff:ce:b1:78:83:e0:b7:48:31:25: c3:64:80:f8:f7:ac:e4:8f:19:37:9f:ec:76:a7:ce: 69:d6:bc:33:78:f8:f6:c5:ef:9f:9f:e7:3e:9f:17: 22:00:2f:8d:65:ff:77:dd:8f:86:b7:6c:42:2f:32: 15:0a:db:a7:25:9b:86:18:31:91:bc:e8:eb:8f:68: 65:e2:df:e7:32:34:3a:d9:13:1f:c4:c3:52:ae:51: 32:be:70:32:8f:0c:08:34:aa:9a:29:3f:66:9d:ce: ea:3f:f7:f4:0d:e4:a1:bd:81:89:59:5e:2d:f8:c6: f3:fc:11:5d:4d:b9:ea:70:5a:eb:bb:39:84:90:3c: cf:34:0f:68:b1:10:4f:e2:89:21:3d:f1:1a:88:71: 0c:31:22:2a:33:35:3b:34:fa:72:a4:01:8c:c7:a6: 07:04:97:eb:52:7c:bd:91:c2:d1:c0:4a:58:3c:9a: 86:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:79:1F:D4:59:A4:BE:BB:99:A3:C5:D2:5F:0A:CB:E0:DA:A5:F8:85 X509v3 Authority Key Identifier: keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:be:25:28:80:cc:60:d9:4d:40:07:a8:f5:0c:8b:e0:7c:ea: 0d:22:a4:53:46:97:ba:bf:4a:46:10:c3:54:49:d7:eb:61:ae: 62:e8:f5:7f:b0:20:10:ca:c4:28:38:86:d0:6b:30:d5:4b:c3: 96:e0:3a:89:42:37:d9:24:fe:05:2d:c8:d5:ec:4c:85:ad:7a: 62:78:1d:57:8b:47:e6:a7:da:61:3d:e3:14:c9:66:15:43:c4: b8:a5:44:74:05:18:ea:b9:ac:8f:11:62:f3:40:37:74:96:d5: 07:56:9d:e4:fe:de:e9:f5:62:c9:0c:ad:f3:89:82:68:fc:bb: e8:72:50:70:9e:15:29:41:64:94:bd:34:d3:fd:72:81:62:2c: c0:24:5b:d0:fa:77:ad:b3:f1:4b:d3:d0:d2:c5:e6:db:f7:f0: c8:4f:12:e5:03:8e:3d:c2:93:61:02:fc:6b:e3:7e:89:c7:53: b0:5a:1c:b7:cd:ea:00:e4:d8:2f:2d:99:bd:2c:0c:e4:79:12: f7:2c:5e:b4:02:64:07:a1:d6:59:6d:57:f9:85:2b:6e:a6:5d: a0:8b:63:ca:d0:7c:2e:52:f5:f4:68:82:60:8f:d4:18:00:c9: 40:3d:21:e5:91:c0:80:d3:57:67:4e:da:f3:b8:a9:70:b1:2d: 34:35:aa:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RDgzN0IxMTAvBgNVBAUTKEZBMjI4MDFDNTJBRTJBNUZDNDkxQjdDQkVCRTY4RUZD QTJDOEQxRDkwHhcNMjYwMTI1MDQ1NzAyWhcNMjYwMjAxMDQ1NzAyWjAYMRYwFAYD VQQDDA02OTc1YTI5Zi03YzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApADGRcA3Dfp/UW9Oi6Xeu5f3kvs8BD2JnvgV8iH3RRrYmKU+88tAiCvQYGoq HooaTW2/cyjH8Mlp4IrZjnxS95xzw5x/a9Wk/yUuPAgnmf/OsXiD4LdIMSXDZID4 96zkjxk3n+x2p85p1rwzePj2xe+fn+c+nxciAC+NZf933Y+Gt2xCLzIVCtunJZuG GDGRvOjrj2hl4t/nMjQ62RMfxMNSrlEyvnAyjwwINKqaKT9mnc7qP/f0DeShvYGJ WV4t+Mbz/BFdTbnqcFrruzmEkDzPNA9osRBP4okhPfEaiHEMMSIqMzU7NPpypAGM x6YHBJfrUny9kcLRwEpYPJqGmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJV5H9RZ pL67maPF0l8Ky+DapfiFMB8GA1UdIwQYMBaAFPoigBxSripfxJG3y+vmjvyiyNHZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM3Qi8xNThEN0YzQ0I5 OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi8taUtBSEZLdUtsX0VrYmZMNi1hT19LTEkw ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1pS0FIRkt1S2xfRWtiZkw2LWFPX0tMSTBkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODM3Qi8xNThEN0YzQ0I5OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi8taUtBSEZLdUts X0VrYmZMNi1hT19LTEkwZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjviUogMxg2U1AB6j1DIvgfOoNIqRTRpe6v0pGEMNUSdfrYa5i6PV/ sCAQysQoOIbQazDVS8OW4DqJQjfZJP4FLcjV7EyFrXpieB1Xi0fmp9phPeMUyWYV Q8S4pUR0BRjquayPEWLzQDd0ltUHVp3k/t7p9WLJDK3ziYJo/LvoclBwnhUpQWSU vTTT/XKBYizAJFvQ+nets/FL09DSxebb9/DITxLlA449wpNhAvxr436Jx1OwWhy3 zeoA5NgvLZm9LAzkeRL3LF60AmQHodZZbVf5hStupl2gi2PK0HwuUvX0aIJgj9QY AMlAPSHlkcCA01dnTtrzuKlwsS00Nao+ -----END CERTIFICATE-----Generated at Sun Jan 25 23:12:53 2026 by rpki-client