This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft File: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json) Hash identifier: nEJAhu5h1ptcdS7PS33nfDsRfDA1kUhChd78IkRN8us= Subject key identifier: 92:25:8D:01:B2:C9:04:2B:1D:1C:8C:9F:E1:93:B9:EC:4D:75:04:73 Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Certificate serial: 09A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft Manifest number: 099D Signing time: Sat 24 Jan 2026 19:27:13 +0000 Manifest this update: Sat 24 Jan 2026 19:27:12 +0000 Manifest next update: Sat 31 Jan 2026 19:27:12 +0000 Files and hashes: 1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: reDlLOEQbV9ZYP/zhTyiHOTn97memFJ+YL1nAMMRk3c=) 2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: 0cYkjMp/gtYpvp6HxvXFQpX0b09jvpiPKpMRszh/Xsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2468 (0x9a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Validity Not Before: Jan 24 19:27:12 2026 GMT Not After : Jan 31 19:27:12 2026 GMT Subject: CN=69751d11-b079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:3b:a0:d9:89:53:85:f5:5f:b5:c6:e5:a4: de:c9:7d:a5:5c:62:62:2a:7e:0a:ce:dd:56:71:e1: 38:c4:91:09:f3:de:11:cd:ff:c7:76:69:ce:f7:a3: 5e:89:a6:fc:71:6e:2c:d4:6d:a6:99:2d:ab:29:7a: 18:e8:0d:4d:0f:76:25:90:11:32:21:e8:76:c8:8b: c4:8e:03:76:e0:8a:3e:e4:56:01:b4:22:c7:c2:12: 80:71:1d:04:d1:5d:2c:ff:0a:47:b2:01:58:05:d6: 1a:67:42:2f:e3:d9:8e:a5:ea:a4:0c:90:49:ed:e2: 1f:69:bc:2d:fb:ad:bb:95:f0:9a:f1:8f:24:c7:ec: 54:8b:99:88:37:98:4d:3e:6d:05:12:db:ec:a4:f8: 9c:9b:81:43:50:c2:8e:8f:1d:64:9e:36:a8:ab:15: e1:91:8a:bf:7a:a0:ab:d8:c9:bf:4d:6c:fc:e6:d2: 6c:a5:8d:b6:09:d0:ef:09:f7:9b:36:3b:8a:21:fe: 25:fd:1d:57:71:3d:bb:00:6c:89:d7:a0:c4:3a:df: d7:5f:51:94:b0:f3:bb:f9:25:01:dd:fc:50:16:dd: dd:fa:12:05:5e:1b:ed:89:53:c1:d4:67:b5:0a:33: f5:5d:7a:20:c1:d8:0c:2b:ed:9d:e6:db:74:8b:80: a1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:25:8D:01:B2:C9:04:2B:1D:1C:8C:9F:E1:93:B9:EC:4D:75:04:73 X509v3 Authority Key Identifier: keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:8b:ca:fb:66:e9:69:1d:94:bc:ba:0f:cf:7b:20:66:21:37: 68:fe:c5:56:9a:8d:e2:2b:5e:33:69:00:ac:92:10:4c:2b:5f: 02:b6:53:b5:37:8b:02:b2:a0:68:93:18:0e:4b:f5:89:e3:30: b7:4c:76:79:6a:bf:02:91:cf:2f:88:49:fe:b1:2e:8d:34:d2: 2e:b7:9d:04:15:a1:6c:cb:8a:f8:44:2c:18:7b:2b:8c:7b:7d: 01:fb:d8:bd:7c:d8:2d:80:e8:f1:db:4f:15:05:36:a7:cf:2d: b5:5e:d3:c2:bb:5e:b8:9a:c2:d9:00:99:6c:01:20:fd:61:07: d3:83:be:42:55:da:1a:e3:cf:d1:78:6d:9b:6e:f8:c8:31:ac: 5e:18:92:08:ec:bd:15:79:18:22:1e:df:2f:a4:9f:06:55:1e: 10:ab:bf:a0:37:58:20:e8:ab:c5:de:d0:d6:63:05:39:ea:60: bd:3e:d5:fd:15:69:c7:aa:42:25:14:ea:02:b2:f2:40:38:80: 39:3f:a9:eb:7b:56:0c:13:ea:82:63:70:a8:e3:89:fe:53:7f: 2b:5d:0b:0d:59:54:c7:1a:91:d7:1e:01:e4:b7:d6:a7:a3:ba: 16:32:73:e6:45:88:55:e6:2d:bf:15:f2:20:4c:c7:67:74:f2: 9a:26:a3:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz QzYxODY4MjIwHhcNMjYwMTI0MTkyNzEyWhcNMjYwMTMxMTkyNzEyWjAYMRYwFAYD VQQDDA02OTc1MWQxMS1iMDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEg7oNmJU4X1X7XG5aTeyX2lXGJiKn4Kzt1WceE4xJEJ894Rzf/HdmnO96Ne iab8cW4s1G2mmS2rKXoY6A1ND3YlkBEyIeh2yIvEjgN24Io+5FYBtCLHwhKAcR0E 0V0s/wpHsgFYBdYaZ0Iv49mOpeqkDJBJ7eIfabwt+627lfCa8Y8kx+xUi5mIN5hN Pm0FEtvspPicm4FDUMKOjx1knjaoqxXhkYq/eqCr2Mm/TWz85tJspY22CdDvCfeb NjuKIf4l/R1XcT27AGyJ16DEOt/XX1GUsPO7+SUB3fxQFt3d+hIFXhvtiVPB1Ge1 CjP1XXogwdgMK+2d5tt0i4ChfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIljQGy yQQrHRyMn+GTuexNdQRzMB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkwRS84RDQxMzVGRUExMjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEz eFI5bGY4UGcyRW84WVlhQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxi8r7ZulpHZS8ug/PeyBmITdo/sVWmo3iK14zaQCskhBMK18CtlO1 N4sCsqBokxgOS/WJ4zC3THZ5ar8Ckc8viEn+sS6NNNIut50EFaFsy4r4RCwYeyuM e30B+9i9fNgtgOjx208VBTanzy21XtPCu164msLZAJlsASD9YQfTg75CVdoa48/R eG2bbvjIMaxeGJII7L0VeRgiHt8vpJ8GVR4Qq7+gN1gg6KvF3tDWYwU56mC9PtX9 FWnHqkIlFOoCsvJAOIA5P6nre1YME+qCY3Co44n+U38rXQsNWVTHGpHXHgHkt9an o7oWMnPmRYhV5i2/FfIgTMdndPKaJqN+ -----END CERTIFICATE-----Generated at Sun Jan 25 04:32:25 2026 by rpki-client