This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft File: s8iROAA2kV3l6qhM8TOrOzWz6dM.mft (raw, json) Hash identifier: 0V4jGKnWeMONi4c2+ixFCKU01UXZHmjxvesM9c6GN34= Subject key identifier: A9:A4:A7:79:C8:D6:6B:94:06:E2:78:CA:24:43:5A:C6:3D:98:EA:35 Authority key identifier: B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 Certificate issuer: /CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Certificate serial: 07E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft Manifest number: 0D4B Signing time: Sat 24 Jan 2026 20:35:43 +0000 Manifest this update: Sat 24 Jan 2026 20:35:43 +0000 Manifest next update: Sat 31 Jan 2026 20:35:43 +0000 Files and hashes: 1: s8iROAA2kV3l6qhM8TOrOzWz6dM.crl (hash: x8VyKTrNt6xd3Dgnai5fwwyRZwJY6Ca5meCAiCqcGng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2023 (0x7e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D891D, serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Validity Not Before: Jan 24 20:35:43 2026 GMT Not After : Jan 31 20:35:43 2026 GMT Subject: CN=69752d1f-9a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:be:1a:d7:d9:9f:e7:f7:28:87:2b:64:b3:ad: b1:e6:ec:94:6e:68:3d:32:65:b4:5d:68:37:5f:5e: 4e:ef:e8:6c:8f:d8:71:62:21:65:f0:46:9a:76:18: fa:c2:6f:12:e2:23:aa:b7:2c:49:ef:18:04:f8:c7: e0:0d:01:85:15:7a:23:b8:14:f8:a8:32:24:d5:31: ca:0e:57:5d:e1:a4:90:1c:a1:e3:2d:a5:46:45:b6: 48:96:be:34:a9:2b:76:71:03:e8:cf:de:42:33:8a: b0:cf:aa:66:e4:a7:07:fc:4a:f6:9b:cc:df:04:57: 70:8b:d6:9e:74:ab:19:2d:3c:af:6d:0c:62:ba:ee: 4b:7e:9a:19:d4:eb:b1:e4:7e:39:11:db:e3:e1:d0: 6a:0d:1b:3c:84:cc:7d:6f:54:cf:7f:d2:2c:c7:13: 9b:d2:cb:d7:65:4e:0e:53:13:8c:97:73:3e:93:4c: d5:a1:55:90:42:7e:dd:e0:e6:ed:11:f2:6d:c4:a8: a9:3c:3d:50:d6:11:45:53:27:23:39:bb:11:ef:0e: 14:31:89:de:d9:3e:98:16:06:2e:32:8a:03:a8:16: 7b:45:0e:29:f4:8c:b0:9d:f4:1d:76:e5:51:4f:bd: 85:60:5f:a1:84:e9:f3:a8:cd:6c:3f:8d:4d:4f:2b: 2b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A4:A7:79:C8:D6:6B:94:06:E2:78:CA:24:43:5A:C6:3D:98:EA:35 X509v3 Authority Key Identifier: keyid:B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a1:91:90:3e:8d:8f:f8:27:f9:c3:1c:21:89:cc:cd:d0:7d: 1f:65:27:28:9d:ba:84:19:6f:4f:f5:ac:3d:fd:78:b5:a7:2d: 4e:1d:53:a8:19:7d:d3:27:fc:51:8f:6d:0f:b5:49:2b:4c:92: 81:9b:3a:85:3f:e2:01:4a:a5:ad:52:18:cc:90:13:d7:ff:6d: 2a:55:35:35:06:a7:1d:5e:da:04:7c:87:12:c2:f8:1e:b5:7e: 26:b1:e3:43:06:0a:71:90:06:23:37:0b:cd:f9:c4:bb:fb:5c: f3:3d:34:09:c1:c9:66:76:a4:b3:f3:89:2a:05:e5:54:26:1a: a6:9f:ec:4b:d8:14:dc:e3:f6:e6:36:b4:4d:22:14:d5:e1:ac: ec:e1:5a:e6:c4:aa:bd:78:12:64:3f:1d:4a:f0:4f:eb:b7:24: e3:15:20:2a:6b:56:27:01:26:7d:67:fd:36:49:63:3a:d4:3a: f2:3c:4f:a3:cb:ba:51:25:d9:47:b5:41:f4:19:4f:9b:fe:07: 35:de:22:6b:c9:1c:f7:94:f1:bf:67:f3:5f:05:33:26:b4:59: e8:f2:aa:ef:b3:94:d7:3d:99:a4:bb:75:3f:fc:db:83:13:4c: c5:9a:e0:66:6f:ee:18:19:91:0b:47:e3:d2:e2:05:ce:59:6b: 2b:45:9a:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MUQxMTAvBgNVBAUTKEIzQzg5MTM4MDAzNjkxNURFNUVBQTg0Q0YxMzNBQjNC MzVCM0U5RDMwHhcNMjYwMTI0MjAzNTQzWhcNMjYwMTMxMjAzNTQzWjAYMRYwFAYD VQQDDA02OTc1MmQxZi05YTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmL4a19mf5/cohytks62x5uyUbmg9MmW0XWg3X15O7+hsj9hxYiFl8Eaadhj6 wm8S4iOqtyxJ7xgE+MfgDQGFFXojuBT4qDIk1THKDldd4aSQHKHjLaVGRbZIlr40 qSt2cQPoz95CM4qwz6pm5KcH/Er2m8zfBFdwi9aedKsZLTyvbQxiuu5LfpoZ1Oux 5H45Edvj4dBqDRs8hMx9b1TPf9IsxxOb0svXZU4OUxOMl3M+k0zVoVWQQn7d4Obt EfJtxKipPD1Q1hFFUycjObsR7w4UMYne2T6YFgYuMooDqBZ7RQ4p9IywnfQdduVR T72FYF+hhOnzqM1sP41NTysrIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmkp3nI 1muUBuJ4yiRDWsY9mOo1MB8GA1UdIwQYMBaAFLPIkTgANpFd5eqoTPEzqzs1s+nT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtWM2w2cWhNOFRPck96V3o2 ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4aVJPQUEya1YzbDZxaE04VE9yT3pXejZkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkxRC8zODFBOEYyQTFDQzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtW M2w2cWhNOFRPck96V3o2ZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsoZGQPo2P+Cf5wxwhiczN0H0fZSconbqEGW9P9aw9/Xi1py1OHVOo GX3TJ/xRj20PtUkrTJKBmzqFP+IBSqWtUhjMkBPX/20qVTU1BqcdXtoEfIcSwvge tX4mseNDBgpxkAYjNwvN+cS7+1zzPTQJwclmdqSz84kqBeVUJhqmn+xL2BTc4/bm NrRNIhTV4azs4VrmxKq9eBJkPx1K8E/rtyTjFSAqa1YnASZ9Z/02SWM61DryPE+j y7pRJdlHtUH0GU+b/gc13iJryRz3lPG/Z/NfBTMmtFno8qrvs5TXPZmku3U//NuD E0zFmuBmb+4YGZELR+PS4gXOWWsrRZpx -----END CERTIFICATE-----Generated at Sun Jan 25 09:25:55 2026 by rpki-client