This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft File: 8dIEca4xiTbXk7RttEgiB9lyRYs.mft (raw, json) Hash identifier: tSA4uLsR0d4lwrDLiEu+nOG5yvcpQxBxOAthtqndJfE= Subject key identifier: CB:08:16:E6:31:11:F6:70:DD:9B:35:9B:4B:6B:12:5C:DE:51:6D:0C Authority key identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B Certificate issuer: /CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B Certificate serial: 0CE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft Manifest number: 0CCC Signing time: Sat 24 Jan 2026 17:52:47 +0000 Manifest this update: Sat 24 Jan 2026 17:52:46 +0000 Manifest next update: Sat 31 Jan 2026 17:52:46 +0000 Files and hashes: 1: 8dIEca4xiTbXk7RttEgiB9lyRYs.crl (hash: J46JuOohSgeuETb4LstXGVCJxTKat9BCl8jRjhnzgGc=) 2: 168AD09A04EF11EA9060B76BC4F9AE02.roa (hash: lMqPBu/BKT48fZ8pGUUoRP0HkCDNeelzqdKzBxYepxY=) 3: F4C2F7F604FF11EABFF6E022C4F9AE02.roa (hash: h0JVc0feBSsBtGgtIFmFXoruNLmCUIFMpwPnZkbgYJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3297 (0xce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8EAF, serialNumber=F1D20471AE318936D793B46DB4482207D972458B Validity Not Before: Jan 24 17:52:46 2026 GMT Not After : Jan 31 17:52:46 2026 GMT Subject: CN=697506ef-1751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:99:f9:74:2d:af:64:15:fb:34:73:80:be: 23:4c:29:02:73:9e:6e:74:d3:6e:60:0e:e2:06:ee: 62:d0:34:d2:7f:e4:6e:bf:30:27:2e:a4:fd:4c:0c: ab:d2:1d:12:c1:43:16:35:c7:d1:1f:90:16:0f:34: cb:a4:da:20:f8:4b:0c:33:1f:25:3c:b4:79:bc:73: 93:5e:d1:db:a8:74:f8:f3:33:15:d2:fc:1c:e7:e2: 0f:32:16:fe:0f:e6:8d:6b:8e:2e:68:ef:a5:98:d9: a9:c9:e3:d7:91:43:78:9c:b4:e0:72:ce:9c:f1:c1: e0:08:65:77:76:dd:5c:6b:fd:1e:e3:52:0a:70:4d: ea:1c:70:90:9e:22:9a:b0:58:57:a5:21:74:d2:88: 2a:7c:ae:67:92:17:ef:91:ba:da:97:a2:c7:64:29: ae:00:97:15:6d:40:9b:97:2b:15:1e:09:57:87:28: b8:8d:f0:44:e5:e1:04:8c:dc:38:95:51:43:33:93: 63:89:3d:29:46:af:39:6d:af:32:c2:dc:a8:f1:99: 8a:93:52:d4:fd:5a:c0:ff:8b:11:02:b1:71:e8:05: 3a:a5:fc:17:8c:18:1c:79:82:c5:ec:f5:91:b2:b6: 2d:a7:b0:b8:9d:d7:38:b2:d2:cb:c6:66:5b:9a:6d: 35:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:08:16:E6:31:11:F6:70:DD:9B:35:9B:4B:6B:12:5C:DE:51:6D:0C X509v3 Authority Key Identifier: keyid:F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:f4:6f:ab:89:53:41:53:e4:7b:63:c1:62:88:f7:a4:b7:79: 51:e2:10:bd:42:cf:30:99:11:16:0b:ca:e1:69:a0:1d:4d:9f: 63:ea:27:fd:2b:8e:21:e3:ac:66:d8:f6:61:d6:d7:1a:24:b1: 0d:fd:f1:b6:5e:91:81:fd:5e:23:b6:52:df:67:1d:1c:d8:10: 70:11:42:1d:91:d4:86:3f:9c:02:c8:ab:84:e3:3b:72:45:42: a4:60:e5:4b:c5:5f:76:f0:8a:ec:27:ab:39:9f:44:6f:6a:ba: 91:6d:e9:38:82:08:71:7b:0c:3f:cd:58:cd:54:bd:b4:5a:56: 1c:7c:a1:87:d5:c4:7b:a4:4a:6b:11:09:f2:bc:7c:bc:65:e3: a1:5b:35:ee:37:d6:23:5d:f1:6a:a3:61:2b:21:c4:fc:72:0c: c7:30:8d:e0:85:67:05:8c:aa:dc:00:95:74:cc:e6:d0:7c:c6: 49:f7:cb:3e:b0:89:1c:0f:f3:5f:28:8e:89:17:47:d4:bd:88: c3:4c:a5:4c:bf:ef:2d:a6:ef:12:1d:7f:31:5c:fd:bc:8a:16: a2:4b:65:04:03:b1:e5:1b:5a:13:e4:89:63:bc:e0:d2:ab:fa: 40:0d:5e:36:84:90:62:0c:f5:d7:78:d1:e4:bf:09:e9:49:2b: fd:f8:c7:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RDhFQUYxMTAvBgNVBAUTKEYxRDIwNDcxQUUzMTg5MzZENzkzQjQ2REI0NDgyMjA3 RDk3MjQ1OEIwHhcNMjYwMTI0MTc1MjQ2WhcNMjYwMTMxMTc1MjQ2WjAYMRYwFAYD VQQDDA02OTc1MDZlZi0xNzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNWZ+XQtr2QV+zRzgL4jTCkCc55udNNuYA7iBu5i0DTSf+RuvzAnLqT9TAyr 0h0SwUMWNcfRH5AWDzTLpNog+EsMMx8lPLR5vHOTXtHbqHT48zMV0vwc5+IPMhb+ D+aNa44uaO+lmNmpyePXkUN4nLTgcs6c8cHgCGV3dt1ca/0e41IKcE3qHHCQniKa sFhXpSF00ogqfK5nkhfvkbral6LHZCmuAJcVbUCblysVHglXhyi4jfBE5eEEjNw4 lVFDM5NjiT0pRq85ba8ywtyo8ZmKk1LU/VrA/4sRArFx6AU6pfwXjBgceYLF7PWR srYtp7C4ndc4stLLxmZbmm01PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsIFuYx EfZw3Zs1m0trElzeUW0MMB8GA1UdIwQYMBaAFPHSBHGuMYk215O0bbRIIgfZckWL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEVBRi8xMEIwRTNEMDA0 RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlUYlhrN1J0dEVnaUI5bHlS WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhkSUVjYTR4aVRiWGs3UnR0RWdpQjlseVJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEVBRi8xMEIwRTNEMDA0RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlU YlhrN1J0dEVnaUI5bHlSWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY9G+riVNBU+R7Y8FiiPekt3lR4hC9Qs8wmREWC8rhaaAdTZ9j6if9 K44h46xm2PZh1tcaJLEN/fG2XpGB/V4jtlLfZx0c2BBwEUIdkdSGP5wCyKuE4zty RUKkYOVLxV928IrsJ6s5n0RvarqRbek4gghxeww/zVjNVL20WlYcfKGH1cR7pEpr EQnyvHy8ZeOhWzXuN9YjXfFqo2ErIcT8cgzHMI3ghWcFjKrcAJV0zObQfMZJ98s+ sIkcD/NfKI6JF0fUvYjDTKVMv+8tpu8SHX8xXP28ihaiS2UEA7HlG1oT5IljvODS q/pADV42hJBiDPXXeNHkvwnpSSv9+Mea -----END CERTIFICATE-----Generated at Sun Jan 25 07:47:01 2026 by rpki-client