This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft File: T-09NyGnirIEhs2vNKOuaRfYfL4.mft (raw, json) Hash identifier: Wy+ShTqZaHKqE3p20VgiWhBI0bePfkl3syQpCdvyT3k= Subject key identifier: 65:D9:76:2D:4B:84:2D:CC:17:9A:76:00:62:96:ED:10:DC:B1:74:28 Authority key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE Certificate issuer: /CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Certificate serial: 0CE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft Manifest number: 0CDF Signing time: Sat 24 Jan 2026 17:46:24 +0000 Manifest this update: Sat 24 Jan 2026 17:46:23 +0000 Manifest next update: Sat 31 Jan 2026 17:46:23 +0000 Files and hashes: 1: T-09NyGnirIEhs2vNKOuaRfYfL4.crl (hash: F/xB7rPBC381i3md/DHUpX/OcK+eclHFD3hNkfXc2Sk=) 2: 21997AB0FEBC11E9B0463650C4F9AE02.roa (hash: kORq6/cl+oCzGu+ttlLoR0HpOr8sfMN0azjct0QnY7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3303 (0xce7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8F57, serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Validity Not Before: Jan 24 17:46:23 2026 GMT Not After : Jan 31 17:46:23 2026 GMT Subject: CN=69750570-0883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6c:b4:1c:d8:37:7d:7e:6c:96:02:17:5c:d7: 80:c9:38:9c:fe:14:8d:78:37:c4:ee:62:4d:f8:1c: 91:24:83:57:c7:b7:fb:55:ff:19:90:36:6d:a8:28: 46:02:cb:98:3e:c9:0e:f0:aa:1f:b8:74:c4:f1:36: 29:9f:09:91:c2:4c:54:16:bd:65:0a:e2:ba:f9:50: f1:ec:40:e9:56:22:bf:10:0d:27:37:b5:ac:85:39: ca:dd:e6:33:de:94:88:ce:97:49:61:ed:e1:07:5e: c3:bd:8c:6f:6f:25:c3:24:1d:15:b7:8b:2d:4a:f3: bc:5d:24:72:f0:4e:52:72:0d:3f:e7:8b:c3:eb:ae: 07:ab:4c:62:fa:f0:11:70:c0:ec:da:9b:0f:36:f4: ae:dc:85:63:38:68:94:8a:0f:37:20:8d:99:53:e7: 18:4e:c3:1c:89:94:52:a7:64:60:a9:f4:ce:53:62: bc:fb:a2:1c:1b:6a:8d:9b:5c:ec:32:79:8f:c1:8a: 0c:d7:1a:9a:8b:06:2d:06:9a:a0:a9:c3:37:83:5e: 40:3b:68:a5:1f:f9:37:2f:8b:32:1d:05:d7:d2:42: 4a:ae:ed:67:75:e1:c4:99:76:dd:35:1a:1c:0e:33: 1f:da:9b:9d:2b:e0:14:92:03:dd:a3:8b:d0:0a:29: 8c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D9:76:2D:4B:84:2D:CC:17:9A:76:00:62:96:ED:10:DC:B1:74:28 X509v3 Authority Key Identifier: keyid:4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:a2:1c:2a:bd:35:b1:97:fe:80:0c:c6:5f:54:2e:0f:e6:36: f3:4f:6e:91:36:a6:38:bf:56:56:f7:64:3f:2c:d6:1d:fc:e8: 4a:ab:0b:43:51:e7:2b:84:75:6e:95:b3:a3:b9:c2:20:95:c6: 56:e1:fe:2f:17:9c:92:73:6c:90:3f:a7:a5:29:11:29:e6:97: 85:cf:1c:75:49:02:72:b0:b1:50:60:a7:09:ab:89:78:fb:a3: 66:cb:90:d8:69:cc:8a:e8:cf:68:a6:4f:3e:51:45:30:ec:69: 5c:15:ae:b0:ee:62:4f:f7:2a:16:2e:aa:63:9c:35:80:3d:62: 63:14:ba:f1:29:39:3b:a9:5b:9d:3a:bb:17:b6:12:ce:64:e1: a5:3d:9d:8e:6c:e9:b1:1a:13:de:cf:8e:93:52:29:19:81:f6: 93:83:67:e8:19:f5:6f:48:04:2e:58:b7:f8:4e:8e:25:6a:cd: c1:22:3f:2d:22:4f:ba:0b:8f:fb:f5:8f:9c:b0:bc:f0:66:0c: 5b:65:5d:9d:80:6a:b5:62:72:e3:af:43:ca:3d:c6:11:51:68: 6a:cc:c1:7f:d0:db:31:38:2b:6d:a0:26:ca:7f:4c:d4:71:2d: ce:13:ab:d3:e6:04:bb:f6:d8:28:de:1d:f9:d8:04:49:22:df: ec:97:cc:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RDhGNTcxMTAvBgNVBAUTKDRGRUQzRDM3MjFBNzhBQjIwNDg2Q0RBRjM0QTNBRTY5 MTdEODdDQkUwHhcNMjYwMTI0MTc0NjIzWhcNMjYwMTMxMTc0NjIzWjAYMRYwFAYD VQQDDA02OTc1MDU3MC0wODgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWy0HNg3fX5slgIXXNeAyTic/hSNeDfE7mJN+ByRJINXx7f7Vf8ZkDZtqChG AsuYPskO8KofuHTE8TYpnwmRwkxUFr1lCuK6+VDx7EDpViK/EA0nN7WshTnK3eYz 3pSIzpdJYe3hB17DvYxvbyXDJB0Vt4stSvO8XSRy8E5Scg0/54vD664Hq0xi+vAR cMDs2psPNvSu3IVjOGiUig83II2ZU+cYTsMciZRSp2RgqfTOU2K8+6IcG2qNm1zs MnmPwYoM1xqaiwYtBpqgqcM3g15AO2ilH/k3L4syHQXX0kJKru1ndeHEmXbdNRoc DjMf2pudK+AUkgPdo4vQCimMJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXZdi1L hC3MF5p2AGKW7RDcsXQoMB8GA1UdIwQYMBaAFE/tPTchp4qyBIbNrzSjrmkX2Hy+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEY1Ny80QzU5Rjk2NkZF QkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmlySUVoczJ2TktPdWFSZllm TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtMDlOeUduaXJJRWhzMnZOS091YVJmWWZMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEY1Ny80QzU5Rjk2NkZFQkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmly SUVoczJ2TktPdWFSZllmTDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjohwqvTWxl/6ADMZfVC4P5jbzT26RNqY4v1ZW92Q/LNYd/OhKqwtD UecrhHVulbOjucIglcZW4f4vF5ySc2yQP6elKREp5peFzxx1SQJysLFQYKcJq4l4 +6Nmy5DYacyK6M9opk8+UUUw7GlcFa6w7mJP9yoWLqpjnDWAPWJjFLrxKTk7qVud OrsXthLOZOGlPZ2ObOmxGhPez46TUikZgfaTg2foGfVvSAQuWLf4To4las3BIj8t Ik+6C4/79Y+csLzwZgxbZV2dgGq1YnLjr0PKPcYRUWhqzMF/0NsxOCttoCbKf0zU cS3OE6vT5gS79tgo3h352ARJIt/sl8xq -----END CERTIFICATE-----Generated at Sun Jan 25 04:26:49 2026 by rpki-client