This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft File: f2vh1aJzD8In-vyJbRNDMkF4MXk.mft (raw, json) Hash identifier: VeBFy3llqwBqD3AI8bKCrqoIUoaHcPytB+q8GISr9A8= Subject key identifier: 29:B6:08:6D:E4:FD:29:EE:70:7B:9D:39:03:82:66:93:45:E9:E2:46 Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Certificate serial: 0902 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft Manifest number: 0809 Signing time: Sat 24 Jan 2026 21:27:01 +0000 Manifest this update: Sat 24 Jan 2026 21:27:01 +0000 Manifest next update: Sat 31 Jan 2026 21:27:01 +0000 Files and hashes: 1: f2vh1aJzD8In-vyJbRNDMkF4MXk.crl (hash: OQzrqhIwBiB9cZBIUjNh1SwI6x1oRx3Lm4fB7Za9NPo=) 2: 95EC5BBE0DC811F0A0561D5AC4F9AE02.roa (hash: wM1mmKNlwwEGHyhB8WEo2P8zb520cmuZMxNTLioe/2U=) 3: 284AFDA0F86011EE8DCC542DC4F9AE02.roa (hash: 80Bbu5vAr9GzJbHLW7ykwoxorF8FcLcIQYcqc83u1us=) 4: 71921B808DBD11EBB4566432C4F9AE02.roa (hash: w9Ld0KkWk+HSLE94pTgnMmO75l3YO/TEPXrwE1OHV3U=) 5: 5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (hash: XMlKN3xoWR211awSFj7o4wXNUVPU6g4tGLZ46VoBBkc=) 6: DB120D6EC34A11EB9559E184C4F9AE02.roa (hash: /m3np215OehHUCdDTNchzJpCWnkgfvYQ66txJ67HLU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2306 (0x902) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Validity Not Before: Jan 24 21:27:01 2026 GMT Not After : Jan 31 21:27:01 2026 GMT Subject: CN=69753925-9a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6f:f4:e0:93:3e:3a:34:d2:31:ce:62:ed:a2: 7d:5b:ab:16:47:44:f4:3f:6d:bd:dc:5c:98:e9:9b: 5c:ab:37:61:be:cf:0e:5a:55:f0:ad:30:11:5f:66: 76:4a:93:7f:96:c3:68:54:ae:9b:2f:0c:06:20:7b: 24:f5:62:2a:e0:d3:b3:57:48:f2:a5:ed:30:f0:49: 60:ca:5a:90:ad:64:17:70:01:0f:b2:e3:75:0d:05: fd:27:9b:e6:c4:f9:68:41:eb:6b:ee:3b:8b:35:eb: e7:46:c6:62:99:da:e7:f3:b2:36:89:49:ff:2f:d8: 39:ca:c3:3c:ca:d1:f9:e1:a4:ec:bc:9b:5b:2f:93: 22:f5:62:df:e4:63:41:de:05:8d:60:1d:51:e9:f5: 07:3b:3d:63:f5:89:96:d8:db:13:b1:5b:60:49:d4: 37:36:60:a2:8f:91:7f:69:ac:d6:82:8c:a2:76:b1: c9:1e:46:69:ea:c4:35:7b:aa:51:58:b5:89:b1:df: b9:80:09:07:60:73:24:e2:09:44:95:31:e5:8e:ae: 4f:89:1b:93:8b:51:88:cd:79:32:ab:b0:fb:d0:88: 4a:56:67:3a:d5:f4:68:f8:1e:6b:c0:4b:42:e4:c5: 00:ca:09:69:59:32:36:35:6d:03:77:3d:16:5b:8e: 3e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B6:08:6D:E4:FD:29:EE:70:7B:9D:39:03:82:66:93:45:E9:E2:46 X509v3 Authority Key Identifier: keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:ff:d4:4a:a7:f1:c3:5a:b3:d1:a5:e7:18:4d:68:0a:2a:d6: 84:14:de:07:67:4e:8a:dd:6a:c5:d5:24:c6:c1:27:cd:ad:c9: 0c:d5:2f:70:4d:55:01:cb:0d:ca:bf:f0:2b:e7:e3:a6:1f:16: 73:27:a9:6c:c4:9d:18:09:3a:08:cf:20:8e:f8:48:cc:e4:b7: 26:4f:06:65:33:47:ba:e9:54:aa:94:f4:e7:60:5a:f2:d4:5c: de:14:23:32:33:a5:00:b4:c6:4c:5f:81:bc:23:83:97:39:a9: c4:f2:fe:98:22:ad:b2:eb:71:6c:de:01:aa:87:f2:6e:54:87: a1:60:5d:0e:93:a9:f4:71:b1:ab:cb:c2:42:f1:e8:b6:20:08: 0c:fd:41:9b:78:57:9d:7b:ee:27:04:36:aa:3c:87:97:57:d1: ae:14:20:99:f3:76:f4:b5:98:54:8a:18:cc:6e:65:63:9e:af: 59:9d:01:f0:8b:04:c4:5a:fc:26:fb:c4:01:ca:43:98:ab:e2: b1:c9:f3:72:c2:23:2f:a4:b0:3c:f5:e3:ba:d0:32:37:e0:af: dd:98:a5:92:29:17:f7:f9:89:1e:ad:5d:42:63:64:7b:95:64: eb:a1:1a:4e:7f:f3:d8:5e:f7:4d:19:00:c0:34:53:27:e0:93: fd:d0:1e:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy NDE3ODMxNzkwHhcNMjYwMTI0MjEyNzAxWhcNMjYwMTMxMjEyNzAxWjAYMRYwFAYD VQQDDA02OTc1MzkyNS05YTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAym/04JM+OjTSMc5i7aJ9W6sWR0T0P2293FyY6Ztcqzdhvs8OWlXwrTARX2Z2 SpN/lsNoVK6bLwwGIHsk9WIq4NOzV0jype0w8ElgylqQrWQXcAEPsuN1DQX9J5vm xPloQetr7juLNevnRsZimdrn87I2iUn/L9g5ysM8ytH54aTsvJtbL5Mi9WLf5GNB 3gWNYB1R6fUHOz1j9YmW2NsTsVtgSdQ3NmCij5F/aazWgoyidrHJHkZp6sQ1e6pR WLWJsd+5gAkHYHMk4glElTHljq5PiRuTi1GIzXkyq7D70IhKVmc61fRo+B5rwEtC 5MUAyglpWTI2NW0Ddz0WW44+rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCm2CG3k /SnucHudOQOCZpNF6eJGMB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1 RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjRGRS9DRjRBMTBFQTg1RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4 SW4tdnlKYlJORE1rRjRNWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo/9RKp/HDWrPRpecYTWgKKtaEFN4HZ06K3WrF1STGwSfNrckM1S9w TVUByw3Kv/Ar5+OmHxZzJ6lsxJ0YCToIzyCO+EjM5LcmTwZlM0e66VSqlPTnYFry 1FzeFCMyM6UAtMZMX4G8I4OXOanE8v6YIq2y63Fs3gGqh/JuVIehYF0Ok6n0cbGr y8JC8ei2IAgM/UGbeFede+4nBDaqPIeXV9GuFCCZ83b0tZhUihjMbmVjnq9ZnQHw iwTEWvwm+8QBykOYq+KxyfNywiMvpLA89eO60DI34K/dmKWSKRf3+YkerV1CY2R7 lWTroRpOf/PYXvdNGQDANFMn4JP90B6d -----END CERTIFICATE-----Generated at Sun Jan 25 04:29:00 2026 by rpki-client