This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json) Hash identifier: SYcwxpG9IhcheUK7JX6D88ETXp1Xn36xpC45el0FkL4= Subject key identifier: 4A:FB:C8:89:11:10:58:B8:2A:BB:64:CA:3B:51:BF:D1:40:D0:3F:52 Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0D65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft Manifest number: 0D64 Signing time: Sat 24 Jan 2026 17:37:55 +0000 Manifest this update: Sat 24 Jan 2026 17:37:54 +0000 Manifest next update: Sat 31 Jan 2026 17:37:54 +0000 Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: 9YfsefSMu+7HHvW7iJR/oZb9jIBedGOr6sQL+3WxZrU=) 2: 3F6AC59EB27A11F095B9C63DC4F9AE02.roa (hash: aG9Ky47AV0GPRw+yhEkTWuhgTxt+050Je5yrrl9/SOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3429 (0xd65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: Jan 24 17:37:54 2026 GMT Not After : Jan 31 17:37:54 2026 GMT Subject: CN=69750373-3490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:74:da:d2:c5:fc:88:56:e7:88:b4:1d:26:4a: 42:7a:ee:c3:43:fa:5f:b9:2b:7f:f6:2e:7d:1c:49: 8e:7d:a8:2e:5f:63:da:de:34:18:da:d9:18:7e:28: a2:67:5e:57:01:38:62:78:cd:2c:a5:4e:48:0f:cc: b7:c5:e1:71:45:36:d9:8a:f1:fb:35:c9:d5:08:58: f9:1b:de:1d:b0:85:58:ee:6a:96:2b:32:74:9c:9b: 9e:02:43:e6:66:eb:d9:00:b2:4e:21:3a:9c:5b:fd: 52:32:ae:2f:ef:24:9f:3e:97:d4:c5:e3:de:d8:ef: 68:82:a4:fc:37:e2:4e:06:7f:6f:10:13:a8:77:a4: 0a:b9:e9:01:b8:00:79:96:ec:41:5f:21:22:20:35: 6c:e2:cb:80:af:c4:4b:ed:83:15:51:4c:c7:9f:96: 52:d1:11:7a:76:4f:4a:95:f2:8f:ea:9a:c0:29:3c: 27:ce:3c:bd:12:01:26:c2:f6:11:26:9e:66:74:63: 4c:20:58:8b:74:3e:1d:9e:ca:9a:ce:01:86:ac:05: c9:f1:f6:b8:d5:44:1f:57:5e:70:65:fc:7f:c4:e5: 37:83:23:f8:c2:f9:08:7c:cd:ca:69:ac:5d:6f:3c: 11:b8:ba:b2:a8:1e:71:67:3b:7c:67:fb:86:cc:a4: c7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FB:C8:89:11:10:58:B8:2A:BB:64:CA:3B:51:BF:D1:40:D0:3F:52 X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ac:90:60:86:83:56:6a:f7:c8:21:ab:9a:5e:fe:65:cb:a3: 15:97:d6:75:ae:bd:2f:6a:1d:41:ef:4d:d8:96:1e:1e:8c:38: 4a:1d:2b:8b:fc:7a:98:7c:a0:2e:dd:59:69:73:18:77:37:fc: 6b:81:db:4d:eb:77:60:2c:7a:b0:d5:16:ad:23:31:6f:57:1e: e1:e9:b8:29:6c:86:e2:00:bb:b4:b1:43:93:ef:ad:bc:0a:96: 3c:df:49:26:a3:e9:3b:67:26:00:43:fc:0e:92:89:52:f0:d7: da:df:09:ac:ef:b9:ca:ea:06:ff:6e:e5:23:3d:8c:25:75:ac: 64:a0:78:64:e9:1e:f6:9c:5b:d9:46:21:22:e8:a0:10:1a:69: cd:b7:27:26:40:0f:d6:58:00:66:9b:f6:17:14:7d:78:4f:69: 19:5c:04:cf:33:ae:3e:e7:01:8b:f8:75:9b:1c:0a:46:4d:9e: c8:a9:11:40:d8:64:fc:2d:b0:40:d2:fa:b6:85:0d:03:b4:df: f7:57:c4:fc:27:df:d0:4c:ad:55:d0:30:32:96:dd:f7:e9:a7: b8:26:f6:0e:02:b4:73:62:ef:8c:90:a1:09:ac:25:10:91:13: d4:da:18:77:77:ce:e9:1c:6f:35:3a:c0:52:ca:de:28:f4:a3: 9b:66:c9:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjYwMTI0MTczNzU0WhcNMjYwMTMxMTczNzU0WjAYMRYwFAYD VQQDDA02OTc1MDM3My0zNDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5XTa0sX8iFbniLQdJkpCeu7DQ/pfuSt/9i59HEmOfaguX2Pa3jQY2tkYfiii Z15XAThieM0spU5ID8y3xeFxRTbZivH7NcnVCFj5G94dsIVY7mqWKzJ0nJueAkPm ZuvZALJOITqcW/1SMq4v7ySfPpfUxePe2O9ogqT8N+JOBn9vEBOod6QKuekBuAB5 luxBXyEiIDVs4suAr8RL7YMVUUzHn5ZS0RF6dk9KlfKP6prAKTwnzjy9EgEmwvYR Jp5mdGNMIFiLdD4dnsqazgGGrAXJ8fa41UQfV15wZfx/xOU3gyP4wvkIfM3Kaaxd bzwRuLqyqB5xZzt8Z/uGzKTHVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEr7yIkR EFi4KrtkyjtRv9FA0D9SMB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX clFDWm1uV1IteUJCaWE4WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyrJBghoNWavfIIauaXv5ly6MVl9Z1rr0vah1B703Ylh4ejDhKHSuL /HqYfKAu3Vlpcxh3N/xrgdtN63dgLHqw1RatIzFvVx7h6bgpbIbiALu0sUOT7628 CpY830kmo+k7ZyYAQ/wOkolS8Nfa3wms77nK6gb/buUjPYwldaxkoHhk6R72nFvZ RiEi6KAQGmnNtycmQA/WWABmm/YXFH14T2kZXATPM64+5wGL+HWbHApGTZ7IqRFA 2GT8LbBA0vq2hQ0DtN/3V8T8J9/QTK1V0DAylt336ae4JvYOArRzYu+MkKEJrCUQ kRPU2hh3d87pHG81OsBSyt4o9KObZslK -----END CERTIFICATE-----Generated at Sun Jan 25 02:56:33 2026 by rpki-client