This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft File: aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft (raw, json) Hash identifier: KQiFSIxbhmwUL1TlUDCZzAaxbSelztje2ygu5i1IIWY= Subject key identifier: 92:11:15:61:2E:F6:6E:28:4D:A4:53:AF:73:37:DE:2D:C1:0A:63:FA Authority key identifier: 68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 Certificate issuer: /CN=A91DCAE8/serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft Manifest number: 2C Signing time: Sat 24 Jan 2026 14:42:30 +0000 Manifest this update: Sat 24 Jan 2026 14:42:29 +0000 Manifest next update: Sat 31 Jan 2026 14:42:29 +0000 Files and hashes: 1: aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl (hash: Vk0bbIf77xUB/4ZGVnc/4AP8E76XxXhMr3EB0zjRS/g=) 2: 12E8FD5CBECC11F098CFE015C4F9AE02.roa (hash: ZnOlNoLSibfq3/qIsrDbM5RZVyIuk7cWs+48nm4czSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Validity Not Before: Jan 24 14:42:29 2026 GMT Not After : Jan 31 14:42:29 2026 GMT Subject: CN=6974da56-7840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ec:a2:5b:b2:a6:57:8d:f6:d6:a1:82:d9:ff: 1e:8f:d2:e7:35:f0:1e:6b:62:9a:45:1d:e6:71:4a: 9d:d9:dd:0d:ca:cf:13:c6:ea:98:f0:13:48:1a:f4: 8d:cf:36:e1:e5:e0:f3:a2:56:08:16:b9:aa:c0:9a: 1f:ba:59:fa:6b:e5:98:51:33:4f:f1:c3:67:09:ff: 65:73:1d:23:ab:9e:c3:96:92:b9:cb:c1:a4:a1:c7: 3c:36:e9:0d:d1:a9:5d:66:85:06:d8:f3:a0:6f:8f: 5f:03:b7:04:78:d3:fd:11:65:b5:4b:7e:f5:89:e1: 3b:88:6e:93:b3:1e:15:a9:21:a2:26:47:fa:ae:aa: a1:23:bf:6e:2c:fd:65:c8:f5:59:4a:28:bb:14:29: 89:8e:ab:21:8a:3e:71:8a:c4:98:73:7a:6c:77:a3: b2:ac:3b:63:7c:d5:ca:90:fc:09:3a:6a:b5:f9:9f: e8:62:92:20:1e:11:4a:03:a1:ba:8f:f8:e9:cb:d9: 0e:60:5b:0f:8e:de:f4:1f:e8:c9:0b:38:e1:33:c8: d5:52:6c:f0:8e:ab:44:6d:61:71:b1:a6:e6:c1:59: 61:4b:4b:87:5e:bc:11:5f:1e:89:98:32:11:45:e8: 9e:86:41:2d:24:01:b8:98:75:51:03:d7:e4:39:13: 3c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:11:15:61:2E:F6:6E:28:4D:A4:53:AF:73:37:DE:2D:C1:0A:63:FA X509v3 Authority Key Identifier: keyid:68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b7:c6:c7:1f:92:5a:a6:0d:23:a4:c3:c9:1f:9f:3b:7e:0b: be:9e:ae:e4:ca:b2:be:9e:21:1f:d9:8a:f2:a3:9a:f4:3e:12: 53:03:da:62:65:35:be:94:e5:ea:a4:71:81:f1:b8:5b:95:c0: f7:2a:74:67:e7:b9:6f:7e:ea:28:b0:91:5d:7d:58:1d:41:86: 0a:7a:42:bb:63:e5:e4:e1:03:ac:3f:d2:e6:ae:32:98:01:15: 44:ee:d6:2b:ba:f9:04:8c:00:bf:97:db:e9:da:b5:74:37:19: f1:dd:e6:5f:61:d7:ba:64:27:aa:7d:49:37:41:ca:47:43:8f: bb:27:8b:2a:e1:66:5c:9b:25:91:64:2b:53:30:2a:8d:d3:64: ca:ca:3c:86:bb:8c:17:a9:fc:81:ff:3d:63:81:7c:58:b1:ba: 80:78:72:13:9d:bb:a4:b7:46:ac:e7:a1:ff:8c:c0:a7:66:c7: 92:db:7f:be:88:68:a7:a4:56:72:31:fa:64:6d:06:1a:e6:7e: aa:0b:8e:4d:83:6a:b0:6d:28:2d:91:66:33:1b:fb:fc:5e:c1: 9f:16:a9:62:9c:05:37:8a:be:7c:e1:7a:4d:0e:51:83:02:5a: d6:26:f2:19:d1:56:fa:ab:9b:d1:cf:c6:56:70:94:9c:38:05: ec:9e:5b:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Q0FFODExMC8GA1UEBRMoNjg0NTk3RTk5OEEzQTBDNjk4NzM2MUI3QzU3MjA0M0E4 MTZDMUM1MjAeFw0yNjAxMjQxNDQyMjlaFw0yNjAxMzExNDQyMjlaMBgxFjAUBgNV BAMMDTY5NzRkYTU2LTc4NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDx7KJbsqZXjfbWoYLZ/x6P0uc18B5rYppFHeZxSp3Z3Q3KzxPG6pjwE0ga9I3P NuHl4POiVggWuarAmh+6Wfpr5ZhRM0/xw2cJ/2VzHSOrnsOWkrnLwaShxzw26Q3R qV1mhQbY86Bvj18DtwR40/0RZbVLfvWJ4TuIbpOzHhWpIaImR/quqqEjv24s/WXI 9VlKKLsUKYmOqyGKPnGKxJhzemx3o7KsO2N81cqQ/Ak6arX5n+hikiAeEUoDobqP +OnL2Q5gWw+O3vQf6MkLOOEzyNVSbPCOq0RtYXGxpubBWWFLS4devBFfHomYMhFF 6J6GQS0kAbiYdVED1+Q5EzzbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkhEVYS72 bihNpFOvczfeLcEKY/owHwYDVR0jBBgwFoAUaEWX6ZijoMaYc2G3xXIEOoFsHFIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDQUU4LzNGN0UyNTc0QkUw NzExRjA5RkYwNDQ2OUM0RjlBRTAyL2FFV1g2Wmlqb01hWWMyRzN4WElFT29Gc0hG SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYUVXWDZaaWpvTWFZYzJHM3hYSUVPb0ZzSEZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD QUU4LzNGN0UyNTc0QkUwNzExRjA5RkYwNDQ2OUM0RjlBRTAyL2FFV1g2Wmlqb01h WWMyRzN4WElFT29Gc0hGSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACy3xscfklqmDSOkw8kfnzt+C76eruTKsr6eIR/ZivKjmvQ+ElMD2mJl Nb6U5eqkcYHxuFuVwPcqdGfnuW9+6iiwkV19WB1Bhgp6Qrtj5eThA6w/0uauMpgB FUTu1iu6+QSMAL+X2+natXQ3GfHd5l9h17pkJ6p9STdBykdDj7sniyrhZlybJZFk K1MwKo3TZMrKPIa7jBep/IH/PWOBfFixuoB4chOdu6S3Rqznof+MwKdmx5Lbf76I aKekVnIx+mRtBhrmfqoLjk2DarBtKC2RZjMb+/xewZ8WqWKcBTeKvnzhek0OUYMC WtYm8hnRVvqrm9HPxlZwlJw4BeyeW5Q= -----END CERTIFICATE-----Generated at Sun Jan 25 09:25:22 2026 by rpki-client