This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft File: ibqQy31EKoOHxquTBzjKIA4Te60.mft (raw, json) Hash identifier: Lw7bECbzn8mSm1ZIO0XUROQsZ9eUZ+8gprL576Kdd8M= Subject key identifier: ED:B8:D8:A2:2C:9A:94:B4:0A:89:1A:7C:8F:60:A2:F6:03:F7:CF:74 Authority key identifier: 89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD Certificate issuer: /CN=A91DD25E/serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft Manifest number: 3A Signing time: Sun 25 Jan 2026 06:32:09 +0000 Manifest this update: Sun 25 Jan 2026 06:32:08 +0000 Manifest next update: Sun 01 Feb 2026 06:32:08 +0000 Files and hashes: 1: ibqQy31EKoOHxquTBzjKIA4Te60.crl (hash: bVXilZR1OXCETwNQ7acDj38wOROY+/3gjEE47a0+eVQ=) 2: 9CF6A89AA27B11F09D816A4BC4F9AE02.roa (hash: 0eBxKaOD/grMOoAgLIRsVrl+pKw/EreQcuXwa4ak1TU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD25E, serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD Validity Not Before: Jan 25 06:32:08 2026 GMT Not After : Feb 1 06:32:08 2026 GMT Subject: CN=6975b8e9-3a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0d:b5:1b:0e:c2:c7:e6:b8:c4:12:6c:fe:90: b8:7a:e2:a0:d7:92:f7:59:29:9e:9f:a3:c0:d5:9e: 25:07:86:9f:f8:1a:2f:21:e2:6b:43:d7:68:a4:9c: e7:d0:4c:b0:9f:e5:dd:5e:ba:59:23:31:35:fd:ac: 55:22:8e:dd:6a:d6:29:8f:b3:49:73:53:f1:75:cb: 66:e7:60:be:0e:00:cc:e2:5d:23:6d:1d:2a:ab:87: 07:fc:5d:4a:f4:6a:0e:a0:23:3e:56:52:52:da:47: 92:fc:3f:ed:d1:22:e2:29:81:c3:cc:39:e2:4a:83: 9f:f0:1f:62:0f:31:f4:9c:f4:3a:99:ad:85:ef:26: 50:97:e1:1b:3e:93:43:91:34:0d:7e:2c:53:9d:94: 6a:9b:09:83:61:33:d0:54:60:69:e6:6a:d5:ce:5d: 29:16:ea:e5:bf:58:0b:98:90:18:3f:bc:49:a1:57: 5e:ef:1a:2d:95:38:12:66:36:56:05:88:a0:26:a2: 6f:26:27:ac:25:72:55:18:92:ed:01:d9:8a:b4:5a: 8e:00:3d:dc:92:be:44:21:65:4f:d0:19:37:4e:9f: e3:a6:99:6d:93:d2:82:4b:40:0d:4b:32:73:e6:12: 21:66:28:66:34:92:04:b6:a3:80:b1:20:e6:a8:cf: 0b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B8:D8:A2:2C:9A:94:B4:0A:89:1A:7C:8F:60:A2:F6:03:F7:CF:74 X509v3 Authority Key Identifier: keyid:89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:56:4d:b4:12:22:37:4b:64:b2:f1:e6:df:03:7b:1f:d8:18: 4a:30:3b:80:a4:08:b4:02:ed:6d:c0:de:96:e2:23:af:4e:18: 09:62:44:3b:13:a8:60:a6:7d:4a:2d:e1:d9:25:ea:02:a2:a3: db:32:9d:95:31:8a:47:01:de:84:a4:51:45:af:6d:3d:b7:cf: 63:bf:8d:ec:c5:10:48:0d:4f:c0:de:2c:f7:40:53:f9:fd:eb: 86:02:9c:43:96:12:8b:39:f3:97:cd:7f:a2:9c:1b:09:7a:2b: 04:4b:dc:be:90:81:c4:c3:91:f9:8b:83:56:93:44:91:9d:62: d7:b5:74:88:a8:f8:ba:8a:af:10:f4:12:25:22:ca:c8:db:2f: 86:e3:67:40:88:47:0e:c6:4e:b4:1d:fe:dc:c4:c6:23:06:54: 97:73:55:1a:7e:df:04:4c:49:7f:f3:cd:e9:19:e0:6d:88:24: 09:78:ea:21:57:f4:c5:12:ba:cb:b5:76:fa:37:d4:b1:fc:65: d0:fd:98:e8:bb:69:2c:36:56:a4:03:4b:14:13:5c:fe:99:b5: e8:28:14:00:36:8b:3b:95:50:15:22:2f:49:88:1d:b1:ac:3d: 74:da:08:56:a3:f6:e9:84:05:09:7e:43:4a:df:c7:eb:f7:d5: 06:e5:ac:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI1RTExMC8GA1UEBRMoODlCQTkwQ0I3RDQ0MkE4Mzg3QzZBQjkzMDczOENBMjAw RTEzN0JBRDAeFw0yNjAxMjUwNjMyMDhaFw0yNjAyMDEwNjMyMDhaMBgxFjAUBgNV BAMMDTY5NzViOGU5LTNhMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMDbUbDsLH5rjEEmz+kLh64qDXkvdZKZ6fo8DVniUHhp/4Gi8h4mtD12iknOfQ TLCf5d1eulkjMTX9rFUijt1q1imPs0lzU/F1y2bnYL4OAMziXSNtHSqrhwf8XUr0 ag6gIz5WUlLaR5L8P+3RIuIpgcPMOeJKg5/wH2IPMfSc9DqZrYXvJlCX4Rs+k0OR NA1+LFOdlGqbCYNhM9BUYGnmatXOXSkW6uW/WAuYkBg/vEmhV17vGi2VOBJmNlYF iKAmom8mJ6wlclUYku0B2Yq0Wo4APdySvkQhZU/QGTdOn+OmmW2T0oJLQA1LMnPm EiFmKGY0kgS2o4CxIOaozws5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7bjYoiya lLQKiRp8j2Ci9gP3z3QwHwYDVR0jBBgwFoAUibqQy31EKoOHxquTBzjKIA4Te60w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjVFLzM1NUJFQzg2QTI3 QjExRjA5ODBGRDA0QUM0RjlBRTAyL2licVF5MzFFS29PSHhxdVRCempLSUE0VGU2 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaWJxUXkzMUVLb09IeHF1VEJ6aktJQTRUZTYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MjVFLzM1NUJFQzg2QTI3QjExRjA5ODBGRDA0QUM0RjlBRTAyL2licVF5MzFFS29P SHhxdVRCempLSUE0VGU2MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA5WTbQSIjdLZLLx5t8Dex/YGEowO4CkCLQC7W3A3pbiI69OGAliRDsT qGCmfUot4dkl6gKio9synZUxikcB3oSkUUWvbT23z2O/jezFEEgNT8DeLPdAU/n9 64YCnEOWEos585fNf6KcGwl6KwRL3L6QgcTDkfmLg1aTRJGdYte1dIio+LqKrxD0 EiUiysjbL4bjZ0CIRw7GTrQd/tzExiMGVJdzVRp+3wRMSX/zzekZ4G2IJAl46iFX 9MUSusu1dvo31LH8ZdD9mOi7aSw2VqQDSxQTXP6ZtegoFAA2izuVUBUiL0mIHbGs PXTaCFaj9umEBQl+Q0rfx+v31QblrBc= -----END CERTIFICATE-----Generated at Sun Jan 25 23:10:52 2026 by rpki-client