This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft File: 8mF6VUFXzpkgnjn9-1PVFt3eePg.mft (raw, json) Hash identifier: DJk8Xw7NvUySMMCpzaLW/8tNleN+DPRcCNCEfRYnTys= Subject key identifier: 9D:C2:65:3F:B9:98:00:42:63:73:CF:98:7A:A6:6C:EB:D1:71:BB:F0 Authority key identifier: F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8 Certificate issuer: /CN=A91DD25E/serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft Manifest number: 3B Signing time: Sun 25 Jan 2026 06:32:11 +0000 Manifest this update: Sun 25 Jan 2026 06:32:11 +0000 Manifest next update: Sun 01 Feb 2026 06:32:11 +0000 Files and hashes: 1: 8mF6VUFXzpkgnjn9-1PVFt3eePg.crl (hash: bnAREu4Z0xN+3RCl/iaWPVap4OKiLH7dHghZGpPFRFY=) 2: 43E43270A27D11F0862ABC17C4F9AE02.roa (hash: Qyc81RIKSdu+FLrquo5aMNKuhSqU44VyZkyWHyn1G+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD25E, serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8 Validity Not Before: Jan 25 06:32:11 2026 GMT Not After : Feb 1 06:32:11 2026 GMT Subject: CN=6975b8eb-55f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:46:a2:48:84:8f:57:28:29:3a:3f:ea:6d:bf: 24:ce:a0:f3:ee:ea:18:09:13:36:0c:10:8a:fa:39: eb:54:5d:e5:6f:e1:b0:d2:72:fc:33:ea:fc:5d:aa: 26:d9:1d:23:4a:16:0e:6a:eb:2c:69:ed:ac:7a:ad: d0:b7:8a:e0:c9:a0:d6:4b:ee:5d:c2:45:fa:2b:4b: 0d:9b:69:8a:42:1b:65:e7:30:09:45:ef:62:d1:e0: 6b:0d:36:ff:9d:d9:1f:b6:73:36:35:37:7b:f3:9f: d3:2c:ce:3b:7f:03:d9:0b:75:de:2e:3d:5d:f3:b9: db:b3:63:3c:ee:d3:10:8b:16:0e:fb:6a:62:51:d7: a2:e5:9b:05:d2:64:96:51:e9:b2:5f:bf:fd:65:8e: 94:e7:ad:e5:93:a0:95:b5:15:f5:4b:87:6f:c6:aa: 8b:92:e7:13:fc:0c:01:b7:f7:1e:fe:1c:fd:8a:01: 45:ec:af:db:18:6d:df:f6:ca:34:8d:45:27:78:67: 3d:6b:d2:9c:fd:b1:88:70:d4:1c:29:ba:02:2d:c6: b5:65:09:fa:e4:19:10:b5:85:eb:f0:e3:5d:17:67: ac:9e:19:1a:66:b3:8a:86:6f:40:e3:6e:91:65:b2: f7:fe:2c:1f:6e:7c:50:49:14:1d:fb:9f:99:b4:91: bc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C2:65:3F:B9:98:00:42:63:73:CF:98:7A:A6:6C:EB:D1:71:BB:F0 X509v3 Authority Key Identifier: keyid:F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:cb:da:09:36:ed:51:63:b9:97:d6:e5:30:96:84:1e:12:93: 3a:2f:20:e4:32:dc:79:c7:81:d2:46:1a:b1:d4:24:48:f6:8d: 8d:fc:3d:7d:c6:d8:ed:d1:87:dd:68:6e:f7:3c:82:fd:df:22: d8:5e:b6:59:68:2e:67:10:f4:e0:c5:35:03:f4:97:3d:06:e5: af:40:aa:34:bd:a8:fe:38:5b:37:44:22:2f:7f:82:87:c2:44: d4:63:bf:3c:86:27:56:08:5b:4f:fa:f2:10:08:c5:45:82:fe: c5:f8:30:7c:f5:61:e9:c8:91:21:dc:58:11:c3:5f:54:72:c2: 73:1e:36:c6:17:1c:88:24:43:71:17:fc:67:18:09:f5:25:20: 32:9e:fb:bb:fb:5c:f7:2b:e7:a2:de:d0:00:b1:19:2f:af:1c: 45:97:a1:b0:0a:a0:48:dd:57:ce:54:d6:31:23:f3:35:35:a7: 72:c5:34:80:27:28:4d:86:8a:41:f5:53:6e:dd:b5:22:c9:5c: d8:86:29:ab:19:a4:0c:56:58:63:cd:93:8c:c5:7f:7c:bc:19: bd:d2:a2:72:fd:a3:2c:ec:db:df:4c:f7:7b:73:83:b6:cd:e7: 38:b3:fc:96:2c:ae:20:fc:95:6e:2c:7e:a7:eb:af:c0:3e:d7: 2e:25:e4:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI1RTExMC8GA1UEBRMoRjI2MTdBNTU0MTU3Q0U5OTIwOUUzOUZERkI1M0Q1MTZE RERFNzhGODAeFw0yNjAxMjUwNjMyMTFaFw0yNjAyMDEwNjMyMTFaMBgxFjAUBgNV BAMMDTY5NzViOGViLTU1ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdRqJIhI9XKCk6P+ptvyTOoPPu6hgJEzYMEIr6OetUXeVv4bDScvwz6vxdqibZ HSNKFg5q6yxp7ax6rdC3iuDJoNZL7l3CRforSw2baYpCG2XnMAlF72LR4GsNNv+d 2R+2czY1N3vzn9Mszjt/A9kLdd4uPV3zuduzYzzu0xCLFg77amJR16LlmwXSZJZR 6bJfv/1ljpTnreWToJW1FfVLh2/GqouS5xP8DAG39x7+HP2KAUXsr9sYbd/2yjSN RSd4Zz1r0pz9sYhw1BwpugItxrVlCfrkGRC1hevw410XZ6yeGRpms4qGb0DjbpFl svf+LB9ufFBJFB37n5m0kbyRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUncJlP7mY AEJjc8+YeqZs69Fxu/AwHwYDVR0jBBgwFoAU8mF6VUFXzpkgnjn9+1PVFt3eePgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjVFLzNGMzc1RDI2QTI3 QjExRjA5ODBGRDA0QUM0RjlBRTAyLzhtRjZWVUZYenBrZ25qbjktMVBWRnQzZWVQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOG1GNlZVRlh6cGtnbmpuOS0xUFZGdDNlZVBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MjVFLzNGMzc1RDI2QTI3QjExRjA5ODBGRDA0QUM0RjlBRTAyLzhtRjZWVUZYenBr Z25qbjktMVBWRnQzZWVQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFrL2gk27VFjuZfW5TCWhB4SkzovIOQy3HnHgdJGGrHUJEj2jY38PX3G 2O3Rh91obvc8gv3fIthetlloLmcQ9ODFNQP0lz0G5a9AqjS9qP44WzdEIi9/gofC RNRjvzyGJ1YIW0/68hAIxUWC/sX4MHz1YenIkSHcWBHDX1RywnMeNsYXHIgkQ3EX /GcYCfUlIDKe+7v7XPcr56Le0ACxGS+vHEWXobAKoEjdV85U1jEj8zU1p3LFNIAn KE2GikH1U27dtSLJXNiGKasZpAxWWGPNk4zFf3y8Gb3SonL9oyzs299M93tzg7bN 5ziz/JYsriD8lW4sfqfrr8A+1y4l5DQ= -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:40 2026 by rpki-client