This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft File: RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft (raw, json) Hash identifier: PlTwT0f7C+xm0xz1jcn0tUx28PIB9jVDBSEQbKRz7HE= Subject key identifier: 1C:51:04:AF:F9:E3:B7:B5:2B:83:3C:0C:11:2F:B4:C1:84:BC:80:48 Authority key identifier: 44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5 Certificate issuer: /CN=A91DEB01/serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft Manifest number: 45 Signing time: Sun 25 Jan 2026 06:12:00 +0000 Manifest this update: Sun 25 Jan 2026 06:11:59 +0000 Manifest next update: Sun 01 Feb 2026 06:11:59 +0000 Files and hashes: 1: RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl (hash: fn3us23/uwF3Pk4SxcQZzxP3ylFt+sWEyvO8+izHz9U=) 2: 8EA99A70B53311F09D886D26C4F9AE02.roa (hash: EvmYF48T0Vnc/1ZgB1IqFG/4zkh2TOgaxoDK/mhEVBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB01, serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5 Validity Not Before: Jan 25 06:11:59 2026 GMT Not After : Feb 1 06:11:59 2026 GMT Subject: CN=6975b42f-b4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:4b:e0:94:5f:a7:52:c1:0c:dd:4d:c6:b4: a7:5d:a4:d6:72:e2:e7:92:86:ee:b2:3c:61:7a:f9: 54:78:4f:d5:26:7f:56:5e:84:61:a5:98:d1:8d:8f: b6:bf:88:36:e2:78:4a:51:55:a6:ae:b0:c4:0c:ce: 55:12:6a:65:e2:1f:0b:f3:81:1b:f0:57:ae:19:5d: d0:20:92:26:67:0c:0e:aa:da:f3:a1:6a:59:c0:80: 42:da:37:5e:77:5e:33:a6:dc:c9:06:46:b6:ba:8e: 09:08:ce:dc:59:2a:d8:ff:8e:38:94:c0:d0:3f:49: 30:3f:88:3a:7e:b4:43:09:09:0c:5d:d3:d9:9d:33: e9:e4:cd:e9:dc:59:8a:fb:4b:d7:6c:fb:3f:33:1d: bf:9a:66:3b:99:b6:d6:9c:6d:c3:f1:c4:02:d4:32: cf:96:97:8f:af:e3:04:4a:1d:17:20:d7:19:95:a8: 70:e0:c1:19:67:55:98:f9:a5:71:4e:b0:36:b6:09: 32:e7:37:ab:98:39:3d:35:74:e7:4f:6f:24:92:91: b6:1a:30:62:bb:29:85:76:07:34:a7:ab:dc:9c:bd: 7c:f8:f3:12:57:a7:89:df:35:02:dc:0a:3e:13:f7: 51:69:02:d4:4f:0b:85:b0:8e:df:d1:b5:99:51:39: b6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:51:04:AF:F9:E3:B7:B5:2B:83:3C:0C:11:2F:B4:C1:84:BC:80:48 X509v3 Authority Key Identifier: keyid:44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9e:be:7f:20:94:f9:e7:be:3a:24:5c:95:53:7a:a7:51:51: 99:f8:f4:fd:5d:1b:a8:6e:51:fc:23:35:2c:fd:a2:a0:89:5a: f1:8d:ff:58:21:90:7f:83:46:45:0e:2e:85:d5:56:98:6c:37: 3f:bb:cd:76:f9:8b:42:a1:ee:50:7d:3c:74:ce:b1:38:c3:18: f8:b2:e2:58:b2:26:f7:cf:d9:5f:1f:02:06:b8:d3:0d:32:fe: 85:54:d5:37:9d:42:b9:ca:d6:b9:38:25:da:b0:1a:18:ee:12: 15:cc:66:3e:5e:40:0a:2e:f3:07:61:23:87:29:37:d9:a9:67: 46:e1:87:13:df:8d:e5:45:03:87:d2:2a:e8:aa:7f:57:05:fb: 80:67:de:c1:e8:7e:16:1c:7d:b3:34:6b:f2:0a:74:9a:8f:19: f0:70:a3:09:4a:4a:78:69:16:96:db:8b:24:05:c9:8e:b6:0e: d3:2e:8f:62:14:52:a3:14:36:e6:42:51:01:f6:25:9c:c2:95: 77:bd:57:e0:b5:7d:8a:0d:9b:6e:e0:85:d5:cf:7b:a3:14:9d: 42:84:71:91:3a:5e:6b:5a:78:04:aa:c7:f8:7f:c3:e4:56:4b: 78:b5:7c:79:00:d5:02:24:91:eb:49:69:3e:bd:df:6c:02:b3: 9e:b5:a4:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RUIwMTExMC8GA1UEBRMoNDQ3RDU5ODNCRjBEQjkxMUFEOEZEQ0I2NzQxNDVGNkM1 OEY4M0NENTAeFw0yNjAxMjUwNjExNTlaFw0yNjAyMDEwNjExNTlaMBgxFjAUBgNV BAMMDTY5NzViNDJmLWI0YzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4ZEvglF+nUsEM3U3GtKddpNZy4ueShu6yPGF6+VR4T9Umf1ZehGGlmNGNj7a/ iDbieEpRVaausMQMzlUSamXiHwvzgRvwV64ZXdAgkiZnDA6q2vOhalnAgELaN153 XjOm3MkGRra6jgkIztxZKtj/jjiUwNA/STA/iDp+tEMJCQxd09mdM+nkzencWYr7 S9ds+z8zHb+aZjuZttacbcPxxALUMs+Wl4+v4wRKHRcg1xmVqHDgwRlnVZj5pXFO sDa2CTLnN6uYOT01dOdPbySSkbYaMGK7KYV2BzSnq9ycvXz48xJXp4nfNQLcCj4T 91FpAtRPC4Wwjt/RtZlRObZxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHFEEr/nj t7UrgzwMES+0wYS8gEgwHwYDVR0jBBgwFoAURH1Zg78NuRGtj9y2dBRfbFj4PNUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFQjAxLzMyRUUwQTZFOTlF OTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhOdVJHdGo5eTJkQlJmYkZqNFBO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkgxWmc3OE51Ukd0ajl5MmRCUmZiRmo0UE5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF QjAxLzMyRUUwQTZFOTlFOTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhOdVJH dGo5eTJkQlJmYkZqNFBOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD2evn8glPnnvjokXJVTeqdRUZn49P1dG6huUfwjNSz9oqCJWvGN/1gh kH+DRkUOLoXVVphsNz+7zXb5i0Kh7lB9PHTOsTjDGPiy4liyJvfP2V8fAga40w0y /oVU1TedQrnK1rk4JdqwGhjuEhXMZj5eQAou8wdhI4cpN9mpZ0bhhxPfjeVFA4fS Kuiqf1cF+4Bn3sHofhYcfbM0a/IKdJqPGfBwowlKSnhpFpbbiyQFyY62DtMuj2IU UqMUNuZCUQH2JZzClXe9V+C1fYoNm27ghdXPe6MUnUKEcZE6XmtaeASqx/h/w+RW S3i1fHkA1QIkketJaT6932wCs561pKM= -----END CERTIFICATE-----Generated at Sun Jan 25 21:48:02 2026 by rpki-client