This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json) Hash identifier: kgC8QrYJyOsUDN4g9qHVSBdpUtk4mvu3w6AAQ3kDvGo= Subject key identifier: 5D:1E:C0:56:F1:64:95:EF:8D:9B:F6:5A:27:BE:46:2F:65:46:5F:BB Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 04DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft Manifest number: 04A4 Signing time: Sat 24 Jan 2026 23:16:13 +0000 Manifest this update: Sat 24 Jan 2026 23:16:12 +0000 Manifest next update: Sat 31 Jan 2026 23:16:12 +0000 Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: SjadSksrrStaioXvxHz2BMNgWdDFq4CFxkEmVlMR61o=) 2: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: M8cCf+PpG4vagskX4rsra8X2rIowlXM4BTKkdW0QLrI=) 3: E84DD6FAC9C311F0ACE5A118C4F9AE02.roa (hash: hWjpTLYVVmZLNdjva56E8p7+sIuOaEl5Ygmvg0y8+jU=) 4: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: s4PkEypB4sgHmma3j3J6zrOwEq80iK017MOWUv25Ljg=) 5: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: pS+53V8+bxRdK0ATYwnRhSrEBRLBJFvngnVqGR6MfX0=) 6: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: 42aOXbG5FIwZfCJXzkNli7qHwYEm7Q+WQBfK6Y8ohK0=) 7: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: GoKpEAf/K95kio8tB70RxuWF5YT2ij84EjmaahHsBGg=) 8: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: qlMXQv5YG72B5bvHOWClhFBHdZ0cbsaRo7l6jKiwpA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1246 (0x4de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Jan 24 23:16:12 2026 GMT Not After : Jan 31 23:16:12 2026 GMT Subject: CN=697552bd-31e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:30:a7:3f:fa:57:ae:63:1a:ca:e0:7c:b0:65: 72:48:58:0e:58:fe:39:78:7f:4f:3f:a5:4b:08:97: 60:1c:e1:ae:fc:fe:19:0c:04:b4:43:ec:40:3c:21: 33:d6:b2:0c:91:12:78:9a:c5:9d:b0:45:82:70:fb: b3:f6:8c:89:0f:71:06:1e:18:21:93:96:1e:a5:9b: 9b:61:dd:b6:f1:1f:63:ef:ad:27:59:dd:c0:7d:99: 91:5f:35:53:d4:1c:ef:8c:6d:e2:10:be:b0:82:d6: 39:09:5f:07:5d:3e:57:f2:9e:ba:c1:c6:04:2e:95: 5a:85:9d:bb:d3:05:5c:77:19:8e:0b:16:16:9b:a1: 82:22:94:9a:8c:41:f3:0c:64:9b:f5:46:15:30:d6: f2:7a:18:d5:8e:23:0c:14:88:00:33:ff:6f:b0:01: b0:fb:12:9f:33:fd:e0:e4:17:06:72:f7:f5:95:43: cd:bc:7d:6a:b0:ce:d2:a0:7d:31:d2:56:5e:ac:55: 4a:d3:06:90:83:78:35:c9:ff:32:22:6f:e5:cd:83: 53:de:9b:9c:43:5b:4f:a5:51:7f:31:21:5e:ed:64: ea:6c:5b:02:9d:0c:9d:ea:a5:6d:95:60:f2:fa:4c: c4:11:e1:ab:21:be:b9:71:b5:d6:c0:ec:ff:0c:a5: c9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1E:C0:56:F1:64:95:EF:8D:9B:F6:5A:27:BE:46:2F:65:46:5F:BB X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:84:0d:d3:09:07:02:29:4b:2e:28:b1:5d:16:81:06:39:cc: d8:ca:59:4b:f6:0d:df:df:d6:64:6c:f4:3d:48:80:00:69:4f: 60:7b:9f:0f:33:c0:fa:fb:f1:36:f6:62:f0:c8:77:47:63:88: 80:d6:d8:5e:94:e6:dd:b8:94:6b:ea:dd:a4:89:06:bc:a3:fd: 55:f7:d8:0a:ad:84:44:4d:a5:da:25:01:05:c1:67:5e:7e:3d: 2a:f6:d6:27:36:83:b6:57:21:2a:09:9e:15:27:31:95:77:f9: 5e:24:a4:82:ac:d9:d9:16:6d:b6:ab:2b:08:bd:2b:e8:56:ff: 14:6a:ab:4f:70:e2:b9:db:da:71:84:c1:75:38:cf:84:fd:14: 89:08:8f:03:cd:16:c9:17:ca:7f:ec:c7:e6:93:9c:c7:d6:7c: 12:eb:74:b0:74:5a:b5:44:88:dc:3c:71:24:85:dd:31:45:ed: 59:5c:36:6d:6c:e7:a3:88:53:42:24:53:0f:42:65:38:aa:35: 2c:ac:cd:a6:1d:cd:d1:14:c4:fd:f4:7a:e4:03:11:ef:a3:f9: e4:34:d5:d8:41:22:ec:85:2b:0b:d4:13:32:41:d0:2a:db:35: 9c:f7:4b:9a:16:82:52:e0:0e:cd:0a:dc:01:0e:37:de:5d:b1: d0:6a:4b:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjYwMTI0MjMxNjEyWhcNMjYwMTMxMjMxNjEyWjAYMRYwFAYD VQQDDA02OTc1NTJiZC0zMWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzCnP/pXrmMayuB8sGVySFgOWP45eH9PP6VLCJdgHOGu/P4ZDAS0Q+xAPCEz 1rIMkRJ4msWdsEWCcPuz9oyJD3EGHhghk5YepZubYd228R9j760nWd3AfZmRXzVT 1BzvjG3iEL6wgtY5CV8HXT5X8p66wcYELpVahZ270wVcdxmOCxYWm6GCIpSajEHz DGSb9UYVMNbyehjVjiMMFIgAM/9vsAGw+xKfM/3g5BcGcvf1lUPNvH1qsM7SoH0x 0lZerFVK0waQg3g1yf8yIm/lzYNT3pucQ1tPpVF/MSFe7WTqbFsCnQyd6qVtlWDy +kzEEeGrIb65cbXWwOz/DKXJBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0ewFbx ZJXvjZv2Wie+Ri9lRl+7MB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR cG11UEUyZ0xNRmktMWRtSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALhA3TCQcCKUsuKLFdFoEGOczYyllL9g3f39ZkbPQ9SIAAaU9ge58P M8D6+/E29mLwyHdHY4iA1thelObduJRr6t2kiQa8o/1V99gKrYRETaXaJQEFwWde fj0q9tYnNoO2VyEqCZ4VJzGVd/leJKSCrNnZFm22qysIvSvoVv8UaqtPcOK529px hMF1OM+E/RSJCI8DzRbJF8p/7Mfmk5zH1nwS63SwdFq1RIjcPHEkhd0xRe1ZXDZt bOejiFNCJFMPQmU4qjUsrM2mHc3RFMT99HrkAxHvo/nkNNXYQSLshSsL1BMyQdAq 2zWc90uaFoJS4A7NCtwBDjfeXbHQakvE -----END CERTIFICATE-----Generated at Sun Jan 25 04:31:52 2026 by rpki-client