This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft File: FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft (raw, json) Hash identifier: 6M1ykotQ9nyCx2OoiMfc+pFJrJo5xFwLQZTS31lV+ts= Subject key identifier: BB:B0:48:10:5A:A8:7D:57:D1:7F:9A:6D:AB:5F:2D:18:50:26:B6:59 Authority key identifier: 14:7A:0E:04:87:11:B6:25:06:B0:9F:08:8A:05:99:2A:3A:31:02:0A Certificate issuer: /CN=A91DEC3C/serialNumber=147A0E048711B62506B09F088A05992A3A31020A Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft Manifest number: 021D Signing time: Sun 25 Jan 2026 01:29:20 +0000 Manifest this update: Sun 25 Jan 2026 01:29:20 +0000 Manifest next update: Sun 01 Feb 2026 01:29:20 +0000 Files and hashes: 1: FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl (hash: yu7lGMwkO8QCZnaSnLk4C8TBlJkAjF0vrcv2YI80jUk=) 2: 5153E9DAC0B911ED99A12312C4F9AE02.roa (hash: A4mMoOgqhrpbmnUE3oA6zWgyEjfGMI0KKDHAWWwT+kY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC3C, serialNumber=147A0E048711B62506B09F088A05992A3A31020A Validity Not Before: Jan 25 01:29:20 2026 GMT Not After : Feb 1 01:29:20 2026 GMT Subject: CN=697571f0-6d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:2b:7c:2d:b5:78:f8:64:28:67:69:f2:78: a0:ec:a0:c8:f2:5a:c5:25:6c:c1:60:8e:b7:82:6b: c4:60:24:45:64:80:b6:8d:44:b5:f6:4b:b7:cb:51: f3:40:d0:07:c3:79:45:ad:0b:db:4c:af:42:97:1b: c9:b8:2e:d4:2b:c8:23:50:85:e7:81:ce:62:3c:9a: cb:ff:a2:11:19:21:30:8c:86:03:bd:76:b8:77:1f: 78:b6:96:81:e7:75:e6:e5:b3:55:81:ac:a3:06:27: ce:58:69:9c:5a:2b:7e:0e:2e:af:97:97:5e:86:62: 44:f3:b3:9e:5e:9a:82:72:eb:69:f3:18:9e:ff:dc: fa:58:dc:cc:fb:58:b7:01:49:3c:f1:24:b7:bc:b4: 14:5c:21:aa:09:30:f5:9a:7a:31:f3:6f:77:53:3e: b1:0d:8d:ab:a5:00:23:1b:db:40:85:12:d9:1a:e5: ad:27:4c:15:72:2f:1e:41:76:b9:52:3d:af:72:16: f9:45:7f:d5:18:9f:25:f6:7e:f2:44:42:74:14:9c: bf:9f:63:9e:1f:21:58:d8:70:8f:51:f5:17:d0:3b: ec:44:de:ca:48:d3:70:de:91:f6:c4:4f:fe:95:b4: 5f:7d:87:40:3c:26:1d:3c:e1:83:d1:2d:75:82:1a: 78:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B0:48:10:5A:A8:7D:57:D1:7F:9A:6D:AB:5F:2D:18:50:26:B6:59 X509v3 Authority Key Identifier: keyid:14:7A:0E:04:87:11:B6:25:06:B0:9F:08:8A:05:99:2A:3A:31:02:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:b4:b2:6d:61:d7:83:be:32:c8:fd:68:72:4d:e8:7c:2f:57: 4f:bc:c5:29:34:73:9c:55:f0:06:59:b4:79:6e:77:db:da:1f: 72:d3:d2:4b:d7:bc:f5:c1:04:c6:76:04:e8:4a:46:46:d1:c1: 65:e8:32:e4:1e:a2:5a:0d:22:47:bb:d9:aa:c7:1e:52:17:44: 46:39:e8:34:62:90:31:b7:6b:f4:e1:2f:14:14:cc:82:36:b8: e5:e7:ff:9d:b6:41:d8:5a:61:c2:a5:26:e9:53:37:d8:8b:b8: d1:e5:58:59:4d:e5:8e:4c:6f:fa:81:7c:c6:82:f0:e2:e0:02: 41:88:c6:a8:3a:da:36:76:5f:5c:95:86:88:d3:88:9f:0d:45: e7:f7:3d:3f:cf:25:bd:78:28:f5:15:bd:f7:9c:1a:8d:70:b3: 95:ce:63:c1:02:46:7d:34:96:46:97:3a:41:0f:a2:d7:9b:96: 18:e2:44:9b:3a:81:62:83:c6:d4:fb:f8:45:f6:03:63:b6:f3: fd:b5:b4:15:27:bd:ee:e2:4c:bf:9a:82:68:e8:47:fe:32:4c: 62:da:9a:4e:59:40:c9:61:92:48:19:37:29:b3:07:05:31:39: cb:21:1a:71:a1:57:fa:46:ad:f9:16:5c:91:be:94:6f:e4:c9: 26:fb:ab:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDM0MxMTAvBgNVBAUTKDE0N0EwRTA0ODcxMUI2MjUwNkIwOUYwODhBMDU5OTJB M0EzMTAyMEEwHhcNMjYwMTI1MDEyOTIwWhcNMjYwMjAxMDEyOTIwWjAYMRYwFAYD VQQDDA02OTc1NzFmMC02ZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcQrfC21ePhkKGdp8nig7KDI8lrFJWzBYI63gmvEYCRFZIC2jUS19ku3y1Hz QNAHw3lFrQvbTK9ClxvJuC7UK8gjUIXngc5iPJrL/6IRGSEwjIYDvXa4dx94tpaB 53Xm5bNVgayjBifOWGmcWit+Di6vl5dehmJE87OeXpqCcutp8xie/9z6WNzM+1i3 AUk88SS3vLQUXCGqCTD1mnox8293Uz6xDY2rpQAjG9tAhRLZGuWtJ0wVci8eQXa5 Uj2vchb5RX/VGJ8l9n7yREJ0FJy/n2OeHyFY2HCPUfUX0DvsRN7KSNNw3pH2xE/+ lbRffYdAPCYdPOGD0S11ghp4HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuwSBBa qH1X0X+abatfLRhQJrZZMB8GA1UdIwQYMBaAFBR6DgSHEbYlBrCfCIoFmSo6MQIK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMzQy9GNjMwODA5NEMw QjQxMUVEQTc3RjcwMEVDNEY5QUUwMi9GSG9PQkljUnRpVUdzSjhJaWdXWktqb3hB Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZIb09CSWNSdGlVR3NKOElpZ1daS2pveEFnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMzQy9GNjMwODA5NEMwQjQxMUVEQTc3RjcwMEVDNEY5QUUwMi9GSG9PQkljUnRp VUdzSjhJaWdXWktqb3hBZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwtLJtYdeDvjLI/WhyTeh8L1dPvMUpNHOcVfAGWbR5bnfb2h9y09JL 17z1wQTGdgToSkZG0cFl6DLkHqJaDSJHu9mqxx5SF0RGOeg0YpAxt2v04S8UFMyC Nrjl5/+dtkHYWmHCpSbpUzfYi7jR5VhZTeWOTG/6gXzGgvDi4AJBiMaoOto2dl9c lYaI04ifDUXn9z0/zyW9eCj1Fb33nBqNcLOVzmPBAkZ9NJZGlzpBD6LXm5YY4kSb OoFig8bU+/hF9gNjtvP9tbQVJ73u4ky/moJo6Ef+Mkxi2ppOWUDJYZJIGTcpswcF MTnLIRpxoVf6Rq35FlyRvpRv5Mkm+6tu -----END CERTIFICATE-----Generated at Sun Jan 25 13:52:49 2026 by rpki-client