This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json) Hash identifier: CvglNmEMW7nfOOjwpiTwB4lfEvX76Cj5XwdTdYy78Fo= Subject key identifier: DD:34:86:31:00:AA:FD:33:34:B3:A5:95:87:EE:57:F8:28:0B:AD:DE Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 0939 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft Manifest number: 08CE Signing time: Sat 24 Jan 2026 20:02:16 +0000 Manifest this update: Sat 24 Jan 2026 20:02:15 +0000 Manifest next update: Sat 31 Jan 2026 20:02:15 +0000 Files and hashes: 1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: 1oTSDnzly4PITanVTkw+qynDdNg+LjozFW5Bn+A3s+M=) 2: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: huVUXhJ3Ojs1r05u1jG7Kov4uI++w1LAbAYi/YZa49g=) 3: 4944017C8FAF11F0B59F0948C4F9AE02.roa (hash: BwcQamXNLiosPDRZ6f2FtmfW9jpBhqektxQqopKnPY4=) 4: 8D5442E28A4011F093E0F94DC4F9AE02.roa (hash: gKM4RcuYJ3WOjsFaGVW261ymQPFBOzXDnV5oh7hrxpU=) 5: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: fQqKRj97YwSX01j4RLkIYLyoFuesKb4QSmD9wM54Hnc=) 6: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: 8ZNPpyzaCSOR7XArDiXTgpwOZdqi5o9nlzrrurZ8f2Q=) 7: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: PfplpurYpM5Nlhs4wMvQOWeVvjM0XGHzdK7n61JNfpc=) 8: A709BC948FAE11F09FAE9C69C4F9AE02.roa (hash: h5BGjGSDw6jhnZlF9NOXRKNYmdB5F7XUQytmx7kt8pU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2361 (0x939) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Validity Not Before: Jan 24 20:02:15 2026 GMT Not After : Jan 31 20:02:15 2026 GMT Subject: CN=69752548-a42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cd:27:0e:84:c2:84:9c:ba:24:c6:73:53:ab: 94:fd:38:4b:60:ff:e5:07:0b:c1:3e:70:31:b3:ee: 55:6d:fc:93:f4:84:8a:7e:50:66:31:d1:43:de:33: c2:28:d3:7f:8f:9f:fe:ee:26:a1:69:2a:f2:19:83: cf:6a:c7:87:fc:48:d3:c7:e2:3f:37:01:04:18:53: 90:8b:13:fa:b0:75:a7:c6:c3:02:c3:3b:04:8e:8c: 8f:cb:3c:a1:9d:2e:1f:a3:9d:3b:fe:5b:de:04:6d: 4a:bb:c2:fb:5c:b2:fc:46:32:2a:03:c5:43:b3:4c: 8c:41:89:36:51:a0:45:f2:fb:e6:0c:24:16:ff:55: 9d:4c:7e:6b:12:66:1e:ab:9e:e7:ba:71:4c:c1:1c: 67:1d:31:f2:cc:ab:62:06:f0:c2:d7:8f:de:d1:b7: 42:f5:01:df:e9:1f:28:ae:cd:46:63:7c:81:84:8b: 95:45:ce:22:92:41:19:a9:bf:42:b2:56:b8:53:32: 78:fe:85:db:35:f5:27:6d:7b:c5:2c:35:f9:b4:f3: b7:aa:43:68:a1:d3:63:19:f4:f7:f4:4e:ea:f7:11: a3:9a:b0:f6:f5:89:a7:63:ac:4f:38:de:2a:b1:00: 99:81:83:00:b9:fb:86:0c:63:4f:b6:f5:2f:5d:89: ea:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:34:86:31:00:AA:FD:33:34:B3:A5:95:87:EE:57:F8:28:0B:AD:DE X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:da:49:1a:52:fe:da:bd:97:a4:0b:34:9e:33:4b:b4:b7:c7: 85:ec:ab:f8:f6:58:42:cb:3c:9b:2d:4d:a5:7a:f7:f8:7c:3c: 05:ad:3d:05:e6:b1:34:04:b9:4a:a5:e8:3d:47:8b:37:b3:0f: 15:03:cd:e9:04:26:55:fd:b7:90:ff:67:c0:16:29:14:17:d3: de:c4:46:ac:77:51:c1:13:3c:2c:b8:c4:91:9d:ab:0b:24:d5: b3:88:76:51:5a:dd:90:8f:2b:78:ef:b9:72:2b:d7:4f:22:ac: b6:b5:e0:e7:7a:c3:52:5b:89:5a:64:fd:5a:34:97:4b:6e:af: 7e:4e:91:74:fa:2c:bd:f7:68:88:bd:22:f3:e8:5f:79:ad:87: 7f:7c:90:57:bb:53:b7:9f:f8:42:18:db:b5:99:98:18:da:ab: cd:1e:91:4d:5d:cb:7c:40:38:d8:17:a4:7c:59:ba:de:09:c9: 8b:e8:07:d6:75:59:bf:c9:04:f7:93:90:31:25:4f:5c:a5:d3: f5:e4:c9:ee:45:c1:d1:63:42:d0:9f:7c:f6:4f:d1:f1:c3:ae: df:b3:3e:0d:8b:15:4c:b7:93:10:97:89:b4:ac:23:49:65:c2: b5:0d:fa:96:ce:c7:ee:e5:f4:8e:18:eb:ff:c8:a9:2e:2d:8d: 1e:d8:31:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjYwMTI0MjAwMjE1WhcNMjYwMTMxMjAwMjE1WjAYMRYwFAYD VQQDDA02OTc1MjU0OC1hNDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo80nDoTChJy6JMZzU6uU/ThLYP/lBwvBPnAxs+5VbfyT9ISKflBmMdFD3jPC KNN/j5/+7iahaSryGYPPaseH/EjTx+I/NwEEGFOQixP6sHWnxsMCwzsEjoyPyzyh nS4fo507/lveBG1Ku8L7XLL8RjIqA8VDs0yMQYk2UaBF8vvmDCQW/1WdTH5rEmYe q57nunFMwRxnHTHyzKtiBvDC14/e0bdC9QHf6R8ors1GY3yBhIuVRc4ikkEZqb9C sla4UzJ4/oXbNfUnbXvFLDX5tPO3qkNoodNjGfT39E7q9xGjmrD29YmnY6xPON4q sQCZgYMAufuGDGNPtvUvXYnq9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN00hjEA qv0zNLOllYfuV/goC63eMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GRjUxRTU5RUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pH WGdpQzFKNmZMNHo5Sy1nbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx2kkaUv7avZekCzSeM0u0t8eF7Kv49lhCyzybLU2levf4fDwFrT0F 5rE0BLlKpeg9R4s3sw8VA83pBCZV/beQ/2fAFikUF9PexEasd1HBEzwsuMSRnasL JNWziHZRWt2Qjyt477lyK9dPIqy2teDnesNSW4laZP1aNJdLbq9+TpF0+iy992iI vSLz6F95rYd/fJBXu1O3n/hCGNu1mZgY2qvNHpFNXct8QDjYF6R8WbreCcmL6AfW dVm/yQT3k5AxJU9cpdP15MnuRcHRY0LQn3z2T9Hxw67fsz4NixVMt5MQl4m0rCNJ ZcK1DfqWzsfu5fSOGOv/yKkuLY0e2DG7 -----END CERTIFICATE-----Generated at Sun Jan 25 06:11:39 2026 by rpki-client