This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft File: tTRQOC5F-KPX1ikQ83nHidFH_7A.mft (raw, json) Hash identifier: RBytAUC4ACbU8ON8PgYs/7GgPON4Xoohx5Y7sCddPFI= Subject key identifier: 15:EC:75:44:66:27:A0:96:0F:6E:1F:78:0B:2E:5E:BB:84:BA:2E:CD Authority key identifier: B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0 Certificate issuer: /CN=A91DFA83/serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0 Certificate serial: 025E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft Manifest number: 0256 Signing time: Sun 25 Jan 2026 00:59:46 +0000 Manifest this update: Sun 25 Jan 2026 00:59:45 +0000 Manifest next update: Sun 01 Feb 2026 00:59:45 +0000 Files and hashes: 1: tTRQOC5F-KPX1ikQ83nHidFH_7A.crl (hash: AtbfWRWSQrR00dLwAzB+hfXksC1gkVZF9TQAd/1vMX8=) 2: 61B47D886B5211EDB97A2834C4F9AE02.roa (hash: +3v4STyxr/zeU0RYF53X4MGXWGvAcT5sIBZD/HJJRoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFA83, serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0 Validity Not Before: Jan 25 00:59:45 2026 GMT Not After : Feb 1 00:59:45 2026 GMT Subject: CN=69756b02-96d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:09:b5:41:97:6c:8d:17:f2:1d:d1:00:50:f5: f1:7d:03:19:4d:b8:65:aa:49:1f:84:f2:b6:0a:f3: ac:ae:fd:9a:5a:c9:a1:2d:cf:ba:2a:db:64:f5:80: fa:ab:80:c1:e0:ae:2e:cb:ce:24:9a:f0:b2:5f:91: 4d:0b:56:d1:19:9d:ef:68:d7:ec:ee:8f:37:aa:f4: 6b:0f:8a:a5:c8:6c:6b:80:91:2b:e5:9f:05:59:97: b6:cf:b7:2e:c8:86:dd:a2:9e:b6:91:98:d4:20:89: a5:0e:77:61:a3:08:0a:10:d9:b0:1b:83:4b:c1:72: 60:ad:06:93:69:96:eb:57:2c:81:48:b3:35:1b:17: e6:a2:a3:16:a3:e7:71:98:a6:85:35:12:a6:a4:99: e6:b2:74:ca:bb:7d:eb:3f:ce:73:d2:8c:ba:47:83: e3:88:5c:8c:9b:ac:af:16:28:4f:f9:26:82:f0:07: ba:b2:80:2e:f3:fd:5e:a2:30:8a:62:15:8d:3f:f4: 31:63:0b:93:01:2a:e5:d5:75:cf:60:fa:23:21:9e: 05:95:04:9a:46:dd:47:3b:87:ff:4f:94:a5:5a:a7: f7:53:a4:34:1f:0d:c4:85:7a:8a:29:e4:25:f0:4e: 0f:61:c4:c0:cb:0f:a7:6d:ed:3d:39:6b:92:9f:ab: b8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EC:75:44:66:27:A0:96:0F:6E:1F:78:0B:2E:5E:BB:84:BA:2E:CD X509v3 Authority Key Identifier: keyid:B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:52:9c:d2:55:d4:34:aa:a4:54:19:cf:6c:80:12:66:38:93: 3c:7c:8a:22:bc:fe:df:c4:ef:fb:4f:0c:51:55:2f:21:be:a1: 23:77:75:89:34:24:c5:3f:26:93:f7:f6:e2:17:05:16:d3:6b: e0:98:6f:fe:f1:52:47:69:77:0d:b1:12:bf:e5:3d:9e:01:da: 8e:20:32:f1:e8:01:90:cd:07:cf:95:e4:05:e4:6b:c6:9b:1b: 51:c4:12:b3:fe:a0:e3:a4:1a:e4:38:f5:79:58:ae:a1:c8:3b: 4d:3f:5a:ca:c0:1e:56:6f:fc:29:1a:b0:7c:f6:bf:7f:ec:be: 81:a4:09:d5:ea:02:40:1c:73:4a:86:8a:82:0d:c5:d8:e2:e9: 28:e6:79:74:ab:9e:40:64:c3:d0:6c:f4:53:f1:cc:1d:e0:02: 30:e2:9f:c6:90:f5:c9:96:30:42:99:26:50:6e:79:ab:53:7e: 92:61:2e:3f:7c:85:be:9e:cf:fc:6f:e0:3b:04:91:a3:56:30: 2f:3b:de:f3:54:4a:b1:f6:aa:90:91:d0:1a:8b:37:03:4f:e0: 51:a0:16:2a:ee:a8:08:e4:aa:d1:cd:f7:60:0f:4a:65:3c:07: 92:da:bd:d5:08:e1:f8:ba:6c:24:8b:b2:28:29:46:ea:bd:c6: 70:8d:bd:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBODMxMTAvBgNVBAUTKEI1MzQ1MDM4MkU0NUY4QTNEN0Q2MjkxMEYzNzlDNzg5 RDE0N0ZGQjAwHhcNMjYwMTI1MDA1OTQ1WhcNMjYwMjAxMDA1OTQ1WjAYMRYwFAYD VQQDDA02OTc1NmIwMi05NmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugm1QZdsjRfyHdEAUPXxfQMZTbhlqkkfhPK2CvOsrv2aWsmhLc+6Kttk9YD6 q4DB4K4uy84kmvCyX5FNC1bRGZ3vaNfs7o83qvRrD4qlyGxrgJEr5Z8FWZe2z7cu yIbdop62kZjUIImlDndhowgKENmwG4NLwXJgrQaTaZbrVyyBSLM1GxfmoqMWo+dx mKaFNRKmpJnmsnTKu33rP85z0oy6R4PjiFyMm6yvFihP+SaC8Ae6soAu8/1eojCK YhWNP/QxYwuTASrl1XXPYPojIZ4FlQSaRt1HO4f/T5SlWqf3U6Q0Hw3EhXqKKeQl 8E4PYcTAyw+nbe09OWuSn6u4fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXsdURm J6CWD24feAsuXruEui7NMB8GA1UdIwQYMBaAFLU0UDguRfij19YpEPN5x4nRR/+w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkE4My82NEFGODAwMjZC MzIxMUVEQjRFQ0I3NjhDNEY5QUUwMi90VFJRT0M1Ri1LUFgxaWtRODNuSGlkRkhf N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RUUlFPQzVGLUtQWDFpa1E4M25IaWRGSF83QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkE4My82NEFGODAwMjZCMzIxMUVEQjRFQ0I3NjhDNEY5QUUwMi90VFJRT0M1Ri1L UFgxaWtRODNuSGlkRkhfN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqUpzSVdQ0qqRUGc9sgBJmOJM8fIoivP7fxO/7TwxRVS8hvqEjd3WJ NCTFPyaT9/biFwUW02vgmG/+8VJHaXcNsRK/5T2eAdqOIDLx6AGQzQfPleQF5GvG mxtRxBKz/qDjpBrkOPV5WK6hyDtNP1rKwB5Wb/wpGrB89r9/7L6BpAnV6gJAHHNK hoqCDcXY4uko5nl0q55AZMPQbPRT8cwd4AIw4p/GkPXJljBCmSZQbnmrU36SYS4/ fIW+ns/8b+A7BJGjVjAvO97zVEqx9qqQkdAaizcDT+BRoBYq7qgI5KrRzfdgD0pl PAeS2r3VCOH4umwki7IoKUbqvcZwjb3K -----END CERTIFICATE-----Generated at Sun Jan 25 17:00:49 2026 by rpki-client