This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft File: oE50OtMfT4PwncXS9-9Pq-HvaHs.mft (raw, json) Hash identifier: 2NMhGsMzvgelet9c8q4E7DVipNOPm2WCoI2nRF0hRRo= Subject key identifier: 32:02:76:CE:31:32:0B:EF:D3:D3:B3:E7:33:BA:F2:28:49:22:E4:96 Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Certificate serial: 0642 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft Manifest number: 0628 Signing time: Sat 24 Jan 2026 22:04:53 +0000 Manifest this update: Sat 24 Jan 2026 22:04:52 +0000 Manifest next update: Sat 31 Jan 2026 22:04:52 +0000 Files and hashes: 1: oE50OtMfT4PwncXS9-9Pq-HvaHs.crl (hash: K+/8JxZynDsbo1756IgS3qEu2g12Hp9uo+inSCuFWx4=) 2: 1614034C93C711EDB3D8A867C4F9AE02.roa (hash: ywF33ZMJOUcpgMUIi20lZlpyg8JGMBrKC6zMJ/6wuTs=) 3: 2F581CEA33F311EEABFC7410C4F9AE02.roa (hash: weFEOxrVQ1R73fykzCNyC6/gZBqdWvZXSpKP3W9J0hQ=) 4: 180DF9BE93C711EDB3D8A867C4F9AE02.roa (hash: SoMp5duXOAwol503IxpDfQSWDWEVUuEjZp2f9lzEdw8=) 5: 1767CE4A93C711EDB3D8A867C4F9AE02.roa (hash: MXR9v07MaUgaUp2EpRPUYi0YWE/byXOzVwu5NXbaWsg=) 6: 16A4DFE893C711EDB3D8A867C4F9AE02.roa (hash: vWRcSTu3hKVKTzFiY2NVAPZ7PA6+HMwNwvKyVpnCyx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1602 (0x642) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF8, serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Validity Not Before: Jan 24 22:04:52 2026 GMT Not After : Jan 31 22:04:52 2026 GMT Subject: CN=69754205-cdc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:09:69:73:02:ab:51:37:dd:95:9b:3f:d5:7e: b2:dc:1f:a1:31:b5:85:85:f6:12:68:d7:67:e1:99: 50:1d:39:b9:40:8c:8f:83:cf:36:6e:52:2a:fa:26: 1b:47:fb:59:bb:69:99:a9:76:8e:64:f8:e6:26:4e: ab:6a:69:4a:db:4b:7c:25:e0:44:bb:bb:b0:ae:b6: ca:d6:a0:cd:42:f4:6d:c4:0e:ef:24:b1:6f:35:6d: 39:82:6e:59:18:3f:52:19:5d:29:70:9c:0f:07:76: 25:2c:02:3e:0a:04:54:d1:01:c1:8b:74:c4:4b:52: 67:b3:a9:68:5f:e9:96:a6:1e:09:69:6b:75:b3:04: 3f:72:5d:e1:c0:84:a8:7e:8e:a0:f5:60:7b:b6:95: 94:0c:3c:06:a5:38:b2:bc:31:1f:f2:1d:d2:a3:55: 1e:51:e7:e0:9c:17:00:80:13:90:2e:1b:c5:09:bf: 78:34:9d:ea:72:44:b2:8b:d8:a7:0f:59:5b:0c:89: b0:ca:bd:18:94:b6:5b:05:7f:bc:e1:04:4b:ed:22: cf:8e:f4:a6:90:28:15:5a:f1:e8:98:73:37:e5:52: d9:1d:b2:d6:b4:dd:df:91:07:9c:e1:81:41:34:d8: 1d:ac:65:6f:53:0c:56:bf:a0:1a:0d:e3:2e:c5:84: 52:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:02:76:CE:31:32:0B:EF:D3:D3:B3:E7:33:BA:F2:28:49:22:E4:96 X509v3 Authority Key Identifier: keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:39:f5:26:2b:00:15:44:cd:a6:ae:09:cc:2a:58:ed:1c:70: 42:e1:94:74:9e:93:f9:48:f7:5d:34:f5:9a:89:33:eb:ae:89: fa:55:94:e9:28:9c:8d:ae:3b:93:04:93:73:65:8e:2c:96:7f: e8:18:49:b4:b3:cc:61:31:ad:41:f6:a3:b6:96:c1:08:ae:f2: 25:49:61:48:81:70:be:61:b6:53:14:28:e0:95:c9:b3:bc:52: f0:b5:8a:31:fd:25:bd:e2:1d:53:6e:4a:31:f4:e1:28:ba:a8: 26:86:d7:0b:f5:23:de:ab:3b:4b:b6:30:d3:33:2a:78:b2:99: 5b:70:58:c5:ce:5d:82:6a:09:ab:94:ee:da:35:7c:fd:ab:a2: 9b:df:bb:1c:f5:48:5b:f7:84:58:9b:35:f0:1b:05:b2:1e:8d: ac:ff:95:d3:75:ad:17:ff:84:c0:2e:db:69:dc:27:96:09:44: c4:ed:0e:01:30:2a:b9:a3:9d:8e:ad:5e:db:56:b6:d2:60:33: 9d:4b:1b:ff:8d:86:8d:d8:a6:07:01:cf:80:87:f0:5b:e6:df: 98:a6:b0:e0:ec:e4:b2:26:3f:61:9f:b2:a0:e2:2c:97:6e:bb: a1:91:63:35:07:03:dc:bc:80:8f:89:15:16:fb:98:34:ac:7d: 16:5e:dc:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjgxMTAvBgNVBAUTKEEwNEU3NDNBRDMxRjRGODNGMDlEQzVEMkY3RUY0RkFC RTFFRjY4N0IwHhcNMjYwMTI0MjIwNDUyWhcNMjYwMTMxMjIwNDUyWjAYMRYwFAYD VQQDDA02OTc1NDIwNS1jZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4glpcwKrUTfdlZs/1X6y3B+hMbWFhfYSaNdn4ZlQHTm5QIyPg882blIq+iYb R/tZu2mZqXaOZPjmJk6ramlK20t8JeBEu7uwrrbK1qDNQvRtxA7vJLFvNW05gm5Z GD9SGV0pcJwPB3YlLAI+CgRU0QHBi3TES1Jns6loX+mWph4JaWt1swQ/cl3hwISo fo6g9WB7tpWUDDwGpTiyvDEf8h3So1UeUefgnBcAgBOQLhvFCb94NJ3qckSyi9in D1lbDImwyr0YlLZbBX+84QRL7SLPjvSmkCgVWvHomHM35VLZHbLWtN3fkQec4YFB NNgdrGVvUwxWv6AaDeMuxYRSUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDICds4x Mgvv09Oz5zO68ihJIuSWMB8GA1UdIwQYMBaAFKBOdDrTH0+D8J3F0vfvT6vh72h7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGOC9DOTM4RDEwNkNC NTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0UHduY1hTOS05UHEtSHZh SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29FNTBPdE1mVDRQd25jWFM5LTlQcS1IdmFIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEVGOC9DOTM4RDEwNkNCNTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0 UHduY1hTOS05UHEtSHZhSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPOfUmKwAVRM2mrgnMKljtHHBC4ZR0npP5SPddNPWaiTPrron6VZTp KJyNrjuTBJNzZY4sln/oGEm0s8xhMa1B9qO2lsEIrvIlSWFIgXC+YbZTFCjglcmz vFLwtYox/SW94h1Tbkox9OEouqgmhtcL9SPeqztLtjDTMyp4splbcFjFzl2Cagmr lO7aNXz9q6Kb37sc9Uhb94RYmzXwGwWyHo2s/5XTda0X/4TALttp3CeWCUTE7Q4B MCq5o52OrV7bVrbSYDOdSxv/jYaN2KYHAc+Ah/Bb5t+YprDg7OSyJj9hn7Kg4iyX bruhkWM1BwPcvICPiRUW+5g0rH0WXtw1 -----END CERTIFICATE-----Generated at Sun Jan 25 08:01:38 2026 by rpki-client