This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft File: CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json) Hash identifier: +x9rRR3F5fal+MFd94SF7U57nfBH5mHgi0dSV3EvN9Y= Subject key identifier: E5:C3:97:24:5E:8A:6B:06:34:50:37:2B:F2:49:CD:D8:2E:D6:9B:C7 Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D Certificate issuer: /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Certificate serial: 0F80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft Manifest number: 0F71 Signing time: Sat 24 Jan 2026 17:15:07 +0000 Manifest this update: Sat 24 Jan 2026 17:15:07 +0000 Manifest next update: Sat 31 Jan 2026 17:15:07 +0000 Files and hashes: 1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: CqhGz1fl8xqzdrHxz6o2Vkbi/CikO/Jh/9EtJgQJ5As=) 2: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: ib8nYaY5edetahLOziP3ND06MsQfzy3ex3w6zAk8k2E=) 3: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: UyCHDG2qAGPzolKitsZ8J2AXElrKooslUCGA3T3LeQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3968 (0xf80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Validity Not Before: Jan 24 17:15:07 2026 GMT Not After : Jan 31 17:15:07 2026 GMT Subject: CN=6974fe1b-c8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:f7:ba:8e:ec:08:d6:7e:e3:6b:45:a3:1d: 22:e7:59:25:14:2c:c7:e4:35:f7:69:23:bb:e7:e1: 8d:81:ed:0e:f9:5d:5a:ff:72:73:2d:e1:a7:f2:c1: 47:94:89:27:c0:c6:8e:0d:5d:8d:b1:bd:98:a9:8d: 7d:8c:32:86:ef:3a:6b:ec:cc:ac:71:ff:90:be:82: ec:63:5b:8d:b0:07:40:65:c3:77:de:0d:6b:f8:40: 6d:8b:37:7b:68:a9:ea:f3:0d:a3:de:0b:a4:58:a4: a9:0d:51:5f:b5:7f:36:fa:04:48:75:18:9f:20:53: d2:87:1e:0f:cd:d0:ec:99:f4:76:c3:b3:4d:6d:49: d7:43:5a:0c:ad:7b:c5:eb:90:30:7b:28:41:04:59: af:aa:d9:95:ff:54:29:91:7b:04:ae:38:53:09:74: 6f:66:47:74:76:72:50:e6:00:85:d1:92:7a:5e:a9: 55:dc:28:1f:ac:83:eb:62:39:4a:d4:91:59:e7:6d: 94:49:2d:e7:65:21:7b:a4:68:b8:32:e3:b6:8c:e6: 07:b5:58:fd:49:c9:50:f6:50:0a:ec:24:4a:7e:5a: 60:13:80:58:cc:75:09:6a:6a:0e:ad:40:e0:ee:2a: 18:47:3a:80:89:2e:f2:32:34:d2:64:f4:06:47:d3: 41:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C3:97:24:5E:8A:6B:06:34:50:37:2B:F2:49:CD:D8:2E:D6:9B:C7 X509v3 Authority Key Identifier: keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:9a:97:a0:0b:03:47:cb:ec:9d:fe:02:ef:82:69:9a:7b:6a: 31:19:6f:5b:16:3a:2a:36:e4:91:d7:85:89:db:d0:e2:4e:0e: e2:0d:dc:5b:42:51:45:40:5d:ef:02:48:2c:c9:05:36:df:0b: f7:bd:2b:df:c4:cb:ca:e7:f2:5d:27:d6:6a:a0:06:68:35:92: 80:05:be:ea:d3:5a:92:e5:a5:a3:30:9b:fc:09:1b:8e:78:5f: c2:33:8c:a8:64:17:e2:40:81:1a:67:9d:3f:79:50:af:1f:f7: 3e:bc:59:c2:af:be:e2:ac:86:af:99:87:8d:e7:8a:b0:5d:4e: 89:4b:65:97:9d:32:ec:72:32:b7:01:68:3d:8a:c1:35:95:37: 37:b1:29:f4:68:06:0b:bf:da:17:a2:71:6a:7a:3d:db:7b:96: bf:c2:85:9f:ea:c8:2e:fb:06:44:59:4f:fd:45:39:2e:57:19: 6a:f3:f7:81:e7:5b:1e:57:76:85:0b:7e:09:22:2a:e0:45:ca: 72:79:62:e7:bb:af:ae:51:2a:a7:5d:6b:1a:f9:1c:b1:20:a2: 25:e9:77:a3:fd:08:5d:15:f8:48:9b:e8:32:41:5f:de:c8:07: 42:dd:17:ee:c1:a1:8c:05:7c:e4:31:0f:ba:06:17:3c:cc:88: 04:0a:13:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExNTUxMTAvBgNVBAUTKDBCMjU2MUM0QjU3REE4MUQ3MEYzOTcyNEIwREUyQzcx MDE3NDlGNUQwHhcNMjYwMTI0MTcxNTA3WhcNMjYwMTMxMTcxNTA3WjAYMRYwFAYD VQQDDA02OTc0ZmUxYi1jOGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmz3uo7sCNZ+42tFox0i51klFCzH5DX3aSO75+GNge0O+V1a/3JzLeGn8sFH lIknwMaODV2Nsb2YqY19jDKG7zpr7Myscf+QvoLsY1uNsAdAZcN33g1r+EBtizd7 aKnq8w2j3gukWKSpDVFftX82+gRIdRifIFPShx4PzdDsmfR2w7NNbUnXQ1oMrXvF 65AweyhBBFmvqtmV/1QpkXsErjhTCXRvZkd0dnJQ5gCF0ZJ6XqlV3CgfrIPrYjlK 1JFZ522USS3nZSF7pGi4MuO2jOYHtVj9SclQ9lAK7CRKflpgE4BYzHUJamoOrUDg 7ioYRzqAiS7yMjTSZPQGR9NBFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXDlyRe imsGNFA3K/JJzdgu1pvHMB8GA1UdIwQYMBaAFAslYcS1fagdcPOXJLDeLHEBdJ9d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE1NS81Mzk5OEEzNDdF QjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFCMXc4NWNrc040c2NRRjBu MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N5Vmh4TFY5cUIxdzg1Y2tzTjRzY1FGMG4xMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTE1NS81Mzk5OEEzNDdFQjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFC MXc4NWNrc040c2NRRjBuMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvmpegCwNHy+yd/gLvgmmae2oxGW9bFjoqNuSR14WJ29DiTg7iDdxb QlFFQF3vAkgsyQU23wv3vSvfxMvK5/JdJ9ZqoAZoNZKABb7q01qS5aWjMJv8CRuO eF/CM4yoZBfiQIEaZ50/eVCvH/c+vFnCr77irIavmYeN54qwXU6JS2WXnTLscjK3 AWg9isE1lTc3sSn0aAYLv9oXonFqej3be5a/woWf6sgu+wZEWU/9RTkuVxlq8/eB 51seV3aFC34JIirgRcpyeWLnu6+uUSqnXWsa+RyxIKIl6Xej/QhdFfhIm+gyQV/e yAdC3RfuwaGMBXzkMQ+6Bhc8zIgEChMB -----END CERTIFICATE-----Generated at Sun Jan 25 09:39:08 2026 by rpki-client