This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft File: tlTdX1sVILMlvAnEv0yt88r7NCk.mft (raw, json) Hash identifier: 7Q3iLyiXNZlaYMyHCN+jaSWGageJM79HcAxOFm6lUk8= Subject key identifier: 3A:A5:B2:B7:E1:2A:F4:21:AD:58:28:CB:6E:9B:E4:4C:99:85:C7:A1 Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 Certificate issuer: /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Certificate serial: 0991 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft Manifest number: 20BD Signing time: Sat 24 Jan 2026 16:22:26 +0000 Manifest this update: Sat 24 Jan 2026 16:22:26 +0000 Manifest next update: Sat 31 Jan 2026 16:22:26 +0000 Files and hashes: 1: tlTdX1sVILMlvAnEv0yt88r7NCk.crl (hash: VVEoGW1QrBg1Shcr4bKQap73OJoHAs7cZI5aejWAGzU=) 2: 4A31F616E8DD11F0AFF4FBBE636F56BC.roa (hash: 1KM1bFKVJjKJY9RFjtArJTK0rbIigsPOhJEAbj9nQSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2449 (0x991) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Validity Not Before: Jan 24 16:22:26 2026 GMT Not After : Jan 31 16:22:26 2026 GMT Subject: CN=6974f1c2-1ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:65:d0:ab:c5:75:c7:5a:da:06:cb:dd:39: 04:70:2c:7f:f9:87:68:49:c6:4d:d0:68:4a:ab:c0: e9:a3:bd:3d:09:69:1b:a8:09:05:ba:39:5f:84:b6: 61:b4:7d:73:10:01:a6:c2:a9:28:c4:34:59:ea:ca: 83:77:16:39:aa:3c:d7:b5:45:ab:da:af:f7:61:c2: 8a:29:fd:f2:8c:c9:b2:f9:56:d2:c0:bb:89:66:4e: 4d:9a:7a:81:b2:ab:9c:92:65:a1:cb:93:07:09:c7: 60:4a:0e:6d:34:50:22:41:ab:fc:bb:90:c2:3f:e4: 4d:18:19:ab:db:50:76:a2:e0:a9:db:b6:fe:90:ac: e6:2f:eb:e3:0f:98:f0:99:03:c0:f9:3e:10:53:1e: 88:ac:d4:ac:46:d2:75:26:af:ff:b5:e7:e3:c2:2b: d6:1b:5d:af:ae:bb:7f:7a:7f:24:9b:b1:63:d1:ce: 66:e6:86:e3:a3:d2:4b:23:bd:08:05:31:e8:71:fb: 7f:25:2d:1e:96:e8:87:fe:a6:77:2c:df:a7:ed:14: 54:26:00:21:a0:6e:e0:23:b9:06:c7:c6:e7:5b:f3: 77:8d:aa:f2:24:8c:f6:a5:22:65:cf:d9:d7:f1:f3: 64:ca:75:41:cf:da:4f:a5:38:62:21:c1:7d:de:cc: 2d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A5:B2:B7:E1:2A:F4:21:AD:58:28:CB:6E:9B:E4:4C:99:85:C7:A1 X509v3 Authority Key Identifier: keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:d7:36:a7:e5:4a:44:67:5a:30:31:ec:dd:23:a9:f0:fe:fc: 07:14:f3:1a:3d:e5:e0:a5:17:f3:1e:a4:ff:4a:d3:67:a9:a3: fd:54:16:23:7e:da:d6:b3:e7:ba:5c:d2:8c:45:80:93:a8:b0: 35:b1:54:74:86:ca:58:c8:12:4c:93:ae:e5:a8:b5:15:46:64: f5:7b:10:41:fc:65:f3:2e:a2:72:ee:65:9a:82:88:14:9a:13: 55:f9:5e:4f:c3:3b:5a:85:01:29:70:46:f5:2f:f0:92:ab:fc: 5b:32:9b:90:7a:93:b4:aa:cb:67:18:5c:2f:1a:2c:9e:2b:42: 5c:ef:a8:35:15:a8:cd:cd:bb:a2:09:53:38:bb:8e:1d:ef:48: 05:74:00:9d:f1:17:2f:8e:21:93:33:bd:e2:5c:a2:ee:8b:f7: 98:c7:1f:ae:18:6b:af:f9:40:c6:84:a1:63:2f:a6:46:a8:b1: 9b:ff:54:75:2c:bb:2c:a2:a8:11:9b:5a:a2:a9:26:63:59:e1: 13:07:0d:eb:03:d6:9a:4a:04:7a:cb:d6:78:9a:99:f3:7b:2b: f6:46:08:76:ae:34:ef:d8:ac:fe:0d:94:f8:1b:36:22:ec:8e: b6:df:e0:f7:df:22:15:d9:ea:f0:ae:b8:c3:5d:ff:f4:72:5d: 4a:08:bf:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEI2NTRERDVGNUIxNTIwQjMyNUJDMDlDNEJGNENBREYz Q0FGQjM0MjkwHhcNMjYwMTI0MTYyMjI2WhcNMjYwMTMxMTYyMjI2WjAYMRYwFAYD VQQDDA02OTc0ZjFjMi0xZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVtl0KvFdcda2gbL3TkEcCx/+YdoScZN0GhKq8Dpo709CWkbqAkFujlfhLZh tH1zEAGmwqkoxDRZ6sqDdxY5qjzXtUWr2q/3YcKKKf3yjMmy+VbSwLuJZk5NmnqB squckmWhy5MHCcdgSg5tNFAiQav8u5DCP+RNGBmr21B2ouCp27b+kKzmL+vjD5jw mQPA+T4QUx6IrNSsRtJ1Jq//tefjwivWG12vrrt/en8km7Fj0c5m5objo9JLI70I BTHocft/JS0eluiH/qZ3LN+n7RRUJgAhoG7gI7kGx8bnW/N3jaryJIz2pSJlz9nX 8fNkynVBz9pPpThiIcF93swt5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqlsrfh KvQhrVgoy26b5EyZhcehMB8GA1UdIwQYMBaAFLZU3V9bFSCzJbwJxL9MrfPK+zQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklMTWx2QW5FdjB5dDg4cjdO Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsVGRYMXNWSUxNbHZBbkV2MHl0ODhyN05Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklM TWx2QW5FdjB5dDg4cjdOQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk1zan5UpEZ1owMezdI6nw/vwHFPMaPeXgpRfzHqT/StNnqaP9VBYj ftrWs+e6XNKMRYCTqLA1sVR0hspYyBJMk67lqLUVRmT1exBB/GXzLqJy7mWagogU mhNV+V5PwztahQEpcEb1L/CSq/xbMpuQepO0qstnGFwvGiyeK0Jc76g1FajNzbui CVM4u44d70gFdACd8RcvjiGTM73iXKLui/eYxx+uGGuv+UDGhKFjL6ZGqLGb/1R1 LLssoqgRm1qiqSZjWeETBw3rA9aaSgR6y9Z4mpnzeyv2Rgh2rjTv2Kz+DZT4GzYi 7I623+D33yIV2erwrrjDXf/0cl1KCL/E -----END CERTIFICATE-----Generated at Sun Jan 25 06:10:54 2026 by rpki-client