This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft File: whcUQpGt4TEa-2LQLllQN8jatdw.mft (raw, json) Hash identifier: O+GAyjn8rgcS4hxxTIjgN22U0PowMHPJVfLFSkDhY1s= Subject key identifier: 83:D5:67:B7:AD:AF:AB:25:DE:C7:60:11:97:CB:1A:67:1B:CB:14:BA Authority key identifier: C2:17:14:42:91:AD:E1:31:1A:FB:62:D0:2E:59:50:37:C8:DA:B5:DC Certificate issuer: /CN=A91E3E8B/serialNumber=C217144291ADE1311AFB62D02E595037C8DAB5DC Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft Manifest number: 28 Signing time: Sun 25 Jan 2026 06:43:55 +0000 Manifest this update: Sun 25 Jan 2026 06:43:55 +0000 Manifest next update: Sun 01 Feb 2026 06:43:55 +0000 Files and hashes: 1: whcUQpGt4TEa-2LQLllQN8jatdw.crl (hash: omm0mUGQhmMM8+PVBHiQAOTZLo2mq1788ECSmp7PoOU=) 2: 0359510CBE2711F08C3BFC4DC4F9AE02.roa (hash: xMDfluTZ+ozklwcjk6WSJjCTPWq07m8+7WXhvd6X+vs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.crl rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E8B, serialNumber=C217144291ADE1311AFB62D02E595037C8DAB5DC Validity Not Before: Jan 25 06:43:55 2026 GMT Not After : Feb 1 06:43:55 2026 GMT Subject: CN=6975bbab-23da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:85:5b:8d:6f:3a:d8:e4:82:b6:5c:2a:af:68: 7a:ea:f3:5a:38:31:0d:48:f6:83:7e:af:34:48:dc: ab:ee:fa:d2:a2:6d:06:57:38:be:1f:21:57:c0:e0: c0:8a:59:64:81:53:c2:d7:dc:e4:f4:92:13:31:e0: 47:f3:db:7d:3f:26:11:73:04:87:46:b1:ba:8e:93: bf:29:dc:b9:61:4d:d1:48:0d:e3:c0:df:b9:d1:65: 4a:57:7a:4b:d0:47:80:28:d5:6c:d0:52:17:02:29: 78:30:c9:49:42:59:b2:4a:1a:be:08:6e:24:70:3e: ca:4f:de:ab:05:b1:17:e8:c5:3c:f2:b2:1a:bf:9f: 77:1e:3e:51:6a:ca:a3:83:b0:1d:b1:d1:ed:6a:83: ab:76:02:88:22:59:8c:77:3c:70:5a:38:ec:09:ef: 55:42:c9:9d:2b:56:6e:6e:db:04:c6:5c:60:2f:c8: 2e:cf:55:62:be:c4:d2:43:57:62:97:77:1b:35:fa: 89:65:08:9b:3b:49:b4:3f:66:92:11:35:77:c7:46: cb:43:a2:da:95:5e:51:72:36:99:ee:d0:bb:b4:47: a6:14:9f:ab:4e:c3:db:04:f7:a9:3a:3e:ef:d2:7e: c0:84:5e:2e:e8:bb:9a:9d:80:16:84:fe:7f:d1:30: 06:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D5:67:B7:AD:AF:AB:25:DE:C7:60:11:97:CB:1A:67:1B:CB:14:BA X509v3 Authority Key Identifier: keyid:C2:17:14:42:91:AD:E1:31:1A:FB:62:D0:2E:59:50:37:C8:DA:B5:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:0a:da:86:49:23:05:23:d5:18:7c:39:c3:aa:8b:5d:55:61: eb:a8:71:b8:ee:99:12:2e:92:3f:a1:74:ce:a0:ce:32:e6:9d: 20:46:7b:15:33:10:27:06:d1:0a:7a:8c:67:90:ae:e3:d0:68: 0a:43:24:b2:c8:e4:1e:3b:18:f9:09:cf:db:3c:2b:92:33:4b: 6a:7b:a3:b5:1d:10:a7:41:ed:cc:83:e9:31:5f:e8:5d:5f:af: 4e:5f:4a:0f:cc:48:1a:ca:73:2d:08:07:2a:8d:83:4c:14:09: da:71:de:f4:c5:7a:0a:df:92:ac:2f:92:1f:9c:35:be:ef:ad: ae:fd:ca:07:a2:01:d4:49:14:70:45:f0:7d:a7:26:7b:29:c5: eb:e1:8f:32:dd:5b:9f:f0:be:e6:ae:b4:c9:e0:be:e4:f1:4b: d9:15:27:01:39:e1:1b:3f:d3:bb:96:9c:13:5a:9e:0b:17:69: 40:a4:1b:cd:e4:28:d4:81:d7:97:1a:15:c1:05:d3:74:40:c0: ab:ac:1d:a4:bb:f2:47:e9:02:d4:5a:2c:35:3f:85:44:15:37: 37:ae:82:92:92:bb:d5:0f:00:81:44:22:62:22:7b:8e:62:ed: 5f:21:97:8d:4d:d7:d7:62:f0:48:a0:a2:03:5b:32:6f:f9:6b: 8e:6b:1f:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0U4QjExMC8GA1UEBRMoQzIxNzE0NDI5MUFERTEzMTFBRkI2MkQwMkU1OTUwMzdD OERBQjVEQzAeFw0yNjAxMjUwNjQzNTVaFw0yNjAyMDEwNjQzNTVaMBgxFjAUBgNV BAMMDTY5NzViYmFiLTIzZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDShVuNbzrY5IK2XCqvaHrq81o4MQ1I9oN+rzRI3Kvu+tKibQZXOL4fIVfA4MCK WWSBU8LX3OT0khMx4Efz230/JhFzBIdGsbqOk78p3LlhTdFIDePA37nRZUpXekvQ R4Ao1WzQUhcCKXgwyUlCWbJKGr4IbiRwPspP3qsFsRfoxTzyshq/n3cePlFqyqOD sB2x0e1qg6t2AogiWYx3PHBaOOwJ71VCyZ0rVm5u2wTGXGAvyC7PVWK+xNJDV2KX dxs1+ollCJs7SbQ/ZpIRNXfHRstDotqVXlFyNpnu0Lu0R6YUn6tOw9sE96k6Pu/S fsCEXi7ou5qdgBaE/n/RMAZZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg9Vnt62v qyXex2ARl8saZxvLFLowHwYDVR0jBBgwFoAUwhcUQpGt4TEa+2LQLllQN8jatdww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRThCL0ZDNzUzODZBQkUy MTExRjBBRkQ1QjUxOUM0RjlBRTAyL3doY1VRcEd0NFRFYS0yTFFMbGxRTjhqYXRk dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd2hjVVFwR3Q0VEVhLTJMUUxsbFFOOGphdGR3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RThCL0ZDNzUzODZBQkUyMTExRjBBRkQ1QjUxOUM0RjlBRTAyL3doY1VRcEd0NFRF YS0yTFFMbGxRTjhqYXRkdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJMK2oZJIwUj1Rh8OcOqi11VYeuocbjumRIukj+hdM6gzjLmnSBGexUz ECcG0Qp6jGeQruPQaApDJLLI5B47GPkJz9s8K5IzS2p7o7UdEKdB7cyD6TFf6F1f r05fSg/MSBrKcy0IByqNg0wUCdpx3vTFegrfkqwvkh+cNb7vra79ygeiAdRJFHBF 8H2nJnspxevhjzLdW5/wvuautMngvuTxS9kVJwE54Rs/07uWnBNangsXaUCkG83k KNSB15caFcEF03RAwKusHaS78kfpAtRaLDU/hUQVNzeugpKSu9UPAIFEImIie45i 7V8hl41N19di8EigogNbMm/5a45rH8E= -----END CERTIFICATE-----Generated at Sun Jan 25 23:11:06 2026 by rpki-client