This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft File: 3nORs21uduLMQKkEd3LACw93Umw.mft (raw, json) Hash identifier: TOjwrdVcTSKSYOU0/ltGPR97pejnwhtER6atqMmHtXQ= Subject key identifier: AC:A7:3D:01:D9:0F:0D:41:97:6E:8C:EA:FB:78:47:95:80:6B:75:E5 Authority key identifier: DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C Certificate issuer: /CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft Manifest number: 01EF Signing time: Sun 25 Jan 2026 01:14:30 +0000 Manifest this update: Sun 25 Jan 2026 01:14:29 +0000 Manifest next update: Sun 01 Feb 2026 01:14:29 +0000 Files and hashes: 1: 3nORs21uduLMQKkEd3LACw93Umw.crl (hash: 5aCA+Yix8HtGQ0p47DBG//mJazqNe4yz8wEAOcGxxxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Validity Not Before: Jan 25 01:14:29 2026 GMT Not After : Feb 1 01:14:29 2026 GMT Subject: CN=69756e76-9595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d6:2a:8f:11:7b:84:3b:90:b6:6d:9e:d4:a3: 5f:64:ed:42:c0:75:bf:1a:03:9e:4c:df:3b:88:11: 0b:4a:de:e4:a0:dd:21:f5:7e:02:df:40:c2:f1:13: 75:dd:55:fd:c0:81:d5:26:6b:05:4e:c4:c7:4b:52: 21:a3:3e:a5:48:1a:3d:8c:f5:eb:d0:31:0d:08:eb: 45:a8:08:57:80:68:fa:59:45:a4:fa:cb:cc:75:54: 29:de:a5:e2:62:44:51:92:08:f9:9a:fc:f1:9f:b9: 2a:b0:91:04:0e:3e:19:30:3c:9a:2a:13:43:cc:fe: 1f:6e:1b:46:8b:9a:e5:44:60:d5:a8:61:a7:04:35: 70:00:48:d7:6a:ef:d1:c5:9a:c9:df:c4:05:02:66: df:a3:b2:07:0b:cf:19:82:ba:69:e1:46:c5:5c:d8: d8:66:79:2d:73:45:4d:b9:fd:dc:37:c3:4f:64:95: dd:3a:a3:9a:e9:ba:00:5d:4a:6c:17:94:d5:43:54: 8f:e7:47:05:ce:d2:14:56:84:f3:af:7f:ee:6e:a3: a9:b5:f1:00:fb:a3:99:50:66:9f:c5:e6:0d:48:29: 5e:6a:e2:01:73:c6:8a:60:3c:ff:0b:07:a2:14:ed: 9a:90:fa:65:bb:79:ec:08:10:e1:6b:d3:54:94:e4: 91:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A7:3D:01:D9:0F:0D:41:97:6E:8C:EA:FB:78:47:95:80:6B:75:E5 X509v3 Authority Key Identifier: keyid:DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:da:1a:d6:3a:73:d3:70:97:81:77:2b:44:59:ad:24:00:80: 63:8f:ba:73:7e:ad:a9:7a:a6:59:ea:2f:d3:1b:74:97:a8:57: 9f:be:66:ea:0d:d2:46:14:34:e2:97:d0:0f:64:e5:21:72:a6: b6:a7:01:b9:a9:ca:62:60:70:05:5c:65:5a:1c:60:00:9a:e5: 82:ea:bc:65:8b:3f:4c:6f:ce:36:18:ec:70:54:70:27:6b:7d: 34:4f:ac:51:00:c3:7a:03:eb:77:10:a7:51:73:e1:9f:f8:33: bb:8c:7d:08:0e:40:2f:f3:d6:14:47:42:e8:34:cc:7e:d2:a0: 10:f8:aa:14:00:45:0b:4b:07:2f:ef:e4:1d:2b:d5:79:5e:e6: c1:8a:3d:8c:02:98:dd:d6:24:f7:d3:87:92:ea:68:2d:b4:88: fe:02:0a:87:d4:33:99:c9:4a:9d:4a:1b:44:b0:a8:b5:62:bf: 2b:09:6a:71:2a:12:63:07:63:9b:ce:23:54:49:de:5f:78:bf: ab:f0:00:69:95:24:32:29:27:63:3c:d1:4f:2d:1f:08:40:7e: 52:79:bd:ef:34:c1:29:4f:e8:91:48:e0:d5:e0:f1:05:ac:91: 40:99:e7:c3:e1:a3:0f:02:df:3f:78:3d:2d:91:38:5f:e9:eb: 28:4b:d7:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKERFNzM5MUIzNkQ2RTc2RTJDQzQwQTkwNDc3NzJDMDBC MEY3NzUyNkMwHhcNMjYwMTI1MDExNDI5WhcNMjYwMjAxMDExNDI5WjAYMRYwFAYD VQQDDA02OTc1NmU3Ni05NTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8tYqjxF7hDuQtm2e1KNfZO1CwHW/GgOeTN87iBELSt7koN0h9X4C30DC8RN1 3VX9wIHVJmsFTsTHS1Ihoz6lSBo9jPXr0DENCOtFqAhXgGj6WUWk+svMdVQp3qXi YkRRkgj5mvzxn7kqsJEEDj4ZMDyaKhNDzP4fbhtGi5rlRGDVqGGnBDVwAEjXau/R xZrJ38QFAmbfo7IHC88Zgrpp4UbFXNjYZnktc0VNuf3cN8NPZJXdOqOa6boAXUps F5TVQ1SP50cFztIUVoTzr3/ubqOptfEA+6OZUGafxeYNSCleauIBc8aKYDz/Cwei FO2akPplu3nsCBDha9NUlOSR/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKynPQHZ Dw1Bl26M6vt4R5WAa3XlMB8GA1UdIwQYMBaAFN5zkbNtbnbizECpBHdywAsPd1Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni81RkNEOUZENDAw NTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1TE1RS2tFZDNMQUN3OTNV bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNuT1JzMjF1ZHVMTVFLa0VkM0xBQ3c5M1Vtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni81RkNEOUZENDAwNTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1 TE1RS2tFZDNMQUN3OTNVbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa2hrWOnPTcJeBdytEWa0kAIBjj7pzfq2peqZZ6i/TG3SXqFefvmbq DdJGFDTil9APZOUhcqa2pwG5qcpiYHAFXGVaHGAAmuWC6rxliz9Mb842GOxwVHAn a300T6xRAMN6A+t3EKdRc+Gf+DO7jH0IDkAv89YUR0LoNMx+0qAQ+KoUAEULSwcv 7+QdK9V5XubBij2MApjd1iT304eS6mgttIj+AgqH1DOZyUqdShtEsKi1Yr8rCWpx KhJjB2ObziNUSd5feL+r8ABplSQyKSdjPNFPLR8IQH5Seb3vNMEpT+iRSODV4PEF rJFAmefD4aMPAt8/eD0tkThf6esoS9dA -----END CERTIFICATE-----Generated at Sun Jan 25 17:00:47 2026 by rpki-client