This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft File: vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft (raw, json) Hash identifier: Oo+/18u5teKT5uheuFJa2Aav5ei/IrKNMMO7FYzfWg4= Subject key identifier: 6D:84:12:F8:05:A3:55:BB:5B:E6:20:27:9E:D6:A5:20:00:EE:2E:E7 Authority key identifier: BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4 Certificate issuer: /CN=A91E4EEF/serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft Manifest number: 14 Signing time: Sun 25 Jan 2026 07:01:26 +0000 Manifest this update: Sun 25 Jan 2026 07:01:26 +0000 Manifest next update: Sun 01 Feb 2026 07:01:26 +0000 Files and hashes: 1: vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl (hash: T6j5rwJeUL7a0uSBcpkOJ1Z/oCF96/pUarI4k+W3tso=) 2: 8C5382D6DEF511F0A9861D4A586F56BC.roa (hash: vjfsamXqkXFmxfFh/f0yvWlnKb+B5x6VvVnf5hM9bVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EEF, serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4 Validity Not Before: Jan 25 07:01:26 2026 GMT Not After : Feb 1 07:01:26 2026 GMT Subject: CN=6975bfc6-cb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ac:5a:21:39:d1:8e:82:34:76:dc:c5:a6:da: 40:d0:0e:d1:95:b4:27:ae:18:e2:6d:75:36:9c:a2: a8:92:78:0b:28:22:7d:03:67:0f:28:5d:ca:84:12: df:a0:95:ee:78:48:8e:80:bd:a7:e3:42:2c:f1:ba: 5c:af:16:18:30:a6:6e:d0:4b:d8:14:22:e9:46:7b: 53:0d:16:00:43:7f:78:34:32:17:fd:0d:a4:aa:f8: 83:86:b2:ad:9a:4c:92:ac:c9:99:53:43:eb:dd:95: 21:6a:c1:77:af:98:01:93:09:bd:82:68:b2:e9:e1: e9:cc:a0:12:22:9c:43:80:63:03:0a:b3:18:2f:66: 77:64:1d:37:ab:45:37:1a:7e:fe:c4:9d:ac:8b:cc: 21:28:c4:58:4c:1a:b1:18:f4:97:9f:66:11:30:d3: 5f:db:0a:2c:32:47:ac:17:c6:fd:79:c0:12:b2:e3: 82:85:97:32:66:d2:4c:92:cd:a4:d8:66:79:23:9f: 18:ad:60:30:fd:54:3b:f3:6d:eb:92:39:2e:a2:3b: 3a:6e:82:6b:07:3a:71:5c:0c:90:60:ae:37:24:eb: 34:6a:5f:c2:c8:6b:7b:77:5a:63:af:c9:ce:65:13: 87:d0:01:d0:16:6e:65:61:84:92:8c:1a:ef:08:67: 7b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:84:12:F8:05:A3:55:BB:5B:E6:20:27:9E:D6:A5:20:00:EE:2E:E7 X509v3 Authority Key Identifier: keyid:BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0c:a0:18:63:5f:ca:1f:36:21:27:1c:ba:53:78:53:2b:74: d8:86:d8:7b:f9:2c:b7:03:c1:65:1e:42:d8:9f:61:65:c6:75: 73:b9:fa:84:f7:1a:cc:86:05:2c:9c:6c:06:8f:80:6d:b7:0b: 36:dc:b8:31:cb:78:f4:e4:2e:69:8f:d5:52:35:51:03:a1:a4: fd:4e:2e:1d:4e:0c:e6:a2:12:a4:16:9e:63:5a:0a:ba:16:e1: 46:39:c8:1a:81:dd:b4:ec:54:aa:6a:31:f2:fd:1a:27:55:20: 24:db:e9:c9:8e:1d:9c:81:3c:8f:c6:e3:01:f7:ab:54:6d:1f: 1c:e4:e6:d7:99:ae:51:fe:89:a6:a5:f9:a4:66:64:70:b8:04: 12:68:05:91:2b:72:0c:1d:69:02:a6:f8:2a:21:b8:43:b1:9e: 89:2f:d9:3b:48:7d:45:7f:a5:fc:8f:08:9a:72:aa:3d:89:fd: 14:95:94:15:04:57:79:33:d3:90:4f:7d:27:7a:15:d5:7f:75: ab:a4:2d:27:80:a6:5d:f1:82:5e:e2:cc:8a:2f:1f:57:e0:7b: 85:1c:6c:4c:fc:83:d8:43:46:28:f8:71:34:5b:44:61:b5:40: 8c:37:4f:75:74:74:6a:96:c3:1d:b0:43:2e:5b:36:fe:b4:08: 60:57:c3:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFF NEVFRjExMC8GA1UEBRMoQkNFQTkxMTRERjkzNkNERTg5NEZDMDg0RjgwOENGRDA5 RTE0RjRCNDAeFw0yNjAxMjUwNzAxMjZaFw0yNjAyMDEwNzAxMjZaMBgxFjAUBgNV BAMMDTY5NzViZmM2LWNiMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDErFohOdGOgjR23MWm2kDQDtGVtCeuGOJtdTacoqiSeAsoIn0DZw8oXcqEEt+g le54SI6AvafjQizxulyvFhgwpm7QS9gUIulGe1MNFgBDf3g0Mhf9DaSq+IOGsq2a TJKsyZlTQ+vdlSFqwXevmAGTCb2CaLLp4enMoBIinEOAYwMKsxgvZndkHTerRTca fv7EnayLzCEoxFhMGrEY9JefZhEw01/bCiwyR6wXxv15wBKy44KFlzJm0kySzaTY ZnkjnxitYDD9VDvzbeuSOS6iOzpugmsHOnFcDJBgrjck6zRqX8LIa3t3WmOvyc5l E4fQAdAWbmVhhJKMGu8IZ3sBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbYQS+AWj Vbtb5iAnntalIADuLucwHwYDVR0jBBgwFoAUvOqRFN+TbN6JT8CE+AjP0J4U9LQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0RUVGL0Q3MTA1QkI2REVG MzExRjA5RUQ0MTI5NjU3NkY1NkJDL3ZPcVJGTi1UYk42SlQ4Q0UtQWpQMEo0VTlM US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdk9xUkZOLVRiTjZKVDhDRS1BalAwSjRVOUxRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 RUVGL0Q3MTA1QkI2REVGMzExRjA5RUQ0MTI5NjU3NkY1NkJDL3ZPcVJGTi1UYk42 SlQ4Q0UtQWpQMEo0VTlMUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADsMoBhjX8ofNiEnHLpTeFMrdNiG2Hv5LLcDwWUeQtifYWXGdXO5+oT3 GsyGBSycbAaPgG23CzbcuDHLePTkLmmP1VI1UQOhpP1OLh1ODOaiEqQWnmNaCroW 4UY5yBqB3bTsVKpqMfL9GidVICTb6cmOHZyBPI/G4wH3q1RtHxzk5teZrlH+iaal +aRmZHC4BBJoBZErcgwdaQKm+CohuEOxnokv2TtIfUV/pfyPCJpyqj2J/RSVlBUE V3kz05BPfSd6FdV/daukLSeApl3xgl7izIovH1fge4UcbEz8g9hDRij4cTRbRGG1 QIw3T3V0dGqWwx2wQy5bNv60CGBXw08= -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:41 2026 by rpki-client