This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft File: 9rFFECBSR85YMyWRuaKXoV0q6j8.mft (raw, json) Hash identifier: 2DEX3j92llKMrCIkCUhKkgCM+SbL+qQ6pasq0iCL5Fc= Subject key identifier: 7A:09:BC:52:88:6F:45:08:D6:2F:C9:66:CB:CC:20:0E:86:B9:ED:CB Authority key identifier: F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F Certificate issuer: /CN=A91E4FB7/serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft Manifest number: 3B Signing time: Sun 25 Jan 2026 06:31:47 +0000 Manifest this update: Sun 25 Jan 2026 06:31:46 +0000 Manifest next update: Sun 01 Feb 2026 06:31:46 +0000 Files and hashes: 1: 9rFFECBSR85YMyWRuaKXoV0q6j8.crl (hash: lF6At/WL8GTovLlq+xiYearcjL7zqOvXwdzeRoMjvBw=) 2: 581240AAA04511F0BECA9449C4F9AE02.roa (hash: kmSg6vhF7B8lj7niChUWGEYRwyD/4WuvdUs67V6XzE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4FB7, serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F Validity Not Before: Jan 25 06:31:46 2026 GMT Not After : Feb 1 06:31:46 2026 GMT Subject: CN=6975b8d3-101e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:20:f2:3c:e6:4c:4f:d0:c3:5f:9f:a2:93:81: 2e:67:4d:22:d9:3f:5d:5f:42:5b:1a:d1:7c:80:db: f2:28:34:4d:af:67:73:01:73:0c:68:3c:a6:3a:25: f8:e5:f4:ce:b3:a1:07:da:79:37:7f:f2:c1:a5:60: 52:a7:08:a5:6b:fb:20:c0:bb:5b:2b:65:3f:e7:49: c0:8a:41:64:25:c1:c0:f3:bb:db:2a:93:fb:89:64: 8f:3f:da:b8:59:f8:e6:ce:44:f9:d3:ea:7d:d1:9a: 6d:12:fb:8f:7f:df:dd:ca:f3:55:cf:cb:88:69:f8: c2:54:92:bb:37:cc:d5:dd:b4:70:72:19:49:0e:9f: 67:63:65:cf:d9:dc:48:89:6b:88:88:bb:4b:de:29: 2a:d7:5a:f7:21:bf:7f:b4:5a:c3:0b:52:0e:85:9a: 83:23:1d:dc:8e:f7:8e:81:0e:23:55:c7:88:28:f2: 0f:9e:e9:af:7c:76:19:2a:29:44:3a:b1:97:5a:06: 5b:a1:74:fa:c2:2d:5d:fd:37:52:74:97:20:a7:eb: 50:c0:b4:e6:c1:f7:f4:43:2d:cc:63:dc:76:75:bd: 85:36:b8:d0:50:11:08:52:c7:2d:da:46:57:06:32: 18:c8:28:c9:8c:a5:31:ac:95:16:78:1f:75:08:09: d3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:09:BC:52:88:6F:45:08:D6:2F:C9:66:CB:CC:20:0E:86:B9:ED:CB X509v3 Authority Key Identifier: keyid:F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:93:7b:2d:6c:cb:f4:b9:f9:31:c0:bc:df:a7:13:9c:2f:a2: bf:b1:6e:ef:ba:80:09:cd:d4:23:be:d3:04:86:93:91:bd:dc: 86:17:20:1b:4e:3e:f5:31:b1:fd:b9:3b:43:3f:6f:16:a7:33: e8:94:53:7f:b4:19:fa:46:da:7e:f9:2f:6c:fa:1c:4b:2c:2e: f5:38:56:e5:61:96:7b:45:b9:43:0e:23:90:2c:19:3c:0a:03: 66:f5:fd:47:85:bc:ad:33:d3:73:b4:65:7f:85:4e:fd:67:a5: 50:3d:86:35:83:f3:fc:ec:07:97:31:55:e8:5c:59:a7:b0:61: 30:df:cf:47:19:bb:46:24:1d:0c:18:ff:94:7e:ea:a1:f5:13: 33:a2:e5:55:6d:4d:74:f0:ab:e1:4f:1e:39:25:4d:b2:0f:6c: 32:1e:c8:1b:2d:19:7d:f1:fc:b5:86:67:06:5b:f8:64:6a:77: 45:03:a1:62:1d:ed:ef:da:be:e1:3f:57:d9:80:55:58:4f:c2: 8d:dc:ab:7d:c7:95:8f:cc:90:ae:a8:fd:b7:c6:37:07:4a:bd: e6:35:7f:8f:b0:bf:a7:ae:f8:24:9f:8a:cc:82:03:de:ba:bb: 28:ea:fc:78:0b:c4:72:76:98:5f:5c:6d:ff:93:ee:e4:90:5f: 76:d8:a3:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NEZCNzExMC8GA1UEBRMoRjZCMTQ1MTAyMDUyNDdDRTU4MzMyNTkxQjlBMjk3QTE1 RDJBRUEzRjAeFw0yNjAxMjUwNjMxNDZaFw0yNjAyMDEwNjMxNDZaMBgxFjAUBgNV BAMMDTY5NzViOGQzLTEwMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyIPI85kxP0MNfn6KTgS5nTSLZP11fQlsa0XyA2/IoNE2vZ3MBcwxoPKY6Jfjl 9M6zoQfaeTd/8sGlYFKnCKVr+yDAu1srZT/nScCKQWQlwcDzu9sqk/uJZI8/2rhZ +ObORPnT6n3Rmm0S+49/393K81XPy4hp+MJUkrs3zNXdtHByGUkOn2djZc/Z3EiJ a4iIu0veKSrXWvchv3+0WsMLUg6FmoMjHdyO946BDiNVx4go8g+e6a98dhkqKUQ6 sZdaBluhdPrCLV39N1J0lyCn61DAtObB9/RDLcxj3HZ1vYU2uNBQEQhSxy3aRlcG MhjIKMmMpTGslRZ4H3UICdOdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUegm8Uohv RQjWL8lmy8wgDoa57cswHwYDVR0jBBgwFoAU9rFFECBSR85YMyWRuaKXoV0q6j8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0RkI3LzdFQzY2MUM4QTA0 NDExRjBCQzVDRjk0N0M0RjlBRTAyLzlyRkZFQ0JTUjg1WU15V1J1YUtYb1YwcTZq OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXJGRkVDQlNSODVZTXlXUnVhS1hvVjBxNmo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 RkI3LzdFQzY2MUM4QTA0NDExRjBCQzVDRjk0N0M0RjlBRTAyLzlyRkZFQ0JTUjg1 WU15V1J1YUtYb1YwcTZqOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIGTey1sy/S5+THAvN+nE5wvor+xbu+6gAnN1CO+0wSGk5G93IYXIBtO PvUxsf25O0M/bxanM+iUU3+0GfpG2n75L2z6HEssLvU4VuVhlntFuUMOI5AsGTwK A2b1/UeFvK0z03O0ZX+FTv1npVA9hjWD8/zsB5cxVehcWaewYTDfz0cZu0YkHQwY /5R+6qH1EzOi5VVtTXTwq+FPHjklTbIPbDIeyBstGX3x/LWGZwZb+GRqd0UDoWId 7e/avuE/V9mAVVhPwo3cq33HlY/MkK6o/bfGNwdKveY1f4+wv6eu+CSfisyCA966 uyjq/HgLxHJ2mF9cbf+T7uSQX3bYoyg= -----END CERTIFICATE-----Generated at Sun Jan 25 13:57:06 2026 by rpki-client