This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft File: _0Md-OE71_7FHntTUHtFOan5ZWY.mft (raw, json) Hash identifier: tR7h7zEwuiSe42M/9HfGL0BScR4+aANabi2TPZM0kOk= Subject key identifier: 99:A0:84:D4:B5:84:B3:EB:F4:CF:A2:A4:03:F9:DF:62:65:36:3E:C9 Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 Certificate issuer: /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Certificate serial: 2184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft Manifest number: 2177 Signing time: Sat 24 Jan 2026 15:44:51 +0000 Manifest this update: Sat 24 Jan 2026 15:44:51 +0000 Manifest next update: Sat 31 Jan 2026 15:44:51 +0000 Files and hashes: 1: _0Md-OE71_7FHntTUHtFOan5ZWY.crl (hash: SSST+s5drvewuF3d5Akj0by06p3e1OQxu1JNCCWBHxM=) 2: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (hash: DbN4DlbT/kzFV586YYQHD1JNHqDZhrvbtplks7czGBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8580 (0x2184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C4E, serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Validity Not Before: Jan 24 15:44:51 2026 GMT Not After : Jan 31 15:44:51 2026 GMT Subject: CN=6974e8f3-23ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c4:d8:ad:67:95:9f:de:b3:7a:57:2e:ec:ca: de:2b:e8:71:42:9b:7c:0e:a1:b0:7e:c1:29:73:fb: cc:f6:6b:0b:db:25:c2:7d:9c:6d:89:f3:93:a3:6c: 97:94:d4:50:6d:e6:8b:d7:88:e2:b3:2c:d4:2e:e5: 76:c1:52:0f:e4:ec:be:9d:5f:34:14:ec:0e:73:f4: 17:7a:fc:a5:97:93:6c:62:7d:0b:90:20:86:df:23: 5e:4f:a7:2c:06:1f:2f:c1:82:7c:24:9b:4b:87:6e: eb:66:76:ad:29:8e:04:65:90:03:c1:06:db:cd:0a: 14:a8:ae:5c:1e:1a:7d:38:d4:da:98:ed:62:6f:aa: d7:a0:b8:78:06:90:af:bf:3c:30:c7:cd:6e:97:48: 05:ca:91:8b:3d:01:1f:1c:83:3c:2c:14:7c:6f:60: 61:f4:22:ea:63:64:45:9a:c3:cd:a1:fe:46:ad:51: 4e:f5:d6:2d:99:75:1f:f8:18:c8:4a:e7:7f:09:b7: 7b:7b:dd:e6:44:3a:9c:41:f6:f9:22:8c:c8:68:9b: 25:fb:85:f3:94:47:ef:4e:12:6f:07:85:a0:fc:e2: bb:8f:dc:31:00:1d:b7:a4:b8:33:e8:d9:2b:ef:d4: ff:65:b5:20:9a:17:97:2b:8f:3e:e1:e4:ed:cd:30: 1e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A0:84:D4:B5:84:B3:EB:F4:CF:A2:A4:03:F9:DF:62:65:36:3E:C9 X509v3 Authority Key Identifier: keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b4:93:16:23:0c:a6:65:1e:3c:f7:63:f5:73:70:28:fd:7f: a7:2b:8d:be:45:d0:11:75:e9:21:8e:b6:be:2c:6b:c2:fc:85: df:1f:76:52:03:a3:cd:c2:63:c2:ac:4b:44:77:19:67:d2:e0: d8:f2:bd:1d:02:cd:97:36:d2:b3:a9:8a:57:22:02:0c:cf:35: 75:14:23:19:ce:d9:dd:5f:36:6b:9c:53:39:5e:04:dd:d8:89: 4c:f8:16:f7:c4:1f:13:1f:36:5a:0b:6f:80:38:99:e2:27:c3: f5:81:e0:a1:68:7b:38:fb:a3:ab:97:e7:e3:65:15:d1:80:8d: af:93:5a:22:7f:34:4e:fd:4d:62:93:95:08:d1:75:37:59:ab: 7b:9e:40:41:7c:cb:c9:0b:f6:0e:93:53:ff:64:1b:2d:38:3d: 94:45:e7:de:7b:cb:84:5a:c8:97:d2:67:c2:c2:50:27:c8:f7: cd:07:c4:2d:68:27:5f:0a:93:dc:dc:f1:29:a1:54:78:7d:77: 48:cd:28:1f:00:dd:f9:8c:39:44:26:6f:6a:fe:64:3c:d4:21: 42:fb:49:1e:9c:78:2e:ca:bc:0f:16:af:6a:27:a0:63:32:ff: 91:d2:c3:e8:07:f6:23:58:25:9f:4f:40:db:bc:bf:be:0b:6c: 7b:99:92:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RTZDNEUxMTAvBgNVBAUTKEZGNDMxREY4RTEzQkQ3RkVDNTFFN0I1MzUwN0I0NTM5 QTlGOTY1NjYwHhcNMjYwMTI0MTU0NDUxWhcNMjYwMTMxMTU0NDUxWjAYMRYwFAYD VQQDDA02OTc0ZThmMy0yM2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMTYrWeVn96zelcu7MreK+hxQpt8DqGwfsEpc/vM9msL2yXCfZxtifOTo2yX lNRQbeaL14jisyzULuV2wVIP5Oy+nV80FOwOc/QXevyll5NsYn0LkCCG3yNeT6cs Bh8vwYJ8JJtLh27rZnatKY4EZZADwQbbzQoUqK5cHhp9ONTamO1ib6rXoLh4BpCv vzwwx81ul0gFypGLPQEfHIM8LBR8b2Bh9CLqY2RFmsPNof5GrVFO9dYtmXUf+BjI Sud/Cbd7e93mRDqcQfb5IozIaJsl+4XzlEfvThJvB4Wg/OK7j9wxAB23pLgz6Nkr 79T/ZbUgmheXK48+4eTtzTAemwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmghNS1 hLPr9M+ipAP532JlNj7JMB8GA1UdIwQYMBaAFP9DHfjhO9f+xR57U1B7RTmp+WVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkM0RS8zNDQ4NjUyQ0Yz Q0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFfN0ZIbnRUVUh0Rk9hbjVa V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wTWQtT0U3MV83RkhudFRVSHRGT2FuNVpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkM0RS8zNDQ4NjUyQ0YzQ0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFf N0ZIbnRUVUh0Rk9hbjVaV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/tJMWIwymZR4892P1c3Ao/X+nK42+RdARdekhjra+LGvC/IXfH3ZS A6PNwmPCrEtEdxln0uDY8r0dAs2XNtKzqYpXIgIMzzV1FCMZztndXzZrnFM5XgTd 2IlM+Bb3xB8THzZaC2+AOJniJ8P1geChaHs4+6Orl+fjZRXRgI2vk1oifzRO/U1i k5UI0XU3Wat7nkBBfMvJC/YOk1P/ZBstOD2URefee8uEWsiX0mfCwlAnyPfNB8Qt aCdfCpPc3PEpoVR4fXdIzSgfAN35jDlEJm9q/mQ81CFC+0kenHguyrwPFq9qJ6Bj Mv+R0sPoB/YjWCWfT0DbvL++C2x7mZJq -----END CERTIFICATE-----Generated at Sun Jan 25 09:24:35 2026 by rpki-client