This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft File: MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json) Hash identifier: YaKjPQNykO2MJMvOvbFAnEOLT5NR+ghpzHHsLIg8bCQ= Subject key identifier: 3C:23:2D:AD:B8:74:19:39:94:ED:ED:FC:41:2A:F4:8D:AD:D4:2B:E5 Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft Manifest number: 0215 Signing time: Sun 25 Jan 2026 01:33:27 +0000 Manifest this update: Sun 25 Jan 2026 01:33:26 +0000 Manifest next update: Sun 01 Feb 2026 01:33:26 +0000 Files and hashes: 1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: OeQlXsozHgyZ9nUGV4+pLms3fffh69osH5b0Btbpz8A=) 2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: EAhOEk1Moc8akKSrCsGi3T0LgEn8rEjOcRa2pHiI7Xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Validity Not Before: Jan 25 01:33:26 2026 GMT Not After : Feb 1 01:33:26 2026 GMT Subject: CN=697572e7-499a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:83:b1:f3:e0:1c:e6:a2:99:39:8a:df:a8:f9: 5b:70:ec:20:b3:55:90:76:63:1e:0f:a8:31:f2:3a: f4:1c:76:b8:ce:02:1a:3d:86:04:43:a9:24:14:81: d0:14:53:f2:2e:25:04:cc:35:99:9d:cb:fa:a7:8a: 53:d8:aa:1a:ec:bc:a1:92:c3:3c:50:8e:69:ea:0c: e8:06:72:9a:70:35:67:dc:e7:12:c0:ad:ca:0f:7c: 0e:c7:8f:cc:cb:3c:f7:c4:c3:56:42:ff:6c:32:b0: 09:fc:d6:d8:37:52:5a:31:98:a7:86:da:07:b0:48: c5:d6:c6:4d:c2:f4:78:83:d1:30:f5:08:72:41:ec: 34:0e:11:85:3e:ba:ed:00:35:53:c0:12:7c:37:95: d5:af:1f:a0:bf:fe:22:d8:78:50:e0:f6:ae:ff:76: 6e:d7:8f:b5:07:36:8b:e3:67:88:1d:25:32:66:3c: 84:35:39:fd:10:18:aa:82:ec:e0:db:7d:a5:db:17: 8f:10:70:ea:92:ee:d5:c8:fd:3a:bf:c3:11:c7:2a: 7a:b0:63:bd:c4:d0:4d:c8:e0:c3:c5:25:0e:84:a1: bb:3c:c0:93:d5:a9:08:5f:1b:ee:2a:e7:8a:6a:1d: 41:24:c8:b0:f0:a8:01:5f:f6:81:2f:f5:48:58:ac: 35:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:23:2D:AD:B8:74:19:39:94:ED:ED:FC:41:2A:F4:8D:AD:D4:2B:E5 X509v3 Authority Key Identifier: keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:08:b3:e4:81:54:4f:3d:32:66:5d:89:08:a0:c0:ba:8b:0b: db:ae:12:12:24:fe:31:68:f0:d8:73:c2:b9:0a:a1:ab:ae:d7: 88:71:35:39:97:ba:03:07:19:34:6e:b8:bc:3c:a4:91:27:d6: 03:da:94:bf:5a:4c:b5:37:14:f2:e0:be:38:e3:38:74:ca:87: b0:b8:5b:b8:66:e9:b6:eb:c6:af:1e:a7:cd:ee:c1:1b:27:fa: 22:78:e9:c5:40:02:ce:36:d7:58:06:11:16:6d:c3:b6:28:a9: 19:23:5b:20:6d:37:cf:77:11:ec:18:6c:ab:b0:af:c8:97:3f: c7:d2:c0:ec:82:76:f8:b3:d7:af:55:81:4d:86:1b:85:4a:52: a9:ea:83:a7:c1:82:1d:95:88:8d:02:35:08:d2:71:25:27:84: 07:88:7f:7b:91:f7:fc:c1:7e:51:dc:3c:50:fd:3f:74:88:94: ab:6b:63:21:a4:d8:78:9c:79:80:ce:21:95:57:9d:dc:15:ba: 38:2b:17:a4:03:eb:1c:35:4c:82:23:09:38:8f:55:e4:29:bb: 5b:69:2f:db:6c:83:49:51:13:0d:a7:c7:09:b1:b6:0d:d4:c9: 53:f4:b5:5d:83:7e:ca:7c:c4:c7:60:90:e7:1d:f3:1a:9f:5e: 12:d3:b2:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw MURFMDAzMDMwHhcNMjYwMTI1MDEzMzI2WhcNMjYwMjAxMDEzMzI2WjAYMRYwFAYD VQQDDA02OTc1NzJlNy00OTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoOx8+Ac5qKZOYrfqPlbcOwgs1WQdmMeD6gx8jr0HHa4zgIaPYYEQ6kkFIHQ FFPyLiUEzDWZncv6p4pT2Koa7LyhksM8UI5p6gzoBnKacDVn3OcSwK3KD3wOx4/M yzz3xMNWQv9sMrAJ/NbYN1JaMZinhtoHsEjF1sZNwvR4g9Ew9QhyQew0DhGFPrrt ADVTwBJ8N5XVrx+gv/4i2HhQ4Pau/3Zu14+1BzaL42eIHSUyZjyENTn9EBiqguzg 232l2xePEHDqku7VyP06v8MRxyp6sGO9xNBNyODDxSUOhKG7PMCT1akIXxvuKueK ah1BJMiw8KgBX/aBL/VIWKw1XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwjLa24 dBk5lO3t/EEq9I2t1CvlMB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODFBNS9DMTU4NDNCNENBMDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEt NGlpWWtrNHhKa3dCM2dBd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqCLPkgVRPPTJmXYkIoMC6iwvbrhISJP4xaPDYc8K5CqGrrteIcTU5 l7oDBxk0bri8PKSRJ9YD2pS/Wky1NxTy4L444zh0yoewuFu4Zum268avHqfN7sEb J/oieOnFQALONtdYBhEWbcO2KKkZI1sgbTfPdxHsGGyrsK/Ilz/H0sDsgnb4s9ev VYFNhhuFSlKp6oOnwYIdlYiNAjUI0nElJ4QHiH97kff8wX5R3DxQ/T90iJSra2Mh pNh4nHmAziGVV53cFbo4KxekA+scNUyCIwk4j1XkKbtbaS/bbINJURMNp8cJsbYN 1MlT9LVdg37KfMTHYJDnHfMan14S07Lu -----END CERTIFICATE-----Generated at Sun Jan 25 11:09:29 2026 by rpki-client