This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft File: 7unhDCkeVsgtdwcgELDlgAg_5yk.mft (raw, json) Hash identifier: rlJbHpx2Zvs8P7f1Pwd4jXTbaYOJrvl/uA7g1QmF5k8= Subject key identifier: BA:09:EA:28:B0:22:10:39:F6:09:0F:33:F5:81:6F:2D:E8:0A:6F:02 Authority key identifier: EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29 Certificate issuer: /CN=A91E82F0/serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft Manifest number: 0199 Signing time: Sun 25 Jan 2026 02:40:24 +0000 Manifest this update: Sun 25 Jan 2026 02:40:23 +0000 Manifest next update: Sun 01 Feb 2026 02:40:23 +0000 Files and hashes: 1: 7unhDCkeVsgtdwcgELDlgAg_5yk.crl (hash: Pri+z5kaQ/72W/LpkMMZBKM92ABUSOchyGUu4UFVlo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E82F0, serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729 Validity Not Before: Jan 25 02:40:23 2026 GMT Not After : Feb 1 02:40:23 2026 GMT Subject: CN=69758298-b4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ff:0c:2a:5a:62:ec:38:76:13:e9:d6:d1:ed: af:13:f8:11:6b:9c:9d:d6:90:5b:fa:de:cb:82:ba: 04:5a:fb:ee:ec:2d:c7:a5:67:0a:a4:8a:7a:66:1c: c1:50:61:d9:c9:c2:e0:cc:30:56:f1:d4:a7:1b:87: ae:ea:fd:ba:df:84:f1:54:fc:c3:74:50:ad:ef:da: b6:0a:2f:ca:4a:48:a6:6a:49:bd:ee:29:f6:14:10: ce:b0:11:66:b4:f7:ba:e6:b1:ff:e2:11:e6:9d:c9: 7c:de:5b:86:53:b5:f8:78:75:c0:80:65:4a:4d:2a: 4c:f6:62:49:b4:9c:82:f4:80:94:28:23:89:e6:29: ec:10:c7:09:cc:fc:82:e8:dd:20:2e:c4:05:aa:7a: 15:b7:84:ff:2f:da:28:1c:35:32:c1:de:ac:dd:74: 87:b5:e7:a8:90:94:65:41:50:dd:c9:53:fb:e4:90: ba:d6:cd:35:1c:58:2a:c0:14:97:fc:70:41:e9:e8: 57:fb:57:6c:6f:1a:70:2a:f6:2f:e2:ea:8d:82:db: 33:90:b5:e2:42:95:df:eb:43:4b:c3:12:25:7f:c9: d0:36:d3:de:2e:a3:1e:f2:b8:ba:f3:5b:3a:28:ae: 6c:3f:ab:7a:5f:c0:49:b9:d7:7b:71:fc:62:1d:fd: cd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:09:EA:28:B0:22:10:39:F6:09:0F:33:F5:81:6F:2D:E8:0A:6F:02 X509v3 Authority Key Identifier: keyid:EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:22:d8:31:bf:ee:e4:18:cd:c2:fa:c0:bd:4c:ed:92:8a:14: a0:df:80:61:7f:14:4b:6a:ad:24:52:0e:97:13:14:42:f3:00: 22:39:e6:fb:6c:86:70:f4:f0:4a:df:ed:2e:3c:53:ec:6c:8e: 95:7d:81:29:53:87:05:95:91:fa:a5:2e:63:f9:49:ec:f0:5d: aa:82:0f:5e:49:21:29:2a:3f:a2:d7:8f:18:43:89:9a:61:8b: 78:b0:df:78:fb:7a:34:55:d9:19:10:37:e1:6c:f5:c6:0c:05: 6f:2e:ab:2b:ec:8b:21:fe:ec:d2:a7:db:c2:83:70:53:d3:19: 66:4e:16:af:31:65:f5:f0:5c:df:57:ee:b1:56:b6:63:a3:98: 60:f2:ec:cf:15:f2:52:f9:44:34:9d:ea:95:6f:19:ec:a0:a6: fe:5e:56:16:95:02:ee:35:56:9a:cc:47:76:7b:a7:5e:f9:fa: b2:44:fd:f9:d0:87:f3:7c:b9:81:d1:59:b4:02:ca:6c:2e:26: 24:44:70:55:78:03:39:a8:0c:af:56:24:d4:02:86:e3:b7:02: 6b:31:df:ec:dc:b5:d4:19:5c:a0:7a:cb:c1:14:e7:37:bb:d8: 98:61:71:2c:8b:00:7d:2c:1f:f3:66:93:e4:98:c6:59:7a:76: 46:83:26:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgyRjAxMTAvBgNVBAUTKEVFRTlFMTBDMjkxRTU2QzgyRDc3MDcyMDEwQjBFNTgw MDgzRkU3MjkwHhcNMjYwMTI1MDI0MDIzWhcNMjYwMjAxMDI0MDIzWjAYMRYwFAYD VQQDDA02OTc1ODI5OC1iNGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtv8MKlpi7Dh2E+nW0e2vE/gRa5yd1pBb+t7LgroEWvvu7C3HpWcKpIp6ZhzB UGHZycLgzDBW8dSnG4eu6v2634TxVPzDdFCt79q2Ci/KSkimakm97in2FBDOsBFm tPe65rH/4hHmncl83luGU7X4eHXAgGVKTSpM9mJJtJyC9ICUKCOJ5insEMcJzPyC 6N0gLsQFqnoVt4T/L9ooHDUywd6s3XSHteeokJRlQVDdyVP75JC61s01HFgqwBSX /HBB6ehX+1dsbxpwKvYv4uqNgtszkLXiQpXf60NLwxIlf8nQNtPeLqMe8ri681s6 KK5sP6t6X8BJudd7cfxiHf3NOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoJ6iiw IhA59gkPM/WBby3oCm8CMB8GA1UdIwQYMBaAFO7p4QwpHlbILXcHIBCw5YAIP+cp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJGMC81QzU3RTVDMDgy ODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZzZ3Rkd2NnRUxEbGdBZ181 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1bmhEQ2tlVnNndGR3Y2dFTERsZ0FnXzV5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODJGMC81QzU3RTVDMDgyODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZz Z3Rkd2NnRUxEbGdBZ181eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqItgxv+7kGM3C+sC9TO2SihSg34BhfxRLaq0kUg6XExRC8wAiOeb7 bIZw9PBK3+0uPFPsbI6VfYEpU4cFlZH6pS5j+Uns8F2qgg9eSSEpKj+i148YQ4ma YYt4sN94+3o0VdkZEDfhbPXGDAVvLqsr7Ish/uzSp9vCg3BT0xlmThavMWX18Fzf V+6xVrZjo5hg8uzPFfJS+UQ0neqVbxnsoKb+XlYWlQLuNVaazEd2e6de+fqyRP35 0IfzfLmB0Vm0AspsLiYkRHBVeAM5qAyvViTUAobjtwJrMd/s3LXUGVygesvBFOc3 u9iYYXEsiwB9LB/zZpPkmMZZenZGgybB -----END CERTIFICATE-----Generated at Sun Jan 25 08:00:04 2026 by rpki-client