This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft File: MJk4cOkSzRkdgKzvMDV6VP80-C4.mft (raw, json) Hash identifier: E5LAKXCZ9P4BIwk4xapik9ixA7ZiA7aDNbmjcd0ROwA= Subject key identifier: 5E:E6:FA:4F:32:1D:06:9A:B8:A8:19:DE:3F:E2:E7:45:9A:C3:A7:6C Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E Certificate issuer: /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Certificate serial: 128D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft Manifest number: 1285 Signing time: Sat 24 Jan 2026 16:48:54 +0000 Manifest this update: Sat 24 Jan 2026 16:48:53 +0000 Manifest next update: Sat 31 Jan 2026 16:48:53 +0000 Files and hashes: 1: MJk4cOkSzRkdgKzvMDV6VP80-C4.crl (hash: H7IZKq+lVNYx24KzlfHh73aG2U/z1zBmyUvzhaA6sM0=) 2: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (hash: jn5qhVbEoategN8Wb9SpBQEDedH4bKopl8YHB2oNVaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4749 (0x128d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E84A9, serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Validity Not Before: Jan 24 16:48:53 2026 GMT Not After : Jan 31 16:48:53 2026 GMT Subject: CN=6974f7f5-402a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dd:79:b2:5c:a7:a7:c7:4e:21:ce:9f:7b:73: e1:bf:79:71:8c:f9:b3:4b:37:b9:92:4c:5b:47:9e: ee:7c:8e:35:95:a6:a5:87:31:48:d3:de:52:48:ba: b1:ab:a4:8d:64:4a:07:f5:0a:95:3c:a3:8e:0d:63: 53:a3:5e:28:5a:32:ae:c7:f4:74:8f:e2:0b:f2:82: f8:e1:01:c8:80:12:15:21:f7:90:5a:e4:38:b0:56: d2:25:95:3b:bf:5e:e4:50:90:58:76:cb:b8:a0:c4: dc:db:f3:1e:ac:7a:c4:5c:aa:b9:49:69:c6:c9:8d: c2:00:38:97:78:2f:7c:7c:e2:65:30:e7:43:98:e6: bb:9b:d9:86:0e:79:76:f7:8d:2d:fa:3e:37:24:e9: bf:a6:59:cd:ea:df:fe:b3:4c:ac:8b:96:9a:dc:bd: 3e:4b:6d:21:41:58:7b:dd:58:1a:8c:2f:48:64:bf: 6f:a1:aa:55:b9:00:96:0d:64:91:d5:4e:26:46:28: 05:5e:9f:b6:a8:af:4d:5c:92:fa:7e:39:80:24:d0: 54:19:de:35:8a:24:84:38:0e:2b:67:e3:34:f3:ad: c7:e9:51:ee:2f:1b:11:59:24:28:22:80:a8:df:c3: 4b:b0:5d:b4:ae:d5:6e:75:8e:be:50:b3:56:ce:7b: db:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E6:FA:4F:32:1D:06:9A:B8:A8:19:DE:3F:E2:E7:45:9A:C3:A7:6C X509v3 Authority Key Identifier: keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:cd:c5:3c:d0:5c:08:e1:9b:86:4c:0c:85:3e:20:04:c4:e2: 56:d5:27:ab:6b:98:94:c7:44:22:bc:94:86:02:07:9c:f6:7c: 5b:19:12:c0:1f:dc:00:64:c8:3e:8d:95:0c:f2:39:59:64:7d: 1c:3a:67:d7:62:5e:39:71:c1:e6:fe:0e:b7:6d:d8:54:aa:c3: f6:2b:3d:8b:10:67:6d:84:01:83:cb:db:09:24:ac:49:73:94: 22:5c:d7:ea:c8:f7:1f:a2:6c:f0:9f:b3:cc:f8:6a:6e:77:05: 34:a6:d5:65:62:3c:5f:ba:d2:ee:ed:c9:3c:5d:c3:ca:98:74: 97:fe:f0:70:8c:0f:14:ef:e3:9e:72:f7:48:f2:6e:8a:84:11: f3:0c:bc:03:eb:e9:e5:c5:bd:f6:d8:75:80:68:62:29:0c:fe: 86:70:c6:6b:cd:c4:32:18:2d:ae:8d:07:2b:4c:32:2d:54:5d: 24:2c:dc:97:b7:96:df:fb:91:a0:7a:14:2b:d0:6a:b2:88:33: 87:fa:e1:e9:24:32:f3:bd:30:13:c8:5a:79:48:ea:11:0f:51: 4b:1f:37:b9:fc:27:ec:9a:c2:6c:0f:84:aa:8c:8e:83:3f:44: 8c:02:45:e7:e2:75:0a:4e:51:8f:25:5c:58:24:8c:74:13:77: 99:35:0f:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0QTkxMTAvBgNVBAUTKDMwOTkzODcwRTkxMkNEMTkxRDgwQUNFRjMwMzU3QTU0 RkYzNEY4MkUwHhcNMjYwMTI0MTY0ODUzWhcNMjYwMTMxMTY0ODUzWjAYMRYwFAYD VQQDDA02OTc0ZjdmNS00MDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs915slynp8dOIc6fe3Phv3lxjPmzSze5kkxbR57ufI41laalhzFI095SSLqx q6SNZEoH9QqVPKOODWNTo14oWjKux/R0j+IL8oL44QHIgBIVIfeQWuQ4sFbSJZU7 v17kUJBYdsu4oMTc2/MerHrEXKq5SWnGyY3CADiXeC98fOJlMOdDmOa7m9mGDnl2 940t+j43JOm/plnN6t/+s0ysi5aa3L0+S20hQVh73VgajC9IZL9voapVuQCWDWSR 1U4mRigFXp+2qK9NXJL6fjmAJNBUGd41iiSEOA4rZ+M0863H6VHuLxsRWSQoIoCo 38NLsF20rtVudY6+ULNWznvbZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7m+k8y HQaauKgZ3j/i50Waw6dsMB8GA1UdIwQYMBaAFDCZOHDpEs0ZHYCs7zA1elT/NPgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODRBOS82QTkwQTlDMEUx OTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pSa2RnS3p2TURWNlZQODAt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KazRjT2tTelJrZGdLenZNRFY2VlA4MC1DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODRBOS82QTkwQTlDMEUxOTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pS a2RnS3p2TURWNlZQODAtQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCzcU80FwI4ZuGTAyFPiAExOJW1Sera5iUx0QivJSGAgec9nxbGRLA H9wAZMg+jZUM8jlZZH0cOmfXYl45ccHm/g63bdhUqsP2Kz2LEGdthAGDy9sJJKxJ c5QiXNfqyPcfomzwn7PM+GpudwU0ptVlYjxfutLu7ck8XcPKmHSX/vBwjA8U7+Oe cvdI8m6KhBHzDLwD6+nlxb322HWAaGIpDP6GcMZrzcQyGC2ujQcrTDItVF0kLNyX t5bf+5GgehQr0GqyiDOH+uHpJDLzvTATyFp5SOoRD1FLHze5/CfsmsJsD4SqjI6D P0SMAkXn4nUKTlGPJVxYJIx0E3eZNQ9d -----END CERTIFICATE-----Generated at Sun Jan 25 14:18:09 2026 by rpki-client