This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft File: IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft (raw, json) Hash identifier: CE8F6YCWCz/U6ozi/4XRug1tgSq4A1cjheZCt4q++Fw= Subject key identifier: 77:C0:B1:32:8E:E1:63:40:23:63:09:40:40:FC:A6:49:A9:DF:D7:E6 Authority key identifier: 21:64:DD:59:A6:15:D5:F2:E3:39:3E:72:09:8A:73:AD:86:8E:78:DA Certificate issuer: /CN=A91EA409/serialNumber=2164DD59A615D5F2E3393E72098A73AD868E78DA Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IWTdWaYV1fLjOT5yCYpzrYaOeNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft Manifest number: E8 Signing time: Sun 25 Jan 2026 04:41:31 +0000 Manifest this update: Sun 25 Jan 2026 04:41:30 +0000 Manifest next update: Sun 01 Feb 2026 04:41:30 +0000 Files and hashes: 1: IWTdWaYV1fLjOT5yCYpzrYaOeNo.crl (hash: GCDkuRC2f+nP+JX3wiSGN+d/sYLDUnc0auss1RC5leA=) 2: E9F177B89D9C11EFA9526A6CC4F9AE02.roa (hash: Wj+ngFxUXKhw04tCHbfHXKLDIlYoTG372wEVCp/viHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.crl rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IWTdWaYV1fLjOT5yCYpzrYaOeNo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA409, serialNumber=2164DD59A615D5F2E3393E72098A73AD868E78DA Validity Not Before: Jan 25 04:41:30 2026 GMT Not After : Feb 1 04:41:30 2026 GMT Subject: CN=69759efa-2572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:71:02:67:6e:5e:20:82:74:71:cb:66:31:55: 94:07:4b:fe:9f:ac:9e:3e:97:e1:5f:ec:80:da:0a: 7f:ef:dd:81:18:0a:10:51:28:28:be:04:f5:9d:74: 59:da:64:bd:ae:9a:dd:1d:6c:b1:ba:e2:a8:9e:9c: db:50:bf:a7:ac:85:96:d8:f2:97:bc:9c:bf:34:b7: f0:ab:04:b7:c8:02:06:0d:c2:a1:42:2c:c8:21:2a: 33:47:b3:6f:5a:d7:06:6c:a7:1b:da:fe:51:29:bd: 01:a0:a3:77:9e:69:b3:7d:d7:a9:f6:68:eb:c8:67: d1:0a:43:2e:fa:6a:4e:99:6d:e4:8c:1c:d3:ef:f3: 06:28:2f:9f:d9:63:c2:18:f8:83:db:d1:b4:e7:26: 25:b4:a9:4c:81:4b:5e:33:1e:2e:00:74:9b:0c:3a: 13:62:b0:f2:00:9c:99:47:58:85:e1:69:ed:8a:1f: 66:ee:c7:6f:16:97:2b:35:37:2c:66:cb:6b:10:db: 79:8a:95:82:ce:7b:fd:40:84:dc:21:7b:7c:3b:2f: 91:41:ed:92:16:bf:c1:dd:95:33:b1:2a:2c:6c:5f: 19:6b:2e:64:31:5e:8b:df:ce:e1:c7:b2:2f:5c:f7: dd:c8:45:2a:46:63:fd:26:ef:12:e5:3d:17:b2:81: 06:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C0:B1:32:8E:E1:63:40:23:63:09:40:40:FC:A6:49:A9:DF:D7:E6 X509v3 Authority Key Identifier: keyid:21:64:DD:59:A6:15:D5:F2:E3:39:3E:72:09:8A:73:AD:86:8E:78:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IWTdWaYV1fLjOT5yCYpzrYaOeNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:84:99:37:79:dc:6a:c1:d4:e3:63:ad:5a:e9:92:a4:68:d6: 26:e8:47:0c:db:98:c5:85:70:f9:90:87:9c:73:59:23:82:9f: 4a:92:b8:10:3b:27:3d:db:ba:d0:01:4f:15:b2:ae:d6:61:df: 34:ce:e9:7d:09:b2:4f:7a:9e:36:33:29:b2:04:5d:c7:b4:8a: f2:08:7a:49:1b:78:5a:02:b8:e4:5c:2f:e7:11:ec:ec:8e:8e: bb:8b:f0:b8:6c:25:f0:ca:f8:fd:8b:6e:1e:17:1c:22:76:1a: 1a:5a:b4:2f:0c:51:d3:ee:b8:79:97:77:9c:85:7f:0f:88:f6: 88:60:aa:c1:d3:9a:ee:2e:23:2c:b8:70:19:3e:d7:44:e0:57: f8:8a:d2:fd:ad:96:32:8d:9b:e0:96:82:b4:f4:6c:19:0a:4c: 1e:1f:14:5a:c3:4b:07:f0:4f:ef:05:54:cf:f7:a0:53:6e:f7: 30:14:0c:be:c7:f4:39:33:29:5a:16:80:d4:3f:3a:b4:bd:19: 3d:83:6c:4f:52:da:3d:bf:6c:7d:2d:34:b4:3c:11:1b:8f:6c: 38:20:b0:86:d3:0e:26:3d:ff:14:2b:16:d8:a5:ff:6d:8c:45: 78:6c:df:e3:78:5a:a0:d3:34:b0:d0:66:a3:08:4c:cd:a6:00: a9:ef:9a:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RUE0MDkxMTAvBgNVBAUTKDIxNjRERDU5QTYxNUQ1RjJFMzM5M0U3MjA5OEE3M0FE ODY4RTc4REEwHhcNMjYwMTI1MDQ0MTMwWhcNMjYwMjAxMDQ0MTMwWjAYMRYwFAYD VQQDDA02OTc1OWVmYS0yNTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3ECZ25eIIJ0cctmMVWUB0v+n6yePpfhX+yA2gp/792BGAoQUSgovgT1nXRZ 2mS9rprdHWyxuuKonpzbUL+nrIWW2PKXvJy/NLfwqwS3yAIGDcKhQizIISozR7Nv WtcGbKcb2v5RKb0BoKN3nmmzfdep9mjryGfRCkMu+mpOmW3kjBzT7/MGKC+f2WPC GPiD29G05yYltKlMgUteMx4uAHSbDDoTYrDyAJyZR1iF4Wntih9m7sdvFpcrNTcs ZstrENt5ipWCznv9QITcIXt8Oy+RQe2SFr/B3ZUzsSosbF8Zay5kMV6L387hx7Iv XPfdyEUqRmP9Ju8S5T0XsoEGewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfAsTKO 4WNAI2MJQED8pkmp39fmMB8GA1UdIwQYMBaAFCFk3VmmFdXy4zk+cgmKc62Gjnja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTQwOS9GOTQ0RTNDQzlD QUIxMUVGQUI1OTU1MTZDNEY5QUUwMi9JV1RkV2FZVjFmTGpPVDV5Q1lwenJZYU9l Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lXVGRXYVlWMWZMak9UNXlDWXB6cllhT2VOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTQwOS9GOTQ0RTNDQzlDQUIxMUVGQUI1OTU1MTZDNEY5QUUwMi9JV1RkV2FZVjFm TGpPVDV5Q1lwenJZYU9lTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXhJk3edxqwdTjY61a6ZKkaNYm6EcM25jFhXD5kIecc1kjgp9KkrgQ Oyc927rQAU8Vsq7WYd80zul9CbJPep42MymyBF3HtIryCHpJG3haArjkXC/nEezs jo67i/C4bCXwyvj9i24eFxwidhoaWrQvDFHT7rh5l3echX8PiPaIYKrB05ruLiMs uHAZPtdE4Ff4itL9rZYyjZvgloK09GwZCkweHxRaw0sH8E/vBVTP96BTbvcwFAy+ x/Q5MylaFoDUPzq0vRk9g2xPUto9v2x9LTS0PBEbj2w4ILCG0w4mPf8UKxbYpf9t jEV4bN/jeFqg0zSw0GajCEzNpgCp75oe -----END CERTIFICATE-----Generated at Sun Jan 25 12:43:26 2026 by rpki-client