This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft File: 3oPHbNtE9PeURxkgK-OvqIPTSU0.mft (raw, json) Hash identifier: qZS/7sWwCKMKHn3BTNqNTfGQUljBH5LxucbsBngO0+Q= Subject key identifier: FD:F8:2E:85:B2:C8:09:9F:A1:F9:44:79:E2:30:4B:C5:4E:1A:47:EA Authority key identifier: DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D Certificate issuer: /CN=A91EAE28/serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft Manifest number: 15 Signing time: Fri 23 Jan 2026 06:59:50 +0000 Manifest this update: Fri 23 Jan 2026 06:59:49 +0000 Manifest next update: Fri 30 Jan 2026 06:59:49 +0000 Files and hashes: 1: 3oPHbNtE9PeURxkgK-OvqIPTSU0.crl (hash: J/uS3GP91EtJShsbdM5WNPhxL10P1jATlSTOtM//L4M=) 2: E9CC4952DBB711F09A595FAD4E641951.roa (hash: N8C+RbGZ4TxSn2UCb5i7gkeLR+IHJ44RuRig3WO+cbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE28, serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D Validity Not Before: Jan 23 06:59:49 2026 GMT Not After : Jan 30 06:59:49 2026 GMT Subject: CN=69731c66-7fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:e6:64:a1:9a:bd:34:34:7b:3d:35:41:f8: 32:13:af:3d:bf:6b:ca:85:f3:a0:9a:84:11:f8:36: fd:ee:6d:3d:b7:d1:37:71:9d:9f:41:b5:1e:9b:05: 1b:09:73:1c:47:9c:3e:21:09:01:36:5f:35:03:a4: 7d:12:15:37:bb:ee:84:c7:00:ad:da:6b:a5:72:c8: d8:1d:80:b1:29:e3:f4:56:37:72:8d:ed:b1:cd:63: 89:b6:66:a4:53:a0:1c:8f:4b:3e:b1:2a:32:f1:ff: e8:00:21:50:33:3e:cd:f8:85:5f:15:90:02:5e:74: af:1d:69:c2:85:54:14:b4:d5:56:75:db:83:06:00: a6:1d:a1:f2:39:c6:fb:1d:92:38:3d:00:2b:5c:1b: e9:20:2b:aa:a1:4c:48:7c:d6:15:95:72:e9:37:df: e5:f2:f2:cf:35:bc:98:b2:28:60:cc:f9:fd:f8:b5: 25:9a:0f:d0:66:76:16:da:60:c5:74:fd:83:99:fe: b9:f4:87:36:1c:a3:fa:8f:a1:ea:25:18:7f:40:42: 38:d8:8b:6b:f9:9e:0e:44:fe:34:ba:66:bf:82:89: 59:f7:0a:44:de:f8:cb:12:c8:80:b7:a1:69:02:e2: 18:93:43:5e:85:b0:46:a4:e4:c2:51:e7:4c:ca:8b: 58:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F8:2E:85:B2:C8:09:9F:A1:F9:44:79:E2:30:4B:C5:4E:1A:47:EA X509v3 Authority Key Identifier: keyid:DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:bf:36:1d:21:01:cd:c0:3a:70:f3:21:09:ec:05:ce:17:12: b5:ce:48:b0:94:1c:1e:99:0d:4d:02:09:21:90:03:bf:e9:21: d3:b1:c0:f9:97:c3:a9:f9:75:28:86:dd:ac:f4:3a:4c:7e:40: 3b:b3:50:f1:38:bd:c9:21:0b:d0:c0:f2:54:ef:cc:ba:8a:51: 62:1e:38:66:b2:22:6a:bb:2a:01:3d:c9:e6:02:f0:e4:5f:04: f0:1e:8b:c9:3b:ff:80:6a:15:94:68:29:93:bd:1b:f2:1d:2a: 72:b3:1e:59:61:7f:c8:49:c1:ed:e7:84:47:f7:3d:77:f3:ce: dc:13:4a:e0:30:43:dc:c9:3f:66:df:b6:be:11:25:dc:30:53: f0:ab:9b:c8:00:2b:b6:06:5d:55:7e:39:5a:30:28:26:78:16: 29:b5:01:88:67:03:ae:5e:7d:17:c8:2a:c5:67:f7:21:02:16: 18:66:04:ef:50:fb:f5:d5:16:e6:d9:c3:76:c2:3e:a2:32:86: 2f:a1:18:1c:27:28:d4:91:33:b3:82:1f:24:0d:42:72:37:a8: 99:33:24:eb:6c:92:15:f2:2d:97:7e:82:e7:83:25:ec:38:62: cf:8e:40:ab:bc:a0:31:c7:f9:73:80:bc:37:e8:62:cf:49:ae: 94:ce:2e:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFF QUUyODExMC8GA1UEBRMoREU4M0M3NkNEQjQ0RjRGNzk0NDcxOTIwMkJFM0FGQTg4 M0QzNDk0RDAeFw0yNjAxMjMwNjU5NDlaFw0yNjAxMzAwNjU5NDlaMBgxFjAUBgNV BAMMDTY5NzMxYzY2LTdmZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5P+ZkoZq9NDR7PTVB+DITrz2/a8qF86CahBH4Nv3ubT230TdxnZ9BtR6bBRsJ cxxHnD4hCQE2XzUDpH0SFTe77oTHAK3aa6VyyNgdgLEp4/RWN3KN7bHNY4m2ZqRT oByPSz6xKjLx/+gAIVAzPs34hV8VkAJedK8dacKFVBS01VZ124MGAKYdofI5xvsd kjg9ACtcG+kgK6qhTEh81hWVcuk33+Xy8s81vJiyKGDM+f34tSWaD9BmdhbaYMV0 /YOZ/rn0hzYco/qPoeolGH9AQjjYi2v5ng5E/jS6Zr+CiVn3CkTe+MsSyIC3oWkC 4hiTQ16FsEak5MJR50zKi1jVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/fguhbLI CZ+h+UR54jBLxU4aR+owHwYDVR0jBBgwFoAU3oPHbNtE9PeURxkgK+OvqIPTSU0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBRTI4LzQ3NjA2RUI0REJC NzExRjBBMERGOTBGMDRENjQxOTUxLzNvUEhiTnRFOVBlVVJ4a2dLLU92cUlQVFNV MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM29QSGJOdEU5UGVVUnhrZ0stT3ZxSVBUU1UwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB RTI4LzQ3NjA2RUI0REJCNzExRjBBMERGOTBGMDRENjQxOTUxLzNvUEhiTnRFOVBl VVJ4a2dLLU92cUlQVFNVMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALS/Nh0hAc3AOnDzIQnsBc4XErXOSLCUHB6ZDU0CCSGQA7/pIdOxwPmX w6n5dSiG3az0Okx+QDuzUPE4vckhC9DA8lTvzLqKUWIeOGayImq7KgE9yeYC8ORf BPAei8k7/4BqFZRoKZO9G/IdKnKzHllhf8hJwe3nhEf3PXfzztwTSuAwQ9zJP2bf tr4RJdwwU/Crm8gAK7YGXVV+OVowKCZ4Fim1AYhnA65efRfIKsVn9yECFhhmBO9Q +/XVFubZw3bCPqIyhi+hGBwnKNSRM7OCHyQNQnI3qJkzJOtskhXyLZd+gueDJew4 Ys+OQKu8oDHH+XOAvDfoYs9JrpTOLss= -----END CERTIFICATE-----Generated at Sun Jan 25 07:26:28 2026 by rpki-client