This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json) Hash identifier: 7iXp9l2nSoX43orYxg2a0LC2Y4ubVJEe6tJmrRM10Kw= Subject key identifier: 9C:5E:00:B9:82:7B:42:76:39:4A:D2:D1:36:86:53:60:72:04:33:0D Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 2805 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft Manifest number: 27AF Signing time: Sat 24 Jan 2026 15:30:16 +0000 Manifest this update: Sat 24 Jan 2026 15:30:15 +0000 Manifest next update: Sat 31 Jan 2026 15:30:15 +0000 Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: seB/CS+AwTtBWQN3NikQnx34zxcC+7L1y13RRFENa/Q=) 2: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: oG5ygd/penwWyXmZZkzYKDAIiWuJVz9Qy2pJuzyaYxo=) 3: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: SILTusquGoHpNsMBJynofIsPOUuJK+mXoArSIu6+szM=) 4: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: 2jCysRc/ncxmWEacRP7Buw4ItBzXogCKyOpUtSSf4Ks=) 5: AE887848662211E7BC7E2636C4F9AE02.roa (hash: 4dAtwCU1fi5Bo6SCfNalDzxKHkBj/DREl9uromRy6Rs=) 6: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: H54eXqaAth/AANz7/DMFwtH0FIhN3UXJcrmsK7fhMXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10245 (0x2805) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Validity Not Before: Jan 24 15:30:15 2026 GMT Not After : Jan 31 15:30:15 2026 GMT Subject: CN=6974e588-1695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4a:98:b3:e4:9b:da:6f:74:3d:97:63:f4:50: 94:d0:c9:14:90:b3:1d:32:f6:e4:3e:cc:e8:63:6c: 33:54:be:be:59:e6:1b:17:0f:44:c1:24:af:91:de: f1:5e:0d:0b:86:f5:56:99:c3:fa:57:17:60:c5:0c: 21:11:cc:89:91:dd:34:6c:06:1e:28:f0:f9:24:a6: fe:6f:55:a4:d6:1f:e7:83:28:8f:0a:6b:cc:8c:91: 41:1f:68:68:26:7a:d7:54:64:c1:0e:b0:83:1d:b0: 5e:01:ff:1b:f1:53:18:f7:1a:ea:3b:de:0d:02:29: 66:86:d4:51:ba:48:fd:cb:16:f9:32:79:73:fb:d6: 4c:9f:ab:9a:05:ad:8f:63:67:7e:1a:40:47:40:ab: 1c:d4:a9:f0:50:a3:87:17:24:03:1f:16:0d:1d:87: 27:e3:ab:dd:30:10:37:c3:f3:0f:73:c8:e5:3e:fe: 69:ad:ff:72:ab:ca:40:53:d9:e1:1f:a1:2b:53:4d: ee:45:53:dd:df:41:e6:0e:da:92:43:5b:4e:a7:d2: 86:94:9a:ee:ba:1a:90:69:c0:d1:6e:da:ad:96:18: 2b:28:43:23:66:18:99:57:ea:17:ae:0a:a3:f2:3c: 46:d2:74:35:b5:64:21:66:39:cb:96:47:ee:84:ca: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5E:00:B9:82:7B:42:76:39:4A:D2:D1:36:86:53:60:72:04:33:0D X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:0f:2e:05:51:99:51:c7:28:98:b6:f4:06:7f:a9:98:ac:71: 20:6b:1c:18:9c:d6:b5:77:3e:ae:3f:73:66:df:3c:a5:95:e4: 05:dc:fe:4e:cf:1f:cb:b4:49:36:12:48:0d:10:20:88:ff:14: 7f:cd:ee:df:30:9a:cf:0d:0a:56:0b:c8:14:24:8c:6d:bc:13: fd:8e:d9:4f:eb:4d:f8:66:38:de:f9:c3:82:93:4c:46:9e:38: 59:bd:0b:4c:33:ad:f5:63:e7:dd:d1:08:d3:fc:50:e1:38:6d: 7a:7c:4a:f2:ed:a0:8c:01:07:3c:fe:dd:70:19:0c:97:41:d5: f5:8b:3d:36:88:7b:ed:61:16:8a:d4:bf:61:df:87:95:4e:d5: 67:e2:ff:4b:6e:5d:77:58:7e:0c:0e:bd:41:80:4e:1f:14:ed: 3d:b2:a9:09:1b:2c:00:a9:a2:36:4a:24:22:f6:a9:0d:89:c2: 87:0b:6a:12:89:f8:e0:81:e1:fa:ec:99:80:fc:aa:ba:20:67: f8:0c:c7:59:3e:27:bb:c6:ed:9d:0e:3a:14:33:40:ab:82:95: d2:07:f2:16:12:ed:5a:3a:17:10:90:14:c7:61:c4:b3:4d:b4: f1:ec:d2:7b:c8:da:1f:d1:c6:f8:21:3d:85:61:df:61:cf:f3: 61:a3:1a:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjYwMTI0MTUzMDE1WhcNMjYwMTMxMTUzMDE1WjAYMRYwFAYD VQQDDA02OTc0ZTU4OC0xNjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UqYs+Sb2m90PZdj9FCU0MkUkLMdMvbkPszoY2wzVL6+WeYbFw9EwSSvkd7x Xg0LhvVWmcP6VxdgxQwhEcyJkd00bAYeKPD5JKb+b1Wk1h/ngyiPCmvMjJFBH2ho JnrXVGTBDrCDHbBeAf8b8VMY9xrqO94NAilmhtRRukj9yxb5Mnlz+9ZMn6uaBa2P Y2d+GkBHQKsc1KnwUKOHFyQDHxYNHYcn46vdMBA3w/MPc8jlPv5prf9yq8pAU9nh H6ErU03uRVPd30HmDtqSQ1tOp9KGlJruuhqQacDRbtqtlhgrKEMjZhiZV+oXrgqj 8jxG0nQ1tWQhZjnLlkfuhMoE0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxeALmC e0J2OUrS0TaGU2ByBDMNMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG Y25WWXhNZFcyeURmZ0h6WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoDy4FUZlRxyiYtvQGf6mYrHEgaxwYnNa1dz6uP3Nm3zylleQF3P5O zx/LtEk2EkgNECCI/xR/ze7fMJrPDQpWC8gUJIxtvBP9jtlP6034Zjje+cOCk0xG njhZvQtMM631Y+fd0QjT/FDhOG16fEry7aCMAQc8/t1wGQyXQdX1iz02iHvtYRaK 1L9h34eVTtVn4v9Lbl13WH4MDr1BgE4fFO09sqkJGywAqaI2SiQi9qkNicKHC2oS ifjggeH67JmA/Kq6IGf4DMdZPie7xu2dDjoUM0CrgpXSB/IWEu1aOhcQkBTHYcSz TbTx7NJ7yNof0cb4IT2FYd9hz/NhoxpN -----END CERTIFICATE-----Generated at Mon Jan 26 05:45:28 2026 by rpki-client