This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft File: i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json) Hash identifier: ptTnV3U1gDcMt7clQ1H2zGXelIYcuok/FOq8c31KUXw= Subject key identifier: 71:29:E0:A0:7A:75:2D:6B:C5:86:BB:DD:12:2C:13:04:C3:44:38:46 Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 Certificate issuer: /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Certificate serial: 3502 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft Manifest number: 3502 Signing time: Sat 24 Jan 2026 14:30:41 +0000 Manifest this update: Sat 24 Jan 2026 14:30:41 +0000 Manifest next update: Sat 31 Jan 2026 14:30:41 +0000 Files and hashes: 1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: yWnXyKbu9vQPQKtp3qyBXdh+G4kfmirNdj+FGBjjft0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13570 (0x3502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Validity Not Before: Jan 24 14:30:41 2026 GMT Not After : Jan 31 14:30:41 2026 GMT Subject: CN=6974d791-a27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f0:53:a7:c1:5e:fc:43:56:2b:b8:e9:b7:df: e3:ff:06:1e:cb:9b:a1:8a:75:84:67:05:d1:2e:93: 94:95:59:38:19:51:6f:8c:cc:98:04:93:76:71:33: c5:7a:b7:64:33:1f:35:7f:9e:92:4b:d8:1a:0f:98: 76:ce:50:91:a1:46:82:ce:b9:36:15:14:2e:b0:7e: 9f:35:ec:4c:6b:03:d8:26:51:29:43:fa:c0:f4:12: f0:eb:9e:35:e3:b3:34:cd:6e:75:e9:90:df:22:1a: d3:5f:28:94:16:14:b5:e5:6d:dc:79:52:b6:44:1b: 78:5d:88:d5:0c:76:e7:d0:8a:7e:0f:ea:78:79:99: a8:5d:71:f8:2f:67:67:ee:eb:9b:19:54:cf:92:bc: e3:62:6a:c3:5e:9a:ad:5a:5f:79:78:60:45:e8:45: 65:aa:ad:44:bf:7a:e6:1e:88:96:f3:de:0a:d3:41: 5c:b0:21:cd:4a:05:f4:fd:85:0b:63:6b:05:40:d9: b9:05:93:61:97:6c:f0:99:48:b9:dc:4c:20:da:f1: a8:80:87:46:36:ac:4d:67:50:c7:85:e8:a8:9d:84: f1:bb:8a:87:74:30:86:f3:cf:2e:64:2a:8c:c6:29: 30:b1:7a:e0:aa:ea:46:d9:b0:ab:f1:89:f5:de:ff: bd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:29:E0:A0:7A:75:2D:6B:C5:86:BB:DD:12:2C:13:04:C3:44:38:46 X509v3 Authority Key Identifier: keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:f2:07:18:05:6b:83:a6:e5:77:8c:b3:ab:14:ab:85:5d:95: c4:6e:7d:72:20:40:1f:e2:5c:98:2a:54:6d:99:41:c1:4e:ac: e5:9f:27:f1:79:08:05:d6:6b:dd:12:f4:ba:aa:cf:9e:e3:3e: 9b:7a:91:81:91:70:97:42:63:6c:28:e0:93:b1:a4:72:e6:4a: 31:ff:7b:d6:5d:51:cb:6e:b9:79:24:38:87:3a:86:0c:af:87: 81:81:e4:8f:46:5e:45:d7:71:0e:a4:86:42:db:cb:e5:c0:04: af:7c:ca:b5:8f:19:00:53:d6:7e:b5:bd:a2:5c:93:1c:25:45: a8:2a:5d:a1:e5:16:7e:6f:3e:cd:1d:f7:39:8a:83:4d:81:2f: 77:44:e9:fd:56:f0:e4:62:0a:3d:80:90:47:53:54:fa:ec:9f: 00:f4:0b:e6:33:3a:90:9b:33:0a:2a:c3:37:d0:b5:bf:f4:db: b4:26:d8:a4:c7:d9:c5:d9:5d:06:e9:b0:d8:68:2f:0f:43:90: c7:cf:7f:0a:c0:eb:db:fa:eb:9e:a8:11:63:1d:80:2d:90:3d: 3f:1f:2f:3a:59:d5:07:83:c5:06:57:11:0d:e4:6d:86:9f:64: fc:db:21:8f:81:67:40:44:34:0c:ea:3c:7a:8a:fd:f5:0a:4b: a0:2c:a6:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQUUxMTAvBgNVBAUTKDhCQUMwREQzRTQ5MTg1ODk0RkRBRTI4Mjg0RURDODA0 NzIwQjQ2MTQwHhcNMjYwMTI0MTQzMDQxWhcNMjYwMTMxMTQzMDQxWjAYMRYwFAYD VQQDDA02OTc0ZDc5MS1hMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgvBTp8Fe/ENWK7jpt9/j/wYey5uhinWEZwXRLpOUlVk4GVFvjMyYBJN2cTPF erdkMx81f56SS9gaD5h2zlCRoUaCzrk2FRQusH6fNexMawPYJlEpQ/rA9BLw6541 47M0zW516ZDfIhrTXyiUFhS15W3ceVK2RBt4XYjVDHbn0Ip+D+p4eZmoXXH4L2dn 7uubGVTPkrzjYmrDXpqtWl95eGBF6EVlqq1Ev3rmHoiW894K00FcsCHNSgX0/YUL Y2sFQNm5BZNhl2zwmUi53Ewg2vGogIdGNqxNZ1DHheionYTxu4qHdDCG888uZCqM xikwsXrgqupG2bCr8Yn13v+9dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEp4KB6 dS1rxYa73RIsEwTDRDhGMB8GA1UdIwQYMBaAFIusDdPkkYWJT9rigoTtyARyC0YU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS8xNjhGRkQ2QzFE OEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZbFAydUtDaE8zSUJISUxS aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2d04wLVNSaFlsUDJ1S0NoTzNJQkhJTFJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZBRS8xNjhGRkQ2QzFEOEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZ bFAydUtDaE8zSUJISUxSaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR8gcYBWuDpuV3jLOrFKuFXZXEbn1yIEAf4lyYKlRtmUHBTqzlnyfx eQgF1mvdEvS6qs+e4z6bepGBkXCXQmNsKOCTsaRy5kox/3vWXVHLbrl5JDiHOoYM r4eBgeSPRl5F13EOpIZC28vlwASvfMq1jxkAU9Z+tb2iXJMcJUWoKl2h5RZ+bz7N Hfc5ioNNgS93ROn9VvDkYgo9gJBHU1T67J8A9AvmMzqQmzMKKsM30LW/9Nu0Jtik x9nF2V0G6bDYaC8PQ5DHz38KwOvb+uueqBFjHYAtkD0/Hy86WdUHg8UGVxEN5G2G n2T82yGPgWdARDQM6jx6iv31CkugLKZT -----END CERTIFICATE-----Generated at Sun Jan 25 09:23:48 2026 by rpki-client