This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft File: 2OL6sVCi_VePZ-GbApZTmzdSyak.mft (raw, json) Hash identifier: hE8XBjLl1FK4KpUJN3uXQ37hsxggz9f/axe3Qfn+CtE= Subject key identifier: A8:D7:E2:B5:AB:FE:4C:59:C2:D5:8C:FA:C1:27:80:13:0E:B8:41:CA Authority key identifier: D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 Certificate issuer: /CN=A91EC225/serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Certificate serial: 0F28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft Manifest number: 0F1E Signing time: Sat 24 Jan 2026 17:16:49 +0000 Manifest this update: Sat 24 Jan 2026 17:16:49 +0000 Manifest next update: Sat 31 Jan 2026 17:16:49 +0000 Files and hashes: 1: 2OL6sVCi_VePZ-GbApZTmzdSyak.crl (hash: mY9bYMopRgAW0l3r7n3/F6iquZTOYTEd6wFbCnMyn/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3880 (0xf28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Validity Not Before: Jan 24 17:16:49 2026 GMT Not After : Jan 31 17:16:49 2026 GMT Subject: CN=6974fe81-3a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:90:f7:f0:e6:0f:24:04:7e:7e:6b:07:a1:ee: 70:68:04:0d:2f:7a:be:f0:c3:0a:5f:ad:b9:70:cc: a4:f7:8e:ad:e0:cd:d8:f5:d6:7e:1f:3b:33:0c:7b: 2a:3d:f4:de:60:cc:ac:ce:29:89:bc:4f:e1:b9:7a: 42:b2:60:b7:20:21:b3:d9:50:60:85:c4:9d:51:6b: a5:47:dc:10:66:8c:91:5a:7f:40:a4:8d:4b:d1:94: f0:ab:92:ff:23:b9:cc:9b:2b:37:f4:28:91:89:f1: 08:c3:2a:1b:ba:53:e2:ea:e8:42:8a:e0:41:4b:f4: 87:3c:04:6d:6b:6d:93:64:d5:21:3e:c0:63:25:3a: 10:9f:23:79:22:47:05:4b:1c:59:6d:01:12:39:7d: db:c4:87:c2:5a:a5:96:37:a1:22:db:5b:07:7f:02: f7:ba:9a:5d:3c:75:26:df:c1:5a:2f:d3:c0:e5:57: 3d:4d:84:ec:57:b3:70:7d:09:6e:68:d7:1d:4f:49: 42:da:38:07:1c:2e:50:1a:40:44:1a:cb:f8:79:8d: 3b:e9:cc:a5:9d:87:83:e6:1b:48:6c:85:60:7a:09: b3:94:dd:02:ca:ec:a7:1b:8e:ee:f4:6b:ab:44:70: 97:30:f8:03:01:4d:33:c0:93:9a:48:8c:7b:66:06: 52:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D7:E2:B5:AB:FE:4C:59:C2:D5:8C:FA:C1:27:80:13:0E:B8:41:CA X509v3 Authority Key Identifier: keyid:D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:8c:b8:48:10:9e:3f:c2:e1:db:cc:15:a4:f5:49:22:ed:62: f9:ca:05:d5:74:23:68:b5:df:d8:57:37:79:5c:d6:6c:77:3b: 7b:4b:62:a1:9a:d2:89:5b:e8:93:49:4e:10:17:a2:99:2a:d8: f1:73:8e:52:ec:17:91:25:07:80:98:7e:50:9f:b8:b5:f1:27: af:ce:ae:fc:43:f3:b5:8b:9e:a3:dc:10:ab:27:19:5f:79:45: 73:20:b3:26:ab:98:a8:40:ee:df:64:50:d4:7b:07:19:fb:6d: fc:48:24:b4:65:b4:11:21:18:62:c4:3e:f3:7b:51:a0:f0:32: 72:b2:01:57:97:18:0a:76:5f:9d:5d:31:d9:81:c3:7d:25:31: 27:02:86:9e:ed:56:b9:40:e9:6d:bd:a2:1b:c4:ad:8b:54:29: a6:09:51:23:0d:67:c7:19:2b:4e:4e:ed:71:ea:da:13:21:9b: cb:91:6b:79:94:c0:df:97:cf:83:4c:ca:63:91:d7:7b:6c:6d: 42:70:83:45:ef:a2:fe:f9:92:8d:19:6f:46:c8:cb:ff:4f:c5: fd:9d:18:92:18:bf:0d:55:65:c8:41:88:7b:22:5b:69:07:d1: 92:4c:56:2d:04:63:e2:90:81:a0:20:b9:bb:15:1b:5d:84:54: 80:56:d6:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKEQ4RTJGQUIxNTBBMkZENTc4RjY3RTE5QjAyOTY1MzlC Mzc1MkM5QTkwHhcNMjYwMTI0MTcxNjQ5WhcNMjYwMTMxMTcxNjQ5WjAYMRYwFAYD VQQDDA02OTc0ZmU4MS0zYTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk5D38OYPJAR+fmsHoe5waAQNL3q+8MMKX625cMyk946t4M3Y9dZ+HzszDHsq PfTeYMyszimJvE/huXpCsmC3ICGz2VBghcSdUWulR9wQZoyRWn9ApI1L0ZTwq5L/ I7nMmys39CiRifEIwyobulPi6uhCiuBBS/SHPARta22TZNUhPsBjJToQnyN5IkcF SxxZbQESOX3bxIfCWqWWN6Ei21sHfwL3uppdPHUm38FaL9PA5Vc9TYTsV7NwfQlu aNcdT0lC2jgHHC5QGkBEGsv4eY076cylnYeD5htIbIVgegmzlN0CyuynG47u9Gur RHCXMPgDAU0zwJOaSIx7ZgZS5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjX4rWr /kxZwtWM+sEngBMOuEHKMB8GA1UdIwQYMBaAFNji+rFQov1Xj2fhmwKWU5s3Usmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS80OTlGREY5MDhF NTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9WZVBaLUdiQXBaVG16ZFN5 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJPTDZzVkNpX1ZlUFotR2JBcFpUbXpkU3lhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS80OTlGREY5MDhFNTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9W ZVBaLUdiQXBaVG16ZFN5YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4jLhIEJ4/wuHbzBWk9Uki7WL5ygXVdCNotd/YVzd5XNZsdzt7S2Kh mtKJW+iTSU4QF6KZKtjxc45S7BeRJQeAmH5Qn7i18Sevzq78Q/O1i56j3BCrJxlf eUVzILMmq5ioQO7fZFDUewcZ+238SCS0ZbQRIRhixD7ze1Gg8DJysgFXlxgKdl+d XTHZgcN9JTEnAoae7Va5QOltvaIbxK2LVCmmCVEjDWfHGStOTu1x6toTIZvLkWt5 lMDfl8+DTMpjkdd7bG1CcINF76L++ZKNGW9GyMv/T8X9nRiSGL8NVWXIQYh7Iltp B9GSTFYtBGPikIGgILm7FRtdhFSAVtaF -----END CERTIFICATE-----Generated at Sun Jan 25 23:07:44 2026 by rpki-client