This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json) Hash identifier: XwV4bC2ijoZD+BXN0c2XGWn4jRWQsTWEWhF7YHu3mPY= Subject key identifier: 90:B6:4F:62:BB:D7:3A:E6:CD:52:9F:3C:B5:2B:07:AA:50:7C:2F:71 Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Certificate serial: 0DD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft Manifest number: 0DD1 Signing time: Sat 24 Jan 2026 17:32:17 +0000 Manifest this update: Sat 24 Jan 2026 17:32:17 +0000 Manifest next update: Sat 31 Jan 2026 17:32:17 +0000 Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: Us34W8Dt9kHifvZGCawDZ9Xn875/fGl0zoPbqMMs0b8=) 2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: EM624Ee5dZvup/p2NN7lZAjAZv2Q+/2EJL827rz91tU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3544 (0xdd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Validity Not Before: Jan 24 17:32:17 2026 GMT Not After : Jan 31 17:32:17 2026 GMT Subject: CN=69750221-2281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c3:64:83:e0:7e:74:5e:be:0b:c7:a3:19:37: ff:a0:54:72:c9:f0:82:4e:2b:3b:31:e0:84:60:3f: ef:8f:c9:77:d5:7b:df:73:a5:6e:59:51:c4:d8:70: 28:09:a1:9f:96:db:55:71:ef:30:60:74:56:25:4e: 16:ac:f4:ea:d7:6f:92:af:02:c0:3e:1c:13:ed:85: 16:4a:b1:09:1d:87:96:50:cc:99:70:e3:1b:68:a8: 25:43:59:c2:cd:1b:4b:ab:ae:52:d2:17:38:22:e3: 8f:94:dc:4f:a1:42:bd:5f:00:fd:0d:e1:d0:1d:e4: dd:6d:ad:a7:0c:23:a5:66:5a:5b:fe:b7:aa:3c:ae: 46:e0:53:6e:1c:37:4e:a3:8c:3e:5e:7a:e5:72:ba: ed:83:ae:57:a9:8f:ef:9e:d8:61:78:60:13:e9:74: b9:89:8e:ff:09:96:d8:13:05:e7:a3:e8:2e:3c:bd: 1e:cf:5b:66:d7:af:5b:c1:ec:67:52:61:c4:21:29: 92:b1:8f:bb:5f:13:a0:11:93:61:a6:b4:07:cc:66: be:15:8b:d9:02:60:d7:c2:5f:b3:9c:a7:17:c8:78: 34:3b:b3:f1:fe:bd:8d:a9:aa:56:da:c3:97:41:59: 5d:d6:aa:07:bf:7f:80:e6:c1:0e:a3:f4:0f:e4:80: 4b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B6:4F:62:BB:D7:3A:E6:CD:52:9F:3C:B5:2B:07:AA:50:7C:2F:71 X509v3 Authority Key Identifier: keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:6b:8b:9d:54:24:d9:06:a1:f2:8e:2c:68:36:1e:2e:8e:a8: 9c:4e:05:26:d3:d8:2d:85:4e:20:42:80:78:c3:9b:ef:09:e2: a7:70:72:6c:2e:d1:81:6e:9e:5f:9f:9c:3b:d9:b9:d6:ec:b1: 4c:97:6d:ea:f8:b4:60:50:24:63:e7:5c:10:1d:66:10:05:41: 13:b4:9f:a5:e7:31:d4:18:8d:92:fc:8c:9f:0f:2b:88:2b:74: 45:08:ec:16:a1:0a:68:fe:2e:27:c9:61:8a:e6:c2:ae:5f:99: 91:1f:cf:42:34:63:bf:67:7c:af:01:16:41:42:a2:21:d0:e8: 11:b1:4b:d1:87:4b:67:b4:ed:be:24:35:28:6c:60:e9:c6:73: 42:37:6c:65:e9:7e:e1:45:45:f5:6a:59:9c:50:70:87:60:78: 1c:cb:aa:8d:ed:9e:09:82:7a:96:f7:3f:f5:e3:3d:b7:49:48: e6:41:7b:8b:e0:c4:f8:ab:82:88:40:36:c8:1c:ef:06:cc:7b: 8b:31:b2:bc:75:c9:ad:83:9f:cc:58:8e:2e:7f:70:93:05:2e: 96:d0:87:00:2b:fe:84:ad:e2:e9:2e:b2:a2:bd:9f:7d:60:63: 74:3b:df:09:52:1e:03:76:f4:ce:8f:cc:da:bf:02:62:61:63: 49:58:18:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1NzExMTAvBgNVBAUTKEY0RjE1QzY3NUVEOUE1QzJEMTk5NUIyN0ZCNTNGRjYw RkYwMjQ5RTAwHhcNMjYwMTI0MTczMjE3WhcNMjYwMTMxMTczMjE3WjAYMRYwFAYD VQQDDA02OTc1MDIyMS0yMjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncNkg+B+dF6+C8ejGTf/oFRyyfCCTis7MeCEYD/vj8l31Xvfc6VuWVHE2HAo CaGflttVce8wYHRWJU4WrPTq12+SrwLAPhwT7YUWSrEJHYeWUMyZcOMbaKglQ1nC zRtLq65S0hc4IuOPlNxPoUK9XwD9DeHQHeTdba2nDCOlZlpb/reqPK5G4FNuHDdO o4w+Xnrlcrrtg65XqY/vnthheGAT6XS5iY7/CZbYEwXno+guPL0ez1tm169bwexn UmHEISmSsY+7XxOgEZNhprQHzGa+FYvZAmDXwl+znKcXyHg0O7Px/r2NqapW2sOX QVld1qoHv3+A5sEOo/QP5IBLxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJC2T2K7 1zrmzVKfPLUrB6pQfC9xMB8GA1UdIwQYMBaAFPTxXGde2aXC0ZlbJ/tT/2D/Akng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU3MS9FQ0QyREY5NkNF NkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBjTFJtVnNuLTFQX1lQOENT ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQRmNaMTdacGNMUm1Wc24tMVBfWVA4Q1NlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU3MS9FQ0QyREY5NkNFNkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBj TFJtVnNuLTFQX1lQOENTZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIa4udVCTZBqHyjixoNh4ujqicTgUm09gthU4gQoB4w5vvCeKncHJs LtGBbp5fn5w72bnW7LFMl23q+LRgUCRj51wQHWYQBUETtJ+l5zHUGI2S/IyfDyuI K3RFCOwWoQpo/i4nyWGK5sKuX5mRH89CNGO/Z3yvARZBQqIh0OgRsUvRh0tntO2+ JDUobGDpxnNCN2xl6X7hRUX1almcUHCHYHgcy6qN7Z4JgnqW9z/14z23SUjmQXuL 4MT4q4KIQDbIHO8GzHuLMbK8dcmtg5/MWI4uf3CTBS6W0IcAK/6EreLpLrKivZ99 YGN0O98JUh4DdvTOj8zavwJiYWNJWBiT -----END CERTIFICATE-----Generated at Sun Jan 25 15:32:01 2026 by rpki-client