This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft File: t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft (raw, json) Hash identifier: HXr0hmMTaTHg3jLRDY9vaSB3WaGv/9r0jl1CXvu1Wf8= Subject key identifier: 7A:25:99:22:A5:FF:31:3F:66:26:1A:2E:C2:BA:CC:45:CE:0A:C0:8A Authority key identifier: B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 Certificate issuer: /CN=A91EEC3B/serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Certificate serial: 07C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft Manifest number: 2DBA Signing time: Sat 24 Jan 2026 16:11:15 +0000 Manifest this update: Sat 24 Jan 2026 16:11:14 +0000 Manifest next update: Sat 31 Jan 2026 16:11:14 +0000 Files and hashes: 1: t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl (hash: qOP+ijd/V4+oK0OPLX1LfLdDIiu3ZQ1YpUioIqp5Okg=) 2: 4F7B7728DD5D11EF9312601BC4F9AE02.roa (hash: Ftg4ftCr2lGn4RvcA0VVEwLsH6nD0OpE3hi7kVlpjbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1993 (0x7c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEC3B, serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Validity Not Before: Jan 24 16:11:14 2026 GMT Not After : Jan 31 16:11:14 2026 GMT Subject: CN=6974ef23-0a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:6a:39:23:4e:c5:23:aa:1d:d0:ac:3d:5c: 78:af:13:f5:25:63:ee:87:10:62:c2:7c:ed:4f:4f: bf:1b:64:62:ff:42:b1:c1:5a:19:92:b2:70:fa:7d: a4:fc:6a:10:fd:4b:8e:07:a1:34:f5:f7:be:e8:c4: fa:c1:32:4f:65:77:68:62:3f:1e:91:ce:46:0e:6c: 30:eb:60:a1:32:d1:37:1c:d3:25:12:cb:f6:30:f9: 8b:7a:48:69:45:bc:30:28:1c:20:9d:d8:6c:4c:2c: 79:ff:fa:56:58:2c:2c:8e:79:5d:e2:e6:83:64:ab: 45:c0:27:fc:21:6a:38:dd:e7:f6:80:1e:d2:91:d0: 4d:97:08:9e:86:8b:01:36:75:aa:6f:c9:5f:49:66: d1:04:55:c1:dd:dd:a3:56:eb:78:4c:84:3a:90:b6: 7d:d8:d3:a5:e0:26:51:b1:8f:3d:b0:45:53:99:24: b4:1e:57:60:e5:a7:ba:a0:e3:6a:7c:b5:7f:bf:46: aa:c5:f5:7b:08:9c:27:38:d8:bf:5d:3a:6a:44:97: ba:9b:79:5d:25:59:6a:2b:7a:1b:55:04:c2:c9:84: bd:75:8a:b0:3d:84:37:d3:92:1c:c2:27:bc:0f:e8: da:ac:6f:fc:48:f5:ba:c3:be:b6:eb:57:61:93:11: 2b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:25:99:22:A5:FF:31:3F:66:26:1A:2E:C2:BA:CC:45:CE:0A:C0:8A X509v3 Authority Key Identifier: keyid:B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:d0:2d:25:2a:22:59:bb:d3:1a:c9:c9:1f:74:ee:c5:24:17: 3f:ba:09:11:4e:8f:aa:0e:e3:d2:5e:2c:55:73:66:d1:3d:d1: 8f:f7:0d:ef:dd:e5:12:9c:bb:bf:9e:c3:cb:9e:06:99:ed:6c: 08:a3:74:84:3d:7a:50:8a:8e:0c:cf:0d:d7:6f:e8:c5:18:74: f3:4e:56:e4:17:a3:de:82:75:a2:c0:5c:4d:05:59:1e:54:04: 99:d7:78:9a:33:46:b6:2d:3d:87:65:4b:29:07:32:ae:a8:ad: 08:11:fc:a9:c7:74:a8:cd:1a:53:81:34:86:ce:22:51:7b:61: 8b:f6:6c:22:dd:3d:29:22:8e:8e:ff:9a:0e:dc:b9:d5:de:18: 64:72:56:f3:95:63:5c:4d:dd:ea:8a:af:51:99:8c:51:79:7b: 45:e1:25:78:5d:72:1e:27:1f:4c:de:08:d4:c5:ee:db:27:f7: 07:7e:9b:fd:13:77:a4:b8:c5:86:47:70:f6:63:3a:9f:aa:f7: 64:e3:24:5f:fb:ca:f4:65:39:1c:55:16:f5:75:1a:3f:05:a2: c3:ad:4a:98:b7:40:43:16:da:bb:2f:b3:85:43:93:3d:fa:2b: f2:ef:bd:21:fc:9a:b1:c2:4c:07:8a:71:80:a7:68:00:2b:83: e4:7d:e4:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDM0IxMTAvBgNVBAUTKEI3NjY3NTA1QkIyMDQyRTcyQjYyQUUwNUJFMkQxQTNC NDFCNEQyMzUwHhcNMjYwMTI0MTYxMTE0WhcNMjYwMTMxMTYxMTE0WjAYMRYwFAYD VQQDDA02OTc0ZWYyMy0wYTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvi9qOSNOxSOqHdCsPVx4rxP1JWPuhxBiwnztT0+/G2Ri/0KxwVoZkrJw+n2k /GoQ/UuOB6E09fe+6MT6wTJPZXdoYj8ekc5GDmww62ChMtE3HNMlEsv2MPmLekhp RbwwKBwgndhsTCx5//pWWCwsjnld4uaDZKtFwCf8IWo43ef2gB7SkdBNlwiehosB NnWqb8lfSWbRBFXB3d2jVut4TIQ6kLZ92NOl4CZRsY89sEVTmSS0Hldg5ae6oONq fLV/v0aqxfV7CJwnONi/XTpqRJe6m3ldJVlqK3obVQTCyYS9dYqwPYQ305Icwie8 D+jarG/8SPW6w76261dhkxErcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHolmSKl /zE/ZiYaLsK6zEXOCsCKMB8GA1UdIwQYMBaAFLdmdQW7IELnK2KuBb4tGjtBtNI1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0 MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1Y3JZcTRGdmkwYU8wRzAw alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QyWjFCYnNnUXVjcllxNEZ2aTBhTzBHMDBqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1 Y3JZcTRGdmkwYU8wRzAwalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH0C0lKiJZu9MayckfdO7FJBc/ugkRTo+qDuPSXixVc2bRPdGP9w3v 3eUSnLu/nsPLngaZ7WwIo3SEPXpQio4Mzw3Xb+jFGHTzTlbkF6PegnWiwFxNBVke VASZ13iaM0a2LT2HZUspBzKuqK0IEfypx3SozRpTgTSGziJRe2GL9mwi3T0pIo6O /5oO3LnV3hhkclbzlWNcTd3qiq9RmYxReXtF4SV4XXIeJx9M3gjUxe7bJ/cHfpv9 E3ekuMWGR3D2Yzqfqvdk4yRf+8r0ZTkcVRb1dRo/BaLDrUqYt0BDFtq7L7OFQ5M9 +ivy770h/JqxwkwHinGAp2gAK4PkfeRH -----END CERTIFICATE-----Generated at Sun Jan 25 19:05:42 2026 by rpki-client