This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft File: mgI7gKvPTmeX04jA3oFgoW6xXf4.mft (raw, json) Hash identifier: JGdVmEhMvdmzsj6ObejzuU2t6c+j0CJu4T/1I8qWyCA= Subject key identifier: 56:32:6C:C0:C5:F7:A2:6A:C5:EA:E7:13:99:29:E8:57:35:20:FB:44 Authority key identifier: 9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE Certificate issuer: /CN=A91EF6EF/serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft Manifest number: 6D Signing time: Fri 23 Jan 2026 06:00:44 +0000 Manifest this update: Fri 23 Jan 2026 06:00:44 +0000 Manifest next update: Fri 30 Jan 2026 06:00:44 +0000 Files and hashes: 1: mgI7gKvPTmeX04jA3oFgoW6xXf4.crl (hash: QWiFlFJdyyFQBGLFkGWczaqtqLw8PwagNBeRuwhAGDw=) 2: 3C15F928579311F0B296C030C4F9AE02.roa (hash: kbwAloXsrTWCITEmD+odpUzfYSBQf6qqCRC37VKW0HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF6EF, serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE Validity Not Before: Jan 23 06:00:44 2026 GMT Not After : Jan 30 06:00:44 2026 GMT Subject: CN=69730e8c-9cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ab:c4:47:ce:67:2c:6b:b9:ee:75:57:20:c7: a8:02:03:ec:9c:d8:2e:b7:c8:25:74:16:a1:41:9d: 1d:57:b5:73:7f:78:05:da:bf:e2:d6:a1:39:dc:e9: b1:0f:14:a3:83:ff:09:e9:fd:6d:78:2f:35:b0:19: 49:b3:a6:50:e3:3c:44:60:a6:f7:f0:fd:fb:86:3a: d8:58:40:02:a9:1b:01:d6:a1:dd:94:24:b5:31:ea: b2:44:b4:8e:9b:d2:b2:98:26:0c:78:df:a1:c2:7b: 58:e1:ed:e9:a9:e0:2a:b5:dc:c0:bc:b9:58:c6:ff: 6b:43:0c:01:c8:9c:6f:e3:3c:c3:cc:3d:6a:54:64: 9f:0b:8f:1f:86:d9:dc:e1:a4:a8:94:01:e1:1a:76: e3:78:e6:53:01:3c:9a:98:fd:f1:b8:9f:be:d3:c8: a8:58:53:b3:5c:bb:dd:e7:14:ca:b5:8e:27:10:bc: 0d:9f:a0:95:ad:cd:40:cb:73:e6:c8:12:d4:c1:e9: 29:91:9e:b4:dd:36:3d:15:77:01:5a:a9:f2:43:9a: fa:bf:3e:9c:8e:6e:e7:47:c3:fc:3a:98:3c:45:73: e3:97:32:dc:3c:64:26:73:93:1c:e4:d5:e7:55:90: 32:20:41:44:4f:a5:36:47:f3:f7:58:1c:6f:55:0e: b0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:32:6C:C0:C5:F7:A2:6A:C5:EA:E7:13:99:29:E8:57:35:20:FB:44 X509v3 Authority Key Identifier: keyid:9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ef:b2:fe:3d:5e:55:a1:01:6e:59:5e:e9:3d:d6:a1:41:7c: 3b:2e:cf:47:c0:fc:b9:f6:c4:a8:ac:b6:31:64:43:fd:bb:a2: 98:81:ec:be:53:0e:1e:6b:05:03:91:d9:ad:1c:b1:00:55:4a: 83:96:90:c3:a0:86:71:1b:ef:67:26:7b:1b:50:c5:77:c1:d4: 7b:5d:80:aa:54:93:6c:83:a7:32:a7:59:bf:0f:e7:06:62:ff: 83:48:a1:c1:4f:06:f5:48:44:68:62:9e:43:c6:aa:31:c1:65: ab:92:0e:41:97:97:57:64:19:0f:91:33:5c:5e:b1:37:9b:ad: 67:76:83:07:f3:a4:1a:59:8d:f2:4c:ec:f8:87:47:69:ae:39: ce:8d:c7:19:87:29:87:54:7a:f1:99:60:e4:05:b4:fc:f0:f3: 17:b1:0b:4a:46:75:6a:0e:ff:be:21:73:fe:90:ff:24:19:6f: b2:14:0e:bd:52:cf:66:18:e8:6a:30:a1:74:96:6e:08:a5:3e: 74:94:9c:1b:50:6f:5b:8c:50:74:44:8e:fd:9c:73:ff:72:bf: 62:f9:5f:20:36:d0:8e:fe:91:e9:fa:c0:e7:9e:17:4f:8b:5d: ba:50:ef:92:73:98:97:5a:40:f6:b6:c8:a5:e8:db:35:3c:f6: 44:ea:26:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RjZFRjExMC8GA1UEBRMoOUEwMjNCODBBQkNGNEU2Nzk3RDM4OEMwREU4MTYwQTE2 RUIxNURGRTAeFw0yNjAxMjMwNjAwNDRaFw0yNjAxMzAwNjAwNDRaMBgxFjAUBgNV BAMMDTY5NzMwZThjLTljZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcq8RHzmcsa7nudVcgx6gCA+yc2C63yCV0FqFBnR1XtXN/eAXav+LWoTnc6bEP FKOD/wnp/W14LzWwGUmzplDjPERgpvfw/fuGOthYQAKpGwHWod2UJLUx6rJEtI6b 0rKYJgx436HCe1jh7emp4Cq13MC8uVjG/2tDDAHInG/jPMPMPWpUZJ8Ljx+G2dzh pKiUAeEaduN45lMBPJqY/fG4n77TyKhYU7Ncu93nFMq1jicQvA2foJWtzUDLc+bI EtTB6SmRnrTdNj0VdwFaqfJDmvq/PpyObudHw/w6mDxFc+OXMtw8ZCZzkxzk1edV kDIgQURPpTZH8/dYHG9VDrBxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVjJswMX3 omrF6ucTmSnoVzUg+0QwHwYDVR0jBBgwFoAUmgI7gKvPTmeX04jA3oFgoW6xXf4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGNkVGL0FDQkY2RjJBNTc0 MjExRjBCRURCNDU1Q0M0RjlBRTAyL21nSTdnS3ZQVG1lWDA0akEzb0Znb1c2eFhm NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWdJN2dLdlBUbWVYMDRqQTNvRmdvVzZ4WGY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG NkVGL0FDQkY2RjJBNTc0MjExRjBCRURCNDU1Q0M0RjlBRTAyL21nSTdnS3ZQVG1l WDA0akEzb0Znb1c2eFhmNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAfvsv49XlWhAW5ZXuk91qFBfDsuz0fA/Ln2xKistjFkQ/27opiB7L5T Dh5rBQOR2a0csQBVSoOWkMOghnEb72cmextQxXfB1HtdgKpUk2yDpzKnWb8P5wZi /4NIocFPBvVIRGhinkPGqjHBZauSDkGXl1dkGQ+RM1xesTebrWd2gwfzpBpZjfJM 7PiHR2muOc6NxxmHKYdUevGZYOQFtPzw8xexC0pGdWoO/74hc/6Q/yQZb7IUDr1S z2YY6GowoXSWbgilPnSUnBtQb1uMUHREjv2cc/9yv2L5XyA20I7+ken6wOeeF0+L XbpQ75JzmJdaQPa2yKXo2zU89kTqJtg= -----END CERTIFICATE-----Generated at Sun Jan 25 06:12:35 2026 by rpki-client