This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft File: e3T7MiZmknZU8foeyLcJwwU1UOM.mft (raw, json) Hash identifier: XifuONA6ACwPjWl32klzCASa6bIQMWBrlVidKjsjsLg= Subject key identifier: 84:AA:3E:6B:C6:FE:A6:D2:57:BD:E4:86:6B:B9:97:6B:E5:24:6C:14 Authority key identifier: 7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3 Certificate issuer: /CN=A91F1451/serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft Manifest number: 20 Signing time: Fri 23 Jan 2026 06:53:32 +0000 Manifest this update: Fri 23 Jan 2026 06:53:31 +0000 Manifest next update: Fri 30 Jan 2026 06:53:31 +0000 Files and hashes: 1: e3T7MiZmknZU8foeyLcJwwU1UOM.crl (hash: krsQ9GDDAFqH/jQdQBiQuo/jj812/e67hlxW2bJUagc=) 2: AC465D48D02211F0A5535D5AC4F9AE02.roa (hash: 0Su3Xy3ETeqv2p9otS7nhMUjS14WdCWUwds8sCIua50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1451, serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3 Validity Not Before: Jan 23 06:53:31 2026 GMT Not After : Jan 30 06:53:31 2026 GMT Subject: CN=69731aec-64b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:36:69:c6:53:5d:b4:3c:7b:fd:9f:3f:d2:5d: a1:f5:d5:f6:51:dd:75:9e:67:26:d7:bf:bb:57:d4: ea:6d:b6:67:a6:e5:f1:57:fb:06:9b:db:bc:8c:7c: ed:aa:76:02:97:99:cc:77:3e:b6:d3:58:ec:dd:b5: 06:64:52:38:aa:53:6f:a3:c5:ef:4f:f7:ae:1d:63: 32:72:40:5c:4b:68:7e:67:e2:96:da:a3:96:25:2a: 8a:d1:3d:5a:8c:12:f0:e1:00:cf:dd:65:f3:0d:a6: 07:52:d8:d9:80:b9:93:2d:94:a0:69:05:50:2f:fe: d1:09:52:06:e1:e9:b9:97:c2:13:32:30:35:35:42: dd:db:25:ef:39:54:bf:f7:6b:a8:56:89:e5:fc:bc: e5:5e:57:cd:b3:fd:7a:76:56:f6:df:4d:60:e5:fd: 8f:5b:c4:f7:cb:a4:01:a2:48:1c:92:5b:88:fa:2b: a6:02:6f:e3:7a:d1:35:f2:95:9f:d8:d8:f2:2e:ef: 23:b1:1d:5d:a4:f8:52:3c:e5:e1:d1:d5:c1:66:8f: b7:87:06:50:6c:48:b8:b8:5d:92:1b:3a:71:77:89: 78:98:74:e1:28:d3:60:1f:4f:2e:83:00:73:7b:64: 8c:fb:56:5c:bb:dd:7c:11:7e:cc:53:d9:5f:e7:d0: 55:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AA:3E:6B:C6:FE:A6:D2:57:BD:E4:86:6B:B9:97:6B:E5:24:6C:14 X509v3 Authority Key Identifier: keyid:7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:74:fd:2f:90:9d:4c:2e:19:a2:da:49:5d:82:97:93:9a:c9: 5a:3b:46:af:d1:fe:fc:37:c1:57:e8:b2:e5:c4:1d:ad:9c:ee: f1:b2:aa:f6:0a:0d:d0:27:0a:db:ec:7e:1a:9d:53:b9:a5:9b: 3e:b9:1a:8e:c5:54:f9:e7:50:3e:28:bc:77:40:c6:91:62:d5: 28:37:d4:40:fe:af:e5:96:86:39:ca:b3:5d:15:3e:70:96:b8: f7:ab:b3:6e:3c:cf:51:d0:f6:75:92:9f:85:4f:93:4c:04:5f: ba:ab:f4:97:f5:a1:f7:af:9e:97:14:66:d1:b0:97:bd:7c:22: 01:6c:fe:60:b0:c4:68:b4:b5:0c:64:0f:8b:03:4d:19:cc:e1: 4d:1a:c7:5f:b5:8b:10:bb:7d:04:8e:4e:2c:f4:7c:2b:57:2d: f0:21:a8:f1:58:dc:66:85:fc:e4:c4:14:88:f5:c5:7c:6a:d3: e9:71:78:c0:b7:e5:fe:85:16:97:70:cc:3b:bf:6e:91:fc:df: 1e:65:30:60:4b:d7:e7:e7:29:59:f8:4d:df:34:d9:8f:3b:f1: 52:50:f4:78:05:c0:ca:01:9a:81:f7:79:a2:12:73:09:7c:7f: 2d:01:d4:73:dc:5b:6b:9d:40:82:d6:2d:11:10:60:8e:cb:4c: 26:50:82:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTQ1MTExMC8GA1UEBRMoN0I3NEZCMzIyNjY2OTI3NjU0RjFGQTFFQzhCNzA5QzMw NTM1NTBFMzAeFw0yNjAxMjMwNjUzMzFaFw0yNjAxMzAwNjUzMzFaMBgxFjAUBgNV BAMMDTY5NzMxYWVjLTY0YjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0NmnGU120PHv9nz/SXaH11fZR3XWeZybXv7tX1Opttmem5fFX+wab27yMfO2q dgKXmcx3PrbTWOzdtQZkUjiqU2+jxe9P964dYzJyQFxLaH5n4pbao5YlKorRPVqM EvDhAM/dZfMNpgdS2NmAuZMtlKBpBVAv/tEJUgbh6bmXwhMyMDU1Qt3bJe85VL/3 a6hWieX8vOVeV82z/Xp2VvbfTWDl/Y9bxPfLpAGiSBySW4j6K6YCb+N60TXylZ/Y 2PIu7yOxHV2k+FI85eHR1cFmj7eHBlBsSLi4XZIbOnF3iXiYdOEo02AfTy6DAHN7 ZIz7Vly73XwRfsxT2V/n0FVlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhKo+a8b+ ptJXveSGa7mXa+UkbBQwHwYDVR0jBBgwFoAUe3T7MiZmknZU8foeyLcJwwU1UOMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxNDUxLzJFN0ExREJBQ0Y5 RjExRjA4ODAzNUEwQkM0RjlBRTAyL2UzVDdNaVpta25aVThmb2V5TGNKd3dVMVVP TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZTNUN01pWm1rblpVOGZvZXlMY0p3d1UxVU9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx NDUxLzJFN0ExREJBQ0Y5RjExRjA4ODAzNUEwQkM0RjlBRTAyL2UzVDdNaVpta25a VThmb2V5TGNKd3dVMVVPTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB10/S+QnUwuGaLaSV2Cl5OayVo7Rq/R/vw3wVfosuXEHa2c7vGyqvYK DdAnCtvsfhqdU7mlmz65Go7FVPnnUD4ovHdAxpFi1Sg31ED+r+WWhjnKs10VPnCW uPers248z1HQ9nWSn4VPk0wEX7qr9Jf1ofevnpcUZtGwl718IgFs/mCwxGi0tQxk D4sDTRnM4U0ax1+1ixC7fQSOTiz0fCtXLfAhqPFY3GaF/OTEFIj1xXxq0+lxeMC3 5f6FFpdwzDu/bpH83x5lMGBL1+fnKVn4Td802Y878VJQ9HgFwMoBmoH3eaIScwl8 fy0B1HPcW2udQILWLREQYI7LTCZQgvY= -----END CERTIFICATE-----Generated at Sun Jan 25 06:08:36 2026 by rpki-client