This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft File: aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft (raw, json) Hash identifier: sCZguHAvX68GfsCADnqlZgdx/QITf4WwOsIvG22+mK8= Subject key identifier: B3:1D:A7:60:74:0C:7F:82:8E:78:AF:C3:54:5D:72:2E:49:A2:3A:CB Authority key identifier: 68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56 Certificate issuer: /CN=A91F231C/serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft Manifest number: 29 Signing time: Fri 23 Jan 2026 06:44:28 +0000 Manifest this update: Fri 23 Jan 2026 06:44:27 +0000 Manifest next update: Fri 30 Jan 2026 06:44:27 +0000 Files and hashes: 1: aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl (hash: vBSd+Z+b9YZ0yQEZgbM2IHvQXPGmt3j+2kVrmfkLRuA=) 2: 7F29585EC43011F09039384AC4F9AE02.roa (hash: 48zywXKMdCoecrzGBCo9/VsiO+sSg4SaJvOnw5Kh4Qo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F231C, serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56 Validity Not Before: Jan 23 06:44:27 2026 GMT Not After : Jan 30 06:44:27 2026 GMT Subject: CN=697318cc-9fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c2:97:06:7a:58:7b:13:24:2a:68:48:00:4b: 95:79:aa:68:bf:c7:e7:8a:6e:c6:53:b0:5e:ba:d6: 17:06:13:6d:03:a0:f0:ec:49:22:3b:da:32:8a:b1: a8:59:d6:7f:70:4f:6f:80:78:2c:11:fa:47:e9:e2: fa:47:fa:ad:81:2e:6a:1d:d7:fc:85:dc:ce:28:e1: 22:e8:e0:70:32:ee:f6:1d:18:73:63:c9:40:d7:ab: c6:a3:86:98:e6:f3:51:97:e1:d4:a7:1d:9c:57:9a: 5d:b4:41:c8:44:47:89:80:54:cc:e9:99:9f:35:d0: 42:b1:cb:d7:af:29:0f:64:07:f0:61:e7:e1:d5:df: 90:cb:99:2a:3b:64:5c:65:04:36:cd:fe:9a:c9:cf: 65:cf:d2:20:a0:79:98:87:1f:01:ff:32:f1:4b:dd: 51:61:c8:46:35:98:eb:a8:b0:85:47:a2:19:e7:c0: 01:50:77:c2:c0:9c:8a:70:9e:cd:55:91:a8:b2:83: 73:46:d1:5b:5a:73:cf:75:3e:4c:ab:b6:ec:2a:34: 93:cc:60:be:91:76:f2:30:31:3c:45:20:1d:6c:65: 48:11:43:9b:01:10:50:8c:97:a1:fc:45:81:43:2e: 69:d8:79:7a:01:ea:29:43:e2:dc:9b:f5:e4:a4:ec: 21:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1D:A7:60:74:0C:7F:82:8E:78:AF:C3:54:5D:72:2E:49:A2:3A:CB X509v3 Authority Key Identifier: keyid:68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:bb:46:8d:6f:61:a4:04:a5:af:3d:8a:17:03:73:02:91:ab: d8:ff:db:32:69:7f:f8:2b:7f:9b:b9:52:89:50:b4:dc:64:ee: f8:85:91:a2:98:da:3c:2d:d2:99:a6:3e:d0:e7:1d:cb:1d:ec: 33:27:c5:47:7e:7e:31:8a:a1:9c:fa:68:d2:38:34:5d:6b:ec: 2a:84:d7:e1:ad:45:da:64:ac:50:f2:ed:b3:26:62:64:fb:ef: e8:24:94:50:88:9c:77:ce:62:1f:0a:fc:a8:b1:af:d9:58:e1: 1a:01:65:81:61:38:02:07:03:f4:4d:79:15:9c:67:b5:6c:95: 71:65:a3:d0:e4:fe:11:ec:41:4b:69:68:df:12:31:94:cb:c7: e3:10:7f:a6:59:c4:15:9d:9a:46:1a:d7:ea:0e:34:cf:b0:5f: de:6e:a7:7e:97:23:64:f7:f4:14:4a:f6:e9:d5:62:4b:20:0e: 14:95:d1:65:76:55:8b:4d:b8:ba:e4:6a:e4:5b:81:7c:65:fa: 37:ad:e0:b1:12:0d:b1:a1:1e:4f:85:85:8f:84:32:34:9c:f0: 49:39:0f:b0:c6:4c:98:54:31:b9:4b:e8:27:b3:ac:cc:e3:dc: c4:5b:af:7b:05:3a:1f:cc:74:73:27:d6:e7:e0:63:62:25:a3: 2a:04:52:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MjMxQzExMC8GA1UEBRMoNjhEMTQ2NjQzMzk1ODQxNkREODFBN0Q0QUJGMkIyNDNF RTdEOEI1NjAeFw0yNjAxMjMwNjQ0MjdaFw0yNjAxMzAwNjQ0MjdaMBgxFjAUBgNV BAMMDTY5NzMxOGNjLTlmYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKwpcGelh7EyQqaEgAS5V5qmi/x+eKbsZTsF661hcGE20DoPDsSSI72jKKsahZ 1n9wT2+AeCwR+kfp4vpH+q2BLmod1/yF3M4o4SLo4HAy7vYdGHNjyUDXq8ajhpjm 81GX4dSnHZxXml20QchER4mAVMzpmZ810EKxy9evKQ9kB/Bh5+HV35DLmSo7ZFxl BDbN/prJz2XP0iCgeZiHHwH/MvFL3VFhyEY1mOuosIVHohnnwAFQd8LAnIpwns1V kaiyg3NG0Vtac891PkyrtuwqNJPMYL6RdvIwMTxFIB1sZUgRQ5sBEFCMl6H8RYFD LmnYeXoB6ilD4tyb9eSk7CFNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsx2nYHQM f4KOeK/DVF1yLkmiOsswHwYDVR0jBBgwFoAUaNFGZDOVhBbdgafUq/KyQ+59i1Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyMzFDLzI4RTgzRTZBQzQz MDExRjA5NkNFOUM0OUM0RjlBRTAyL2FORkdaRE9WaEJiZGdhZlVxX0t5US01OWkx WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYU5GR1pET1ZoQmJkZ2FmVXFfS3lRLTU5aTFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy MzFDLzI4RTgzRTZBQzQzMDExRjA5NkNFOUM0OUM0RjlBRTAyL2FORkdaRE9WaEJi ZGdhZlVxX0t5US01OWkxWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI67Ro1vYaQEpa89ihcDcwKRq9j/2zJpf/grf5u5UolQtNxk7viFkaKY 2jwt0pmmPtDnHcsd7DMnxUd+fjGKoZz6aNI4NF1r7CqE1+GtRdpkrFDy7bMmYmT7 7+gklFCInHfOYh8K/Kixr9lY4RoBZYFhOAIHA/RNeRWcZ7VslXFlo9Dk/hHsQUtp aN8SMZTLx+MQf6ZZxBWdmkYa1+oONM+wX95up36XI2T39BRK9unVYksgDhSV0WV2 VYtNuLrkauRbgXxl+jet4LESDbGhHk+FhY+EMjSc8Ek5D7DGTJhUMblL6CezrMzj 3MRbr3sFOh/MdHMn1ufgY2IloyoEUnc= -----END CERTIFICATE-----Generated at Sun Jan 25 06:12:44 2026 by rpki-client