This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft File: N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft (raw, json) Hash identifier: SnkTZ5NTkcHW+3TfFcIxTe5MrOLgGyIzxTmoKgF5E6w= Subject key identifier: 52:93:45:29:D1:1F:2E:92:88:61:FB:D3:AC:16:DC:76:11:29:E3:0D Authority key identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB Certificate issuer: /CN=A91F3256/serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft Manifest number: 15 Signing time: Fri 23 Jan 2026 06:58:04 +0000 Manifest this update: Fri 23 Jan 2026 06:58:03 +0000 Manifest next update: Fri 30 Jan 2026 06:58:03 +0000 Files and hashes: 1: N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl (hash: wjJtu+zgaTL2hrT2yZbTqTM5mMGeukozqHRXH9ZTGoQ=) 2: 33EB881ED9A011F08EC1CA9167D3641D.roa (hash: 9y0iXHRShul2Weaui/QHA5FE1MQsTrAU5mMVd8q+b7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3256, serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB Validity Not Before: Jan 23 06:58:03 2026 GMT Not After : Jan 30 06:58:03 2026 GMT Subject: CN=69731bfc-803d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:40:23:4c:2f:73:d4:3a:98:9a:34:01:f6: a4:e7:5d:9b:cb:72:b7:49:bd:00:c7:58:05:d4:d7: f7:d8:22:91:9d:87:8c:4a:0f:a7:ed:d3:34:3b:24: c3:22:1e:0d:09:37:ec:5a:ee:ad:a4:20:7c:45:ec: 67:bf:57:f1:b0:ee:83:4a:f3:9b:93:f4:77:33:4d: 97:ca:eb:4a:3d:2b:0b:c0:b9:ed:3e:2c:a6:ae:d3: 57:45:bf:ec:94:e2:ca:ba:9a:15:56:b9:b0:c9:56: 37:12:a0:74:b8:a1:a2:92:13:6e:48:b7:9a:6d:40: ad:de:75:09:56:34:f1:7d:c4:b7:de:9e:7d:45:6b: e5:b9:e9:0b:2c:bf:7f:ba:8d:50:d8:e8:51:99:7b: 34:8d:81:c2:2d:0f:46:55:2a:10:39:b4:3a:ca:c6: 64:4b:60:c2:ea:f8:29:ad:fb:e6:0d:2e:e1:f4:e5: b2:7f:cf:81:6d:d9:2f:c5:aa:96:92:7f:dc:1d:67: 76:08:5a:91:54:89:6a:cb:26:e8:d3:17:ae:21:a3: 10:4e:7d:32:1c:d4:99:e5:83:c4:7c:39:0f:1a:71: 35:d1:2a:b3:2e:8b:ae:ce:f4:ff:7e:b8:66:55:19: 16:3b:7e:a0:78:c2:6b:65:83:d8:29:79:53:7d:6f: c7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:93:45:29:D1:1F:2E:92:88:61:FB:D3:AC:16:DC:76:11:29:E3:0D X509v3 Authority Key Identifier: keyid:37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b1:ff:0b:63:64:cf:e9:31:ad:1e:f7:a4:ed:d3:7e:da:eb: a8:b2:b3:42:74:40:2b:c2:92:96:8c:f0:c8:c9:40:f1:50:00: dc:9a:67:a4:79:36:7a:f8:70:4d:a1:e3:da:0a:21:a3:99:40: 8c:5c:ed:37:03:11:02:8c:75:46:35:26:d1:00:1d:0b:c4:8a: d4:a3:72:29:5a:c6:06:77:bd:97:41:d5:85:3c:09:ad:91:8c: e9:5d:99:62:32:1c:cc:ba:e4:f8:34:43:38:45:56:05:c2:42: ca:f7:32:e1:c6:d7:e7:72:08:9e:0c:ac:d9:35:c4:6f:4d:9f: 49:f4:28:35:d7:da:dd:91:90:89:49:6a:4b:45:e3:b5:65:a7: f4:50:67:c2:d6:cb:a2:e1:09:8f:91:69:be:86:f4:89:a4:93: f0:12:3d:7c:f3:19:74:69:8d:5f:ea:9f:77:dd:3e:5c:29:d1: 3c:aa:f1:81:d8:66:35:01:ac:19:fe:43:ff:8e:99:b6:de:cb: 95:32:17:48:c9:69:8d:1a:88:aa:32:bb:0c:b7:91:64:0e:7d: 62:f5:5c:b6:3d:08:f0:92:68:ad:e9:a6:8c:65:e4:1c:d4:7a: 50:ff:45:0e:c8:49:87:94:35:a4:45:48:95:96:14:9c:fe:cc: 0a:6c:1a:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzI1NjExMC8GA1UEBRMoMzdDRDlCQjA4NkVGMEFGNUEzMkJEODg1NDc0Njg2ODA2 RDkwOTZGQjAeFw0yNjAxMjMwNjU4MDNaFw0yNjAxMzAwNjU4MDNaMBgxFjAUBgNV BAMMDTY5NzMxYmZjLTgwM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyj0AjTC9z1DqYmjQB9qTnXZvLcrdJvQDHWAXU1/fYIpGdh4xKD6ft0zQ7JMMi Hg0JN+xa7q2kIHxF7Ge/V/Gw7oNK85uT9HczTZfK60o9KwvAue0+LKau01dFv+yU 4sq6mhVWubDJVjcSoHS4oaKSE25It5ptQK3edQlWNPF9xLfenn1Fa+W56Qssv3+6 jVDY6FGZezSNgcItD0ZVKhA5tDrKxmRLYMLq+Cmt++YNLuH05bJ/z4Ft2S/FqpaS f9wdZ3YIWpFUiWrLJujTF64hoxBOfTIc1Jnlg8R8OQ8acTXRKrMui67O9P9+uGZV GRY7fqB4wmtlg9gpeVN9b8evAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUpNFKdEf LpKIYfvTrBbcdhEp4w0wHwYDVR0jBBgwFoAUN82bsIbvCvWjK9iFR0aGgG2Qlvsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMjU2LzFCNTVENzM4RDk5 RjExRjA5N0VGQkVGOTY2RDM2NDFEL044MmJzSWJ2Q3ZXaks5aUZSMGFHZ0cyUWx2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjgyYnNJYnZDdldqSzlpRlIwYUdnRzJRbHZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MjU2LzFCNTVENzM4RDk5RjExRjA5N0VGQkVGOTY2RDM2NDFEL044MmJzSWJ2Q3ZX aks5aUZSMGFHZ0cyUWx2cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAImx/wtjZM/pMa0e96Tt037a66iys0J0QCvCkpaM8MjJQPFQANyaZ6R5 Nnr4cE2h49oKIaOZQIxc7TcDEQKMdUY1JtEAHQvEitSjcilaxgZ3vZdB1YU8Ca2R jOldmWIyHMy65Pg0QzhFVgXCQsr3MuHG1+dyCJ4MrNk1xG9Nn0n0KDXX2t2RkIlJ aktF47Vlp/RQZ8LWy6LhCY+Rab6G9Imkk/ASPXzzGXRpjV/qn3fdPlwp0Tyq8YHY ZjUBrBn+Q/+Ombbey5UyF0jJaY0aiKoyuwy3kWQOfWL1XLY9CPCSaK3ppoxl5BzU elD/RQ7ISYeUNaRFSJWWFJz+zApsGlY= -----END CERTIFICATE-----Generated at Sun Jan 25 02:48:31 2026 by rpki-client