This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft File: RtfjskJlD3X4XEWBNYWNzYyZwgM.mft (raw, json) Hash identifier: Rbr73wMovAKDDQpGHmNrNiyCxmEgiut4GQd/i7n9mGQ= Subject key identifier: EC:97:18:9E:04:C0:9A:58:3D:B8:28:91:5F:C8:47:70:57:77:B2:AD Authority key identifier: 46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03 Certificate issuer: /CN=A91F3989/serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft Manifest number: 0154 Signing time: Sun 25 Jan 2026 03:25:29 +0000 Manifest this update: Sun 25 Jan 2026 03:25:28 +0000 Manifest next update: Sun 01 Feb 2026 03:25:28 +0000 Files and hashes: 1: RtfjskJlD3X4XEWBNYWNzYyZwgM.crl (hash: Odh0ObdZ8al56OM7LULM6mqbFeHd2wEIiYMegIjc7uM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989, serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203 Validity Not Before: Jan 25 03:25:28 2026 GMT Not After : Feb 1 03:25:28 2026 GMT Subject: CN=69758d28-ccbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ea:05:9b:03:f0:0a:04:cc:ea:1c:c7:3a:62: 90:26:ae:63:3b:80:a2:d6:28:c4:dd:6e:46:01:be: 58:27:be:77:b1:2b:a5:52:03:57:3f:62:16:29:e3: 42:db:09:90:3c:b7:a0:2a:83:af:4f:8b:23:71:ac: 78:f0:a5:62:9e:1e:ac:0c:87:06:54:95:bd:24:c3: 47:74:4d:b3:f9:4d:37:73:ac:78:bd:20:c2:64:23: 3a:db:17:9a:39:e9:86:b0:fa:29:ac:72:45:aa:86: 74:8f:fa:92:9b:55:af:72:9a:2b:df:af:43:2a:cd: 84:46:eb:da:f0:ea:17:93:95:b7:89:eb:0d:40:fb: 1c:90:e5:9e:4c:48:d3:b0:4b:2c:83:41:83:b0:0f: fa:c0:20:42:71:3b:c2:74:34:ce:f0:d4:c4:71:b6: 43:8f:dd:0f:34:bc:32:38:8d:e8:d2:4e:6c:88:f1: 8f:39:ca:f9:d3:a5:15:87:84:fb:1d:81:e7:8f:2f: 4f:90:2b:b6:d9:6f:40:76:8b:c2:db:e6:ee:0e:ec: 68:67:96:58:96:73:fe:4a:a0:04:44:55:a5:09:de: 2a:bc:fc:15:bb:fd:7f:b2:66:30:56:85:56:4e:28: 9f:d5:42:8c:ac:db:28:6b:3c:72:0d:d2:5e:8f:6a: 75:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:97:18:9E:04:C0:9A:58:3D:B8:28:91:5F:C8:47:70:57:77:B2:AD X509v3 Authority Key Identifier: keyid:46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ab:c7:b3:f1:94:7a:d0:cb:39:af:2c:92:b9:d0:de:2b:d1: f3:c2:08:0e:ac:f9:79:28:0d:87:44:07:33:e3:c0:74:16:72: 2d:cd:e9:cc:55:2a:b3:0f:a6:2d:00:45:75:9f:15:fd:4f:b8: 07:c3:2a:35:69:57:3d:a3:c0:c9:bc:d1:b3:22:a1:bc:a2:c0: ca:cb:b7:f4:43:f4:37:80:f3:01:42:0e:83:fc:db:de:cc:62: eb:b0:6a:e9:7c:03:33:97:bd:4a:86:76:20:56:c6:ff:31:fa: 8e:a2:6b:a7:bd:ff:d8:59:25:2f:6b:72:fb:52:da:36:d1:aa: 69:54:c1:43:29:63:19:03:31:ac:7e:d8:f8:a3:ee:6f:8b:90: 5a:4a:a7:48:ef:91:f1:70:4e:e1:84:e1:61:23:8e:05:45:cd: 5a:2d:7e:7a:3d:cc:2d:7a:a5:69:7a:81:44:c9:4d:32:a3:7d: e8:16:c2:26:c2:2c:02:c9:cd:b8:2a:04:ec:6c:56:97:a7:ed: 02:6a:d5:69:6b:24:a4:b2:e7:eb:83:57:e5:23:2b:3b:87:cb: 46:8f:b9:3b:ba:9c:ed:cd:07:b6:92:3f:b8:24:48:80:e9:28: ad:03:6f:47:de:17:70:95:10:3c:55:44:b1:f2:fd:a6:58:ab: 13:ef:8e:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5ODkxMTAvBgNVBAUTKDQ2RDdFM0IyNDI2NTBGNzVGODVDNDU4MTM1ODU4RENE OEM5OUMyMDMwHhcNMjYwMTI1MDMyNTI4WhcNMjYwMjAxMDMyNTI4WjAYMRYwFAYD VQQDDA02OTc1OGQyOC1jY2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk+oFmwPwCgTM6hzHOmKQJq5jO4Ci1ijE3W5GAb5YJ753sSulUgNXP2IWKeNC 2wmQPLegKoOvT4sjcax48KVinh6sDIcGVJW9JMNHdE2z+U03c6x4vSDCZCM62xea OemGsPoprHJFqoZ0j/qSm1Wvcpor369DKs2ERuva8OoXk5W3iesNQPsckOWeTEjT sEssg0GDsA/6wCBCcTvCdDTO8NTEcbZDj90PNLwyOI3o0k5siPGPOcr506UVh4T7 HYHnjy9PkCu22W9AdovC2+buDuxoZ5ZYlnP+SqAERFWlCd4qvPwVu/1/smYwVoVW Tiif1UKMrNsoazxyDdJej2p1awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyXGJ4E wJpYPbgokV/IR3BXd7KtMB8GA1UdIwQYMBaAFEbX47JCZQ91+FxFgTWFjc2MmcID MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zQUFDMEU1OEVD RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9SdGZqc2tKbEQzWDRYRVdCTllXTnpZeVp3 Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J0Zmpza0psRDNYNFhFV0JOWVdOell5WndnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzk4OS8zQUFDMEU1OEVDRDAxMUVFOEEyMjRENDlDNEY5QUUwMi9SdGZqc2tKbEQz WDRYRVdCTllXTnpZeVp3Z00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHq8ez8ZR60Ms5ryySudDeK9HzwggOrPl5KA2HRAcz48B0FnItzenM VSqzD6YtAEV1nxX9T7gHwyo1aVc9o8DJvNGzIqG8osDKy7f0Q/Q3gPMBQg6D/Nve zGLrsGrpfAMzl71KhnYgVsb/MfqOomunvf/YWSUva3L7Uto20appVMFDKWMZAzGs ftj4o+5vi5BaSqdI75HxcE7hhOFhI44FRc1aLX56PcwteqVpeoFEyU0yo33oFsIm wiwCyc24KgTsbFaXp+0CatVpaySksufrg1flIys7h8tGj7k7upztzQe2kj+4JEiA 6SitA29H3hdwlRA8VUSx8v2mWKsT747q -----END CERTIFICATE-----Generated at Sun Jan 25 06:21:31 2026 by rpki-client