This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft File: hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json) Hash identifier: 1VCWSbrp1BnZL8DpqN6tTcfNkleseMpnRTR0Cd+Xsvo= Subject key identifier: 00:77:C1:90:19:C7:48:8A:15:0B:BD:B2:92:11:73:7A:48:8C:37:03 Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 Certificate issuer: /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft Manifest number: 0135 Signing time: Sun 25 Jan 2026 03:42:43 +0000 Manifest this update: Sun 25 Jan 2026 03:42:43 +0000 Manifest next update: Sun 01 Feb 2026 03:42:43 +0000 Files and hashes: 1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: oQ4+f/JReWV0GBMqSfDLJNhTNS4yGEmfO44MsGX1M4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Validity Not Before: Jan 25 03:42:43 2026 GMT Not After : Feb 1 03:42:43 2026 GMT Subject: CN=69759133-fec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d2:a1:78:68:69:07:24:e7:dd:a4:5f:f4:4d: 5a:c5:4f:38:2f:be:d7:69:61:a5:0c:cd:78:f9:3e: 36:17:5f:d4:c3:2b:c9:19:6f:72:48:bc:7e:53:0b: 0c:e5:31:de:58:34:89:ff:1f:03:8c:54:bc:a3:6d: fc:7f:2e:b9:cd:cc:97:72:e4:36:12:e5:8a:b4:00: 6d:9d:85:ed:f4:fc:51:e9:0b:9b:5b:2e:3f:26:6c: 39:39:34:ff:19:27:c1:e2:d8:e1:33:9b:01:a9:3d: 66:0c:24:80:44:99:6d:a5:8a:40:3b:a9:97:6c:87: ee:a4:d6:fd:cf:5e:0a:70:24:bf:61:58:bf:60:60: 03:39:18:1c:41:a9:c4:7b:ae:19:fc:fd:c4:3e:58: c6:fd:c0:e1:2e:a6:c6:18:97:3f:a5:8f:d8:bc:33: 62:87:36:83:14:6c:f1:2a:52:fc:5d:3f:c2:98:e2: 11:57:2d:1a:9e:0c:38:49:19:9a:1a:83:17:77:6c: 43:b5:89:60:a4:25:98:8e:da:0f:93:a9:d1:ec:cf: 46:2e:53:b6:15:55:b2:5b:9d:b9:7f:a4:58:e8:a8: 97:66:f5:f9:61:fc:4b:b6:08:bc:8a:de:95:75:37: 49:13:23:be:57:88:60:f8:1e:a5:12:51:80:8e:43: 34:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:77:C1:90:19:C7:48:8A:15:0B:BD:B2:92:11:73:7A:48:8C:37:03 X509v3 Authority Key Identifier: keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ea:d1:37:a3:b2:60:d5:28:47:d7:28:43:aa:7f:73:42:6f: 2f:47:c1:81:73:fb:7b:6e:e9:3c:72:43:e6:42:10:3d:54:44: 72:55:ee:11:c6:3f:4e:6a:63:42:49:09:65:87:48:96:22:10: c9:9b:05:4a:eb:77:d1:89:a9:80:5f:64:81:bc:58:a6:a0:d8: 4a:ed:41:fe:62:8d:84:6c:d5:a7:34:3f:78:65:46:d6:9c:05: 0f:7a:ad:6c:5e:62:05:db:99:a0:dd:15:c5:03:0c:f6:3e:05: 1e:75:b4:bc:da:7d:15:c9:e4:54:b3:b8:53:f8:79:80:e5:a3: d1:05:82:ad:48:92:46:a8:fa:73:74:62:cc:80:dc:74:6a:7f: ec:8e:2d:4c:f5:26:41:8e:61:1b:ae:be:d8:78:a0:20:b5:b4: c9:dd:74:a6:ca:3d:91:9a:81:0b:d4:85:62:5c:2a:c9:d9:98: d1:cc:b4:3a:1a:c3:e6:99:99:6c:56:07:b6:35:d2:b6:8d:ba: 9e:f1:c4:e9:cc:49:05:df:c3:81:4c:10:85:45:37:a5:a3:b4: 62:c4:5f:2c:81:10:8d:cf:a2:65:eb:5f:53:be:ce:60:63:7f: 37:f6:0a:96:a3:71:83:ff:06:05:fa:f8:a5:29:ed:3d:5c:8f: 0c:a0:5d:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwOTExMTAvBgNVBAUTKDg0NTlGQjcyOTBENzRBOUJDRTI2MEUzRkFCNjA1RDdG RDgzMjQ5MzEwHhcNMjYwMTI1MDM0MjQzWhcNMjYwMjAxMDM0MjQzWjAYMRYwFAYD VQQDDA02OTc1OTEzMy1mZWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtKheGhpByTn3aRf9E1axU84L77XaWGlDM14+T42F1/UwyvJGW9ySLx+UwsM 5THeWDSJ/x8DjFS8o238fy65zcyXcuQ2EuWKtABtnYXt9PxR6QubWy4/Jmw5OTT/ GSfB4tjhM5sBqT1mDCSARJltpYpAO6mXbIfupNb9z14KcCS/YVi/YGADORgcQanE e64Z/P3EPljG/cDhLqbGGJc/pY/YvDNihzaDFGzxKlL8XT/CmOIRVy0angw4SRma GoMXd2xDtYlgpCWYjtoPk6nR7M9GLlO2FVWyW525f6RY6KiXZvX5YfxLtgi8it6V dTdJEyO+V4hg+B6lElGAjkM0WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAB3wZAZ x0iKFQu9spIRc3pIjDcDMB8GA1UdIwQYMBaAFIRZ+3KQ10qbziYOP6tgXX/YMkkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDA5MS82NTIxQTBGMDFE OUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNwdk9KZzRfcTJCZGY5Z3lT VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hGbjdjcERYU3B2T0pnNF9xMkJkZjlneVNURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDA5MS82NTIxQTBGMDFEOUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNw dk9KZzRfcTJCZGY5Z3lTVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr6tE3o7Jg1ShH1yhDqn9zQm8vR8GBc/t7buk8ckPmQhA9VERyVe4R xj9OamNCSQllh0iWIhDJmwVK63fRiamAX2SBvFimoNhK7UH+Yo2EbNWnND94ZUbW nAUPeq1sXmIF25mg3RXFAwz2PgUedbS82n0VyeRUs7hT+HmA5aPRBYKtSJJGqPpz dGLMgNx0an/sji1M9SZBjmEbrr7YeKAgtbTJ3XSmyj2RmoEL1IViXCrJ2ZjRzLQ6 GsPmmZlsVge2NdK2jbqe8cTpzEkF38OBTBCFRTelo7RixF8sgRCNz6Jl619Tvs5g Y3839gqWo3GD/wYF+vilKe09XI8MoF3Z -----END CERTIFICATE-----Generated at Sun Jan 25 18:29:35 2026 by rpki-client