This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: BTMPqi4yf3P7z92dAnM2BUgU4aEoW3ZmQo5PcJNAglA= Subject key identifier: E0:8F:59:2D:FF:CA:EA:79:5B:EE:07:43:8F:DE:4E:C5:C5:4F:49:43 Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 05C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 057E Signing time: Sat 24 Jan 2026 22:40:01 +0000 Manifest this update: Sat 24 Jan 2026 22:40:00 +0000 Manifest next update: Sat 31 Jan 2026 22:40:00 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: PCkQ9RAJQ/pXUknXaBuDsKU1u8FDkXaOE2DUFGyORvY=) 2: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: ofRtHX/MKl5XIFnHo+xiQV/BMYeRiUmwlrnI4KBBFTU=) 3: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: tO89KC6SX/YI4kYIo5r9IqXP4sUugJ5kj9ybH7Ev/Ck=) 4: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: HkMdZ/7Zyl8/WVPS96RNyLCvOlQjm91vFX9iVmHYTgY=) 5: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: pFXUfU8J6+rawQvdZ0DzHycI68DJinKh4UA+nChrzC8=) 6: 905F258E24F211EEA0863328C4F9AE02.roa (hash: JFZr5fqj2WXrU9XCj8pCx90LDWf5PYcEkCopcpVaJPw=) 7: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: w2mL/fsYRB6MmS8ED2TzYNgHT6YJdEKc1P9Mt7Z0I6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1480 (0x5c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Jan 24 22:40:00 2026 GMT Not After : Jan 31 22:40:00 2026 GMT Subject: CN=69754a41-5b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f8:cb:87:e4:68:8c:b1:0e:d7:ab:65:9e:09: cc:8d:cf:3a:c2:3f:a9:29:19:02:0e:e4:c8:e5:52: 49:22:4b:6d:03:5e:4a:40:9b:8e:6d:dc:45:3b:a4: 11:18:98:9d:bc:8e:93:41:aa:bb:35:fb:f3:3e:df: b6:b5:ee:8e:d8:98:4b:62:94:71:f4:1d:9e:b8:06: 66:dd:cb:e3:81:33:eb:2e:1b:83:14:99:8d:c7:94: 37:67:09:bf:08:df:41:d8:9e:08:7e:8c:0d:06:ba: 3d:a3:8e:14:4d:94:9a:0d:8d:84:8e:1d:06:57:01: 2b:fd:bf:a9:78:64:06:4b:e8:78:e5:07:7c:82:1e: 62:bb:ef:af:63:2c:83:b7:ed:8d:f1:fc:12:92:2a: 3d:a2:e0:a9:be:f0:e6:08:0f:97:61:53:f0:be:3b: 04:ae:3f:ff:e7:0d:69:c3:df:d6:9a:99:d5:aa:0c: d3:7d:e2:2f:be:af:8f:d5:2e:1c:58:b1:dc:37:58: 91:9e:14:c5:87:64:2c:38:4b:1e:65:61:5e:1d:a8: b8:c1:32:14:4f:47:83:38:15:72:2a:04:7b:1d:04: d1:e1:3a:43:9f:c0:fe:0b:7a:c0:20:72:e1:2f:c1: 51:66:be:05:c2:46:8b:ad:d7:a8:83:6f:4e:b8:2a: 35:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8F:59:2D:FF:CA:EA:79:5B:EE:07:43:8F:DE:4E:C5:C5:4F:49:43 X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:3b:58:d6:95:91:75:01:c2:6f:7a:f6:c5:d5:d9:8f:76:5b: 9d:30:f1:ff:10:8a:23:c7:43:8a:dd:70:d8:ac:4f:48:b0:d1: a9:33:52:b7:14:67:49:55:bc:50:e9:62:c4:fc:be:69:8a:bf: 14:0d:23:31:a5:40:68:ee:c3:78:a7:1b:3f:b6:1b:e8:23:98: 32:fc:57:35:70:b1:de:72:ed:d4:d1:97:16:9f:e9:eb:cb:aa: 25:bf:d5:a5:c0:4f:79:6e:bf:8d:f8:88:1a:aa:6c:db:af:e3: 3b:54:b8:b4:17:64:43:6c:9f:14:80:0c:41:d2:90:94:68:6c: 2a:f9:46:76:4a:e2:3b:bd:85:ec:98:9a:79:70:61:cc:1f:9d: 9b:4f:83:ad:16:85:34:0d:c0:aa:01:98:1c:a4:ce:07:f1:e0: 24:f6:32:e3:7a:95:42:73:8b:a2:f6:cc:86:cb:30:8c:12:b3: e6:8f:b8:6b:b4:a0:46:a4:01:54:41:d7:f2:bb:30:6c:69:db: ec:69:14:66:16:11:9f:de:43:c2:7d:fd:fc:fa:02:c3:d8:f8: 85:4a:e8:48:9e:a0:c6:a9:a3:41:5b:b2:4c:cd:40:4b:70:99: 7d:9f:9c:43:2f:c0:90:cb:2f:59:4e:3d:b0:2a:08:f6:af:fa: 18:e4:f0:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjYwMTI0MjI0MDAwWhcNMjYwMTMxMjI0MDAwWjAYMRYwFAYD VQQDDA02OTc1NGE0MS01YjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/jLh+RojLEO16tlngnMjc86wj+pKRkCDuTI5VJJIkttA15KQJuObdxFO6QR GJidvI6TQaq7NfvzPt+2te6O2JhLYpRx9B2euAZm3cvjgTPrLhuDFJmNx5Q3Zwm/ CN9B2J4IfowNBro9o44UTZSaDY2Ejh0GVwEr/b+peGQGS+h45Qd8gh5iu++vYyyD t+2N8fwSkio9ouCpvvDmCA+XYVPwvjsErj//5w1pw9/WmpnVqgzTfeIvvq+P1S4c WLHcN1iRnhTFh2QsOEseZWFeHai4wTIUT0eDOBVyKgR7HQTR4TpDn8D+C3rAIHLh L8FRZr4FwkaLrdeog29OuCo1KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCPWS3/ yup5W+4HQ4/eTsXFT0lDMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7O1jWlZF1AcJvevbF1dmPdludMPH/EIojx0OK3XDYrE9IsNGpM1K3 FGdJVbxQ6WLE/L5pir8UDSMxpUBo7sN4pxs/thvoI5gy/Fc1cLHecu3U0ZcWn+nr y6olv9WlwE95br+N+Igaqmzbr+M7VLi0F2RDbJ8UgAxB0pCUaGwq+UZ2SuI7vYXs mJp5cGHMH52bT4OtFoU0DcCqAZgcpM4H8eAk9jLjepVCc4ui9syGyzCMErPmj7hr tKBGpAFUQdfyuzBsadvsaRRmFhGf3kPCff38+gLD2PiFSuhInqDGqaNBW7JMzUBL cJl9n5xDL8CQyy9ZTj2wKgj2r/oY5PAY -----END CERTIFICATE-----Generated at Sun Jan 25 20:07:12 2026 by rpki-client