This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json) Hash identifier: KRlVJlMXkjzOMgAAzvnhQUZG6POhmqSyrq7lc9aL27g= Subject key identifier: 47:C8:3A:84:0D:5A:50:7B:7F:7D:1A:17:1C:17:36:7E:09:27:10:F0 Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft Manifest number: 0121 Signing time: Fri 23 Jan 2026 03:54:42 +0000 Manifest this update: Fri 23 Jan 2026 03:54:41 +0000 Manifest next update: Fri 30 Jan 2026 03:54:41 +0000 Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: wrBXKNIxXRmFzfxXhDAxk7N3V60x69QtGyb0zb4yCEQ=) 2: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: qmdWFHQgb/FyavVks32QvCevHJqLrQOjarXrPqP1+5k=) 3: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: dCvT4b0z62X987gdGn6TsNi85xvDVOk+zGBW49XWZoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 03:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Validity Not Before: Jan 23 03:54:41 2026 GMT Not After : Jan 30 03:54:41 2026 GMT Subject: CN=6972f102-225d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ad:08:23:91:4a:06:c5:e2:0d:3f:de:59:ea: da:07:28:38:ba:fd:16:e3:34:b0:48:b5:92:25:f2: ed:51:51:b7:34:41:56:d3:ea:93:9a:7f:ab:75:e4: 1f:63:20:55:2e:69:e8:1f:47:cb:e6:ff:20:d8:5b: bc:63:f0:20:9b:c9:a3:9d:00:10:23:29:5d:00:d2: f0:d1:70:d7:05:b7:9d:ae:42:52:e0:7e:57:6f:75: 05:8f:f0:bd:83:69:96:e8:7a:73:5a:eb:2c:99:8b: 37:ed:1e:8b:8c:7e:ff:52:1f:e1:2a:44:3f:e9:3c: 1c:1e:94:88:13:2f:ec:03:65:07:46:12:f2:08:4e: 4c:30:96:2f:f2:48:dd:eb:90:7a:16:3e:7e:f0:b9: 44:3f:18:b7:8f:b4:7e:a3:e3:63:24:5f:17:bc:77: 4e:d0:90:61:89:11:50:4d:74:59:e4:31:0c:65:9b: ec:c7:af:d7:30:43:be:a7:4a:f6:75:91:51:97:eb: 7a:11:88:b3:7c:a7:e0:d4:23:fb:f3:1a:3b:04:5c: 52:07:92:61:6a:f8:ca:82:25:db:31:b0:46:97:43: 30:e3:6f:4e:9b:29:b1:2b:ee:bf:3d:26:47:3a:62: 7e:ee:de:5e:99:b9:54:cb:e9:0d:ed:35:4d:9a:b9: 7f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C8:3A:84:0D:5A:50:7B:7F:7D:1A:17:1C:17:36:7E:09:27:10:F0 X509v3 Authority Key Identifier: keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:46:01:aa:29:ff:4e:7f:f3:02:ca:16:bf:30:1a:9f:b5:2c: b1:d9:2f:4f:e3:20:21:cb:cd:c7:e7:83:ca:f1:19:60:ac:e9: a8:d5:31:22:22:ac:ab:ef:94:0e:d1:a8:73:76:5c:ea:35:87: a1:c0:b9:9d:41:0c:45:1d:7a:82:d8:58:b2:ef:2c:8f:45:85: 12:ca:38:ec:9d:f4:bf:36:fa:ce:04:b9:8a:cf:92:04:c4:f5: 3e:2a:e5:9a:00:51:74:e9:a3:1c:32:ab:c7:b2:0e:7e:5a:4e: 88:1b:a6:54:93:4e:91:c6:d9:24:6d:e6:40:61:35:fc:71:a6: 3a:96:45:48:5b:4d:67:5d:01:66:ef:d9:f6:92:98:19:f0:04: 7f:5d:4a:85:80:91:96:4d:90:75:be:78:12:93:d5:fb:17:12: fc:10:5b:18:57:a7:08:c3:73:8c:81:91:ae:58:b8:33:6d:f0: dd:8a:10:41:a0:f1:06:d8:55:7f:47:dd:65:58:42:19:e3:15: ea:3b:23:b6:4c:50:63:b2:30:5a:05:5e:01:e2:fd:90:64:1c: 46:54:d3:ea:e9:81:7b:8e:71:a7:02:ae:ec:d3:5b:bb:3c:29: bc:5d:0b:ae:b7:29:76:7f:ed:c3:02:56:05:58:ef:b7:43:90: a4:24:ef:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NUMxMTAvBgNVBAUTKEQ2QzgwQzVEMzhBQTNGMTBEMUVCMEUxMzlCOUU0OTRF QkY2QzY0MjEwHhcNMjYwMTIzMDM1NDQxWhcNMjYwMTMwMDM1NDQxWjAYMRYwFAYD VQQDDA02OTcyZjEwMi0yMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAya0II5FKBsXiDT/eWeraByg4uv0W4zSwSLWSJfLtUVG3NEFW0+qTmn+rdeQf YyBVLmnoH0fL5v8g2Fu8Y/Agm8mjnQAQIyldANLw0XDXBbedrkJS4H5Xb3UFj/C9 g2mW6HpzWussmYs37R6LjH7/Uh/hKkQ/6TwcHpSIEy/sA2UHRhLyCE5MMJYv8kjd 65B6Fj5+8LlEPxi3j7R+o+NjJF8XvHdO0JBhiRFQTXRZ5DEMZZvsx6/XMEO+p0r2 dZFRl+t6EYizfKfg1CP78xo7BFxSB5JhavjKgiXbMbBGl0Mw429OmymxK+6/PSZH OmJ+7t5emblUy+kN7TVNmrl/wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfIOoQN WlB7f30aFxwXNn4JJxDwMB8GA1UdIwQYMBaAFNbIDF04qj8Q0esOE5ueSU6/bGQh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Qy81QkM2M0VGNDQw NjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4RFI2dzRUbTU1SlRyOXNa Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Qy81QkM2M0VGNDQwNjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4 RFI2dzRUbTU1SlRyOXNaQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3RgGqKf9Of/MCyha/MBqftSyx2S9P4yAhy83H54PK8RlgrOmo1TEi Iqyr75QO0ahzdlzqNYehwLmdQQxFHXqC2Fiy7yyPRYUSyjjsnfS/NvrOBLmKz5IE xPU+KuWaAFF06aMcMqvHsg5+Wk6IG6ZUk06RxtkkbeZAYTX8caY6lkVIW01nXQFm 79n2kpgZ8AR/XUqFgJGWTZB1vngSk9X7FxL8EFsYV6cIw3OMgZGuWLgzbfDdihBB oPEG2FV/R91lWEIZ4xXqOyO2TFBjsjBaBV4B4v2QZBxGVNPq6YF7jnGnAq7s01u7 PCm8XQuutyl2f+3DAlYFWO+3Q5CkJO/2 -----END CERTIFICATE-----Generated at Sun Jan 25 04:32:08 2026 by rpki-client