This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft File: 2S2tTXbh9aAmwn8tuRxE-62OSHw.mft (raw, json) Hash identifier: ZTBW5uQswYYiwTSHbrXwiUHrr6IsGB1p4g8afprWp5g= Subject key identifier: 4F:98:11:47:5F:C0:B5:1E:D2:9F:65:99:55:E3:60:E5:EF:5C:AC:6E Authority key identifier: D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C Certificate issuer: /CN=A91F5143/serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Certificate serial: 0EA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft Manifest number: 0E97 Signing time: Sat 24 Jan 2026 17:23:14 +0000 Manifest this update: Sat 24 Jan 2026 17:23:14 +0000 Manifest next update: Sat 31 Jan 2026 17:23:14 +0000 Files and hashes: 1: 2S2tTXbh9aAmwn8tuRxE-62OSHw.crl (hash: 5S6OufzyrY7BOPTdyuL3cPJsLIdadtrAmH4NkWQit5g=) 2: FBBFC6D8A86B11E9A1385758C4F9AE02.roa (hash: XTPvOUtwwqNSor3+lvQAUp+XHkA+OuKa7+XgiPm/si4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3744 (0xea0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5143, serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Validity Not Before: Jan 24 17:23:14 2026 GMT Not After : Jan 31 17:23:14 2026 GMT Subject: CN=69750002-a94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:be:b9:d4:a2:02:bb:da:ef:80:55:ea:8d:f7: 70:7f:d5:26:57:8c:b5:a1:eb:c3:77:fd:d8:4a:36: 07:d0:9b:12:56:dd:a6:85:0c:84:32:30:73:a3:b7: 98:a0:b9:6b:0e:7e:57:a5:8a:64:72:ee:5c:7d:a0: 8f:83:4f:d8:17:db:1c:7e:c6:7f:78:2b:e4:ee:3e: ee:ea:e9:05:5b:f0:af:72:56:75:fa:50:d5:23:ee: dc:ef:3c:0a:d4:74:24:01:36:c4:94:07:d2:e6:d7: 9f:64:4b:f1:95:bd:11:ea:de:3b:82:e5:f1:c7:f7: 1d:66:ac:a5:1b:01:87:2c:bd:9b:8a:44:e6:32:34: 55:34:4b:0a:96:6d:c3:0e:ef:7b:fb:54:5e:0c:6f: 3c:27:9d:16:d5:f3:f2:d5:d9:d1:64:8f:e9:50:14: e3:2b:8f:e8:44:52:34:2a:48:34:52:2e:1a:c5:23: 9f:36:eb:cf:50:6f:e5:0b:32:e3:26:e4:ee:81:fc: ec:8d:1c:88:fc:29:be:9a:3e:55:56:b8:fc:31:6a: a5:72:99:41:b7:d4:a7:8b:d0:4c:6e:c6:61:d3:5f: 33:af:a4:87:8a:0a:94:0f:73:a2:bc:05:f6:71:63: f8:50:37:27:72:5a:6d:a6:d2:8e:8e:62:ac:6c:ef: 83:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:98:11:47:5F:C0:B5:1E:D2:9F:65:99:55:E3:60:E5:EF:5C:AC:6E X509v3 Authority Key Identifier: keyid:D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:7b:a5:04:4a:47:ce:fd:02:ed:28:c9:ca:80:81:1f:33:2c: 5c:16:25:db:d0:e7:3e:e6:2c:58:57:5e:0c:33:41:31:11:c7: ba:e4:05:9a:52:a2:93:08:40:9d:d9:53:08:9e:4d:f3:d4:e6: 5e:b3:f4:29:21:9a:85:3d:31:a3:b8:5e:9e:c5:a7:24:25:a3: 08:43:14:f8:61:6f:fb:88:4a:30:fd:bf:1a:95:f5:74:93:19: 4c:a1:d6:81:b8:27:a4:fa:d2:e7:e1:5f:70:8f:61:44:f7:88: b5:0d:4d:18:72:24:ca:39:25:98:69:4e:f9:b3:39:f5:6e:21: aa:38:0e:de:39:86:8d:30:95:93:57:3e:d5:74:91:e9:7c:dd: 8c:4c:32:6f:62:c8:25:f4:57:a8:5b:9e:33:98:e9:49:45:0a: 51:58:77:4b:32:0a:ad:e5:05:0c:81:5d:31:69:cf:13:cb:3a: 11:37:b1:fd:39:e2:18:c8:f2:37:90:56:d7:5c:7d:5e:d0:4e: 94:e2:3c:68:47:13:13:75:ce:f2:38:b5:47:1c:4a:c9:d1:7c: b5:87:61:0d:42:6e:c1:ba:51:7a:58:53:05:55:96:68:ed:4e: e5:20:4d:40:a7:12:ae:3c:ee:8f:78:05:51:6f:01:18:ff:08: 08:65:fd:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUxNDMxMTAvBgNVBAUTKEQ5MkRBRDRENzZFMUY1QTAyNkMyN0YyREI5MUM0NEZC QUQ4RTQ4N0MwHhcNMjYwMTI0MTcyMzE0WhcNMjYwMTMxMTcyMzE0WjAYMRYwFAYD VQQDDA02OTc1MDAwMi1hOTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoL651KICu9rvgFXqjfdwf9UmV4y1oevDd/3YSjYH0JsSVt2mhQyEMjBzo7eY oLlrDn5XpYpkcu5cfaCPg0/YF9scfsZ/eCvk7j7u6ukFW/CvclZ1+lDVI+7c7zwK 1HQkATbElAfS5tefZEvxlb0R6t47guXxx/cdZqylGwGHLL2bikTmMjRVNEsKlm3D Du97+1ReDG88J50W1fPy1dnRZI/pUBTjK4/oRFI0Kkg0Ui4axSOfNuvPUG/lCzLj JuTugfzsjRyI/Cm+mj5VVrj8MWqlcplBt9Sni9BMbsZh018zr6SHigqUD3OivAX2 cWP4UDcnclptptKOjmKsbO+D+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+YEUdf wLUe0p9lmVXjYOXvXKxuMB8GA1UdIwQYMBaAFNktrU124fWgJsJ/LbkcRPutjkh8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTE0My8wREU5Rjc3NkE4 NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlhQW13bjh0dVJ4RS02Mk9T SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJTMnRUWGJoOWFBbXduOHR1UnhFLTYyT1NIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTE0My8wREU5Rjc3NkE4NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlh QW13bjh0dVJ4RS02Mk9TSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/e6UESkfO/QLtKMnKgIEfMyxcFiXb0Oc+5ixYV14MM0ExEce65AWa UqKTCECd2VMInk3z1OZes/QpIZqFPTGjuF6exackJaMIQxT4YW/7iEow/b8alfV0 kxlModaBuCek+tLn4V9wj2FE94i1DU0YciTKOSWYaU75szn1biGqOA7eOYaNMJWT Vz7VdJHpfN2MTDJvYsgl9FeoW54zmOlJRQpRWHdLMgqt5QUMgV0xac8TyzoRN7H9 OeIYyPI3kFbXXH1e0E6U4jxoRxMTdc7yOLVHHErJ0Xy1h2ENQm7BulF6WFMFVZZo 7U7lIE1ApxKuPO6PeAVRbwEY/wgIZf3B -----END CERTIFICATE-----Generated at Sun Jan 25 06:19:39 2026 by rpki-client