This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft File: Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft (raw, json) Hash identifier: s6MJ8Ap1tTnft2srDfkBwbsBAUMPVyeExjFO9ehhFiI= Subject key identifier: 02:99:C2:2A:DE:35:00:5C:D5:F3:54:22:5A:63:3E:09:4E:8A:84:E4 Authority key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7 Certificate issuer: /CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7 Certificate serial: 0A3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft Manifest number: 0A32 Signing time: Sat 24 Jan 2026 19:11:33 +0000 Manifest this update: Sat 24 Jan 2026 19:11:33 +0000 Manifest next update: Sat 31 Jan 2026 19:11:33 +0000 Files and hashes: 1: Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl (hash: 3+CsIfqOFWtSXrQuDkSxrHIUoVvPOC80PIscHOVj+LE=) 2: 401EA996B5B511EABB640052C4F9AE02.roa (hash: WIfEILLO3ZbLl/lffoMAurh+q1z7U259glTs8CGzWmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2618 (0xa3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E7D, serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7 Validity Not Before: Jan 24 19:11:33 2026 GMT Not After : Jan 31 19:11:33 2026 GMT Subject: CN=69751965-6b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:91:95:e2:26:84:a2:11:7d:09:72:49:ec:e5: d1:94:06:77:ca:17:19:8b:fa:d9:5f:3c:ca:d1:88: 18:e3:84:3e:75:82:06:b2:62:80:8b:49:e2:fa:46: 24:22:ee:2b:ae:4e:a3:ad:6c:44:f4:71:f5:60:f4: c3:6f:6c:58:2a:34:6f:20:e8:0d:52:e5:d0:04:2d: f5:44:5c:f9:1a:db:23:62:5d:a2:c9:aa:b2:a9:31: de:47:a3:33:ca:9f:8a:54:9e:c5:f2:b8:c0:22:38: e8:3d:1a:ff:3d:c1:b7:32:ba:98:5f:51:26:7e:ae: 5e:bc:a2:c6:a5:4e:de:8d:01:4b:c5:cc:ab:73:82: 22:ab:50:b2:b0:21:8e:7d:93:02:8a:77:01:f1:90: 1b:1e:b9:11:41:da:94:65:cd:36:2a:11:16:64:62: f6:2f:4d:e5:7e:63:a4:5e:dc:e9:2d:4b:c4:99:e4: 9a:2b:45:6a:d1:6c:bc:56:65:ca:fa:f4:fa:c0:3e: 89:00:45:38:5a:f8:00:69:3f:d8:5f:e4:a0:8b:22: 2e:76:80:c4:17:be:6a:36:41:d2:6b:b9:07:0b:34: b5:49:8b:47:06:31:a1:ba:50:6f:ba:b8:79:fa:44: c6:fc:d1:8e:46:52:e5:8c:4d:29:fd:58:2a:c9:07: 7c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:99:C2:2A:DE:35:00:5C:D5:F3:54:22:5A:63:3E:09:4E:8A:84:E4 X509v3 Authority Key Identifier: keyid:06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:82:05:63:60:16:5e:fd:7c:42:b0:b1:ec:3e:74:07:06:53: e7:45:03:56:f2:3d:34:ef:8e:ea:ef:b0:59:d9:ce:58:60:dd: 54:ac:b8:f1:c3:42:4b:76:db:02:13:3b:bc:84:44:64:ac:8c: 74:07:10:77:a7:62:2a:30:31:25:e7:96:9d:ca:99:7c:4c:eb: 2f:1d:a2:e0:4d:f5:1b:c1:a6:4e:24:54:53:e7:2e:80:ba:45: 5c:36:fe:e1:2c:74:33:44:2b:ee:b9:12:f0:f0:ea:d5:28:54: d9:e3:53:71:55:d3:cf:f2:cb:a1:94:3d:c4:67:0f:c0:ad:b8: 7d:22:74:be:9d:a8:50:98:45:a0:e6:73:aa:3e:18:7d:b2:c6: fb:3a:e6:84:04:20:b0:71:fc:3c:56:2b:73:24:1b:c7:f7:d9: cd:83:a7:8b:2e:2c:de:10:87:4b:9f:77:ab:cd:8a:8d:54:7c: 84:27:3e:d2:cf:57:56:92:c2:8c:d6:31:85:81:c2:c3:17:78: d0:90:5c:da:99:75:96:43:5a:d2:6a:72:c0:eb:bb:64:6d:d1: a9:b6:a9:11:43:2a:60:0c:a3:66:57:f5:5a:89:9e:8b:c4:9a: 1a:f2:22:58:23:29:75:2f:72:cf:37:b5:02:f3:6b:01:ec:d8: 09:09:c9:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RjZFN0QxMTAvBgNVBAUTKDA2REY1MkQyOTE1MDNEMEUyQjExNzJEMzg1QzJCMTg3 Nzk0Qzc5QzcwHhcNMjYwMTI0MTkxMTMzWhcNMjYwMTMxMTkxMTMzWjAYMRYwFAYD VQQDDA02OTc1MTk2NS02YjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypGV4iaEohF9CXJJ7OXRlAZ3yhcZi/rZXzzK0YgY44Q+dYIGsmKAi0ni+kYk Iu4rrk6jrWxE9HH1YPTDb2xYKjRvIOgNUuXQBC31RFz5GtsjYl2iyaqyqTHeR6Mz yp+KVJ7F8rjAIjjoPRr/PcG3MrqYX1Emfq5evKLGpU7ejQFLxcyrc4Iiq1CysCGO fZMCincB8ZAbHrkRQdqUZc02KhEWZGL2L03lfmOkXtzpLUvEmeSaK0Vq0Wy8VmXK +vT6wD6JAEU4WvgAaT/YX+SgiyIudoDEF75qNkHSa7kHCzS1SYtHBjGhulBvurh5 +kTG/NGORlLljE0p/VgqyQd84QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKZwire NQBc1fNUIlpjPglOioTkMB8GA1UdIwQYMBaAFAbfUtKRUD0OKxFy04XCsYd5THnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU3RC8xNzU5RTRDODgz ODExMUVBQUNCOUJDMzBDNEY5QUUwMi9CdDlTMHBGUVBRNHJFWExUaGNLeGgzbE1l Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J0OVMwcEZRUFE0ckVYTFRoY0t4aDNsTWVjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU3RC8xNzU5RTRDODgzODExMUVBQUNCOUJDMzBDNEY5QUUwMi9CdDlTMHBGUVBR NHJFWExUaGNLeGgzbE1lY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKggVjYBZe/XxCsLHsPnQHBlPnRQNW8j00747q77BZ2c5YYN1UrLjx w0JLdtsCEzu8hERkrIx0BxB3p2IqMDEl55adypl8TOsvHaLgTfUbwaZOJFRT5y6A ukVcNv7hLHQzRCvuuRLw8OrVKFTZ41NxVdPP8suhlD3EZw/Arbh9InS+nahQmEWg 5nOqPhh9ssb7OuaEBCCwcfw8VitzJBvH99nNg6eLLizeEIdLn3erzYqNVHyEJz7S z1dWksKM1jGFgcLDF3jQkFzamXWWQ1rSanLA67tkbdGptqkRQypgDKNmV/VaiZ6L xJoa8iJYIyl1L3LPN7UC82sB7NgJCcmj -----END CERTIFICATE-----Generated at Sun Jan 25 23:10:24 2026 by rpki-client