This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft File: _DR_mfrUz-7KsxUhAkJ3GusIbXU.mft (raw, json) Hash identifier: Bjw7TgAGNMBCBVJY90/32vWKBlDMZwTTq2+XfR2poaQ= Subject key identifier: 95:31:F2:FF:85:D0:B2:C3:AE:BB:01:EE:CD:FE:74:7A:A0:58:A9:80 Authority key identifier: FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75 Certificate issuer: /CN=A91F7EFC/serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft Manifest number: 79 Signing time: Sun 25 Jan 2026 05:56:02 +0000 Manifest this update: Sun 25 Jan 2026 05:56:01 +0000 Manifest next update: Sun 01 Feb 2026 05:56:01 +0000 Files and hashes: 1: _DR_mfrUz-7KsxUhAkJ3GusIbXU.crl (hash: TieoRCyvPDkUmDbNfYUfi7GwLlxLkDj8gx6R0gQ3jqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7EFC, serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75 Validity Not Before: Jan 25 05:56:01 2026 GMT Not After : Feb 1 05:56:01 2026 GMT Subject: CN=6975b071-a7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:83:97:a0:30:21:06:2e:2c:68:76:53:53:0e: 8b:12:c1:8a:c6:f8:cb:ec:07:ca:8c:e1:4e:d0:e4: f5:d7:f1:90:91:a2:bd:28:0f:48:36:64:f9:cd:0b: 00:96:70:f7:6d:86:62:42:0a:d6:f1:b8:94:c8:95: c5:ab:5e:04:98:53:f2:08:73:e6:b8:64:aa:2b:ba: 91:5f:a1:b2:44:aa:ad:3a:0e:e9:c4:4b:b6:0b:e2: 08:0e:73:df:c5:fe:ea:58:d5:74:17:9f:1b:e9:8b: b9:35:20:ac:4b:3e:80:8a:49:4f:e3:4a:35:bf:46: ce:6f:41:96:bc:e4:18:3c:9c:00:20:85:41:b6:fb: e2:3d:cc:9e:5d:cd:bf:9c:ee:1b:55:12:3a:40:4c: 81:c3:87:0f:4f:ac:90:c4:9f:c7:82:a1:61:bd:53: ec:e8:4b:25:1e:72:92:4a:8c:3f:a0:4b:aa:e7:00: c7:17:22:48:dd:db:f0:2b:f9:80:72:49:50:f4:0a: fd:68:bd:4d:be:83:61:e3:dd:ad:73:f3:90:70:1c: 0c:dc:35:58:de:cb:6f:8d:47:3e:f5:4a:18:5b:43: bc:87:90:82:4e:d8:14:93:68:0a:f9:57:a7:f3:c4: c9:28:af:af:8d:10:88:e2:51:27:35:1d:ac:04:a4: 5c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:31:F2:FF:85:D0:B2:C3:AE:BB:01:EE:CD:FE:74:7A:A0:58:A9:80 X509v3 Authority Key Identifier: keyid:FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:f1:55:22:b4:07:51:0e:53:13:17:6a:a7:c6:f5:6b:fe:54: f0:9b:aa:b4:cc:40:da:2e:f9:b6:90:88:8e:44:41:c6:0e:f5: 35:dd:9a:1b:b3:f1:79:bd:e6:50:44:94:ad:81:af:af:61:ae: 0e:66:af:27:15:1c:c7:e2:6b:a5:15:33:2f:1a:18:d0:62:a7: 53:e3:2e:d1:1f:bd:80:f8:f5:a1:31:e7:ea:75:22:9e:85:77: f5:36:07:3f:c4:33:2b:8c:37:4e:36:09:85:f2:43:4b:61:1a: 62:b7:2a:6e:86:70:4e:c7:07:07:0f:cd:3d:e9:b2:f6:cd:9f: 30:34:1f:d0:c0:4f:b7:3d:4e:09:a5:1d:4b:ac:60:41:a1:52: 02:bc:0d:3b:c8:eb:bc:6f:8e:ba:f3:7d:4e:d2:97:1e:5d:a5: 05:cc:34:95:15:a8:e6:56:67:26:6c:79:48:90:0b:4d:ef:8d: 76:7e:9a:70:53:36:97:a8:7f:d6:24:1b:7e:dd:77:29:1a:13: 67:b2:e2:05:0b:9a:23:bb:ec:0c:74:1e:b0:98:8f:de:3c:e1: 29:ee:98:de:55:d1:e1:7a:4a:77:2b:0d:62:50:a4:28:be:45: 05:3e:51:82:2d:e9:7a:a6:a5:1d:05:a0:d3:e2:c2:c3:23:46: 7a:56:1e:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG N0VGQzExMC8GA1UEBRMoRkMzNDdGOTlGQUQ0Q0ZFRUNBQjMxNTIxMDI0Mjc3MUFF QjA4NkQ3NTAeFw0yNjAxMjUwNTU2MDFaFw0yNjAyMDEwNTU2MDFaMBgxFjAUBgNV BAMMDTY5NzViMDcxLWE3ZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4g5egMCEGLixodlNTDosSwYrG+MvsB8qM4U7Q5PXX8ZCRor0oD0g2ZPnNCwCW cPdthmJCCtbxuJTIlcWrXgSYU/IIc+a4ZKorupFfobJEqq06DunES7YL4ggOc9/F /upY1XQXnxvpi7k1IKxLPoCKSU/jSjW/Rs5vQZa85Bg8nAAghUG2++I9zJ5dzb+c 7htVEjpATIHDhw9PrJDEn8eCoWG9U+zoSyUecpJKjD+gS6rnAMcXIkjd2/Ar+YBy SVD0Cv1ovU2+g2Hj3a1z85BwHAzcNVjey2+NRz71ShhbQ7yHkIJO2BSTaAr5V6fz xMkor6+NEIjiUSc1HawEpFxRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlTHy/4XQ ssOuuwHuzf50eqBYqYAwHwYDVR0jBBgwFoAU/DR/mfrUz+7KsxUhAkJ3GusIbXUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3RUZDLzFEOTM4MkVDNDVC QzExRjBBQjk3Q0MwOUM0RjlBRTAyL19EUl9tZnJVei03S3N4VWhBa0ozR3VzSWJY VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0RSX21mclV6LTdLc3hVaEFrSjNHdXNJYlhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 RUZDLzFEOTM4MkVDNDVCQzExRjBBQjk3Q0MwOUM0RjlBRTAyL19EUl9tZnJVei03 S3N4VWhBa0ozR3VzSWJYVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFDxVSK0B1EOUxMXaqfG9Wv+VPCbqrTMQNou+baQiI5EQcYO9TXdmhuz 8Xm95lBElK2Br69hrg5mrycVHMfia6UVMy8aGNBip1PjLtEfvYD49aEx5+p1Ip6F d/U2Bz/EMyuMN042CYXyQ0thGmK3Km6GcE7HBwcPzT3psvbNnzA0H9DAT7c9Tgml HUusYEGhUgK8DTvI67xvjrrzfU7Slx5dpQXMNJUVqOZWZyZseUiQC03vjXZ+mnBT Npeof9YkG37ddykaE2ey4gULmiO77Ax0HrCYj9484SnumN5V0eF6SncrDWJQpCi+ RQU+UYIt6XqmpR0FoNPiwsMjRnpWHq4= -----END CERTIFICATE-----Generated at Sun Jan 25 15:24:17 2026 by rpki-client