This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft File: MhTiYKePfRZ36DATfBBlcwAxz2Y.mft (raw, json) Hash identifier: bDFDwZ88hDzqyG3xdFbCpgcZWz9afyojVc+d84JGnk8= Subject key identifier: 85:35:CC:CE:10:F8:CD:CB:8D:46:3D:41:77:A9:65:3B:B0:B8:92:CC Authority key identifier: 32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66 Certificate issuer: /CN=A91F8981/serialNumber=3214E260A78F7D1677E830137C1065730031CF66 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft Manifest number: 0103 Signing time: Sun 25 Jan 2026 04:19:41 +0000 Manifest this update: Sun 25 Jan 2026 04:19:40 +0000 Manifest next update: Sun 01 Feb 2026 04:19:40 +0000 Files and hashes: 1: MhTiYKePfRZ36DATfBBlcwAxz2Y.crl (hash: acvFXERFszN4KDZiZl6zLPqIwc+F0EolVF1i5w1tUtc=) 2: D80D96066C7F11EF92105459C4F9AE02.roa (hash: OkcwSLx62N14Khc7pixM+04Kss5uqBIS1Fg1GMXXo9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8981, serialNumber=3214E260A78F7D1677E830137C1065730031CF66 Validity Not Before: Jan 25 04:19:40 2026 GMT Not After : Feb 1 04:19:40 2026 GMT Subject: CN=697599dd-3173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c4:d7:3b:d2:26:2e:83:cc:af:b7:d7:d3:34: e2:c6:17:94:6d:d5:b3:e1:7a:c1:a5:78:c4:d2:aa: 6e:fc:d8:5a:c7:54:7b:cc:ec:54:d5:86:6a:50:f2: ca:17:d9:06:b6:00:7c:bf:f9:90:28:17:b4:99:3f: 45:82:50:db:fa:c3:db:d5:44:b1:f3:c0:3a:f5:a1: 22:a2:df:60:84:d0:ba:38:5b:d8:dc:45:fc:60:32: 01:d9:76:24:49:24:27:14:ad:c6:38:83:d5:df:e8: 5f:48:10:7b:b3:ab:91:38:13:51:e0:42:61:be:ce: 11:5d:5d:32:51:98:bf:65:6f:fe:e0:cb:07:94:3a: da:8e:c0:2b:17:5d:19:cd:93:84:9f:71:c0:17:8c: 5f:9a:49:33:8c:7f:dc:84:b2:ff:bf:41:3f:cd:13: b8:d8:d4:2f:6d:8a:97:db:2f:57:d5:7f:5d:4d:5d: 6c:cf:d0:55:cb:55:82:77:73:74:d1:9c:02:f2:cf: 56:e6:56:31:92:c6:8c:8f:b0:14:64:20:b9:ab:b3: 8b:29:b9:31:68:39:0d:62:a2:be:45:47:f8:d0:7a: ab:6a:9f:3f:76:40:74:6c:99:96:28:47:eb:d6:74: 3f:95:b1:92:94:61:dc:33:54:f5:77:f7:fe:d9:e3: ae:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:35:CC:CE:10:F8:CD:CB:8D:46:3D:41:77:A9:65:3B:B0:B8:92:CC X509v3 Authority Key Identifier: keyid:32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:e7:11:7c:74:93:35:c4:53:f9:01:29:af:8a:32:fc:a4:32: c3:e6:c9:11:a9:66:5d:ee:9f:cc:4d:5a:76:b6:cd:bc:9a:1f: 5c:0f:ae:25:1e:45:f8:d2:69:77:a7:e0:3b:93:e9:4f:25:c0: f0:ff:84:7e:6c:6d:fb:43:6d:46:00:5d:57:1f:09:b9:b7:86: b3:ea:bd:fb:a6:30:fe:63:89:73:e8:76:3f:c5:4d:46:92:61: 4c:07:a0:e2:0a:a8:3e:8a:0d:4f:b1:67:ec:05:db:9a:34:c0: 80:13:22:da:92:3f:56:d2:d5:b0:62:30:44:c9:ba:1b:f3:07: df:74:50:84:17:c7:2a:7c:c2:c7:44:cd:e4:22:1a:69:0a:87: 66:71:34:a2:10:32:9d:5c:89:41:54:7f:50:6f:96:5f:08:9e: 26:8b:1c:44:48:3e:7f:30:f0:b8:1b:e9:dc:3e:d5:7d:25:ef: 0b:b9:2c:14:94:83:7f:f4:9d:18:20:0e:07:b9:c3:57:a6:4d: 63:07:c9:c7:d1:88:66:f1:22:0f:2a:35:57:aa:7f:ea:fa:4b: 43:2c:1a:f0:f9:88:69:42:0e:1d:f4:93:5c:65:5b:6d:20:ea: df:de:bb:5b:c1:e2:2b:15:71:28:d6:d6:dd:d5:08:84:d4:7a: b8:ec:38:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5ODExMTAvBgNVBAUTKDMyMTRFMjYwQTc4RjdEMTY3N0U4MzAxMzdDMTA2NTcz MDAzMUNGNjYwHhcNMjYwMTI1MDQxOTQwWhcNMjYwMjAxMDQxOTQwWjAYMRYwFAYD VQQDDA02OTc1OTlkZC0zMTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4MTXO9ImLoPMr7fX0zTixheUbdWz4XrBpXjE0qpu/Nhax1R7zOxU1YZqUPLK F9kGtgB8v/mQKBe0mT9FglDb+sPb1USx88A69aEiot9ghNC6OFvY3EX8YDIB2XYk SSQnFK3GOIPV3+hfSBB7s6uROBNR4EJhvs4RXV0yUZi/ZW/+4MsHlDrajsArF10Z zZOEn3HAF4xfmkkzjH/chLL/v0E/zRO42NQvbYqX2y9X1X9dTV1sz9BVy1WCd3N0 0ZwC8s9W5lYxksaMj7AUZCC5q7OLKbkxaDkNYqK+RUf40Hqrap8/dkB0bJmWKEfr 1nQ/lbGSlGHcM1T1d/f+2eOu/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIU1zM4Q +M3LjUY9QXepZTuwuJLMMB8GA1UdIwQYMBaAFDIU4mCnj30Wd+gwE3wQZXMAMc9m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk4MS8yNzJCNEM3MDZD N0YxMUVGOTE0RDdENTdDNEY5QUUwMi9NaFRpWUtlUGZSWjM2REFUZkJCbGN3QXh6 MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01oVGlZS2VQZlJaMzZEQVRmQkJsY3dBeHoyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk4MS8yNzJCNEM3MDZDN0YxMUVGOTE0RDdENTdDNEY5QUUwMi9NaFRpWUtlUGZS WjM2REFUZkJCbGN3QXh6MlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC5xF8dJM1xFP5ASmvijL8pDLD5skRqWZd7p/MTVp2ts28mh9cD64l HkX40ml3p+A7k+lPJcDw/4R+bG37Q21GAF1XHwm5t4az6r37pjD+Y4lz6HY/xU1G kmFMB6DiCqg+ig1PsWfsBduaNMCAEyLakj9W0tWwYjBEybob8wffdFCEF8cqfMLH RM3kIhppCodmcTSiEDKdXIlBVH9Qb5ZfCJ4mixxESD5/MPC4G+ncPtV9Je8LuSwU lIN/9J0YIA4HucNXpk1jB8nH0Yhm8SIPKjVXqn/q+ktDLBrw+YhpQg4d9JNcZVtt IOrf3rtbweIrFXEo1tbd1QiE1Hq47DjC -----END CERTIFICATE-----Generated at Sun Jan 25 07:49:41 2026 by rpki-client