This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft File: ta3-oXJ8Lu5Diq_TOObW5Reob84.mft (raw, json) Hash identifier: +aW6prafiA8aNV0L8Yk9IM0cNCgRNc75kRNS/Hwhnio= Subject key identifier: 2D:E6:A3:05:FC:B8:45:CF:5E:97:0B:C4:79:FF:F3:91:DD:EF:68:89 Authority key identifier: B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE Certificate issuer: /CN=A91FAB3C/serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft Manifest number: 5E Signing time: Fri 23 Jan 2026 06:10:27 +0000 Manifest this update: Fri 23 Jan 2026 06:10:26 +0000 Manifest next update: Fri 30 Jan 2026 06:10:26 +0000 Files and hashes: 1: ta3-oXJ8Lu5Diq_TOObW5Reob84.crl (hash: +pIQSpw3Xnd5i2t7OOuZjG/c98JNisnpKA6ZWvFPfVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB3C, serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE Validity Not Before: Jan 23 06:10:26 2026 GMT Not After : Jan 30 06:10:26 2026 GMT Subject: CN=697310d3-6a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:55:2a:23:fa:fd:b8:e9:5d:22:ad:3c:00:dc: 6b:67:ed:d8:39:fd:07:e8:9e:56:bf:dc:e4:68:8e: 55:90:f9:db:2f:c5:da:87:5c:b8:b6:2a:ca:65:72: a2:4b:98:e3:e7:e1:e1:61:b4:dd:dc:1b:a2:56:ee: 7f:f2:8e:ae:2a:7f:00:65:86:c8:fc:b7:10:85:93: 10:79:1b:e4:c8:2b:7e:81:47:66:40:48:d6:db:5e: f8:87:6f:f3:61:80:84:ca:e3:c1:9d:ed:a3:7a:19: ee:d5:2c:7b:6d:e2:ea:45:a7:e7:0d:23:01:fd:2a: 4c:8a:0b:41:7c:0a:5a:98:de:9a:e9:71:76:8f:8d: a2:9f:5f:5d:79:62:64:ed:1c:c6:a0:11:4a:a7:31: fa:b4:0c:33:7e:f1:9b:66:65:f2:67:f5:f0:bb:e8: 45:da:e3:77:4a:3a:3d:de:2f:f0:27:ad:fd:18:69: 7d:52:ec:c2:34:e6:40:dc:a3:3a:a7:72:37:ab:39: f7:95:b6:01:40:bb:3b:f2:3e:6a:d0:66:a8:7b:3a: a1:05:f4:98:91:e7:ca:2e:8e:b8:13:3f:1b:b2:56: 62:10:fe:db:8b:47:8d:f2:f2:98:2b:c3:b4:91:45: 55:0e:19:47:79:f2:78:b2:41:93:c1:a7:d5:e1:3f: 59:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E6:A3:05:FC:B8:45:CF:5E:97:0B:C4:79:FF:F3:91:DD:EF:68:89 X509v3 Authority Key Identifier: keyid:B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:6f:44:d5:48:ea:94:11:c8:d0:8a:6e:f4:08:c9:07:a2:91: f1:f4:72:39:fc:50:82:13:73:59:44:86:44:02:7a:a5:27:9f: f9:c9:b2:1a:fc:10:76:de:e4:b7:d1:e7:a3:f8:c1:38:59:a6: 83:81:fa:e7:f0:ce:00:5f:b9:26:8e:f5:65:64:c9:b1:35:bf: 7a:0f:cc:2a:01:ad:64:26:2b:b3:9a:c5:0d:66:11:ea:4e:fa: 96:50:bb:5d:22:13:4b:e4:dc:4d:94:71:0b:ae:6a:77:a9:c3: 24:57:bc:74:64:3d:8a:90:2f:77:32:71:6a:5b:97:e9:88:f3: 9a:8d:ce:ff:cb:ab:e7:24:83:ea:1c:c4:e9:c4:ef:22:8f:16: d8:f4:9b:a0:99:9f:72:da:c6:9b:97:f0:82:7b:17:f6:07:69: fc:08:a9:38:96:c2:0c:bc:d2:da:4d:b9:a9:c2:50:b3:e4:e7: 2d:f6:84:6a:6c:7a:76:0c:50:2b:e1:66:8d:97:6b:c6:a2:f7: 85:cc:1f:f0:72:d9:a6:50:11:a8:90:18:00:28:82:b7:40:6e: ee:bb:62:75:15:40:b1:0a:e8:cd:b9:89:46:01:13:90:01:82: fe:3a:52:a3:96:d1:02:f5:5f:ad:c1:00:73:af:30:2f:fe:91: ca:c4:27:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QUIzQzExMC8GA1UEBRMoQjVBREZFQTE3MjdDMkVFRTQzOEFBRkQzMzhFNkQ2RTUx N0E4NkZDRTAeFw0yNjAxMjMwNjEwMjZaFw0yNjAxMzAwNjEwMjZaMBgxFjAUBgNV BAMMDTY5NzMxMGQzLTZhOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQVSoj+v246V0irTwA3Gtn7dg5/Qfonla/3ORojlWQ+dsvxdqHXLi2KsplcqJL mOPn4eFhtN3cG6JW7n/yjq4qfwBlhsj8txCFkxB5G+TIK36BR2ZASNbbXviHb/Nh gITK48Gd7aN6Ge7VLHtt4upFp+cNIwH9KkyKC0F8ClqY3prpcXaPjaKfX115YmTt HMagEUqnMfq0DDN+8ZtmZfJn9fC76EXa43dKOj3eL/Anrf0YaX1S7MI05kDcozqn cjerOfeVtgFAuzvyPmrQZqh7OqEF9JiR58oujrgTPxuyVmIQ/tuLR43y8pgrw7SR RVUOGUd58niyQZPBp9XhP1m7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULeajBfy4 Rc9elwvEef/zkd3vaIkwHwYDVR0jBBgwFoAUta3+oXJ8Lu5Diq/TOObW5Reob84w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBQjNDL0EyODA0RjYwNjk0 QTExRjBBNzc0MUE0M0M0RjlBRTAyL3RhMy1vWEo4THU1RGlxX1RPT2JXNVJlb2I4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGEzLW9YSjhMdTVEaXFfVE9PYlc1UmVvYjg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB QjNDL0EyODA0RjYwNjk0QTExRjBBNzc0MUE0M0M0RjlBRTAyL3RhMy1vWEo4THU1 RGlxX1RPT2JXNVJlb2I4NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAdvRNVI6pQRyNCKbvQIyQeikfH0cjn8UIITc1lEhkQCeqUnn/nJshr8 EHbe5LfR56P4wThZpoOB+ufwzgBfuSaO9WVkybE1v3oPzCoBrWQmK7OaxQ1mEepO +pZQu10iE0vk3E2UcQuuanepwyRXvHRkPYqQL3cycWpbl+mI85qNzv/Lq+ckg+oc xOnE7yKPFtj0m6CZn3LaxpuX8IJ7F/YHafwIqTiWwgy80tpNuanCULPk5y32hGps enYMUCvhZo2Xa8ai94XMH/By2aZQEaiQGAAogrdAbu67YnUVQLEK6M25iUYBE5AB gv46UqOW0QL1X63BAHOvMC/+kcrEJ3o= -----END CERTIFICATE-----Generated at Sun Jan 25 09:24:17 2026 by rpki-client