This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft File: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft (raw, json) Hash identifier: sESqZuViWoj4MqxHMAXDEvfad3guuncaYd5Vb4a4OjU= Subject key identifier: 81:CF:8D:43:78:F8:18:0D:10:DF:23:6F:5A:4E:0D:58:F8:C9:89:87 Authority key identifier: 26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9 Certificate issuer: /CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9 Certificate serial: 0BE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft Manifest number: 0BDE Signing time: Sat 24 Jan 2026 18:27:16 +0000 Manifest this update: Sat 24 Jan 2026 18:27:15 +0000 Manifest next update: Sat 31 Jan 2026 18:27:15 +0000 Files and hashes: 1: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl (hash: QNXccSz9Edk8x127Pi86BjCFRqiv5ooPLeD6NPAyno8=) 2: A540A624378611EABE283384C4F9AE02.roa (hash: ANMKroNAd8SN9uIGuTzwVBbPP9a2iv11Jpq5VopofpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3049 (0xbe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC42F, serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9 Validity Not Before: Jan 24 18:27:15 2026 GMT Not After : Jan 31 18:27:15 2026 GMT Subject: CN=69750f04-e838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c3:d2:a1:a7:d7:d5:66:36:5e:66:f4:69:88: 8f:19:10:4c:22:a6:60:77:d9:52:d8:63:52:fa:63: 51:b4:fa:77:e5:a2:3b:75:7c:ec:07:e9:a0:8e:c1: 0b:f1:c3:9b:cb:f5:20:28:54:7f:29:c8:6f:5f:de: 4d:66:10:49:9a:3e:e8:99:9a:ce:2f:99:fb:31:e9: 2a:71:7a:a5:66:79:f7:b0:2d:84:c6:6a:de:9d:50: 3e:05:1e:16:98:7b:c2:2d:11:7d:a0:96:ea:4a:3e: b4:df:fe:6c:a0:99:e7:64:a6:04:03:6b:bb:f3:1c: f6:09:26:c6:cf:4d:8f:53:dd:67:89:fc:97:27:f6: 93:24:3b:e3:2f:b2:b9:f8:9f:28:93:4f:03:ad:8d: bd:b0:ef:63:b7:a5:45:9d:ab:b9:14:29:6f:e4:fe: 68:7f:91:03:a4:2e:23:fd:57:bd:4f:04:e3:cd:e5: ef:56:58:95:e5:b4:91:9f:da:33:c3:a4:6a:7c:d1: cc:90:84:d3:93:69:d1:f6:c8:8c:75:d7:2b:fb:e7: a7:bf:e7:df:37:a3:3d:ef:b4:33:7a:34:b5:b4:10: 78:73:35:79:d4:e3:2c:19:e4:ba:55:2e:c8:e8:a9: 7e:58:56:47:d4:50:cd:c5:6d:4e:be:65:97:27:d8: ba:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CF:8D:43:78:F8:18:0D:10:DF:23:6F:5A:4E:0D:58:F8:C9:89:87 X509v3 Authority Key Identifier: keyid:26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:f2:1c:21:05:28:b1:a5:04:7f:df:2f:c1:54:05:3d:85:88: db:98:27:dc:8b:92:64:a5:a3:6d:41:00:0d:18:11:b6:f3:58: 32:da:8f:20:7e:0c:c9:8c:2f:64:48:75:73:e3:df:bd:be:20: c1:06:23:e6:87:7b:b0:79:14:c2:41:4c:bd:b3:7c:3b:b0:32: 5a:17:52:ad:16:1f:f5:97:d4:ff:96:22:6d:84:ca:8a:cd:3b: 5a:eb:8d:24:dc:45:64:d0:b6:05:dd:f1:03:6a:7a:23:08:78: ca:b0:f5:cb:a3:aa:8f:a2:86:2b:e3:a7:0b:58:3b:e3:93:5a: 78:4e:b4:b1:21:5c:4c:c7:60:81:63:1f:f7:3a:0b:14:b0:2d: 35:2d:95:61:eb:bf:e9:d6:7e:48:5f:e6:1f:94:a1:f7:ce:83: 82:14:fb:61:61:dc:0a:03:11:f2:e9:3a:02:f4:33:c3:45:dd: 51:b1:cc:9f:8c:ca:cb:c1:11:36:cd:6c:bd:db:e1:26:48:38: 2b:0e:b3:0f:38:bd:c6:c9:99:2a:92:16:28:77:95:fc:12:71: 89:aa:d4:aa:42:1d:96:ea:e2:c3:6a:8a:20:bd:6c:cf:00:03: 3e:41:6b:f7:c7:e1:fc:1a:a3:3a:66:c0:5d:2c:80:aa:67:6b: 57:1c:f4:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0MkYxMTAvBgNVBAUTKDI2MEM2OEE4MzQ3NjQzMEMxOUFDODZGQzEzNjEzMzMw REUxMEY5QjkwHhcNMjYwMTI0MTgyNzE1WhcNMjYwMTMxMTgyNzE1WjAYMRYwFAYD VQQDDA02OTc1MGYwNC1lODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMPSoafX1WY2Xmb0aYiPGRBMIqZgd9lS2GNS+mNRtPp35aI7dXzsB+mgjsEL 8cOby/UgKFR/KchvX95NZhBJmj7omZrOL5n7MekqcXqlZnn3sC2ExmrenVA+BR4W mHvCLRF9oJbqSj603/5soJnnZKYEA2u78xz2CSbGz02PU91nifyXJ/aTJDvjL7K5 +J8ok08DrY29sO9jt6VFnau5FClv5P5of5EDpC4j/Ve9TwTjzeXvVliV5bSRn9oz w6RqfNHMkITTk2nR9siMddcr++env+ffN6M977QzejS1tBB4czV51OMsGeS6VS7I 6Kl+WFZH1FDNxW1OvmWXJ9i6gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHPjUN4 +BgNEN8jb1pODVj4yYmHMB8GA1UdIwQYMBaAFCYMaKg0dkMMGayG/BNhMzDeEPm5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQyRi82M0U2RTM5MjMx MzYxMUVBOEJFMjYxMkJDNEY5QUUwMi9KZ3hvcURSMlF3d1pySWI4RTJFek1ONFEt YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pneG9xRFIyUXd3WnJJYjhFMkV6TU40US1iay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQyRi82M0U2RTM5MjMxMzYxMUVBOEJFMjYxMkJDNEY5QUUwMi9KZ3hvcURSMlF3 d1pySWI4RTJFek1ONFEtYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV8hwhBSixpQR/3y/BVAU9hYjbmCfci5JkpaNtQQANGBG281gy2o8g fgzJjC9kSHVz49+9viDBBiPmh3uweRTCQUy9s3w7sDJaF1KtFh/1l9T/liJthMqK zTta640k3EVk0LYF3fEDanojCHjKsPXLo6qPooYr46cLWDvjk1p4TrSxIVxMx2CB Yx/3OgsUsC01LZVh67/p1n5IX+YflKH3zoOCFPthYdwKAxHy6ToC9DPDRd1Rscyf jMrLwRE2zWy92+EmSDgrDrMPOL3GyZkqkhYod5X8EnGJqtSqQh2W6uLDaoogvWzP AAM+QWv3x+H8GqM6ZsBdLICqZ2tXHPSO -----END CERTIFICATE-----Generated at Sun Jan 25 12:42:38 2026 by rpki-client