This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft File: QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft (raw, json) Hash identifier: JjaVpN54v6oH0g07b5Z+KwrDm401Eg2+54+NnAdOQWY= Subject key identifier: B4:02:F3:4C:C2:0A:57:5D:42:A8:51:D1:F8:5E:23:28:08:F0:01:BD Authority key identifier: 42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 Certificate issuer: /CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Certificate serial: 2106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft Manifest number: 2883 Signing time: Sat 24 Jan 2026 15:46:00 +0000 Manifest this update: Sat 24 Jan 2026 15:45:59 +0000 Manifest next update: Sat 31 Jan 2026 15:45:59 +0000 Files and hashes: 1: QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl (hash: aVc1zphAzuYWG+yRZj7kdERYNtYjeJLFpWsRx7ZVx2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8454 (0x2106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Validity Not Before: Jan 24 15:45:59 2026 GMT Not After : Jan 31 15:45:59 2026 GMT Subject: CN=6974e938-96e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4c:72:8f:36:5b:a3:45:13:c4:b2:40:23:0b: ab:b1:1d:08:21:af:cc:27:38:7e:7d:22:07:95:ba: 11:02:64:03:f5:4d:d0:5b:e1:6d:d6:21:b1:c9:39: a9:45:00:03:bf:92:67:b0:46:75:d8:2f:a0:b7:8c: 25:db:78:b2:41:52:29:54:b4:70:12:fb:f3:3e:0b: f8:f8:79:e6:b4:71:a6:1d:d3:1e:5b:44:56:40:b6: 30:95:3b:cc:0f:18:de:2a:15:ad:48:0b:54:ad:37: c0:8b:af:3e:0b:e3:45:51:79:87:77:eb:64:3f:47: 1b:5b:25:28:3f:33:ba:cc:94:c7:25:c7:8c:e2:57: 92:cc:ec:75:e5:b3:7c:9d:c5:10:2f:c5:f0:88:08: 3a:e6:cc:ec:51:90:37:3d:cc:1e:18:39:8a:bc:a1: 48:7b:ce:35:8b:32:a1:a2:8a:f7:48:b8:66:ce:d0: 81:7f:8e:5c:c0:65:71:cd:2d:f8:42:d6:f8:57:4f: 3d:34:4b:05:22:4d:0e:41:69:8b:5a:37:cc:87:d6: 01:dc:e2:91:9e:6d:13:c2:35:d7:b3:f0:7e:cb:0b: 11:fb:91:13:a6:c4:97:58:2e:7e:12:45:4c:b4:97: 85:36:e1:56:86:5c:6a:4d:29:a2:06:5d:3d:5a:09: 5b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:02:F3:4C:C2:0A:57:5D:42:A8:51:D1:F8:5E:23:28:08:F0:01:BD X509v3 Authority Key Identifier: keyid:42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:5a:bf:86:d3:7d:92:38:64:88:2c:d4:bd:b7:2e:e3:35:6b: d1:95:f7:1c:6b:04:6e:57:62:86:6e:9c:8d:2d:53:fd:03:f0: 6f:7d:f3:bb:55:06:4a:bf:7d:d3:08:24:c1:bb:3b:7f:58:00: 75:8d:aa:c1:eb:70:74:da:6d:38:99:97:75:ca:17:42:39:be: ef:36:ff:40:57:1b:26:d4:af:01:83:ab:f0:ef:02:d0:40:bf: 5c:b3:67:8b:12:67:d7:0a:c7:e5:fb:06:99:17:fe:66:ee:7d: 10:1a:c6:6e:4b:64:35:6c:43:22:59:3b:1f:40:9e:c3:84:dc: b1:a0:1b:f3:62:95:16:87:6c:b1:d7:39:da:fb:6b:a4:58:24: 0a:8f:ca:77:61:31:4a:fa:4d:fe:ec:66:08:6e:13:87:1e:70: 0d:f7:aa:dd:b8:42:29:cc:e5:29:47:de:cc:6c:85:74:4b:dc: 90:6e:fe:bb:b9:72:85:eb:1d:a0:33:f9:de:16:91:98:ea:91: 22:88:db:72:22:8b:a7:69:b8:ed:c8:7b:55:9a:1b:91:51:b7: 07:99:1c:10:99:3e:b2:e5:af:2e:2f:0c:4a:21:68:26:8b:ec: 66:de:b0:d8:0c:db:6c:56:5c:2c:92:0d:29:ac:b3:51:16:46: e1:fd:dc:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDQyNjdDRjVEMDMwMDRBOEZFRkRGMjEzOTVEMEZFODI0 NTQ4QjEzQzEwHhcNMjYwMTI0MTU0NTU5WhcNMjYwMTMxMTU0NTU5WjAYMRYwFAYD VQQDDA02OTc0ZTkzOC05NmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ExyjzZbo0UTxLJAIwursR0IIa/MJzh+fSIHlboRAmQD9U3QW+Ft1iGxyTmp RQADv5JnsEZ12C+gt4wl23iyQVIpVLRwEvvzPgv4+HnmtHGmHdMeW0RWQLYwlTvM DxjeKhWtSAtUrTfAi68+C+NFUXmHd+tkP0cbWyUoPzO6zJTHJceM4leSzOx15bN8 ncUQL8XwiAg65szsUZA3PcweGDmKvKFIe841izKhoor3SLhmztCBf45cwGVxzS34 Qtb4V089NEsFIk0OQWmLWjfMh9YB3OKRnm0TwjXXs/B+ywsR+5ETpsSXWC5+EkVM tJeFNuFWhlxqTSmiBl09Wglb8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQC80zC ClddQqhR0fheIygI8AG9MB8GA1UdIwQYMBaAFEJnz10DAEqP798hOV0P6CRUixPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNvX3YzeUU1WFFfb0pGU0xF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtZlBYUU1BU29fdjN5RTVYUV9vSkZTTEU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNv X3YzeUU1WFFfb0pGU0xFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfWr+G032SOGSILNS9ty7jNWvRlfccawRuV2KGbpyNLVP9A/BvffO7 VQZKv33TCCTBuzt/WAB1jarB63B02m04mZd1yhdCOb7vNv9AVxsm1K8Bg6vw7wLQ QL9cs2eLEmfXCsfl+waZF/5m7n0QGsZuS2Q1bEMiWTsfQJ7DhNyxoBvzYpUWh2yx 1zna+2ukWCQKj8p3YTFK+k3+7GYIbhOHHnAN96rduEIpzOUpR97MbIV0S9yQbv67 uXKF6x2gM/neFpGY6pEiiNtyIounabjtyHtVmhuRUbcHmRwQmT6y5a8uLwxKIWgm i+xm3rDYDNtsVlwskg0prLNRFkbh/dwO -----END CERTIFICATE-----Generated at Sun Jan 25 10:44:02 2026 by rpki-client