This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft File: E7lE6lgzzbdBH9TsaqHJYs87CIA.mft (raw, json) Hash identifier: F+gvEQGFvBXaHsVCfayTEIKi08hcnck3UirWEalqSxA= Subject key identifier: 4E:07:C9:63:7C:C0:AF:1F:49:C5:47:AB:92:8F:B8:81:D6:13:47:49 Authority key identifier: 13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80 Certificate issuer: /CN=A91FCF44/serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft Manifest number: D9 Signing time: Sun 25 Jan 2026 04:13:25 +0000 Manifest this update: Sun 25 Jan 2026 04:13:24 +0000 Manifest next update: Sun 01 Feb 2026 04:13:24 +0000 Files and hashes: 1: E7lE6lgzzbdBH9TsaqHJYs87CIA.crl (hash: KmL0k7AnMM/6ANOK+shgZVVFF2ZqQyO29ScGlhmnTPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880 Validity Not Before: Jan 25 04:13:24 2026 GMT Not After : Feb 1 04:13:24 2026 GMT Subject: CN=69759865-a0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b3:ee:0c:43:17:8b:0d:6c:47:c3:a5:05:7b: b9:ae:53:72:3a:2b:24:bd:78:fd:b3:7f:f6:62:fc: 96:b0:2a:d8:4b:da:67:bb:63:c8:b6:bb:22:3a:be: 7e:b0:82:83:04:cd:29:40:36:08:ab:cf:ac:10:b4: 02:62:a2:60:71:b5:40:12:ee:68:79:cd:d8:bb:bf: a0:90:a5:12:c7:d5:4d:22:8b:bd:01:7d:ce:32:f0: 0c:aa:a5:59:2e:4f:0d:84:dd:0e:ad:e6:55:9a:76: 00:69:40:8f:2e:f2:15:2e:63:a8:c4:6c:2a:b5:fe: 6e:05:85:c2:51:7e:35:5c:17:dd:67:44:f6:3a:c2: a4:77:db:6f:de:8f:a8:71:57:b5:d6:64:cb:9b:5a: c5:87:9f:95:3a:17:5c:85:d7:4d:60:73:8f:12:f6: 2e:fe:aa:40:88:d1:32:12:2c:73:5f:c9:37:64:e2: 8e:32:1e:eb:a0:0c:cd:9f:da:c6:de:6b:1b:e0:24: da:b0:a1:25:81:ea:20:30:d2:97:d7:42:aa:56:aa: 6b:28:74:fe:e8:e3:2c:bd:de:f6:8d:1c:9c:d5:c0: 84:86:3c:8b:cd:3e:ab:24:41:30:95:cd:0d:ae:ad: 39:f3:50:fb:8c:da:4d:ba:eb:98:e4:2f:27:ec:3d: 42:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:07:C9:63:7C:C0:AF:1F:49:C5:47:AB:92:8F:B8:81:D6:13:47:49 X509v3 Authority Key Identifier: keyid:13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:4a:59:2a:cc:df:09:aa:03:3a:b7:94:f1:68:73:a3:ac:71: be:75:f8:0c:d5:4b:9f:79:42:3d:39:24:16:a0:43:03:e0:d4: 03:39:09:d8:62:0f:e6:72:4e:98:ed:ff:c2:a9:f6:8b:ea:8c: 53:0f:db:d8:40:e8:5f:da:01:df:85:62:f6:d7:df:a8:af:a6: bf:ec:80:5a:8e:81:2a:92:15:50:d8:fe:2e:07:20:9e:f9:b2: 53:37:86:3f:fa:78:5c:54:f7:94:60:9d:e5:09:be:af:69:ec: 3a:50:ab:fc:4c:37:26:27:de:d9:27:fe:73:7f:36:2a:fb:45: 71:fd:a5:b0:65:c1:0f:7d:e2:cf:61:83:53:12:db:cf:ee:bd: 77:87:66:f4:4c:d8:5b:71:ca:29:17:c1:c9:7f:82:65:ed:ed: c0:33:71:cb:1d:7e:dd:6b:7c:43:b6:79:ec:56:bd:18:d1:48: 3d:1a:27:7c:36:a5:04:c8:43:95:90:ce:67:40:c6:ce:f0:d0: 48:5e:00:f5:e0:86:8f:78:f5:7b:f0:3f:c7:63:d4:0d:5c:6a: ec:21:31:5f:f0:d7:11:65:16:98:dd:1b:36:5c:54:18:7e:03: 0b:36:49:07:64:5f:fe:bf:da:94:40:37:22:a9:69:58:24:dd: 75:4d:a4:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGNDQxMTAvBgNVBAUTKDEzQjk0NEVBNTgzM0NEQjc0MTFGRDRFQzZBQTFDOTYy Q0YzQjA4ODAwHhcNMjYwMTI1MDQxMzI0WhcNMjYwMjAxMDQxMzI0WjAYMRYwFAYD VQQDDA02OTc1OTg2NS1hMGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bPuDEMXiw1sR8OlBXu5rlNyOiskvXj9s3/2YvyWsCrYS9pnu2PItrsiOr5+ sIKDBM0pQDYIq8+sELQCYqJgcbVAEu5oec3Yu7+gkKUSx9VNIou9AX3OMvAMqqVZ Lk8NhN0OreZVmnYAaUCPLvIVLmOoxGwqtf5uBYXCUX41XBfdZ0T2OsKkd9tv3o+o cVe11mTLm1rFh5+VOhdchddNYHOPEvYu/qpAiNEyEixzX8k3ZOKOMh7roAzNn9rG 3msb4CTasKElgeogMNKX10KqVqprKHT+6OMsvd72jRyc1cCEhjyLzT6rJEEwlc0N rq0581D7jNpNuuuY5C8n7D1CeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4HyWN8 wK8fScVHq5KPuIHWE0dJMB8GA1UdIwQYMBaAFBO5ROpYM823QR/U7GqhyWLPOwiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y0NC9FMjE5QzYzOEFF MTUxMUVGQjMwMjk4M0VDNEY5QUUwMi9FN2xFNmxnenpiZEJIOVRzYXFISllzODdD SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0U3bEU2bGd6emJkQkg5VHNhcUhKWXM4N0NJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y0NC9FMjE5QzYzOEFFMTUxMUVGQjMwMjk4M0VDNEY5QUUwMi9FN2xFNmxnenpi ZEJIOVRzYXFISllzODdDSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHSlkqzN8JqgM6t5TxaHOjrHG+dfgM1UufeUI9OSQWoEMD4NQDOQnY Yg/mck6Y7f/CqfaL6oxTD9vYQOhf2gHfhWL219+or6a/7IBajoEqkhVQ2P4uByCe +bJTN4Y/+nhcVPeUYJ3lCb6vaew6UKv8TDcmJ97ZJ/5zfzYq+0Vx/aWwZcEPfeLP YYNTEtvP7r13h2b0TNhbccopF8HJf4Jl7e3AM3HLHX7da3xDtnnsVr0Y0Ug9Gid8 NqUEyEOVkM5nQMbO8NBIXgD14IaPePV78D/HY9QNXGrsITFf8NcRZRaY3Rs2XFQY fgMLNkkHZF/+v9qUQDciqWlYJN11TaQS -----END CERTIFICATE-----Generated at Sun Jan 25 15:42:49 2026 by rpki-client