This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft (raw, json) Hash identifier: aOpHNbLYuvzsGGG0hnwy96VQeHpMqoBwHy1bUCJNIgQ= Subject key identifier: E3:6A:40:52:F1:54:0A:62:DE:7D:CE:7F:61:1C:BA:20:C0:97:59:B3 Authority key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 Certificate issuer: /CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft Manifest number: 0252 Signing time: Sun 25 Jan 2026 00:59:39 +0000 Manifest this update: Sun 25 Jan 2026 00:59:39 +0000 Manifest next update: Sun 01 Feb 2026 00:59:39 +0000 Files and hashes: 1: EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl (hash: KW546bk3dF1VWlzsI276LUhKNYw7q//Aj6zYKdv39uQ=) 2: 16E990CA6B0411ED849E0957C4F9AE02.roa (hash: j+WiIpQXx8bOOXda/N2C9r1k53EnBU4V+zrlR0ZwoY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4A1, serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Validity Not Before: Jan 25 00:59:39 2026 GMT Not After : Feb 1 00:59:39 2026 GMT Subject: CN=69756afb-e21b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:67:d4:e3:e4:55:f1:24:3b:4a:d7:80:d2:ab: a5:1c:de:3e:90:bd:b5:80:ab:ff:86:b2:c9:df:38: 26:c9:32:dd:1a:6d:6e:41:c9:60:01:a0:b7:b8:5a: bc:c5:1e:80:53:db:0c:8f:ef:71:6c:a9:18:44:8b: 6b:8f:1d:1a:ed:fc:ef:9d:e5:6f:98:79:00:0b:3f: 64:71:15:d0:88:37:3e:13:64:7e:89:3d:e0:a0:a2: ca:73:a9:ec:bc:55:6c:04:0f:8c:16:4d:68:bf:7b: bc:74:7c:e7:1d:ad:84:ce:6b:22:05:82:c3:a8:c7: 8d:5e:84:62:b3:00:34:c8:17:b8:ae:78:5c:cb:b7: 5b:d1:73:8b:99:93:f6:c6:47:56:a5:79:90:ea:d5: 43:38:37:98:ee:24:81:68:50:ef:60:a4:ef:f7:c4: 4b:b7:ad:9c:f3:0b:6b:ee:aa:b2:98:2d:cd:51:d3: b7:f2:96:cb:ee:71:c3:53:c7:97:30:86:a7:9a:8b: 2d:b4:98:cf:4f:4a:3f:48:4a:c6:e0:bf:8c:2f:2f: 83:fc:0c:db:a9:67:0f:f7:02:e8:84:0b:09:0f:31: ca:8e:f4:9b:60:98:31:65:d6:d8:af:ab:4d:78:a0: 5d:8e:65:7d:ca:b3:db:a7:58:18:2c:ad:59:b6:87: 88:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6A:40:52:F1:54:0A:62:DE:7D:CE:7F:61:1C:BA:20:C0:97:59:B3 X509v3 Authority Key Identifier: keyid:11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c2:b9:94:ec:d1:91:9e:85:11:0d:8a:de:bd:b3:df:4c:95: 99:16:a0:16:db:b9:93:55:51:e7:78:d7:bb:d1:03:cf:19:05: 44:83:41:c0:6c:60:f6:39:b8:ce:06:35:04:4c:08:ec:aa:ca: ff:67:35:aa:1f:73:3d:ac:05:b3:18:e0:85:8f:e2:8d:91:cf: 31:b3:54:d5:9c:ad:22:db:eb:e1:8f:b9:0e:4b:f8:c5:de:c3: b1:92:d4:7d:34:8a:90:1d:70:6c:29:f1:1b:63:0c:b4:99:25: be:bd:92:99:2e:f1:36:81:1a:0a:54:30:78:62:8f:43:22:23: bc:29:33:9c:4d:be:1d:62:8f:6c:31:4b:fd:d8:7e:1e:cf:e9: 69:4e:e2:5f:59:03:76:53:d5:a8:fd:a6:eb:28:14:8f:60:74: 1d:12:73:ec:93:58:83:62:18:54:40:3d:72:e9:49:c3:b1:0e: 92:dc:f1:19:39:2a:9e:c3:00:66:52:4a:91:ee:5f:e4:43:3b: b1:cb:e2:70:89:49:8c:4c:28:15:d8:7c:55:09:12:96:e6:d4: 74:3e:54:82:d3:89:16:21:d0:31:6a:30:e2:60:47:50:6e:6d: 0b:a9:d4:ec:41:e1:d5:10:c8:03:c7:7c:2a:ef:7f:24:55:99: 69:c3:f4:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0QTExMTAvBgNVBAUTKDExOTZDRERGREEzRUJEQzVBREE4RkZDNUJDQjM4NDkx MjE0N0Q1NDQwHhcNMjYwMTI1MDA1OTM5WhcNMjYwMjAxMDA1OTM5WjAYMRYwFAYD VQQDDA02OTc1NmFmYi1lMjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WfU4+RV8SQ7SteA0qulHN4+kL21gKv/hrLJ3zgmyTLdGm1uQclgAaC3uFq8 xR6AU9sMj+9xbKkYRItrjx0a7fzvneVvmHkACz9kcRXQiDc+E2R+iT3goKLKc6ns vFVsBA+MFk1ov3u8dHznHa2EzmsiBYLDqMeNXoRiswA0yBe4rnhcy7db0XOLmZP2 xkdWpXmQ6tVDODeY7iSBaFDvYKTv98RLt62c8wtr7qqymC3NUdO38pbL7nHDU8eX MIanmosttJjPT0o/SErG4L+MLy+D/AzbqWcP9wLohAsJDzHKjvSbYJgxZdbYr6tN eKBdjmV9yrPbp1gYLK1ZtoeIPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONqQFLx VApi3n3Of2EcuiDAl1mzMB8GA1UdIwQYMBaAFBGWzd/aPr3Fraj/xbyzhJEhR9VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRBMS82MkI0MjNCQTZC MDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZjV3RxUF9GdkxPRWtTRkgx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VaYk4zOW8tdmNXdHFQX0Z2TE9Fa1NGSDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRBMS82MkI0MjNCQTZCMDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZj V3RxUF9GdkxPRWtTRkgxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6wrmU7NGRnoURDYrevbPfTJWZFqAW27mTVVHneNe70QPPGQVEg0HA bGD2ObjOBjUETAjsqsr/ZzWqH3M9rAWzGOCFj+KNkc8xs1TVnK0i2+vhj7kOS/jF 3sOxktR9NIqQHXBsKfEbYwy0mSW+vZKZLvE2gRoKVDB4Yo9DIiO8KTOcTb4dYo9s MUv92H4ez+lpTuJfWQN2U9Wo/abrKBSPYHQdEnPsk1iDYhhUQD1y6UnDsQ6S3PEZ OSqewwBmUkqR7l/kQzuxy+JwiUmMTCgV2HxVCRKW5tR0PlSC04kWIdAxajDiYEdQ bm0LqdTsQeHVEMgDx3wq738kVZlpw/Q7 -----END CERTIFICATE-----Generated at Sun Jan 25 17:03:23 2026 by rpki-client