This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft File: 0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft (raw, json) Hash identifier: VOiRtsCNE5PRd4pZgyFmSwmaNC9eQoZgc8NHUl0DGqw= Subject key identifier: 63:DA:F7:3E:64:C9:83:9F:43:BD:24:DB:64:F1:CF:99:9C:B0:FE:47 Authority key identifier: D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC Certificate issuer: /CN=A91FD6A0/serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft Manifest number: 5C Signing time: Fri 23 Jan 2026 06:11:31 +0000 Manifest this update: Fri 23 Jan 2026 06:11:30 +0000 Manifest next update: Fri 30 Jan 2026 06:11:30 +0000 Files and hashes: 1: 0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl (hash: yMp/7zporIWfoiVY/SDepq25fnc/k6521OtR+xtNqAk=) 2: 053416126DB211F0962DC55BC4F9AE02.roa (hash: x2PuVPfM9opRCGhS75prbzNf+RUMoFINYisW+YfHaDY=) 3: 39926F626DB211F0AC1D0420C4F9AE02.roa (hash: kEFMUW+00UAEsPjX4mZ1eO2YdFDM6+IhBX5a3Q9IDw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD6A0, serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC Validity Not Before: Jan 23 06:11:30 2026 GMT Not After : Jan 30 06:11:30 2026 GMT Subject: CN=69731112-4d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b5:83:5f:e1:a4:d6:e1:86:db:ed:2c:ea:65: 92:84:10:5b:d9:c1:6a:af:48:1a:5c:ad:ed:78:89: d2:a6:84:9c:4a:9f:50:72:0e:a5:c2:61:f6:d9:70: ec:ac:03:88:a5:4f:06:12:f9:a5:94:0a:c6:b5:d7: ba:00:01:6f:ae:7d:37:66:3f:3f:c8:48:ea:0b:d8: 81:e2:f2:6d:fa:1c:33:f0:01:1b:f1:50:76:df:89: f2:59:9d:c0:b6:88:98:fc:82:5e:8d:60:ff:05:7d: 7e:c4:92:c8:4a:e5:b9:6d:a3:62:74:70:e6:22:4d: a2:13:ca:37:a9:2a:37:f9:56:3c:9e:56:8d:11:5a: 58:29:19:12:6c:60:f1:19:ff:ef:aa:33:9e:2a:97: f7:8f:a6:45:f8:6d:2d:32:8c:c0:c5:16:e2:fd:bc: 91:8a:5c:b9:93:41:55:6c:a5:86:4c:9c:75:3b:46: fa:89:1b:04:f1:dc:27:e8:b9:83:0f:63:61:fb:48: 4b:43:cd:e4:60:89:ba:92:f5:65:27:f3:cd:78:07: be:c7:4e:b1:ce:e2:f0:55:a8:f8:3f:f7:fd:0e:19: c6:1c:7f:3e:e5:f7:6a:97:30:93:0c:3d:aa:10:40: ea:44:7a:c2:ad:e9:34:4f:dd:75:7f:80:e1:cf:b2: 78:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DA:F7:3E:64:C9:83:9F:43:BD:24:DB:64:F1:CF:99:9C:B0:FE:47 X509v3 Authority Key Identifier: keyid:D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:a0:47:96:fd:cb:71:bd:ff:1a:88:c4:c0:7e:71:90:b9:8f: 1c:a0:9d:de:a0:a6:4e:ca:92:7c:84:a8:71:ee:37:6a:e7:10: 17:f3:19:68:42:0c:b4:ee:66:5a:5c:c5:b7:14:74:12:be:0d: cc:60:f6:8b:12:fe:84:d8:fa:60:18:53:83:57:a0:45:34:21: 6d:87:9d:2c:fd:d0:75:f0:80:04:8a:4a:77:10:b6:d7:6e:0f: 9c:8c:f8:1b:46:cf:99:ef:74:cd:1e:4a:c0:10:77:1b:d7:3a: d8:b7:df:d4:6d:5c:aa:de:29:b0:38:79:b9:2f:56:84:e1:2d: 14:27:18:94:a3:1c:76:ae:e4:08:77:3d:d8:06:c2:7d:8b:51: 43:13:d6:39:15:21:d2:a2:be:91:d6:28:b1:96:f0:ef:b5:ef: 97:c5:81:6e:7b:ab:ee:94:3c:d4:28:05:0a:30:c8:5f:68:d6: 02:98:18:7f:65:1e:0e:7d:b3:b3:a0:4f:6c:e5:e7:28:2a:ed: 59:5d:42:87:58:21:a1:9f:f9:bc:2d:d0:2a:d8:0e:cf:bf:07: e1:04:4f:af:65:9a:01:f0:54:61:ff:6e:b8:03:30:6d:56:8f: 9b:27:91:33:41:fd:34:c9:bb:9f:40:c3:2d:b1:af:84:45:c5: d1:17:04:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDZBMDExMC8GA1UEBRMoRDE4RDQ0NUQyNjU3RUFGREQ0QTY2RTc1QjBGQkQ2MDMw M0YwMjVGQzAeFw0yNjAxMjMwNjExMzBaFw0yNjAxMzAwNjExMzBaMBgxFjAUBgNV BAMMDTY5NzMxMTEyLTRkNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7tYNf4aTW4Ybb7SzqZZKEEFvZwWqvSBpcre14idKmhJxKn1ByDqXCYfbZcOys A4ilTwYS+aWUCsa117oAAW+ufTdmPz/ISOoL2IHi8m36HDPwARvxUHbfifJZncC2 iJj8gl6NYP8FfX7EkshK5blto2J0cOYiTaITyjepKjf5VjyeVo0RWlgpGRJsYPEZ /++qM54ql/ePpkX4bS0yjMDFFuL9vJGKXLmTQVVspYZMnHU7RvqJGwTx3CfouYMP Y2H7SEtDzeRgibqS9WUn8814B77HTrHO4vBVqPg/9/0OGcYcfz7l92qXMJMMPaoQ QOpEesKt6TRP3XV/gOHPsnj5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY9r3PmTJ g59DvSTbZPHPmZyw/kcwHwYDVR0jBBgwFoAU0Y1EXSZX6v3Upm51sPvWAwPwJfww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENkEwLzc4REY2MDdDNkRC MTExRjBBRDRCNUU1QUM0RjlBRTAyLzBZMUVYU1pYNnYzVXBtNTFzUHZXQXdQd0pm dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMFkxRVhTWlg2djNVcG01MXNQdldBd1B3SmZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE NkEwLzc4REY2MDdDNkRCMTExRjBBRDRCNUU1QUM0RjlBRTAyLzBZMUVYU1pYNnYz VXBtNTFzUHZXQXdQd0pmdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALSgR5b9y3G9/xqIxMB+cZC5jxygnd6gpk7KknyEqHHuN2rnEBfzGWhC DLTuZlpcxbcUdBK+Dcxg9osS/oTY+mAYU4NXoEU0IW2HnSz90HXwgASKSncQttdu D5yM+BtGz5nvdM0eSsAQdxvXOti339RtXKreKbA4ebkvVoThLRQnGJSjHHau5Ah3 PdgGwn2LUUMT1jkVIdKivpHWKLGW8O+175fFgW57q+6UPNQoBQowyF9o1gKYGH9l Hg59s7OgT2zl5ygq7VldQodYIaGf+bwt0CrYDs+/B+EET69lmgHwVGH/brgDMG1W j5snkTNB/TTJu59Awy2xr4RFxdEXBHI= -----END CERTIFICATE-----Generated at Sun Jan 25 09:21:40 2026 by rpki-client