This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft File: 5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json) Hash identifier: 21WdEZmFnhrg/TQt/jxztKJnjHZlzPQDxdU6wu+eTOc= Subject key identifier: CE:78:48:5C:AF:A8:6E:C5:6B:D1:B4:69:36:ED:9C:EA:0E:29:FA:CB Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Certificate serial: 02C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft Manifest number: 02B8 Signing time: Sun 25 Jan 2026 00:37:50 +0000 Manifest this update: Sun 25 Jan 2026 00:37:49 +0000 Manifest next update: Sun 01 Feb 2026 00:37:49 +0000 Files and hashes: 1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: 5awp+3UVSYUg9ziFY3qsUc6aRTSowhUM+0c45hIE+OI=) 2: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: w12orzg2QI/DnMwGWqRtnSkszoQETfTmbyGE/vvJi2w=) 3: 81087EBA66EE11F0B7640387C4F9AE02.roa (hash: QFoEv4EUPu7ZByEo2FPWmM0j6Axf46LzGtXSA8Ozj4E=) 4: 3CFFB50C8E0E11F0BA4BBC76C4F9AE02.roa (hash: ob6LTMrD+JVfoIQ/uSt3zi99wEqn+nvTyjd+ajn1nEQ=) 5: D455E69C623511F0B0F5155FC4F9AE02.roa (hash: FJRdymd8wZbvTsi6HMqdNDE91aX5F6UwCVSReU3zMAo=) 6: 7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (hash: noXWIw2uCpk5qYLhf+pn+IMp6jTiBvJiADwyhYAjo2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 708 (0x2c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Validity Not Before: Jan 25 00:37:49 2026 GMT Not After : Feb 1 00:37:49 2026 GMT Subject: CN=697565de-0187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:74:ac:cd:ca:ca:14:b9:2c:54:11:3c:0e:39: b6:5a:11:8d:e4:40:34:b7:85:07:be:72:83:d3:e0: 59:42:30:02:12:90:88:b4:c4:b0:1d:95:8e:da:a5: 87:1f:72:84:7b:da:42:e2:07:74:26:38:da:8f:d7: 6b:b8:f9:78:c3:8b:2b:df:34:f7:ca:0b:6b:95:ef: 8d:4d:ee:3b:80:5d:5b:34:a7:d9:cc:10:4b:e7:bd: 9e:05:89:f5:e0:bd:b4:b9:08:64:b1:92:ad:91:46: a8:ce:ce:9c:f4:c5:04:f4:11:fb:c8:43:f6:4e:cc: 4b:e1:3f:94:d9:80:13:57:17:00:e2:01:65:c0:04: c9:f7:50:2f:1f:a6:5a:86:b2:a8:90:f5:c8:b7:d4: c3:98:e4:a2:26:eb:ea:76:a8:1a:74:42:99:7b:ae: 6f:29:63:98:b8:d9:ac:23:db:2d:ab:68:9e:3f:16: e7:7a:49:10:c6:f0:ad:ed:94:e1:55:82:c3:7c:d1: 87:5b:1f:38:51:5b:cf:07:b8:c4:e2:b1:17:f5:d2: 56:b1:85:38:db:68:59:ce:fb:97:54:11:08:96:2c: a1:0f:20:6e:86:08:b2:3b:ad:50:44:37:b9:7a:80: 82:bc:a9:9b:32:e1:f3:c3:67:8b:c2:a9:72:d8:fb: 28:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:78:48:5C:AF:A8:6E:C5:6B:D1:B4:69:36:ED:9C:EA:0E:29:FA:CB X509v3 Authority Key Identifier: keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:0a:61:05:bf:c5:e7:8c:0b:f6:9c:fa:35:d3:9b:00:d7:4e: 1c:c8:da:9b:35:81:8f:7f:94:f2:53:3b:cf:66:19:f0:ec:1a: 80:9d:67:d8:c3:1f:1a:b4:9e:d7:e5:3a:74:2a:37:7d:d8:f7: fc:aa:1e:97:93:6f:41:d6:d3:7e:98:0e:52:b0:f6:58:10:60: 87:80:08:96:1d:a8:d0:0e:98:eb:1b:55:d9:e3:1a:dc:17:da: 45:66:05:1a:e9:71:fa:95:6a:64:78:d8:0c:a4:16:4e:3d:0c: 95:89:d6:92:e9:83:a9:7b:31:3f:ee:2f:9b:0e:11:64:46:5f: a9:ef:55:bf:58:f3:61:bb:e3:f8:4c:db:a4:fd:63:74:f6:f4: ab:25:f1:d7:64:09:c0:2e:43:94:71:45:e7:9d:e4:4c:38:5d: 16:4d:cc:ef:e1:6d:f9:66:02:03:9a:cc:b1:8a:3a:4d:32:94: a3:36:21:b3:10:9d:02:4b:c9:54:6a:a1:53:fa:e2:55:74:ee: 66:3f:ac:b0:4c:c4:46:ba:93:de:00:61:f1:b1:f0:85:82:fc: 15:00:51:96:f5:84:6a:f0:37:de:39:5c:c2:3e:46:67:2b:01: 7e:cd:07:fc:18:48:81:60:2a:07:10:af:65:0f:8b:77:c2:e0: 2a:b4:43:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3REYxMTAvBgNVBAUTKEU3RjdERDQwOTI4Mjk4RUM5RUNBNjQ0NkExODRBMzU5 QTNFRDVERkUwHhcNMjYwMTI1MDAzNzQ5WhcNMjYwMjAxMDAzNzQ5WjAYMRYwFAYD VQQDDA02OTc1NjVkZS0wMTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj3SszcrKFLksVBE8Djm2WhGN5EA0t4UHvnKD0+BZQjACEpCItMSwHZWO2qWH H3KEe9pC4gd0Jjjaj9druPl4w4sr3zT3ygtrle+NTe47gF1bNKfZzBBL572eBYn1 4L20uQhksZKtkUaozs6c9MUE9BH7yEP2TsxL4T+U2YATVxcA4gFlwATJ91AvH6Za hrKokPXIt9TDmOSiJuvqdqgadEKZe65vKWOYuNmsI9stq2iePxbnekkQxvCt7ZTh VYLDfNGHWx84UVvPB7jE4rEX9dJWsYU422hZzvuXVBEIliyhDyBuhgiyO61QRDe5 eoCCvKmbMuHzw2eLwqly2PsoxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM54SFyv qG7Fa9G0aTbtnOoOKfrLMB8GA1UdIwQYMBaAFOf33UCSgpjsnspkRqGEo1mj7V3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdERi82RDU1MkQ3MDI3 N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21PeWV5bVJHb1lTaldhUHRY ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVfZmRRSktDbU95ZXltUkdvWVNqV2FQdFhmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTdERi82RDU1MkQ3MDI3N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21P eWV5bVJHb1lTaldhUHRYZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUCmEFv8XnjAv2nPo105sA104cyNqbNYGPf5TyUzvPZhnw7BqAnWfY wx8atJ7X5Tp0Kjd92Pf8qh6Xk29B1tN+mA5SsPZYEGCHgAiWHajQDpjrG1XZ4xrc F9pFZgUa6XH6lWpkeNgMpBZOPQyVidaS6YOpezE/7i+bDhFkRl+p71W/WPNhu+P4 TNuk/WN09vSrJfHXZAnALkOUcUXnneRMOF0WTczv4W35ZgIDmsyxijpNMpSjNiGz EJ0CS8lUaqFT+uJVdO5mP6ywTMRGupPeAGHxsfCFgvwVAFGW9YRq8DfeOVzCPkZn KwF+zQf8GEiBYCoHEK9lD4t3wuAqtEMP -----END CERTIFICATE-----Generated at Sun Jan 25 10:44:37 2026 by rpki-client