This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft File: 4cWfpaa8h2985KRsqq5gYE8FGGY.mft (raw, json) Hash identifier: c9uf8hXClKuM2HBmHrkWEl97FwDCMcx9AzVUQGjxJWU= Subject key identifier: 66:BE:31:41:0D:D7:AE:F0:60:51:3B:06:AF:76:3C:92:D1:7A:A0:44 Authority key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 Certificate issuer: /CN=A91FEDE7/serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft Manifest number: 17 Signing time: Fri 23 Jan 2026 06:57:57 +0000 Manifest this update: Fri 23 Jan 2026 06:57:56 +0000 Manifest next update: Fri 30 Jan 2026 06:57:56 +0000 Files and hashes: 1: 4cWfpaa8h2985KRsqq5gYE8FGGY.crl (hash: QtW7DRrJnJ+CsgmF4pLSpJ9KKcKGpTH+ntaWi8rxWM8=) 2: 63C2AF74D99E11F0A31734B566D3641D.roa (hash: mc23TLWcQpileDQlx1e7FDTUox4NNol25hSA6IP7+MY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Validity Not Before: Jan 23 06:57:56 2026 GMT Not After : Jan 30 06:57:56 2026 GMT Subject: CN=69731bf5-6d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:da:c4:44:2b:22:7f:75:e8:a6:10:7e:2a: 69:11:ac:fb:58:e8:ac:1b:e8:be:8f:26:54:d3:c3: 59:b4:89:0c:82:fa:a6:2d:12:50:b6:56:76:8b:ef: 42:41:f9:37:7a:b4:5f:c8:8c:7f:c4:c3:e7:42:92: 4f:f5:ba:12:4f:9c:0a:2f:9e:65:a5:e0:36:3b:2b: 0e:a3:54:05:b2:18:ec:3e:7b:44:a4:8b:8b:ff:d4: 84:a6:18:a8:d9:24:70:75:d7:9c:d3:a8:67:d3:94: e2:cd:02:97:17:44:14:27:c8:3a:bf:6a:a0:1c:3e: 52:50:a7:10:ca:44:85:7d:6a:02:7d:16:d4:ae:b4: 62:e6:96:76:4f:88:f1:9e:d4:81:12:8e:d9:0f:75: 2b:c6:61:d2:51:44:24:82:b1:48:8a:dd:34:7f:47: 18:35:1f:d7:d1:25:78:92:bd:a4:4f:71:a3:07:7e: 71:1e:a5:be:dd:6e:4d:62:9a:c2:a7:fa:15:9c:f3: ec:db:e9:3c:fd:f8:50:29:23:fa:f8:75:c6:d3:ae: 9f:d2:54:34:af:de:a1:5e:39:d6:07:50:9f:d3:bd: 6c:29:2d:b5:2f:55:cc:c3:28:9d:1b:cb:6f:ac:a3: 52:8e:35:62:40:d7:54:bd:10:97:2b:48:0c:d5:73: ea:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BE:31:41:0D:D7:AE:F0:60:51:3B:06:AF:76:3C:92:D1:7A:A0:44 X509v3 Authority Key Identifier: keyid:E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:20:a8:d7:08:65:7d:22:96:80:f6:e0:d8:3f:56:ee:59:f9: de:cb:75:97:a6:e4:15:68:44:cc:fc:6a:d2:3b:06:a0:1a:63: bb:af:bc:dc:64:91:f7:6b:43:2c:57:f8:72:cb:d6:d4:3d:b6: a9:72:1f:08:47:b8:43:db:44:be:e1:3a:20:11:f0:a4:4e:4f: 9c:9a:5e:6d:c2:bc:6c:21:bf:b0:09:d1:af:61:d1:cc:33:a5: 38:0c:90:01:6d:62:25:f0:1c:9b:58:fd:35:4b:8f:b4:a4:e3: 13:70:89:ee:44:a8:44:1e:98:82:a9:1f:a2:18:d2:d8:1a:97: 50:25:26:64:d2:de:5c:a7:f5:15:9e:a8:92:89:f0:42:86:95: 31:14:d8:8d:ae:3a:d4:0a:34:52:20:c8:06:bb:0e:ee:34:00: 9d:ea:23:fa:82:45:16:0a:62:a8:88:72:21:c8:b7:74:0d:ff: 67:1b:49:8e:01:64:f3:98:12:8f:27:24:b5:c1:64:a7:97:c9: ab:0c:0c:b2:be:40:b1:c2:f4:ae:d0:b9:91:d8:1e:4d:80:15: f8:88:69:fd:7b:86:68:c9:86:a1:f3:4d:b2:63:cb:89:8a:b4: b7:d1:c6:45:83:45:7b:3f:2d:d4:09:92:ba:cf:c0:a1:35:84: cc:4e:fc:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RURFNzExMC8GA1UEBRMoRTFDNTlGQTVBNkJDODc2RjdDRTRBNDZDQUFBRTYwNjA0 RjA1MTg2NjAeFw0yNjAxMjMwNjU3NTZaFw0yNjAxMzAwNjU3NTZaMBgxFjAUBgNV BAMMDTY5NzMxYmY1LTZkNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6K9rERCsif3XophB+KmkRrPtY6Kwb6L6PJlTTw1m0iQyC+qYtElC2VnaL70JB +Td6tF/IjH/Ew+dCkk/1uhJPnAovnmWl4DY7Kw6jVAWyGOw+e0Ski4v/1ISmGKjZ JHB115zTqGfTlOLNApcXRBQnyDq/aqAcPlJQpxDKRIV9agJ9FtSutGLmlnZPiPGe 1IESjtkPdSvGYdJRRCSCsUiK3TR/Rxg1H9fRJXiSvaRPcaMHfnEepb7dbk1imsKn +hWc8+zb6Tz9+FApI/r4dcbTrp/SVDSv3qFeOdYHUJ/TvWwpLbUvVczDKJ0by2+s o1KONWJA11S9EJcrSAzVc+pRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZr4xQQ3X rvBgUTsGr3Y8ktF6oEQwHwYDVR0jBBgwFoAU4cWfpaa8h2985KRsqq5gYE8FGGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFREU3L0U3RkQzMDU4RDk5 RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5ODVLUnNxcTVnWUU4RkdH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGNXZnBhYThoMjk4NUtSc3FxNWdZRThGR0dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF REU3L0U3RkQzMDU4RDk5RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5 ODVLUnNxcTVnWUU4RkdHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKEgqNcIZX0iloD24Ng/Vu5Z+d7LdZem5BVoRMz8atI7BqAaY7uvvNxk kfdrQyxX+HLL1tQ9tqlyHwhHuEPbRL7hOiAR8KROT5yaXm3CvGwhv7AJ0a9h0cwz pTgMkAFtYiXwHJtY/TVLj7Sk4xNwie5EqEQemIKpH6IY0tgal1AlJmTS3lyn9RWe qJKJ8EKGlTEU2I2uOtQKNFIgyAa7Du40AJ3qI/qCRRYKYqiIciHIt3QN/2cbSY4B ZPOYEo8nJLXBZKeXyasMDLK+QLHC9K7QuZHYHk2AFfiIaf17hmjJhqHzTbJjy4mK tLfRxkWDRXs/LdQJkrrPwKE1hMxO/Js= -----END CERTIFICATE-----Generated at Sun Jan 25 02:48:19 2026 by rpki-client