This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft File: BZ5vA652dqnQ8J1fbL25CGGFWlc.mft (raw, json) Hash identifier: pY0I+TXyB9UPDInZkKK8Y4713gZOc4z7mR1C08gTmLg= Subject key identifier: D1:FE:9E:F5:67:95:E1:37:87:F3:72:DE:BA:73:F7:D1:B6:59:E7:4E Authority key identifier: 05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57 Certificate issuer: /CN=A91FF74B/serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57 Certificate serial: 074B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft Manifest number: 072D Signing time: Sat 24 Jan 2026 20:47:41 +0000 Manifest this update: Sat 24 Jan 2026 20:47:41 +0000 Manifest next update: Sat 31 Jan 2026 20:47:41 +0000 Files and hashes: 1: BZ5vA652dqnQ8J1fbL25CGGFWlc.crl (hash: gCxvZ/R/8/0vsbNTK/uQ3d0qXnqmmUJthYu4GAt8g7w=) 2: 7E0AB01C782C11EBB0B71971C4F9AE02.roa (hash: StZZUcpTqb1W1S9eXsQ5qcrkA/Ri8svuc1kgwSxho5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1867 (0x74b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B, serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57 Validity Not Before: Jan 24 20:47:41 2026 GMT Not After : Jan 31 20:47:41 2026 GMT Subject: CN=69752fed-0bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:53:a7:36:1e:61:0c:69:96:d0:7e:32:66:21: 9f:1c:e0:e0:6c:73:db:b3:67:4e:78:ae:5b:55:f7: 10:52:4f:37:9e:fa:79:3a:13:d9:43:b6:46:cc:15: 05:e9:26:17:76:10:ec:be:ff:f1:5e:4d:76:4c:21: 06:d2:33:9a:ea:72:c3:13:02:05:e4:29:33:40:b4: 4c:65:80:00:e2:7e:3d:3e:fd:de:1d:6b:f2:f4:cc: 8b:48:db:8c:39:6d:7f:11:df:25:74:02:41:ad:af: e4:19:3c:76:f9:36:36:ce:59:3b:13:2f:6d:52:54: bf:9a:e9:25:9b:fe:04:bb:38:38:87:40:1a:09:bc: 19:79:8c:27:e6:3f:ee:2c:fd:ab:fe:f8:d8:90:27: b3:9a:bc:a6:04:ab:19:2b:a7:16:99:fa:4e:f6:b2: 0f:06:fb:12:a3:f6:94:1f:44:82:36:e9:02:f0:54: 20:0a:36:ca:48:3d:c7:ea:a8:4d:02:b4:6d:49:bb: a2:6c:81:7c:29:94:ad:50:0f:f9:83:b6:ae:13:2a: b5:a1:95:b2:6c:4a:61:34:e2:91:1b:f9:1f:4a:a1: 31:c9:2a:58:7d:20:9d:34:b7:7c:af:b6:9b:97:ca: 54:89:39:5e:12:5a:ef:83:89:28:4c:a6:00:98:4d: b6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FE:9E:F5:67:95:E1:37:87:F3:72:DE:BA:73:F7:D1:B6:59:E7:4E X509v3 Authority Key Identifier: keyid:05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:21:7b:ba:58:91:18:51:65:fb:d1:09:6a:69:a4:c4:3d:33: e0:54:7f:40:65:f7:77:34:a5:a6:41:15:bd:f5:8e:8b:91:05: f3:01:8b:1d:96:37:63:3e:00:08:c0:54:7c:8d:e7:71:9a:1b: 24:e7:e6:a4:1e:08:55:c4:26:a2:79:da:a4:42:9c:10:aa:ee: 6e:28:9f:88:ae:fd:c6:07:59:ee:37:da:1e:c2:2d:af:18:be: 05:bf:b2:9f:40:00:d6:ac:21:ca:66:a0:d8:b6:c5:52:f3:91: 7f:ca:13:f9:61:7e:dd:69:8e:3f:b4:82:0b:54:cf:85:1b:d2: 7d:b4:3e:2e:8a:ea:93:50:b0:78:ba:97:ad:80:72:d0:a8:dc: a0:12:b6:54:ec:19:59:83:94:b2:3c:02:ef:86:9e:aa:a4:fb: 75:58:fd:30:3d:0d:c4:28:2b:f8:23:f7:9f:08:50:9a:d0:69: 0d:3c:ef:d1:86:26:fb:44:57:0a:1c:a4:9b:36:e6:af:2f:6b: 4c:72:3c:55:36:1c:3a:e5:b2:80:79:b9:f6:e6:e8:1c:a9:92: c2:49:51:a2:a4:55:8b:8a:6a:ca:5e:f2:7a:ac:39:3b:8d:f2: 50:c4:63:85:45:eb:1f:04:e7:f6:33:ad:f7:cd:af:fd:c4:0b: 00:29:91:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDA1OUU2RjAzQUU3Njc2QTlEMEYwOUQ1RjZDQkRCOTA4 NjE4NTVBNTcwHhcNMjYwMTI0MjA0NzQxWhcNMjYwMTMxMjA0NzQxWjAYMRYwFAYD VQQDDA02OTc1MmZlZC0wYmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVOnNh5hDGmW0H4yZiGfHODgbHPbs2dOeK5bVfcQUk83nvp5OhPZQ7ZGzBUF 6SYXdhDsvv/xXk12TCEG0jOa6nLDEwIF5CkzQLRMZYAA4n49Pv3eHWvy9MyLSNuM OW1/Ed8ldAJBra/kGTx2+TY2zlk7Ey9tUlS/muklm/4Euzg4h0AaCbwZeYwn5j/u LP2r/vjYkCezmrymBKsZK6cWmfpO9rIPBvsSo/aUH0SCNukC8FQgCjbKSD3H6qhN ArRtSbuibIF8KZStUA/5g7auEyq1oZWybEphNOKRG/kfSqExySpYfSCdNLd8r7ab l8pUiTleElrvg4koTKYAmE22KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNH+nvVn leE3h/Ny3rpz99G2WedOMB8GA1UdIwQYMBaAFAWebwOudnap0PCdX2y9uQhhhVpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi82MUEzMzg0QTc4 MkMxMUVCQUMwNEY2NzJDNEY5QUUwMi9CWjV2QTY1MmRxblE4SjFmYkwyNUNHR0ZX bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JaNXZBNjUyZHFuUThKMWZiTDI1Q0dHRldsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi82MUEzMzg0QTc4MkMxMUVCQUMwNEY2NzJDNEY5QUUwMi9CWjV2QTY1MmRx blE4SjFmYkwyNUNHR0ZXbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoIXu6WJEYUWX70QlqaaTEPTPgVH9AZfd3NKWmQRW99Y6LkQXzAYsd ljdjPgAIwFR8jedxmhsk5+akHghVxCaiedqkQpwQqu5uKJ+Irv3GB1nuN9oewi2v GL4Fv7KfQADWrCHKZqDYtsVS85F/yhP5YX7daY4/tIILVM+FG9J9tD4uiuqTULB4 upetgHLQqNygErZU7BlZg5SyPALvhp6qpPt1WP0wPQ3EKCv4I/efCFCa0GkNPO/R hib7RFcKHKSbNuavL2tMcjxVNhw65bKAebn25ugcqZLCSVGipFWLimrKXvJ6rDk7 jfJQxGOFResfBOf2M633za/9xAsAKZEu -----END CERTIFICATE-----Generated at Sun Jan 25 21:45:42 2026 by rpki-client