This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft File: AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft (raw, json) Hash identifier: OBm8OCrlIGpjPvMhzuQMv9mk2u7qMq2JjjpIQEOc79Y= Subject key identifier: 3E:45:1F:F0:3A:6C:36:4B:3A:C5:22:B5:13:AF:06:E7:C9:30:47:EE Authority key identifier: 00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1 Certificate issuer: /CN=A91FFBAF/serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft Manifest number: 25 Signing time: Sun 25 Jan 2026 06:45:40 +0000 Manifest this update: Sun 25 Jan 2026 06:45:40 +0000 Manifest next update: Sun 01 Feb 2026 06:45:40 +0000 Files and hashes: 1: AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl (hash: WBb7x0ioxJnpVUg8bHOLgo3SGGPrCPHA43fJZol0Mj0=) 2: C7200E0EC37D11F09171F578C4F9AE02.roa (hash: LJ7UDn6IIkcbGD6zUISagJkWCJY/fIVXp/q52OKMMBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFBAF, serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1 Validity Not Before: Jan 25 06:45:40 2026 GMT Not After : Feb 1 06:45:40 2026 GMT Subject: CN=6975bc14-3cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0c:e1:73:52:58:2a:e8:a1:46:8d:ff:28:06: 0b:6d:53:6f:d7:d4:8a:af:47:6b:e7:c3:ae:25:a0: d2:66:29:a4:ba:3c:c9:e5:b2:3a:35:8e:83:a1:d7: 37:0b:57:c8:af:0c:87:ae:ff:c6:c3:5b:83:c7:ce: cd:2d:1c:73:ab:15:41:25:04:67:e7:64:9f:1d:b1: 11:c0:15:22:af:a6:5d:d6:96:51:23:a4:19:db:3f: 72:d6:54:bc:ed:b3:2e:f7:ff:fa:82:1a:da:fb:69: a8:ef:ce:01:27:94:92:68:76:b2:18:ff:8a:9c:0f: 7c:ab:19:d6:ac:11:dd:24:c8:5c:b3:95:12:4e:6c: 19:84:37:61:e5:ac:5d:d7:c4:4b:cd:8e:91:d0:0b: 48:75:23:18:d2:5e:74:59:ad:f8:11:10:76:c2:ae: 09:76:a1:17:3c:ac:e7:1b:59:17:52:43:60:03:c5: 7d:0c:ca:e1:b5:6f:c2:7f:75:5d:17:aa:37:cd:8e: fa:c6:10:1a:bc:2d:9c:d3:5d:80:91:80:5a:cc:21: de:a8:96:99:54:e3:a4:bd:09:37:b5:d1:3d:9f:02: 8e:6a:74:55:59:86:74:86:8c:9b:41:02:ff:b7:3f: 31:bb:95:58:e8:d7:0d:57:4b:cc:e5:42:b4:c2:17: 66:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:45:1F:F0:3A:6C:36:4B:3A:C5:22:B5:13:AF:06:E7:C9:30:47:EE X509v3 Authority Key Identifier: keyid:00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:e3:4a:e6:5f:3b:a8:68:36:8f:b4:43:1b:f7:d2:51:1f:56: 50:7b:bf:19:3d:19:73:57:7a:ed:73:91:cc:67:72:26:5e:a3: cc:fe:75:6d:cc:9d:ee:f8:c2:96:94:0d:a9:7f:0b:db:8b:35: 76:eb:e4:88:2f:39:5e:55:85:7e:b4:a5:76:24:5d:40:89:1c: f4:cb:cf:02:42:e0:52:01:26:9a:ba:de:d9:4d:1b:80:e6:6a: 2c:f6:b5:d9:8b:4a:24:9e:8c:e1:a7:a9:d6:cf:45:f2:c9:dc: d0:1f:b8:2e:a9:cf:f7:f2:60:9c:3c:bc:4e:25:a7:6e:77:17: e2:a5:1b:b4:32:f9:64:40:28:f2:0d:82:f9:2e:ae:8e:1c:04: 07:72:29:ad:c9:c5:f8:2d:cf:f4:c7:c6:34:64:2c:69:a8:29: 3c:33:c3:a3:af:d8:54:a5:b3:da:fb:1e:84:ea:50:57:85:13: 69:42:a4:10:36:f5:60:dc:14:a4:83:b1:ed:68:ce:4e:0f:cf: 07:25:41:b5:6b:9c:8f:5d:af:93:71:d0:19:1b:e2:f5:33:50: ce:db:c4:fb:c4:9a:85:3b:d2:86:51:12:77:74:2d:34:2a:85: 70:e4:11:1b:e0:ee:1c:55:38:07:79:46:26:75:7e:cd:eb:3d: 87:09:e0:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RkJBRjExMC8GA1UEBRMoMDBBRjYwMTg1RDFGQjlBMDhBNThCNzdFRjQwNDgxQUMz ODBBRjFCMTAeFw0yNjAxMjUwNjQ1NDBaFw0yNjAyMDEwNjQ1NDBaMBgxFjAUBgNV BAMMDTY5NzViYzE0LTNjY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeDOFzUlgq6KFGjf8oBgttU2/X1IqvR2vnw64loNJmKaS6PMnlsjo1joOh1zcL V8ivDIeu/8bDW4PHzs0tHHOrFUElBGfnZJ8dsRHAFSKvpl3WllEjpBnbP3LWVLzt sy73//qCGtr7aajvzgEnlJJodrIY/4qcD3yrGdasEd0kyFyzlRJObBmEN2HlrF3X xEvNjpHQC0h1IxjSXnRZrfgREHbCrgl2oRc8rOcbWRdSQ2ADxX0MyuG1b8J/dV0X qjfNjvrGEBq8LZzTXYCRgFrMId6olplU46S9CTe10T2fAo5qdFVZhnSGjJtBAv+3 PzG7lVjo1w1XS8zlQrTCF2Z1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPkUf8Dps Nks6xSK1E68G58kwR+4wHwYDVR0jBBgwFoAUAK9gGF0fuaCKWLd+9ASBrDgK8bEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGQkFGLzcwRkNBNzcyQzM3 QzExRjBCNTE4QTUzMkM0RjlBRTAyL0FLOWdHRjBmdWFDS1dMZC05QVNCckRnSzhi RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUs5Z0dGMGZ1YUNLV0xkLTlBU0JyRGdLOGJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG QkFGLzcwRkNBNzcyQzM3QzExRjBCNTE4QTUzMkM0RjlBRTAyL0FLOWdHRjBmdWFD S1dMZC05QVNCckRnSzhiRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL/jSuZfO6hoNo+0Qxv30lEfVlB7vxk9GXNXeu1zkcxnciZeo8z+dW3M ne74wpaUDal/C9uLNXbr5IgvOV5VhX60pXYkXUCJHPTLzwJC4FIBJpq63tlNG4Dm aiz2tdmLSiSejOGnqdbPRfLJ3NAfuC6pz/fyYJw8vE4lp253F+KlG7Qy+WRAKPIN gvkuro4cBAdyKa3Jxfgtz/THxjRkLGmoKTwzw6Ov2FSls9r7HoTqUFeFE2lCpBA2 9WDcFKSDse1ozk4PzwclQbVrnI9dr5Nx0Bkb4vUzUM7bxPvEmoU70oZREnd0LTQq hXDkERvg7hxVOAd5RiZ1fs3rPYcJ4PU= -----END CERTIFICATE-----Generated at Sun Jan 25 15:34:40 2026 by rpki-client