This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: n9y3bDibcz0n6L/dBW0HO01xoS9d4UISgPB5k0Ov654= Subject key identifier: 84:89:6C:04:76:1B:36:44:AB:8A:A4:E7:8A:98:EB:76:23:BA:38:07 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 634D3544FB949760BD39C89B6788E170084DDAE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 0802 Signing time: Sun 25 Jan 2026 04:39:27 +0000 Manifest this update: Sun 25 Jan 2026 04:34:27 +0000 Manifest next update: Mon 26 Jan 2026 04:43:27 +0000 Files and hashes: 1: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 5imQlduqeaq1QvJMmjo0ae6fSl4CkZx6HlLkioO4Cbc=) 2: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: odxXuw9t56FFIVWRF6USpgfH3EtxcqrQch+FND/pnf8=) 3: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: L/el4bzkuzcsjhPMOkht1KvFdFkUsS00ZQpcwoXhNkM=) 4: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: /y4bsFAbOhEMKPqouuAmEngSYVVpIYHfp2yIYz4KAGg=) 5: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: i3k7btMAhGgYuFeM+1u1fTFRv0VjkseVCLvNPnabQB0=) 6: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=) 7: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: 4z1gY4U8/ZkXH6/bzo6mXLcmpVHdpaoP7RJPrURjAUc=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 04:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:4d:35:44:fb:94:97:60:bd:39:c8:9b:67:88:e1:70:08:4d:da:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Jan 25 04:34:27 2026 GMT Not After : Jan 26 04:43:27 2026 GMT Subject: CN=84896C04761B3644AB8AA4E78A98EB7623BA3807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cf:82:2b:5f:a1:6b:f1:ac:11:c1:30:00:4d: 94:ed:c0:8b:10:ec:e5:b3:e9:13:42:26:e7:d5:45: 01:54:e2:53:04:a8:b8:df:fc:9d:c8:0c:5b:46:fc: a9:72:74:f5:9c:33:24:92:ef:f8:d7:e2:b4:8d:c3: a1:c1:a6:e6:62:fe:e8:64:ae:df:48:4f:37:b0:2a: 00:a2:e5:7b:26:15:2c:7c:bd:94:63:d7:4c:c0:3a: 38:a2:7d:d9:8f:f5:52:ce:ec:45:e2:8f:5d:5c:59: d2:fb:c9:7a:b1:e0:40:3e:0f:58:ae:2c:20:23:41: b9:5e:9a:21:3e:56:95:eb:2a:4e:2a:48:48:be:bb: 8c:75:6f:ea:74:cf:0e:3f:71:78:1c:9f:62:a8:f2: de:27:8a:6f:c4:5c:4f:51:1c:21:d8:cc:80:e8:11: 93:bf:dd:02:f4:83:b9:84:d4:94:ed:7d:1b:e4:c9: 51:d6:95:55:cf:05:2d:17:31:ca:0e:9e:19:f6:2d: 45:13:bc:09:dc:23:3f:9e:23:8f:9d:a7:a0:28:25: ea:bc:86:8f:bf:d1:48:3e:31:fe:22:ea:72:3a:72: 19:5d:71:96:f4:3c:ce:6b:db:8d:8c:e4:86:ab:7f: 63:c2:e7:27:46:4b:e5:51:a6:ab:47:7a:5b:47:ee: 67:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:89:6C:04:76:1B:36:44:AB:8A:A4:E7:8A:98:EB:76:23:BA:38:07 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c9:9b:9c:87:13:52:2b:d7:9c:ef:64:b0:73:04:10:67:1b: 85:18:5c:89:c4:4a:3d:db:19:52:08:94:2c:6b:3e:bf:28:d3: 44:1b:9a:80:f0:74:75:ae:14:fb:16:86:b1:49:a3:e3:8d:d0: 82:eb:01:34:47:9c:b5:a8:58:8a:8a:30:d7:14:f7:60:20:b4: 83:1d:51:6e:86:be:48:81:1f:54:72:8e:87:fa:88:1a:da:c4: 29:ce:04:69:49:d6:04:59:86:15:9c:71:5d:8e:cc:c7:9f:8f: f8:6b:48:25:c3:e3:ec:ab:e7:2b:6b:26:41:04:40:7b:44:51: 3a:c7:9f:88:29:28:2c:63:12:76:80:04:0e:eb:30:56:d8:00: 78:85:3d:88:5f:58:21:9a:fb:65:5c:35:a7:28:f2:ba:21:07: e3:de:d3:ba:83:29:c0:fb:97:4d:88:6f:3b:ae:cc:21:d8:11: 87:9e:ae:45:87:d2:89:98:b8:9f:1c:2c:64:79:19:d7:38:e4: 12:e0:60:2d:4e:b7:83:e3:2d:7d:50:c2:44:24:2c:da:08:8e: e9:2c:8a:2b:53:66:70:3b:82:97:cc:a2:a6:22:07:d9:00:da: d6:72:cb:c2:dd:d7:5f:59:34:f1:67:70:61:73:60:83:de:a0: 5b:20:0b:7b -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUY001RPuUl2C9OcibZ4jhcAhN2ugwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI2MDEyNTA0MzQyN1oX DTI2MDEyNjA0NDMyN1owMzExMC8GA1UEAxMoODQ4OTZDMDQ3NjFCMzY0NEFCOEFB NEU3OEE5OEVCNzYyM0JBMzgwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPPgitfoWvxrBHBMABNlO3AixDs5bPpE0Im59VFAVTiUwSouN/8ncgMW0b8 qXJ09ZwzJJLv+NfitI3DocGm5mL+6GSu30hPN7AqAKLleyYVLHy9lGPXTMA6OKJ9 2Y/1Us7sReKPXVxZ0vvJerHgQD4PWK4sICNBuV6aIT5WlesqTipISL67jHVv6nTP Dj9xeByfYqjy3ieKb8RcT1EcIdjMgOgRk7/dAvSDuYTUlO19G+TJUdaVVc8FLRcx yg6eGfYtRRO8CdwjP54jj52noCgl6ryGj7/RSD4x/iLqcjpyGV1xlvQ8zmvbjYzk hqt/Y8LnJ0ZL5VGmq0d6W0fuZ28CAwEAAaOCAhEwggINMB0GA1UdDgQWBBSEiWwE dhs2RKuKpOeKmOt2I7o4BzAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAyyZuchxNSK9ec72SwcwQQZxuFGFyJxEo92xlSCJQsaz6/KNNEG5qA8HR1rhT7 FoaxSaPjjdCC6wE0R5y1qFiKijDXFPdgILSDHVFuhr5IgR9Uco6H+oga2sQpzgRp SdYEWYYVnHFdjszHn4/4a0glw+Psq+crayZBBEB7RFE6x5+IKSgsYxJ2gAQO6zBW 2AB4hT2IX1ghmvtlXDWnKPK6IQfj3tO6gynA+5dNiG87rswh2BGHnq5Fh9KJmLif HCxkeRnXOOQS4GAtTreD4y19UMJEJCzaCI7pLIorU2ZwO4KXzKKmIgfZANrWcsvC 3ddfWTTxZ3Bhc2CD3qBbIAt7 -----END CERTIFICATE-----Generated at Sun Jan 25 21:44:24 2026 by rpki-client