This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft File: fTWFKD3zPrULnDiNWc14bLudw54.mft (raw, json) Hash identifier: TfVg79iKwvbArBKX0ZhiYYlMNumJqB7UREDk/g/mwv0= Subject key identifier: 43:D6:3D:67:F0:FA:6D:38:80:61:E3:10:33:A4:A8:D3:A3:5C:D9:86 Authority key identifier: 7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E Certificate issuer: /CN=A91352D1/serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft Manifest number: 27 Signing time: Sat 17 Jan 2026 06:44:00 +0000 Manifest this update: Sat 17 Jan 2026 06:44:00 +0000 Manifest next update: Sat 24 Jan 2026 06:44:00 +0000 Files and hashes: 1: fTWFKD3zPrULnDiNWc14bLudw54.crl (hash: HOmy0zSvsRe8CKrNRUCBxgX7cVuqwkNNt8297EVfGD0=) 2: F0F521DEC10B11F0B1AC197FC4F9AE02.roa (hash: SOZdm0XRjeKBQo6yKoYuPgXjYHien32Esy3ozHe7Fjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91352D1, serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E Validity Not Before: Jan 17 06:44:00 2026 GMT Not After : Jan 24 06:44:00 2026 GMT Subject: CN=696b2fb0-315a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:08:db:06:78:d2:e1:63:f2:71:70:06:33:33: 52:cc:a2:1c:59:41:27:5f:fc:fa:65:51:a4:9e:50: c7:66:ef:89:6c:c6:98:27:93:65:f6:61:83:b8:60: a3:d4:5d:aa:6f:b6:16:e7:74:24:f5:94:e3:90:2c: 90:22:58:6c:3f:27:93:29:cd:7a:82:c9:9f:75:de: 87:a0:2a:58:c7:7f:dc:57:83:fe:6e:5e:dd:6e:42: 4c:3e:06:9d:ff:cd:54:74:f0:62:0c:c6:4f:d2:ba: db:c3:2f:b0:65:49:61:ed:fe:dc:e7:b9:f5:58:c4: fc:be:67:66:b2:dc:e3:88:25:e7:81:70:3a:4b:ad: 0e:c6:a0:f7:7c:0a:69:f7:75:11:b8:a0:63:8d:73: 22:49:fd:6b:c2:c4:67:94:0f:c2:fb:8f:70:34:73: 54:42:56:d4:89:a2:8f:5c:b5:9e:b6:07:ef:f5:4e: 37:18:de:f5:c0:21:33:de:ef:4d:13:01:c0:76:e7: 2d:d3:d8:13:6d:24:6a:d1:74:28:15:c8:17:ef:c0: 9e:7f:59:6a:e4:16:fb:98:5f:ba:fe:f8:54:64:8e: 37:d3:3f:bb:42:b1:1f:9b:91:5e:c6:2e:05:0a:2a: 79:15:29:23:b7:a4:bc:85:8f:2f:3a:b1:20:78:ea: 9a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D6:3D:67:F0:FA:6D:38:80:61:E3:10:33:A4:A8:D3:A3:5C:D9:86 X509v3 Authority Key Identifier: keyid:7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7f:6b:7e:2e:fe:a8:b8:c6:f9:27:4d:63:90:e2:50:46:a7: 17:8a:68:c5:b0:f2:53:fa:ae:e8:0f:91:af:1f:d8:66:ef:a4: 07:0e:21:19:e8:a6:11:05:4b:8a:00:a4:ac:a3:42:cb:8c:48: 5e:de:10:da:32:99:a5:d4:24:2c:19:44:4e:7d:69:bf:46:1f: 8c:40:8c:55:ef:f9:5c:26:96:21:d2:cc:61:b8:e5:15:a9:0f: 4c:03:ca:96:ec:f7:35:73:d2:f7:22:0c:6e:e4:82:00:f0:43: e2:4b:6d:5c:e2:78:ba:5b:76:be:6a:dd:57:6d:ec:bc:0c:3a: e5:57:45:ee:11:e6:6a:99:7d:6c:4f:76:2c:f5:aa:5c:1d:c7: 40:e9:d3:78:f3:b3:70:d8:f4:c8:6c:64:96:f3:65:f7:bb:0d: c0:ea:42:8d:d0:c9:d6:02:f0:c9:85:5f:39:4d:0f:f3:33:53: 92:82:e2:d3:46:2c:85:48:c8:09:53:ef:e5:f9:a5:35:cb:e8: 8c:9a:e2:82:92:aa:8d:df:60:2f:f8:9c:66:63:24:d7:e9:78: 24:13:f2:75:ba:99:89:86:50:c1:6a:68:63:53:a3:20:62:c6: 64:ef:1c:7a:88:4f:88:e2:8e:ef:26:ea:68:e5:37:75:7c:10: d3:a5:df:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NTJEMTExMC8GA1UEBRMoN0QzNTg1MjgzREYzM0VCNTBCOUMzODhENTlDRDc4NkNC QjlEQzM5RTAeFw0yNjAxMTcwNjQ0MDBaFw0yNjAxMjQwNjQ0MDBaMBgxFjAUBgNV BAMMDTY5NmIyZmIwLTMxNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtCNsGeNLhY/JxcAYzM1LMohxZQSdf/PplUaSeUMdm74lsxpgnk2X2YYO4YKPU XapvthbndCT1lOOQLJAiWGw/J5MpzXqCyZ913oegKljHf9xXg/5uXt1uQkw+Bp3/ zVR08GIMxk/SutvDL7BlSWHt/tznufVYxPy+Z2ay3OOIJeeBcDpLrQ7GoPd8Cmn3 dRG4oGONcyJJ/WvCxGeUD8L7j3A0c1RCVtSJoo9ctZ62B+/1TjcY3vXAITPe700T AcB25y3T2BNtJGrRdCgVyBfvwJ5/WWrkFvuYX7r++FRkjjfTP7tCsR+bkV7GLgUK KnkVKSO3pLyFjy86sSB46pq1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ9Y9Z/D6 bTiAYeMQM6So06Nc2YYwHwYDVR0jBBgwFoAUfTWFKD3zPrULnDiNWc14bLudw54w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1MkQxLzY0QTVBQjg0QzBF QTExRjA5QkE5REI3NEM0RjlBRTAyL2ZUV0ZLRDN6UHJVTG5EaU5XYzE0Ykx1ZHc1 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZlRXRktEM3pQclVMbkRpTldjMTRiTHVkdzU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 MkQxLzY0QTVBQjg0QzBFQTExRjA5QkE5REI3NEM0RjlBRTAyL2ZUV0ZLRDN6UHJV TG5EaU5XYzE0Ykx1ZHc1NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE5/a34u/qi4xvknTWOQ4lBGpxeKaMWw8lP6rugPka8f2GbvpAcOIRno phEFS4oApKyjQsuMSF7eENoymaXUJCwZRE59ab9GH4xAjFXv+VwmliHSzGG45RWp D0wDypbs9zVz0vciDG7kggDwQ+JLbVzieLpbdr5q3Vdt7LwMOuVXRe4R5mqZfWxP diz1qlwdx0Dp03jzs3DY9MhsZJbzZfe7DcDqQo3QydYC8MmFXzlND/MzU5KC4tNG LIVIyAlT7+X5pTXL6Iya4oKSqo3fYC/4nGZjJNfpeCQT8nW6mYmGUMFqaGNToyBi xmTvHHqIT4jiju8m6mjlN3V8ENOl33k= -----END CERTIFICATE-----Generated at Sun Jan 18 03:15:21 2026 by rpki-client