This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft File: 2UVIdZZlg2gUctzDnfIkqtSon6o.mft (raw, json) Hash identifier: 9ArOE+PsH6vN+8KJZ+2c/4Y7XwSsEgKnqK9FRLurMcw= Subject key identifier: 3E:DD:41:C3:C5:3B:0D:17:78:A7:56:90:22:95:78:2D:04:2D:20:68 Authority key identifier: D9:45:48:75:96:65:83:68:14:72:DC:C3:9D:F2:24:AA:D4:A8:9F:AA Certificate issuer: /CN=A91352D1/serialNumber=D9454875966583681472DCC39DF224AAD4A89FAA Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft Manifest number: 26 Signing time: Sat 17 Jan 2026 06:44:03 +0000 Manifest this update: Sat 17 Jan 2026 06:44:03 +0000 Manifest next update: Sat 24 Jan 2026 06:44:03 +0000 Files and hashes: 1: 2UVIdZZlg2gUctzDnfIkqtSon6o.crl (hash: 69crM+kbmkeKxt/1y64kC05jWaAHKtKxSg+B453F2K8=) 2: 63AFC09EC10C11F08F1AFF7FC4F9AE02.roa (hash: 6W8pbhnGV4OI+/BAF+L1OPuH+jw3tDQBKF3blq5Eu2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.crl rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91352D1, serialNumber=D9454875966583681472DCC39DF224AAD4A89FAA Validity Not Before: Jan 17 06:44:03 2026 GMT Not After : Jan 24 06:44:03 2026 GMT Subject: CN=696b2fb3-19dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:46:bc:95:13:f6:be:d7:67:f5:86:95:a3: fc:69:22:8c:aa:9e:e4:ef:fc:b9:a4:c1:1e:b3:ca: 59:fc:ae:fc:64:0c:e3:51:28:25:83:e5:e8:55:8c: b6:57:83:e4:63:f7:96:f2:25:72:fe:8a:62:86:e1: f2:d6:c2:59:be:fe:13:7b:81:ab:06:e7:a7:ff:0c: 25:82:8a:68:34:c1:08:06:eb:43:9d:c6:85:7b:4c: de:3d:e0:67:9b:7d:7a:c6:56:40:4f:74:09:b0:15: 17:2f:6f:57:d6:54:c7:33:73:27:68:4a:23:a6:2d: e2:17:19:9f:cb:94:64:49:66:bf:a2:c8:c0:b4:1b: 50:9e:7c:4a:3c:a8:28:3e:59:77:7d:0b:9c:d3:45: 84:3d:ae:9c:9b:ad:4f:1b:0b:0e:97:21:76:f1:00: 8b:6c:6a:f6:c2:07:be:d8:52:49:dd:22:0e:86:63: 5d:bb:9d:9b:d1:aa:a7:19:ca:16:df:a2:de:5a:95: 14:21:b9:e0:ad:cb:62:07:37:d3:0d:80:08:ae:af: 97:75:93:3c:11:75:f5:ae:a1:24:e5:08:9f:f5:aa: a4:4f:52:56:08:4e:19:3e:90:6f:09:02:cb:55:e0: db:09:c8:b3:e7:4b:61:d3:d6:85:f8:04:62:63:42: 05:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DD:41:C3:C5:3B:0D:17:78:A7:56:90:22:95:78:2D:04:2D:20:68 X509v3 Authority Key Identifier: keyid:D9:45:48:75:96:65:83:68:14:72:DC:C3:9D:F2:24:AA:D4:A8:9F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:ca:ff:a1:66:8e:e6:ab:64:85:2c:06:63:af:3c:82:0a:90: 83:a9:cb:41:8d:72:fc:e5:e8:81:de:ac:63:79:a0:77:86:87: 05:35:cc:21:b8:57:0d:97:46:a3:00:ce:e6:bf:49:10:4c:50: 1f:ab:ee:91:c5:88:7b:b7:e5:af:fb:74:ee:58:6a:ce:ec:c8: 1b:4c:ab:d8:f9:6d:72:ac:b7:88:f6:52:9d:1f:ec:f1:65:9f: 73:0e:6f:5d:5a:84:60:d3:d5:63:95:02:69:94:fb:ad:a9:81: 72:e0:38:e9:8c:b4:2a:78:19:ef:33:d4:b4:f9:a3:fe:da:17: 1f:74:bf:65:95:59:48:d2:92:fe:e8:94:73:57:c9:e4:53:3f: ab:d9:05:03:da:99:ae:bd:21:d3:48:0d:42:f5:da:24:54:9d: 0b:ec:bb:5e:09:f8:63:af:89:00:d0:21:5a:86:7e:f3:0b:b3: d8:a5:2f:46:f4:99:ae:57:df:f6:87:2b:45:26:3f:59:69:ee: 9c:fb:c6:c0:2e:55:ce:96:65:1e:35:91:4d:b8:c3:59:ae:10: 73:28:27:b4:4c:88:16:a4:04:fd:e7:59:ab:9b:9e:2f:10:65: 12:a9:97:3e:72:bf:53:3f:09:d2:f7:b6:91:48:91:bf:b1:aa: 02:e5:e8:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NTJEMTExMC8GA1UEBRMoRDk0NTQ4NzU5NjY1ODM2ODE0NzJEQ0MzOURGMjI0QUFE NEE4OUZBQTAeFw0yNjAxMTcwNjQ0MDNaFw0yNjAxMjQwNjQ0MDNaMBgxFjAUBgNV BAMMDTY5NmIyZmIzLTE5ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHZEa8lRP2vtdn9YaVo/xpIoyqnuTv/LmkwR6zyln8rvxkDONRKCWD5ehVjLZX g+Rj95byJXL+imKG4fLWwlm+/hN7gasG56f/DCWCimg0wQgG60OdxoV7TN494Geb fXrGVkBPdAmwFRcvb1fWVMczcydoSiOmLeIXGZ/LlGRJZr+iyMC0G1CefEo8qCg+ WXd9C5zTRYQ9rpybrU8bCw6XIXbxAItsavbCB77YUkndIg6GY127nZvRqqcZyhbf ot5alRQhueCty2IHN9MNgAiur5d1kzwRdfWuoSTlCJ/1qqRPUlYIThk+kG8JAstV 4NsJyLPnS2HT1oX4BGJjQgVBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPt1Bw8U7 DRd4p1aQIpV4LQQtIGgwHwYDVR0jBBgwFoAU2UVIdZZlg2gUctzDnfIkqtSon6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1MkQxL0RERjQyMjZDQzA0 MTExRjBCQzI1NkYxNUM0RjlBRTAyLzJVVklkWlpsZzJnVWN0ekRuZklrcXRTb242 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMlVWSWRaWmxnMmdVY3R6RG5mSWtxdFNvbjZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 MkQxL0RERjQyMjZDQzA0MTExRjBCQzI1NkYxNUM0RjlBRTAyLzJVVklkWlpsZzJn VWN0ekRuZklrcXRTb242by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAELK/6FmjuarZIUsBmOvPIIKkIOpy0GNcvzl6IHerGN5oHeGhwU1zCG4 Vw2XRqMAzua/SRBMUB+r7pHFiHu35a/7dO5Yas7syBtMq9j5bXKst4j2Up0f7PFl n3MOb11ahGDT1WOVAmmU+62pgXLgOOmMtCp4Ge8z1LT5o/7aFx90v2WVWUjSkv7o lHNXyeRTP6vZBQPama69IdNIDUL12iRUnQvsu14J+GOviQDQIVqGfvMLs9ilL0b0 ma5X3/aHK0UmP1lp7pz7xsAuVc6WZR41kU24w1muEHMoJ7RMiBakBP3nWaubni8Q ZRKplz5yv1M/CdL3tpFIkb+xqgLl6Fc= -----END CERTIFICATE-----Generated at Sun Jan 18 08:06:44 2026 by rpki-client