This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft File: dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft (raw, json) Hash identifier: 86AXMXp0Or5cBt+L5TYA2D7iEg62/gIkK0ZgaNGNlbg= Subject key identifier: 95:E1:82:66:F7:F8:1A:8B:3E:BF:AF:6A:AE:01:BD:00:41:5E:23:66 Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Certificate serial: 0CCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft Manifest number: 0CC2 Signing time: Fri 16 Jan 2026 17:53:48 +0000 Manifest this update: Fri 16 Jan 2026 17:53:48 +0000 Manifest next update: Fri 23 Jan 2026 17:53:48 +0000 Files and hashes: 1: dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl (hash: aGYgfIPnYbNBOCIQHH7jW483fyMsdjJYxU9oRChcZyI=) 2: D68289BE984B11ECB04DAB38C4F9AE02.roa (hash: TFFXR7HvdoBBfkYQcKZFG8C4IZWcW3CzAFgZ6vyFYeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 17:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3277 (0xccd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA, serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Validity Not Before: Jan 16 17:53:48 2026 GMT Not After : Jan 23 17:53:48 2026 GMT Subject: CN=696a7b2c-5735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9f:c7:82:bb:78:8d:7d:13:01:7a:df:8f:40: b7:ce:f7:dd:a1:80:09:aa:bb:c1:12:e1:21:fd:d2: 73:7c:c5:34:8d:fe:b0:a2:b9:76:9b:7e:6e:f6:c7: ef:30:3f:31:94:33:6d:75:3e:71:62:7b:97:ce:e9: ac:80:97:e1:46:a2:72:41:d7:d2:92:fc:8b:60:ff: dc:ab:c7:ae:e9:1a:be:2a:80:9f:70:32:5f:04:20: db:aa:81:a3:bb:ec:b7:a9:ab:d7:95:8d:ad:17:6f: 3d:e8:ba:d0:61:41:9f:3e:3c:22:19:95:62:b3:63: e4:56:d1:ff:12:fb:a8:53:1a:f4:01:ac:f1:77:9b: 03:a8:7a:43:92:62:61:7e:5c:f1:30:f3:95:61:5e: d6:69:90:b0:7c:5a:a9:34:a3:b3:7e:f2:f9:71:12: 74:35:13:1c:ee:53:5a:7a:30:f8:9f:1c:1e:aa:73: 93:f4:26:09:c8:8f:77:4a:a5:7f:02:28:9c:b0:24: e4:07:d8:1a:f0:ce:4d:e7:72:ec:bf:ef:29:26:37: 03:aa:7b:d3:a0:1c:e5:5c:b3:b0:df:46:a7:56:3c: 94:a4:69:be:bb:70:cc:2d:48:2d:8a:0d:e8:7d:97: 52:3c:88:4c:60:c9:a3:bd:c3:5e:84:5f:49:b1:12: 14:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E1:82:66:F7:F8:1A:8B:3E:BF:AF:6A:AE:01:BD:00:41:5E:23:66 X509v3 Authority Key Identifier: keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:16:d1:94:de:d8:66:cd:8a:87:78:e9:dc:c2:22:98:43:d4: 0c:b1:15:54:9b:06:e5:a3:9a:62:00:e9:3f:22:b0:15:9b:8a: 77:49:c4:e5:23:43:d3:89:09:23:26:f7:69:6a:98:64:3b:74: ad:2f:9e:45:d2:d6:fb:de:da:77:2d:52:5d:5d:47:1f:aa:20: 38:22:f6:1f:d4:f6:c1:0f:15:64:2e:b5:45:26:8f:01:49:47: e8:ca:5b:2a:a8:e8:fc:bb:bb:37:af:91:ce:76:b4:39:1b:de: e7:20:30:61:21:c6:b5:09:e6:9e:8a:ab:e0:96:e0:50:3d:a3: ac:e9:a0:38:7a:c0:fd:fd:4d:86:74:9b:fb:0c:13:03:35:6d: 7d:32:1a:fd:6e:88:40:08:9c:f3:f3:2b:6d:08:2a:26:50:2c: 1e:e3:5b:e0:a9:aa:df:bc:c4:0b:fa:d6:15:e1:3c:1d:7c:6e: a2:b6:62:8a:f1:d2:e4:d8:20:27:fa:fd:05:5b:01:cf:f8:69: ad:7f:d4:1c:13:0c:63:00:f3:51:22:05:8e:ec:86:e3:a3:f1: 02:56:60:1b:52:78:b7:17:1a:8f:bf:1d:8b:54:50:a3:54:dd: 8b:8d:34:36:ed:de:f1:28:49:08:4f:65:37:91:56:c5:14:bb: ae:c1:62:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKDc3MDZEMDg4RTkyMURFOEIwMUVCQkEwNjIwMUQwNDE1 MEU4NjREMDQwHhcNMjYwMTE2MTc1MzQ4WhcNMjYwMTIzMTc1MzQ4WjAYMRYwFAYD VQQDDA02OTZhN2IyYy01NzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1J/Hgrt4jX0TAXrfj0C3zvfdoYAJqrvBEuEh/dJzfMU0jf6worl2m35u9sfv MD8xlDNtdT5xYnuXzumsgJfhRqJyQdfSkvyLYP/cq8eu6Rq+KoCfcDJfBCDbqoGj u+y3qavXlY2tF2896LrQYUGfPjwiGZVis2PkVtH/EvuoUxr0Aazxd5sDqHpDkmJh flzxMPOVYV7WaZCwfFqpNKOzfvL5cRJ0NRMc7lNaejD4nxweqnOT9CYJyI93SqV/ AiicsCTkB9ga8M5N53Lsv+8pJjcDqnvToBzlXLOw30anVjyUpGm+u3DMLUgtig3o fZdSPIhMYMmjvcNehF9JsRIUfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXhgmb3 +BqLPr+vaq4BvQBBXiNmMB8GA1UdIwQYMBaAFHcG0IjpId6LAeu6BiAdBBUOhk0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82RTc0OTUxMDA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNvc0I2N29HSUIwRUZRNkdU UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3YlFpT2toM29zQjY3b0dJQjBFRlE2R1RRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdCQS82RTc0OTUxMDA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNv c0I2N29HSUIwRUZRNkdUUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7FtGU3thmzYqHeOncwiKYQ9QMsRVUmwblo5piAOk/IrAVm4p3ScTl I0PTiQkjJvdpaphkO3StL55F0tb73tp3LVJdXUcfqiA4IvYf1PbBDxVkLrVFJo8B SUfoylsqqOj8u7s3r5HOdrQ5G97nIDBhIca1CeaeiqvgluBQPaOs6aA4esD9/U2G dJv7DBMDNW19Mhr9bohACJzz8yttCComUCwe41vgqarfvMQL+tYV4TwdfG6itmKK 8dLk2CAn+v0FWwHP+Gmtf9QcEwxjAPNRIgWO7Ibjo/ECVmAbUni3FxqPvx2LVFCj VN2LjTQ27d7xKEkIT2U3kVbFFLuuwWIs -----END CERTIFICATE-----Generated at Sun Jan 18 07:45:23 2026 by rpki-client