This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json) Hash identifier: mhPCY3edycYEHjXeNNeh2Mxqr5zP8hO8/wQVkKSnHgk= Subject key identifier: B7:39:B9:F8:3E:DE:73:98:47:98:B1:A5:82:57:0D:4B:3E:D5:C4:84 Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Certificate serial: 0316 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft Manifest number: 02F4 Signing time: Wed 21 Jan 2026 00:29:57 +0000 Manifest this update: Wed 21 Jan 2026 00:29:57 +0000 Manifest next update: Wed 28 Jan 2026 00:29:57 +0000 Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: MZVEOhuXOqX8tNq/D6wmxS/6OZCu2xML+qC5C0tMfJs=) 2: 4D608CC0800211EF81167A23C4F9AE02.roa (hash: LzylPXm23vwSZhDjGZSMxqVNBZhHuc0qqCM5OUudeV8=) 3: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: 0XukXktPi06t2s/u4nG7O8A1Hjoe9Ve3TUYqOPy+qoM=) 4: 69F7328030A611F0BBA4642EC4F9AE02.roa (hash: pRX1aAjREIQhsq5Tkyea2GP0jBJzjLDx/TwdfJT+O2w=) 5: 69046BD0ECFE11F0B05C9076386F56BC.roa (hash: WWWTXZZs7Txiw4ZldwJSDa9VeyXlpUKlICfQm/IiRMI=) 6: 61A03234B57C11F0B3EF6D44C4F9AE02.roa (hash: A1vIWfjVNDBFpOaLGkypJkWaMIQtma4uqJwQ3KAhcB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 00:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 790 (0x316) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Validity Not Before: Jan 21 00:29:57 2026 GMT Not After : Jan 28 00:29:57 2026 GMT Subject: CN=69701e05-fdf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:22:75:07:e4:3b:7f:03:9a:db:7e:58:d1:fc: 35:24:74:b0:ae:28:d4:5d:75:47:c4:a5:6d:12:0d: f7:77:ac:f4:67:b1:e8:ab:7b:ac:5d:89:5f:94:65: 1e:95:9d:56:2b:a9:3e:f9:1c:c1:41:d1:36:5e:5b: 32:a0:5d:66:32:29:92:13:e1:7b:b2:7c:d8:8b:20: e7:7a:ee:a8:aa:da:59:f3:7e:72:17:00:57:98:fa: 13:b5:0e:d0:c6:6c:7d:1f:9b:09:e0:0f:8d:c2:ac: 2e:a0:3d:53:ca:d3:5c:34:7a:77:57:12:70:3c:04: 45:48:c8:8e:40:c6:fd:e4:90:f7:09:9a:22:fd:36: 3b:be:ac:b7:f2:e7:f8:00:74:70:a4:71:e0:73:9a: bb:85:da:92:c9:d1:85:36:0d:a6:0d:f9:d9:07:3e: 95:97:0e:a7:b7:9c:d6:c0:a7:5a:c7:8d:f1:cf:4e: f3:c7:f1:e0:85:59:2a:92:25:dd:95:22:8a:da:54: 68:ef:b0:4e:30:b1:ad:61:b5:5f:b2:6b:40:75:17: 85:82:2e:04:64:21:d5:f3:d0:97:e9:f1:2c:94:28: 2d:c6:ae:ce:e6:8f:be:1f:01:df:13:95:46:2a:f7: da:f3:ed:4e:ef:db:5c:55:4e:ff:27:31:9b:26:15: 70:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:39:B9:F8:3E:DE:73:98:47:98:B1:A5:82:57:0D:4B:3E:D5:C4:84 X509v3 Authority Key Identifier: keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:02:08:53:74:00:56:52:d7:a4:f2:d1:8e:ef:98:ea:fd:34: 31:f1:a2:04:2a:10:7c:3e:a2:f5:e3:e7:2f:2b:65:3c:20:9c: 23:ec:ce:45:50:a1:8b:47:94:7b:33:a5:f4:15:02:e9:e8:5f: c2:a0:12:83:e9:75:da:1d:70:a5:68:f5:b1:32:a3:ab:db:f7: 8b:5b:21:2c:46:8f:fd:85:9d:51:e2:94:96:4a:1d:ef:a4:c1: d9:63:a5:5f:a3:06:a0:23:c7:1e:46:09:06:55:c9:8b:55:39: d5:c4:34:82:79:90:41:6c:86:ca:7b:28:1a:a7:98:06:b3:76: b7:b3:17:e9:11:cf:45:29:5d:3f:af:d5:f0:d6:44:73:e9:f4: d1:ed:8d:d1:2f:24:a3:aa:38:4f:45:b3:6d:c3:dd:e0:ca:57: 21:7a:69:46:ce:79:77:28:d1:f6:06:c0:6a:25:1c:b1:44:d1: 3e:c5:68:a0:97:a2:6f:59:fb:32:6e:3e:fa:49:d2:a5:3d:ab: 5c:90:24:c2:58:fc:7e:7b:75:e4:b1:b8:66:74:eb:ce:17:93: 9a:9a:a6:c2:e0:69:7d:28:63:01:cc:54:d7:17:09:fd:db:b7: b8:6d:95:9e:50:44:fa:03:89:3f:54:09:cd:30:16:1f:bf:35: 59:ba:45:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG MkU0MDkyQjQwHhcNMjYwMTIxMDAyOTU3WhcNMjYwMTI4MDAyOTU3WjAYMRYwFAYD VQQDDA02OTcwMWUwNS1mZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4iJ1B+Q7fwOa235Y0fw1JHSwrijUXXVHxKVtEg33d6z0Z7Hoq3usXYlflGUe lZ1WK6k++RzBQdE2XlsyoF1mMimSE+F7snzYiyDneu6oqtpZ835yFwBXmPoTtQ7Q xmx9H5sJ4A+NwqwuoD1TytNcNHp3VxJwPARFSMiOQMb95JD3CZoi/TY7vqy38uf4 AHRwpHHgc5q7hdqSydGFNg2mDfnZBz6Vlw6nt5zWwKdax43xz07zx/HghVkqkiXd lSKK2lRo77BOMLGtYbVfsmtAdReFgi4EZCHV89CX6fEslCgtxq7O5o++HwHfE5VG Kvfa8+1O79tcVU7/JzGbJhVwRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLc5ufg+ 3nOYR5ixpYJXDUs+1cSEMB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4 NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBEMi9FQkMxQUMyQzE4NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6 YTFPWTdnbVhjcGJ5NUFrclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzAghTdABWUtek8tGO75jq/TQx8aIEKhB8PqL14+cvK2U8IJwj7M5F UKGLR5R7M6X0FQLp6F/CoBKD6XXaHXClaPWxMqOr2/eLWyEsRo/9hZ1R4pSWSh3v pMHZY6VfowagI8ceRgkGVcmLVTnVxDSCeZBBbIbKeygap5gGs3a3sxfpEc9FKV0/ r9Xw1kRz6fTR7Y3RLySjqjhPRbNtw93gylchemlGznl3KNH2BsBqJRyxRNE+xWig l6JvWfsybj76SdKlPatckCTCWPx+e3XksbhmdOvOF5OamqbC4Gl9KGMBzFTXFwn9 27e4bZWeUET6A4k/VAnNMBYfvzVZukVL -----END CERTIFICATE-----Generated at Thu Jan 22 22:35:54 2026 by rpki-client