This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft File: tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft (raw, json) Hash identifier: rdnUYsnOOziQN3GilqWb5US7ERojNsdztPUqkd+3BrY= Subject key identifier: 6A:0B:79:30:F8:0E:DD:8B:76:E9:99:DC:BB:6A:68:A6:1E:50:44:2D Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft Manifest number: 68 Signing time: Tue 27 Jan 2026 06:19:42 +0000 Manifest this update: Tue 27 Jan 2026 06:19:41 +0000 Manifest next update: Tue 03 Feb 2026 06:19:41 +0000 Files and hashes: 1: tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl (hash: nW0rOAxacbAjf/o5lTxvr5eq1AezC8FrN8uOeF+M2Yc=) 2: 1D5A2DB2CAD711F0A64CBB56C4F9AE02.roa (hash: qmzNMDj0eJRO3I+2FONjuUe85vVvjRJp6v99858Vj2M=) 3: E13B045ACAD611F0AB7FEE55C4F9AE02.roa (hash: hN1QiGOiu058mqvwkPVN0CGty1GL6SzSs8DlhHm4rnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 06:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Validity Not Before: Jan 27 06:19:41 2026 GMT Not After : Feb 3 06:19:41 2026 GMT Subject: CN=697858fd-6f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ee:25:06:08:a0:db:5b:d4:5d:10:8f:c4:ad: 2f:8e:95:ae:92:3f:d8:14:9d:90:90:54:db:7f:2e: 34:88:6d:2d:ca:cb:91:9b:31:b3:da:99:b3:67:39: d9:64:8a:63:f0:84:6c:dd:97:70:be:62:e4:b8:bb: 4f:34:00:13:cf:ec:2a:49:da:86:1f:4a:a2:1e:33: 2f:53:5f:c9:e3:87:af:b2:4e:9c:8e:47:61:7d:33: 87:ca:4e:68:e6:e6:1b:ce:4c:6f:02:28:3b:55:d1: 05:26:94:aa:b4:72:87:3d:42:00:3a:60:59:91:bc: d2:49:0b:97:1d:cf:7f:a9:43:08:63:66:f7:20:d1: 75:8a:3f:2b:c9:f7:61:0c:e1:04:13:09:19:d0:da: 65:85:31:28:4e:db:1a:b5:fc:8f:01:43:40:ac:eb: c7:5c:16:c4:8b:40:b4:46:65:bf:35:98:e7:34:22: f5:7f:6f:f5:6b:45:69:6a:14:9a:b4:02:1b:6d:30: 25:ff:86:cf:92:29:fd:02:90:13:00:d9:00:7f:de: 3f:73:2f:3e:5d:01:1b:92:90:cd:1a:0b:34:bf:df: 4a:f0:2a:e7:18:7f:68:a2:0b:8e:95:90:1c:27:12: 6d:c0:99:22:8b:97:0b:d2:8e:df:7c:e7:03:63:ad: 33:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0B:79:30:F8:0E:DD:8B:76:E9:99:DC:BB:6A:68:A6:1E:50:44:2D X509v3 Authority Key Identifier: keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:82:ca:de:4f:ce:88:90:3a:65:63:4f:85:c0:8b:46:50:ff: 98:a3:9b:43:04:22:64:11:e8:0c:a7:43:48:e7:ed:05:68:9e: ae:66:b0:ad:23:76:7c:e9:c9:85:bb:b0:c9:f7:15:fc:bb:ff: 6d:ce:ca:c1:97:40:81:9f:0d:f8:3d:ac:d7:0f:98:98:dc:35: 1b:36:24:28:62:ce:e9:55:7b:f8:f8:5d:8c:57:5b:8c:d4:1a: e3:50:a4:5a:11:fe:b4:e1:8d:40:ee:06:06:11:c2:26:92:6e: 6c:a2:22:eb:3a:39:ff:08:a3:b7:43:1a:5b:a9:53:d5:d1:ae: 6e:1a:29:e1:1e:71:01:bd:48:b3:e7:9a:ca:94:dd:76:a2:c1: 57:3d:d7:84:86:12:dc:2e:3b:e5:06:41:e2:56:a4:da:ea:d5: 4f:b4:3b:67:3e:01:f9:d9:8b:63:ee:c1:af:7b:b7:63:bb:84: 99:17:f7:e3:ce:b0:ba:65:3c:c6:b6:5c:fd:56:bb:fd:5f:d8: 42:d7:39:96:71:dc:1d:d8:90:a3:12:b3:bd:2f:16:ec:91:ac: 6d:41:be:7d:ac:90:3c:db:e1:19:2f:e2:49:6b:60:d8:39:c8: 55:d8:2c:3c:8a:b0:b6:0f:0a:ab:7d:1d:ac:30:00:28:6d:6f: 72:98:35:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTlCNTExMC8GA1UEBRMoQjUyQUUxODM2QzYxMTkzREVBOEJBNUJFOUQ3MUI4Q0JC MzQzMDM5ODAeFw0yNjAxMjcwNjE5NDFaFw0yNjAyMDMwNjE5NDFaMBgxFjAUBgNV BAMMDTY5Nzg1OGZkLTZmNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC67iUGCKDbW9RdEI/ErS+Ola6SP9gUnZCQVNt/LjSIbS3Ky5GbMbPambNnOdlk imPwhGzdl3C+YuS4u080ABPP7CpJ2oYfSqIeMy9TX8njh6+yTpyOR2F9M4fKTmjm 5hvOTG8CKDtV0QUmlKq0coc9QgA6YFmRvNJJC5cdz3+pQwhjZvcg0XWKPyvJ92EM 4QQTCRnQ2mWFMShO2xq1/I8BQ0Cs68dcFsSLQLRGZb81mOc0IvV/b/VrRWlqFJq0 AhttMCX/hs+SKf0CkBMA2QB/3j9zLz5dARuSkM0aCzS/30rwKucYf2iiC46VkBwn Em3AmSKLlwvSjt985wNjrTPVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUagt5MPgO 3Yt26Zncu2poph5QRC0wHwYDVR0jBBgwFoAUtSrhg2xhGT3qi6W+nXG4y7NDA5gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5OUI1L0IyMjY2RkQyNkRF NDExRjBCRTAyRjk2MUM0RjlBRTAyL3RTcmhnMnhoR1QzcWk2Vy1uWEc0eTdOREE1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFNyaGcyeGhHVDNxaTZXLW5YRzR5N05EQTVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 OUI1L0IyMjY2RkQyNkRFNDExRjBCRTAyRjk2MUM0RjlBRTAyL3RTcmhnMnhoR1Qz cWk2Vy1uWEc0eTdOREE1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADyCyt5PzoiQOmVjT4XAi0ZQ/5ijm0MEImQR6AynQ0jn7QVonq5msK0j dnzpyYW7sMn3Ffy7/23OysGXQIGfDfg9rNcPmJjcNRs2JChizulVe/j4XYxXW4zU GuNQpFoR/rThjUDuBgYRwiaSbmyiIus6Of8Io7dDGlupU9XRrm4aKeEecQG9SLPn msqU3XaiwVc914SGEtwuO+UGQeJWpNrq1U+0O2c+AfnZi2Puwa97t2O7hJkX9+PO sLplPMa2XP1Wu/1f2ELXOZZx3B3YkKMSs70vFuyRrG1Bvn2skDzb4Rkv4klrYNg5 yFXYLDyKsLYPCqt9HawwAChtb3KYNRU= -----END CERTIFICATE-----Generated at Tue Jan 27 17:52:08 2026 by rpki-client