This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft File: 3yS01RxnhB3WAN0qYXhrzpiHhmc.mft (raw, json) Hash identifier: Jl6mMFxVBHKf/QbQP+1lm0Zt+Mikx+cTyUZ9Zxa6qeY= Subject key identifier: E9:33:9F:47:41:E7:5D:CB:7E:AE:AF:B5:9E:D5:44:3C:FF:33:E5:CC Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 Certificate issuer: /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft Manifest number: 0108 Signing time: Sat 17 Jan 2026 04:10:11 +0000 Manifest this update: Sat 17 Jan 2026 04:10:11 +0000 Manifest next update: Sat 24 Jan 2026 04:10:11 +0000 Files and hashes: 1: 3yS01RxnhB3WAN0qYXhrzpiHhmc.crl (hash: LLF1kU4qNi+aWEMbTPGzckRJHTx5CLrIBnIhe41QYwA=) 2: B21985725F3711EFA108CA0CC4F9AE02.roa (hash: hjZJ+P+DDZEo0McDoaqGVpFBbzW2XOruqYUk9+Z9bak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 04:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813ED, serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667 Validity Not Before: Jan 17 04:10:11 2026 GMT Not After : Jan 24 04:10:11 2026 GMT Subject: CN=696b0ba3-2a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8b:72:55:79:74:0d:92:80:d6:0b:f1:7d:14: f3:90:58:ba:65:70:5c:36:a0:af:93:c0:88:65:c4: a2:78:e0:75:38:66:a5:38:7e:f2:b9:73:e2:f2:4d: 2c:ab:8d:0d:bf:34:fb:c7:6b:64:7c:7a:d3:59:c1: 2a:a2:6f:40:97:32:df:17:b0:1a:a8:9c:62:66:cb: fe:f5:67:07:dc:14:80:a4:ec:15:b0:b0:c8:eb:b0: 0b:9f:eb:7b:11:0c:f1:e0:3f:65:c6:39:93:2b:6d: 4b:09:4a:a8:23:65:1f:b0:47:70:23:49:16:47:14: 82:ed:93:bc:a7:d9:d2:7b:34:07:90:8d:6c:3c:f1: c4:9d:ed:4d:a2:77:9e:dd:17:40:2e:e5:93:1e:b0: 94:c0:ea:2c:b5:7c:de:11:cc:df:5c:37:53:01:f4: 66:a7:b9:99:7f:8f:4e:1a:89:fc:fe:2e:0c:4b:38: 81:27:b3:f5:3f:c5:29:c3:95:20:31:d6:df:96:79: 6b:cf:b0:e9:ec:3c:c0:0d:31:2e:9f:a5:ad:e5:77: 5c:a6:07:80:6b:07:1f:7f:17:f0:38:77:df:c7:f4: 86:d9:f2:51:47:f1:83:b1:fb:bd:a6:34:6e:17:10: f3:82:e7:a9:7a:57:d0:13:8e:41:e6:c4:85:3e:8d: 4f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:33:9F:47:41:E7:5D:CB:7E:AE:AF:B5:9E:D5:44:3C:FF:33:E5:CC X509v3 Authority Key Identifier: keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:9d:5b:fb:5a:dd:1f:9d:6d:21:e1:b1:59:4e:fe:d4:ae:56: 7c:96:a3:95:23:43:a6:5c:58:b6:61:96:ba:9f:1e:f8:4e:22: 66:5a:70:6b:10:a0:4f:b4:ca:0c:6e:f2:fd:6c:42:e4:e5:62: 91:ab:7d:b2:63:6a:d3:20:d4:21:d5:21:c6:91:83:a1:96:fb: 1d:ae:35:0a:f6:78:09:e6:9e:c9:f9:e5:b3:bf:a1:bf:4c:c2: 44:e2:d4:22:2b:4c:10:0c:37:89:e4:a6:03:84:e5:f1:d5:d5: 9d:7c:14:47:ae:8c:03:77:fc:b3:e7:9d:41:49:9c:95:aa:1d: a2:67:50:39:64:bf:d1:df:91:00:1e:8a:b8:7e:48:d2:a9:a3: 25:cd:fe:46:41:93:8a:51:96:03:5e:8a:71:34:44:c0:97:16: 99:f6:18:58:58:72:69:80:6b:52:63:a5:64:68:93:09:63:4a: 2f:75:86:f5:3d:71:60:05:22:61:b1:2b:45:35:0f:b8:5a:83: b4:46:0a:32:49:de:58:06:b0:4f:0c:a5:92:91:84:bd:23:34: 64:d7:a0:12:30:74:75:12:66:ab:60:c9:67:ff:12:22:c6:ad: 66:6c:d7:17:93:07:ea:cd:6f:ef:4c:76:46:0f:75:60:04:15: b1:53:d4:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRUQxMTAvBgNVBAUTKERGMjRCNEQ1MUM2Nzg0MURENjAwREQyQTYxNzg2QkNF OTg4Nzg2NjcwHhcNMjYwMTE3MDQxMDExWhcNMjYwMTI0MDQxMDExWjAYMRYwFAYD VQQDDA02OTZiMGJhMy0yYTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYtyVXl0DZKA1gvxfRTzkFi6ZXBcNqCvk8CIZcSieOB1OGalOH7yuXPi8k0s q40NvzT7x2tkfHrTWcEqom9AlzLfF7AaqJxiZsv+9WcH3BSApOwVsLDI67ALn+t7 EQzx4D9lxjmTK21LCUqoI2UfsEdwI0kWRxSC7ZO8p9nSezQHkI1sPPHEne1Nonee 3RdALuWTHrCUwOostXzeEczfXDdTAfRmp7mZf49OGon8/i4MSziBJ7P1P8Upw5Ug Mdbflnlrz7Dp7DzADTEun6Wt5XdcpgeAawcffxfwOHffx/SG2fJRR/GDsfu9pjRu FxDzguepelfQE45B5sSFPo1PDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkzn0dB 513Lfq6vtZ7VRDz/M+XMMB8GA1UdIwQYMBaAFN8ktNUcZ4Qd1gDdKmF4a86Yh4Zn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFRC82NzdBQUEzQzVG MzcxMUVGQkYzNjlFNThDNEY5QUUwMi8zeVMwMVJ4bmhCM1dBTjBxWVhocnpwaUho bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzN5UzAxUnhuaEIzV0FOMHFZWGhyenBpSGhtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTNFRC82NzdBQUEzQzVGMzcxMUVGQkYzNjlFNThDNEY5QUUwMi8zeVMwMVJ4bmhC M1dBTjBxWVhocnpwaUhobWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVnVv7Wt0fnW0h4bFZTv7UrlZ8lqOVI0OmXFi2YZa6nx74TiJmWnBr EKBPtMoMbvL9bELk5WKRq32yY2rTINQh1SHGkYOhlvsdrjUK9ngJ5p7J+eWzv6G/ TMJE4tQiK0wQDDeJ5KYDhOXx1dWdfBRHrowDd/yz551BSZyVqh2iZ1A5ZL/R35EA Hoq4fkjSqaMlzf5GQZOKUZYDXopxNETAlxaZ9hhYWHJpgGtSY6VkaJMJY0ovdYb1 PXFgBSJhsStFNQ+4WoO0RgoySd5YBrBPDKWSkYS9IzRk16ASMHR1EmarYMln/xIi xq1mbNcXkwfqzW/vTHZGD3VgBBWxU9Sk -----END CERTIFICATE-----Generated at Sun Jan 18 03:17:25 2026 by rpki-client