This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft File: aj72cYLbsPbM88pBN4wBGYBq6b0.mft (raw, json) Hash identifier: FV766eWXnqk5UY9e6O5A4CT3Ymr49s4p9x3UnnewhGM= Subject key identifier: 11:E2:B1:3A:0A:8B:35:9D:98:C4:65:A1:4B:3F:5E:B7:FF:51:AE:F5 Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD Certificate issuer: /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft Manifest number: AC Signing time: Fri 09 Jan 2026 05:28:17 +0000 Manifest this update: Fri 09 Jan 2026 05:28:16 +0000 Manifest next update: Fri 16 Jan 2026 05:28:16 +0000 Files and hashes: 1: aj72cYLbsPbM88pBN4wBGYBq6b0.crl (hash: 7AJeHOlB4pWZW8sBFRpsIl7aHZpiyajIHfQnpcgNahg=) 2: FDE6938CE90C11EFB9D98326C4F9AE02.roa (hash: EQY90pkMKZS20T7XhciTL191HbTMnbpWtQHaja8QyGI=) 3: FD63D5BEE90C11EFB9D98326C4F9AE02.roa (hash: XHfUu+5yh0x5y1fbUjOYEtUpMyJC2J2Z1oZf8nnZcak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Jan 2026 05:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD Validity Not Before: Jan 9 05:28:16 2026 GMT Not After : Jan 16 05:28:16 2026 GMT Subject: CN=696091f0-7779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cb:52:37:88:b5:b3:b9:a5:6e:81:79:f1:00: 53:0a:80:1f:b4:05:ab:c1:96:6e:69:a1:85:3d:5f: 8b:81:c0:d2:2f:53:87:8d:c7:72:80:b9:75:a2:05: 10:de:ac:d6:0a:e0:ee:9d:fa:96:fe:6a:5c:b1:fe: c0:59:9e:26:27:98:84:8d:40:c4:12:58:01:9d:5f: bb:3b:5f:6c:49:e7:90:17:51:e3:bf:5e:0a:e8:d1: d7:f1:c2:64:d9:08:15:a3:2d:02:3c:7c:b9:b1:f4: a7:9e:ec:8e:1f:7e:e4:b6:75:fb:68:35:11:25:da: a1:e3:e7:bf:88:05:ce:b8:eb:4c:9c:e2:51:db:8a: 32:b9:44:02:da:c6:86:2b:53:1a:e7:3c:8d:b0:2e: 6c:f4:9c:4b:3e:eb:43:fb:46:9f:d5:eb:87:6f:56: d6:55:4f:eb:9e:f2:ee:79:c5:6b:24:e4:5d:0b:e3: 97:52:a5:76:8a:a5:32:e3:f1:50:b5:31:a8:ec:0d: b1:b0:31:e7:c2:84:7c:79:84:1e:e6:37:92:5e:5f: ff:a9:88:a9:2c:35:eb:28:26:05:43:6e:43:62:10: 8c:13:39:fc:c4:f8:d4:d3:5d:a1:56:68:71:d5:5c: f7:df:ae:0f:be:34:27:4b:12:59:40:62:c9:e1:39: 73:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E2:B1:3A:0A:8B:35:9D:98:C4:65:A1:4B:3F:5E:B7:FF:51:AE:F5 X509v3 Authority Key Identifier: keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:13:1e:ba:df:a9:ae:5f:1a:7a:2d:bd:75:b9:68:13:d0:e3: 3f:8c:e4:89:57:4b:c4:c3:b9:48:ec:4d:66:08:8a:ef:2f:20: 68:30:fb:93:4b:b0:e5:92:b7:12:c8:9f:55:fe:3f:51:08:b0: d8:fa:48:99:67:86:11:53:e9:12:90:a0:8c:49:07:dd:f7:84: b1:ce:a9:c3:c0:28:eb:04:55:20:5b:dc:e2:21:b9:09:a6:8d: 12:2f:2c:83:20:7b:d7:4c:56:f0:af:e9:54:fe:02:7c:03:d6: 50:f4:25:70:ae:45:60:bb:76:42:98:f8:00:d1:4f:5c:b8:a3: 2b:bc:a7:14:d6:48:1c:0e:20:3f:ab:ee:5f:a0:87:29:3b:aa: 65:2f:b8:88:8b:c3:d7:6b:24:2c:17:3d:46:43:fd:a9:5d:4a: 21:45:d3:6e:e5:35:9f:70:2c:cd:e5:88:57:58:e0:bf:78:78: 3a:ab:8a:6d:f1:7d:33:14:79:22:47:3f:05:18:09:9c:13:0c: b2:61:fc:59:47:65:f7:5d:83:70:43:fd:91:22:e4:54:89:19: 03:ba:3d:15:5e:a3:8c:62:39:ec:f2:de:4f:c6:be:81:91:c1: 9d:41:ea:cc:2b:b3:87:e5:e3:7d:fc:83:28:2b:0d:9e:fc:ae: 12:45:d5:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBBMkUxMTAvBgNVBAUTKDZBM0VGNjcxODJEQkIwRjZDQ0YzQ0E0MTM3OEMwMTE5 ODA2QUU5QkQwHhcNMjYwMTA5MDUyODE2WhcNMjYwMTE2MDUyODE2WjAYMRYwFAYD VQQDDA02OTYwOTFmMC03Nzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvstSN4i1s7mlboF58QBTCoAftAWrwZZuaaGFPV+LgcDSL1OHjcdygLl1ogUQ 3qzWCuDunfqW/mpcsf7AWZ4mJ5iEjUDEElgBnV+7O19sSeeQF1Hjv14K6NHX8cJk 2QgVoy0CPHy5sfSnnuyOH37ktnX7aDURJdqh4+e/iAXOuOtMnOJR24oyuUQC2saG K1Ma5zyNsC5s9JxLPutD+0af1euHb1bWVU/rnvLuecVrJORdC+OXUqV2iqUy4/FQ tTGo7A2xsDHnwoR8eYQe5jeSXl//qYipLDXrKCYFQ25DYhCMEzn8xPjU012hVmhx 1Vz3364PvjQnSxJZQGLJ4TlzOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHisToK izWdmMRloUs/Xrf/Ua71MB8GA1UdIwQYMBaAFGo+9nGC27D2zPPKQTeMARmAaum9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEEyRS9DODM2QzdCMkU5 MEIxMUVGODIxODU4MjRDNEY5QUUwMi9hajcyY1lMYnNQYk04OHBCTjR3QkdZQnE2 YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FqNzJjWUxic1BiTTg4cEJONHdCR1lCcTZiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEEyRS9DODM2QzdCMkU5MEIxMUVGODIxODU4MjRDNEY5QUUwMi9hajcyY1lMYnNQ Yk04OHBCTjR3QkdZQnE2YjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwEx6636muXxp6Lb11uWgT0OM/jOSJV0vEw7lI7E1mCIrvLyBoMPuT S7DlkrcSyJ9V/j9RCLDY+kiZZ4YRU+kSkKCMSQfd94SxzqnDwCjrBFUgW9ziIbkJ po0SLyyDIHvXTFbwr+lU/gJ8A9ZQ9CVwrkVgu3ZCmPgA0U9cuKMrvKcU1kgcDiA/ q+5foIcpO6plL7iIi8PXayQsFz1GQ/2pXUohRdNu5TWfcCzN5YhXWOC/eHg6q4pt 8X0zFHkiRz8FGAmcEwyyYfxZR2X3XYNwQ/2RIuRUiRkDuj0VXqOMYjns8t5Pxr6B kcGdQerMK7OH5eN9/IMoKw2e/K4SRdX7 -----END CERTIFICATE-----Generated at Fri Jan 9 16:59:08 2026 by rpki-client