This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json) Hash identifier: skCirXsPd6rKltFRIFYxBPPNT4OKkjG+46Iqxk+f3Lc= Subject key identifier: 04:73:7D:5C:C7:32:E5:58:C0:3A:9F:56:03:3E:D7:90:87:EC:88:6C Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 06CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft Manifest number: 0698 Signing time: Mon 26 Jan 2026 21:57:29 +0000 Manifest this update: Mon 26 Jan 2026 21:57:28 +0000 Manifest next update: Mon 02 Feb 2026 21:57:28 +0000 Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: 8J/5u/msYAxdFG3uHvguNwFS1XDQx7udQ96dqTlhX+Q=) 2: 845606CEC0A211F08C07402EC4F9AE02.roa (hash: 60O5q/M3Zhbupf4irny02ti/wPSXEWKTgiVbupEbwmY=) 3: 617AEF02C0A211F0834F0B2EC4F9AE02.roa (hash: e2cBgK3GRmfDjSm1Qqg4IoisAWAPLTjuVCxKZ4c2zQ4=) 4: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: CKUqvOaMRoHUuvk0O3ZRuqOU8HxzjagSOpCtfnM7DSk=) 5: A19BECB47DC011F0907B9458C4F9AE02.roa (hash: PV6jY777/SNCb3xfvV4u3m3ixy1j9fHX09H2Nm4Vk4s=) 6: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: 50SJ1VD5Mg9u7/s+ykx+b/EGgkeu1R+I/i5QtPiDi1Q=) 7: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: lXdiATosqgnGw9iwMqgeyMFFlsqTM6dHLhkV++SdnXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 21:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1738 (0x6ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Jan 26 21:57:28 2026 GMT Not After : Feb 2 21:57:28 2026 GMT Subject: CN=6977e349-56c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c1:cc:a6:99:51:fd:1e:5f:88:e0:d2:a7:5a: 78:ff:43:16:3d:81:5d:ad:a5:87:e8:1b:fd:12:01: f8:cb:d0:1f:c4:8c:d8:c2:01:fe:d0:dc:ec:f5:51: 40:f6:a4:1a:0b:55:a3:eb:61:cf:31:64:42:70:25: f2:77:b1:63:a4:e1:e1:71:ec:d0:5c:43:d6:fb:12: 3c:17:7f:e7:0b:da:41:39:30:7c:76:ff:df:e0:1e: e4:72:7c:6a:2e:4f:88:13:1b:66:09:51:56:99:c7: e0:f1:99:19:93:d4:42:a6:7f:de:0d:62:1f:bd:9a: 0d:03:36:4c:19:15:5c:aa:24:30:1f:ed:56:13:0b: 6d:89:5a:01:0c:33:f6:f9:46:4e:aa:d4:cf:fa:ca: cb:78:39:96:1b:08:8c:48:49:75:f0:2b:cb:ec:2e: 7c:33:c5:95:3f:9b:6f:79:a4:84:41:44:a4:18:b1: c7:da:cd:ee:29:19:0f:85:ea:46:ad:af:c9:c0:5b: 1d:12:d9:87:4d:97:ba:cb:43:7f:de:b0:70:47:31: 49:ef:42:8d:81:2a:75:4c:02:18:6b:46:e5:46:82: 26:25:97:e9:25:ea:bf:84:ef:2d:ee:a0:b0:89:6d: 5b:6e:fe:8c:93:69:04:2b:22:d4:38:31:5d:c4:ad: 2a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:73:7D:5C:C7:32:E5:58:C0:3A:9F:56:03:3E:D7:90:87:EC:88:6C X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:af:4a:8b:ce:ca:34:3e:a5:57:13:84:d6:45:5f:42:e9:c7: 84:e4:e1:33:1c:01:b1:18:8c:36:29:58:96:79:5b:ef:74:6f: 2c:39:b7:b1:eb:17:1a:cc:53:4a:a4:6f:e5:9f:93:68:5a:06: 5f:a7:d3:46:47:ba:76:6a:92:12:bd:86:8c:3c:7f:df:ff:82: 30:c7:5f:23:a6:df:4b:e1:76:bc:9e:86:0b:f8:43:5c:37:03: 15:c7:06:73:58:4e:be:cb:fb:fd:dc:5f:07:39:df:1f:40:c8: d8:48:d6:ee:ca:fa:54:62:87:43:df:2e:87:d4:d5:84:8b:72: 29:a0:a5:d7:6a:6c:c2:29:57:3a:97:73:8f:ca:c5:aa:4a:e2: 52:33:3b:56:9e:65:7a:74:49:28:e1:af:dc:be:e0:48:5a:6f: b1:05:a8:fc:7d:22:30:05:36:cd:16:85:cc:1a:f9:98:1f:d6: 14:8d:6b:81:69:9d:89:dd:b7:cb:10:d9:b1:f0:da:19:bc:f3: 65:df:9e:93:7b:8d:fb:02:e1:a5:a8:c3:3e:7d:2d:1e:6a:7a: c1:e4:38:5b:88:18:35:97:29:bd:22:87:eb:9f:38:bc:b5:9a: 96:04:38:92:87:70:e4:b1:eb:90:de:5b:e8:f9:a3:3c:58:e6: bd:d9:cf:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjYwMTI2MjE1NzI4WhcNMjYwMjAyMjE1NzI4WjAYMRYwFAYD VQQDDA02OTc3ZTM0OS01NmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMHMpplR/R5fiODSp1p4/0MWPYFdraWH6Bv9EgH4y9AfxIzYwgH+0Nzs9VFA 9qQaC1Wj62HPMWRCcCXyd7FjpOHhcezQXEPW+xI8F3/nC9pBOTB8dv/f4B7kcnxq Lk+IExtmCVFWmcfg8ZkZk9RCpn/eDWIfvZoNAzZMGRVcqiQwH+1WEwttiVoBDDP2 +UZOqtTP+srLeDmWGwiMSEl18CvL7C58M8WVP5tveaSEQUSkGLHH2s3uKRkPhepG ra/JwFsdEtmHTZe6y0N/3rBwRzFJ70KNgSp1TAIYa0blRoImJZfpJeq/hO8t7qCw iW1bbv6Mk2kEKyLUODFdxK0qRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARzfVzH MuVYwDqfVgM+15CH7IhsMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDZCMC8zMkU5ODczQ0JGQzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpM TkIyY3Q3YkFaWnZfcXN5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnr0qLzso0PqVXE4TWRV9C6ceE5OEzHAGxGIw2KViWeVvvdG8sObex 6xcazFNKpG/ln5NoWgZfp9NGR7p2apISvYaMPH/f/4Iwx18jpt9L4Xa8noYL+ENc NwMVxwZzWE6+y/v93F8HOd8fQMjYSNbuyvpUYodD3y6H1NWEi3IpoKXXamzCKVc6 l3OPysWqSuJSMztWnmV6dEko4a/cvuBIWm+xBaj8fSIwBTbNFoXMGvmYH9YUjWuB aZ2J3bfLENmx8NoZvPNl356Te437AuGlqMM+fS0eanrB5DhbiBg1lym9Iofrnzi8 tZqWBDiSh3DkseuQ3lvo+aM8WOa92c9/ -----END CERTIFICATE-----Generated at Tue Jan 27 20:40:41 2026 by rpki-client