This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft File: A21zSqYwJkoY7FZN1qtBZGHGpGo.mft (raw, json) Hash identifier: O0WvlqS4P8/bvC1q09BlC9zKj5Cy2f7vlIKnzkNpQ00= Subject key identifier: 22:6B:B0:A6:A6:0F:CD:FE:25:B7:FB:0B:9C:9A:D2:06:39:A6:01:AF Authority key identifier: 03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A Certificate issuer: /CN=A91A78C2/serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft Manifest number: 08 Signing time: Wed 21 Jan 2026 07:09:08 +0000 Manifest this update: Wed 21 Jan 2026 07:09:08 +0000 Manifest next update: Wed 28 Jan 2026 07:09:08 +0000 Files and hashes: 1: A21zSqYwJkoY7FZN1qtBZGHGpGo.crl (hash: heB8avKhA5aXnBxJydPLBoLhj5sOUbJWSJWvNreKAM4=) 2: 95BF687CEDE511F0AFD0F13E766F56BC.roa (hash: zmWDQ6MXVf7Ws4JCdCiFHc/NRo6v2SNX8TvU2l+Qkt0=) 3: 96376E44EDE511F0AFD0F13E766F56BC.roa (hash: vKdQ4FZUJKBpRIglfp7Sr9GKQnFuUFZQuFz7N/Wmk2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 07:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A78C2, serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A Validity Not Before: Jan 21 07:09:08 2026 GMT Not After : Jan 28 07:09:08 2026 GMT Subject: CN=69707b94-ed96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:b1:4b:54:ed:d9:83:60:4f:d6:26:81:fe: 33:08:6e:5c:4c:43:11:4a:61:5a:ac:01:e5:be:bf: 2a:10:41:5a:c2:29:52:c6:8d:a3:e8:68:2d:bd:f3: ab:6d:a0:c8:1c:cd:69:38:9b:fa:e2:09:af:0e:f6: 5e:d2:eb:0f:c0:7e:cd:c5:ac:78:ca:7f:6c:52:0a: 91:ea:fe:06:8a:08:49:8f:b9:a2:ef:46:1a:f9:08: 19:f0:2a:93:4f:19:f3:8a:38:b3:79:a1:75:53:3b: d9:b9:7a:05:66:5c:51:2e:5b:49:40:43:06:fc:d8: c5:c6:99:11:1b:a8:a2:0c:2b:2c:ed:00:b7:1f:63: d9:a5:2e:dc:a7:20:5f:06:fc:89:36:d8:94:b0:51: a4:72:f4:8b:6a:55:5f:c5:16:e5:03:ee:6f:48:51: 99:7c:ed:2a:a6:20:58:4b:87:a8:3a:75:b7:7f:8e: 96:d8:7e:a9:a2:9c:31:4b:a1:bd:51:8c:ac:eb:c9: 91:06:b8:81:42:b3:4b:37:03:d9:62:9e:48:5b:9a: 49:5d:03:17:16:11:c1:f6:09:26:e5:87:2d:1b:0f: 3e:82:87:c1:55:95:e7:4c:7d:d3:39:79:60:b1:08: 99:a5:5e:0f:cf:18:4b:34:1c:7e:ca:06:d6:fc:f9: ff:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6B:B0:A6:A6:0F:CD:FE:25:B7:FB:0B:9C:9A:D2:06:39:A6:01:AF X509v3 Authority Key Identifier: keyid:03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:9f:f5:ca:80:e4:be:6b:91:69:6d:23:a3:6b:cb:30:7c:89: 88:b5:5b:9f:8e:f4:39:d9:78:99:d0:3a:15:65:cc:7f:f5:24: 34:a6:f2:a5:85:5e:fe:d3:25:93:76:e3:2c:af:d8:82:09:38: b8:07:e6:f8:e2:3a:bd:61:7f:77:db:85:c6:22:f9:e0:8f:07: a2:d5:1c:2f:29:f6:3a:e0:bb:a9:7f:d7:a4:b0:d2:35:16:cb: 59:96:2b:eb:1b:1c:0e:71:f5:19:74:23:31:61:27:11:ac:ca: 3f:0e:2b:18:9f:ab:40:b6:62:ca:4c:91:86:28:3e:e1:72:b3: 10:4c:48:9c:91:fa:39:d4:c3:d8:2a:55:89:93:90:12:e3:17: dd:44:0b:a3:7c:aa:9b:ba:60:3c:8a:e0:e5:e5:f4:7b:78:12: cd:ec:c0:2e:3e:9a:7a:87:db:fa:c6:60:e2:9e:3f:2c:b2:9c: 2c:f5:cc:06:b8:8d:b4:1e:73:72:cb:73:1c:c4:11:71:98:c3: 3a:21:94:66:f0:3c:f9:ce:40:2f:ad:73:15:24:4c:11:f4:ab: 3b:d9:d6:2f:0a:cb:2c:44:8e:ce:24:fb:56:51:a6:e2:22:9f: 8d:1d:06:76:09:d1:57:ba:a7:eb:c7:9a:1a:ce:6d:73:c0:b7: 18:d6:3d:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFB NzhDMjExMC8GA1UEBRMoMDM2RDczNEFBNjMwMjY0QTE4RUM1NjRERDZBQjQxNjQ2 MUM2QTQ2QTAeFw0yNjAxMjEwNzA5MDhaFw0yNjAxMjgwNzA5MDhaMBgxFjAUBgNV BAMMDTY5NzA3Yjk0LWVkOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHI7FLVO3Zg2BP1iaB/jMIblxMQxFKYVqsAeW+vyoQQVrCKVLGjaPoaC2986tt oMgczWk4m/riCa8O9l7S6w/Afs3FrHjKf2xSCpHq/gaKCEmPuaLvRhr5CBnwKpNP GfOKOLN5oXVTO9m5egVmXFEuW0lAQwb82MXGmREbqKIMKyztALcfY9mlLtynIF8G /Ik22JSwUaRy9ItqVV/FFuUD7m9IUZl87SqmIFhLh6g6dbd/jpbYfqminDFLob1R jKzryZEGuIFCs0s3A9linkhbmkldAxcWEcH2CSblhy0bDz6Ch8FVledMfdM5eWCx CJmlXg/PGEs0HH7KBtb8+f89AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUImuwpqYP zf4lt/sLnJrSBjmmAa8wHwYDVR0jBBgwFoAUA21zSqYwJkoY7FZN1qtBZGHGpGow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3OEMyLzM1NDQ2Mzc2RURF NTExRjBCMDFCOTIzQzc2NkY1NkJDL0EyMXpTcVl3SmtvWTdGWk4xcXRCWkdIR3BH by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTIxelNxWXdKa29ZN0ZaTjFxdEJaR0hHcEdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 OEMyLzM1NDQ2Mzc2RURFNTExRjBCMDFCOTIzQzc2NkY1NkJDL0EyMXpTcVl3Smtv WTdGWk4xcXRCWkdIR3BHby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIWf9cqA5L5rkWltI6NryzB8iYi1W5+O9DnZeJnQOhVlzH/1JDSm8qWF Xv7TJZN24yyv2IIJOLgH5vjiOr1hf3fbhcYi+eCPB6LVHC8p9jrgu6l/16Sw0jUW y1mWK+sbHA5x9Rl0IzFhJxGsyj8OKxifq0C2YspMkYYoPuFysxBMSJyR+jnUw9gq VYmTkBLjF91EC6N8qpu6YDyK4OXl9Ht4Es3swC4+mnqH2/rGYOKePyyynCz1zAa4 jbQec3LLcxzEEXGYwzohlGbwPPnOQC+tcxUkTBH0qzvZ1i8KyyxEjs4k+1ZRpuIi n40dBnYJ0Ve6p+vHmhrObXPAtxjWPQY= -----END CERTIFICATE-----Generated at Wed Jan 21 15:06:13 2026 by rpki-client