This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: yF8tY4euYpfYttsVrxkmDTmc8DdRF8d9yLe9A7RrQpg= Subject key identifier: A6:C5:5B:3B:14:CB:85:4C:86:07:29:08:57:75:56:82:9B:0B:D2:F2 Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0CB1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0CA1 Signing time: Tue 20 Jan 2026 17:12:13 +0000 Manifest this update: Tue 20 Jan 2026 17:12:13 +0000 Manifest next update: Tue 27 Jan 2026 17:12:13 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: Asfvb6abo1j+X77LvenD2vZZ/6UDtpQFP2YMyIK/fVw=) 2: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: 8wjeVWlfo9cZAtiKpo1BdMOi+myZ3L7JFzRUdzBXzoo=) 3: DD004670C39711F0A241F86DC4F9AE02.roa (hash: I1SBr9macQO5KX8j2VSd052BaAoC6H36TX7tUwfX6hM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 17:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Jan 20 17:12:13 2026 GMT Not After : Jan 27 17:12:13 2026 GMT Subject: CN=696fb76d-af83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b0:19:e9:d2:d1:cc:9d:25:08:ad:cb:58:3d: 66:f0:f3:8f:3a:60:95:6e:fe:0a:00:e9:2d:49:5e: 0e:a5:f4:a2:f7:de:f2:30:38:ed:22:00:5f:1a:dc: 0d:0f:45:fc:1a:e1:ec:1b:0f:a0:47:c9:0e:a5:39: b3:52:43:3a:a0:37:99:bc:d9:1f:1b:85:45:06:81: 1b:a1:3c:1f:c4:b3:48:69:bd:26:68:8a:b0:f9:49: b0:e4:15:91:1c:f0:db:e7:97:32:ae:df:80:da:3e: 1d:fc:49:c5:5d:26:5f:aa:d1:56:8b:bd:db:dd:48: ac:4a:37:b0:a3:af:9f:6b:b4:ab:bf:19:6e:9e:11: 6a:cf:da:e1:18:4e:f2:33:5e:de:67:b0:19:9c:0f: 3b:c0:7f:c1:ee:91:74:f3:b5:af:5a:70:33:f1:65: f4:8b:89:2c:3d:0c:6d:ac:d3:71:67:34:3a:16:7b: 0b:7d:ab:52:b6:9b:fd:3e:96:60:a5:be:7e:eb:e8: db:30:1d:43:4a:64:78:ac:d8:cf:9f:f5:d9:f0:6d: 12:56:0d:37:da:68:24:e7:e0:c5:d3:f0:87:cf:33: 1a:e1:f7:1a:ac:a4:bf:7a:6f:15:7f:3e:59:9a:cf: 77:40:ee:4e:c4:9b:3f:02:fc:21:92:ed:0d:e7:e3: 24:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C5:5B:3B:14:CB:85:4C:86:07:29:08:57:75:56:82:9B:0B:D2:F2 X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:d3:90:38:07:03:96:4f:0d:08:7a:34:c0:12:aa:52:4d:32: e1:b3:af:15:81:e7:e4:7f:77:40:15:ed:26:7b:ce:ad:3b:ac: 94:d7:ef:01:9b:cf:41:a2:c5:f0:a7:a7:2b:17:a1:95:10:f4: 6f:e8:e5:f8:72:3a:ef:e4:9b:16:95:80:e1:15:36:0d:4d:50: 10:95:11:f9:61:cc:cd:72:03:c3:d0:3a:c9:75:24:4b:84:ed: 3b:36:93:9a:f3:ec:27:8f:5d:81:d1:58:88:06:ca:90:58:73: d5:f0:ae:c7:dd:a2:16:06:ca:27:0d:33:df:0c:53:bb:a0:65: 9e:b0:39:f9:1d:05:1a:c7:d7:28:a9:9a:73:84:64:ac:7e:7e: c9:14:ed:73:12:5e:55:b7:2b:00:49:52:dd:6b:eb:bc:b0:6b: 4f:d4:d8:83:a7:e8:82:b5:3d:b9:39:b6:e8:9a:ae:e0:28:35: 2b:e3:2b:7f:a8:39:20:2a:fb:55:5a:50:09:14:d1:74:3b:22: 72:48:88:97:05:4f:e4:15:91:6a:61:2a:e5:cc:2e:f3:0c:95: 31:88:22:9e:32:c1:0f:8e:47:e9:8c:f1:8b:a2:94:76:ee:0a: df:92:d5:ca:47:b3:57:6a:42:a3:d3:fc:48:a6:51:f5:55:b2: 19:54:31:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjYwMTIwMTcxMjEzWhcNMjYwMTI3MTcxMjEzWjAYMRYwFAYD VQQDDA02OTZmYjc2ZC1hZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbAZ6dLRzJ0lCK3LWD1m8POPOmCVbv4KAOktSV4OpfSi997yMDjtIgBfGtwN D0X8GuHsGw+gR8kOpTmzUkM6oDeZvNkfG4VFBoEboTwfxLNIab0maIqw+Umw5BWR HPDb55cyrt+A2j4d/EnFXSZfqtFWi73b3UisSjewo6+fa7SrvxlunhFqz9rhGE7y M17eZ7AZnA87wH/B7pF087WvWnAz8WX0i4ksPQxtrNNxZzQ6FnsLfatStpv9PpZg pb5+6+jbMB1DSmR4rNjPn/XZ8G0SVg032mgk5+DF0/CHzzMa4fcarKS/em8Vfz5Z ms93QO5OxJs/Avwhku0N5+MkiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbFWzsU y4VMhgcpCFd1VoKbC9LyMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC805A4BwOWTw0IejTAEqpSTTLhs68Vgefkf3dAFe0me86tO6yU1+8B m89BosXwp6crF6GVEPRv6OX4cjrv5JsWlYDhFTYNTVAQlRH5YczNcgPD0DrJdSRL hO07NpOa8+wnj12B0ViIBsqQWHPV8K7H3aIWBsonDTPfDFO7oGWesDn5HQUax9co qZpzhGSsfn7JFO1zEl5VtysASVLda+u8sGtP1NiDp+iCtT25Obbomq7gKDUr4yt/ qDkgKvtVWlAJFNF0OyJySIiXBU/kFZFqYSrlzC7zDJUxiCKeMsEPjkfpjPGLopR2 7grfktXKR7NXakKj0/xIplH1VbIZVDFC -----END CERTIFICATE-----Generated at Wed Jan 21 07:52:25 2026 by rpki-client