This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json) Hash identifier: OL+NHOT+SizaOQmcnNTHMbbGhftTJovYOFq9s3gm7YE= Subject key identifier: DE:AD:62:69:1B:A3:C2:E0:90:B3:F5:AE:D3:51:AC:8E:9F:2A:A1:11 Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0D57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft Manifest number: 0D35 Signing time: Mon 26 Jan 2026 17:40:46 +0000 Manifest this update: Mon 26 Jan 2026 17:40:46 +0000 Manifest next update: Mon 02 Feb 2026 17:40:46 +0000 Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: SJ681VQibZSrMHYy5TxKJcQ/bDkyglUwRfYf7o7E9Qk=) 2: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: FMw40XVAdGd77UkmIqYoD247AipDSUL3njDNeC4HGuM=) 3: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: es9j3LKTp+AUW2ig2BE9iWWW6VD0Nb77D+iullPdt18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 17:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3415 (0xd57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: Jan 26 17:40:46 2026 GMT Not After : Feb 2 17:40:46 2026 GMT Subject: CN=6977a71e-1f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e1:58:13:90:85:34:62:66:a4:2b:72:af:43: ac:98:82:f7:d7:10:d8:f9:77:5b:82:09:8e:54:2d: e0:c7:3f:05:02:e3:16:82:d2:91:e9:99:1f:a2:57: a7:62:0e:03:c2:d9:e1:f5:aa:d1:e9:28:6b:0f:ed: f1:6a:06:85:b1:8e:11:39:51:60:f1:a5:9a:14:b9: a5:b4:1b:8b:97:49:05:20:7e:42:e3:a0:24:01:ad: d7:a3:31:f2:b4:ab:f1:d1:0c:3f:c4:0f:05:69:5c: e7:56:53:b4:f3:22:a0:3d:a2:20:5f:46:c8:c1:08: 3f:9d:1c:f1:37:9c:8b:14:ae:53:e4:3d:7b:63:f4: 31:eb:51:ef:f5:e0:4e:35:42:7b:11:69:b9:14:fc: b6:45:c1:4c:55:9b:07:25:d9:76:c8:07:e5:d5:bf: 0f:e4:c8:6e:6f:a6:02:90:87:19:93:57:69:b9:ea: 68:16:1a:bb:00:5f:6d:83:88:da:83:c9:e7:09:5b: 57:59:a2:86:a4:de:cd:53:de:16:ad:02:14:13:39: 43:14:e4:3f:d1:c6:81:16:af:e3:3c:98:c3:58:c2: ef:00:a6:de:1c:9e:ec:b8:ce:c1:96:b0:a3:c5:a4: d5:14:26:cd:42:2f:44:60:1f:99:c9:43:8e:9b:4b: 9b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AD:62:69:1B:A3:C2:E0:90:B3:F5:AE:D3:51:AC:8E:9F:2A:A1:11 X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:b6:16:c0:ab:ac:72:c9:df:58:96:90:14:9b:2c:d5:8f:15: ba:1a:05:4d:32:59:77:04:bf:6c:47:d5:d4:6d:d1:ba:58:7f: 96:cd:15:1a:6d:48:f8:6f:e6:83:19:76:25:8c:65:0f:ee:eb: d4:0d:92:9f:64:f9:17:3a:82:eb:b7:4b:c9:d8:84:d6:9c:a4: 78:ad:89:fa:9d:e9:98:8c:e1:21:57:c2:df:6d:6f:c0:ea:bc: ae:b4:f5:5b:d9:83:df:ea:3d:68:7e:61:bd:45:28:26:1c:ee: 76:da:11:1d:25:21:fd:35:e5:97:ca:ed:e2:7e:9e:71:78:25: 61:c5:a9:80:56:c5:38:cb:b2:60:43:7e:97:56:da:12:5c:d5: df:25:ac:a1:2f:98:74:fa:85:3d:50:7a:39:f0:37:d6:1b:aa: 4c:e4:27:90:b1:ba:fd:47:0a:84:22:4f:47:8f:67:70:32:f3: d5:4e:2b:d6:94:cc:2a:66:d9:2d:56:58:0a:af:24:03:31:56: 1b:ea:27:6f:29:62:d1:ff:a3:fe:0d:52:09:ee:bd:b0:80:91: 3b:fd:33:28:bb:30:a3:45:70:d4:82:30:c4:f0:32:3c:00:48: c9:06:e5:0f:33:c6:95:60:42:7e:73:2b:3b:5f:d8:9f:b8:76: 5b:b7:7a:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjYwMTI2MTc0MDQ2WhcNMjYwMjAyMTc0MDQ2WjAYMRYwFAYD VQQDDA02OTc3YTcxZS0xZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmOFYE5CFNGJmpCtyr0OsmIL31xDY+XdbggmOVC3gxz8FAuMWgtKR6Zkfolen Yg4Dwtnh9arR6ShrD+3xagaFsY4ROVFg8aWaFLmltBuLl0kFIH5C46AkAa3XozHy tKvx0Qw/xA8FaVznVlO08yKgPaIgX0bIwQg/nRzxN5yLFK5T5D17Y/Qx61Hv9eBO NUJ7EWm5FPy2RcFMVZsHJdl2yAfl1b8P5Mhub6YCkIcZk1dpuepoFhq7AF9tg4ja g8nnCVtXWaKGpN7NU94WrQIUEzlDFOQ/0caBFq/jPJjDWMLvAKbeHJ7suM7BlrCj xaTVFCbNQi9EYB+ZyUOOm0ubKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6tYmkb o8LgkLP1rtNRrI6fKqERMB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0JCNy81RTFGQ0VCQ0YzRjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5 X3FELUZFNy1JVGtlUDhUOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtthbAq6xyyd9YlpAUmyzVjxW6GgVNMll3BL9sR9XUbdG6WH+WzRUa bUj4b+aDGXYljGUP7uvUDZKfZPkXOoLrt0vJ2ITWnKR4rYn6nemYjOEhV8LfbW/A 6ryutPVb2YPf6j1ofmG9RSgmHO522hEdJSH9NeWXyu3ifp5xeCVhxamAVsU4y7Jg Q36XVtoSXNXfJayhL5h0+oU9UHo58DfWG6pM5CeQsbr9RwqEIk9Hj2dwMvPVTivW lMwqZtktVlgKryQDMVYb6idvKWLR/6P+DVIJ7r2wgJE7/TMouzCjRXDUgjDE8DI8 AEjJBuUPM8aVYEJ+cys7X9ifuHZbt3oF -----END CERTIFICATE-----Generated at Wed Jan 28 05:36:04 2026 by rpki-client