This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft File: jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json) Hash identifier: IOO2ZMMowriMxE/DUn4T2eO4XJh6xmV9OKX7thYcDo4= Subject key identifier: D8:4F:63:6A:54:84:4E:74:E9:41:1C:95:CD:B1:43:2A:F2:88:05:AD Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 Certificate issuer: /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Certificate serial: 0AB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft Manifest number: 0AA7 Signing time: Tue 20 Jan 2026 19:02:15 +0000 Manifest this update: Tue 20 Jan 2026 19:02:14 +0000 Manifest next update: Tue 27 Jan 2026 19:02:14 +0000 Files and hashes: 1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: veNBvpTEOTmxcESSTUsVoUEvaDIzr1W0R9w2ge5e1SQ=) 2: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: r0RKRgF0/rDGEDAesBgC29Z43qYpMBwutyEjFMfF0YY=) 3: A59E2538BA0211F0892F7E0BC4F9AE02.roa (hash: OtbmYjd+mWe6biEFLJDUdTXgoAn8SFa04cxMhMepJCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 19:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2738 (0xab2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Validity Not Before: Jan 20 19:02:14 2026 GMT Not After : Jan 27 19:02:14 2026 GMT Subject: CN=696fd137-0511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7c:bd:f4:f9:f5:9d:94:60:67:80:70:57:87: da:f0:6e:98:4b:5b:3e:a2:2e:d1:50:36:3a:27:aa: 81:20:b6:8a:60:f6:3b:e2:af:c3:b1:91:33:62:a3: d2:08:bd:c7:48:ea:03:62:81:b8:5e:d3:f7:12:b8: e8:ca:73:d1:11:80:f0:9a:99:9d:f6:17:ee:1e:3a: b8:ab:99:b8:67:45:20:1f:3a:96:53:b7:fd:85:df: 1c:d3:00:44:04:f0:ff:9e:f0:4e:d1:77:37:5f:0a: f6:8a:eb:f7:c9:26:1e:66:ee:b7:15:a4:46:33:c2: a8:0f:b4:96:f0:68:5c:0e:d3:c0:ef:7f:ee:3c:67: 90:55:f5:9a:54:ed:49:db:1e:7f:61:a7:c8:a9:2a: c0:38:d1:f5:b4:0c:be:4c:01:ed:d2:47:bc:23:cd: bf:0a:d0:da:21:69:51:43:56:77:55:9c:22:08:b5: de:9f:fe:93:5c:dd:09:36:38:56:6c:2d:b8:dc:78: 2a:2d:87:c5:21:43:5c:5f:28:4a:56:1c:89:82:bc: 5b:1b:40:88:2f:4e:fe:aa:72:61:b0:f4:80:bc:f4: 3e:15:d3:a2:e7:dd:6c:23:4e:84:b5:9b:77:7f:a6: fd:cc:38:e6:ac:cc:8a:02:c8:06:be:54:7d:3d:fd: a6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4F:63:6A:54:84:4E:74:E9:41:1C:95:CD:B1:43:2A:F2:88:05:AD X509v3 Authority Key Identifier: keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:9a:81:37:03:01:57:67:36:0b:ec:f0:46:67:72:1a:01:1a: 52:20:51:d6:1f:28:df:46:60:8f:f2:9b:75:ba:e1:19:29:1c: 23:43:e6:ca:c0:48:53:a7:99:8f:14:dd:b8:27:d4:ee:ab:dc: 37:88:2f:82:d3:93:c3:48:22:14:fd:4d:3a:1b:63:e6:f4:78: 00:15:c8:54:76:ac:95:f7:79:e5:9e:5c:77:97:30:cb:51:a8: 2a:36:5e:0c:42:d2:9f:a1:ca:17:8e:e2:a0:90:af:5f:2e:a3: 3b:a6:ed:f5:3e:7d:f5:19:ea:59:fb:ce:1d:34:2f:eb:71:3a: 1d:d7:31:3f:e8:95:23:0a:ef:b5:e5:8b:07:cd:fe:46:4c:81: d7:ba:5c:1b:3b:ec:58:c5:7d:b3:8c:3d:72:1a:2a:d8:4e:a6: 99:12:12:fb:c2:ff:26:48:17:9a:8e:b4:3a:fb:d7:66:58:04: d5:10:10:91:99:ad:7d:c3:6d:bd:d4:8f:e7:36:08:9f:ce:7e: 4a:5d:5f:9c:d9:e5:ba:3b:53:52:48:e6:c1:a3:6f:0d:76:2f: da:42:b0:94:7c:32:fc:4b:63:20:3e:c7:2d:44:89:f8:69:df: c1:60:c0:64:3e:1b:c6:6d:1a:06:19:d5:bb:3b:f9:c4:05:b3: cc:ec:dc:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJBNkYxMTAvBgNVBAUTKDhDNUE4OTk3RkNBNUJGMDI3MEVBRjg2RUU4QzBDQjY1 NTFBQjk3RDEwHhcNMjYwMTIwMTkwMjE0WhcNMjYwMTI3MTkwMjE0WjAYMRYwFAYD VQQDDA02OTZmZDEzNy0wNTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Xy99Pn1nZRgZ4BwV4fa8G6YS1s+oi7RUDY6J6qBILaKYPY74q/DsZEzYqPS CL3HSOoDYoG4XtP3ErjoynPREYDwmpmd9hfuHjq4q5m4Z0UgHzqWU7f9hd8c0wBE BPD/nvBO0Xc3Xwr2iuv3ySYeZu63FaRGM8KoD7SW8GhcDtPA73/uPGeQVfWaVO1J 2x5/YafIqSrAONH1tAy+TAHt0ke8I82/CtDaIWlRQ1Z3VZwiCLXen/6TXN0JNjhW bC243HgqLYfFIUNcXyhKVhyJgrxbG0CIL07+qnJhsPSAvPQ+FdOi591sI06EtZt3 f6b9zDjmrMyKAsgGvlR9Pf2mhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhPY2pU hE506UEclc2xQyryiAWtMB8GA1UdIwQYMBaAFIxaiZf8pb8CcOr4bujAy2VRq5fR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkE2Ri9DQURGRjJGRTZF MzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3Snc2dmh1Nk1ETFpWR3Js OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pGcUpsX3lsdndKdzZ2aHU2TURMWlZHcmw5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkE2Ri9DQURGRjJGRTZFMzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3 Snc2dmh1Nk1ETFpWR3JsOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGmoE3AwFXZzYL7PBGZ3IaARpSIFHWHyjfRmCP8pt1uuEZKRwjQ+bK wEhTp5mPFN24J9Tuq9w3iC+C05PDSCIU/U06G2Pm9HgAFchUdqyV93nlnlx3lzDL UagqNl4MQtKfocoXjuKgkK9fLqM7pu31Pn31GepZ+84dNC/rcTod1zE/6JUjCu+1 5YsHzf5GTIHXulwbO+xYxX2zjD1yGirYTqaZEhL7wv8mSBeajrQ6+9dmWATVEBCR ma19w2291I/nNgifzn5KXV+c2eW6O1NSSObBo28Ndi/aQrCUfDL8S2MgPsctRIn4 ad/BYMBkPhvGbRoGGdW7O/nEBbPM7NxA -----END CERTIFICATE-----Generated at Wed Jan 21 21:10:28 2026 by rpki-client