This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft File: TK4677Gsir3bmbzO5PpakW0VezQ.mft (raw, json) Hash identifier: 0lJmpJkjdUNpS1KvXiwfdFnpHM/u9Xig81JWunVVvbo= Subject key identifier: 93:29:60:F1:D6:F5:BB:03:10:2E:C8:AA:84:75:D5:DF:47:EA:78:FF Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Certificate serial: 36C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft Manifest number: 35D0 Signing time: Mon 26 Jan 2026 14:28:15 +0000 Manifest this update: Mon 26 Jan 2026 14:28:14 +0000 Manifest next update: Mon 02 Feb 2026 14:28:14 +0000 Files and hashes: 1: TK4677Gsir3bmbzO5PpakW0VezQ.crl (hash: 7fCgc/lbCD7i91em0lSQnvwOo3FbhbD6Z3Ry1/27cGY=) 2: 8FD552C071F111F0AE49323FC4F9AE02.roa (hash: GFZWZ3rY5zt4p9q/6cuuzyfCvGg513UOOMNp5vgzTLM=) 3: 31D56A8E06C711EF9A0E1D0AC4F9AE02.roa (hash: 5+KD/HbUpLkpcs6HV5lJJIsrRNB6iK/DXAWMFWpmA48=) 4: 77D96D4A4F3411EFBA0A2659C4F9AE02.roa (hash: KO5kyx4oPYD6fcEJBxLZwcnGof9xv+dWoDd139PGb/A=) 5: D166652A072211EF9AC24D5BC4F9AE02.roa (hash: sLM5FwTdAuw73CSCPgse3usHMaTriQRAMzmSo6I03pc=) 6: 945922AECEBA11EDBBFD9E28C4F9AE02.roa (hash: LsJPOhg+IjFHq4u5TuKS1Cgl9ZV//qocSQmKLNrjfHY=) 7: 2EA5CD40F87911F0BB9C431B4E6F56BC.roa (hash: 4BukiagQkrgc4Q+BvGeKWl5vic7KJcUlFwCZcgflCUU=) 8: 27616F5ECEAC11F0B2B83021C4F9AE02.roa (hash: O+bmz4H8fmOEEYbSsaNE97io00ZH/4UXwZSZDJ91wig=) 9: 4DFF14DE71F211F08D45AC42C4F9AE02.roa (hash: J9Vl4wNaQZvW7IrY3A4iHXeF9rMyxRBebQD8gmdAqF0=) 10: 0FCEE1C4F76411F08B4529B5436F56BC.roa (hash: 5KGHcM6iwrBR+GMsU2qWtmHdxfeDJjvrMttwa4l3W9g=) 11: 24D7D74C978011EE87BB7D53C4F9AE02.roa (hash: hczGze/n+6jjz7J+S1ccsb/kUT2mL3ytpGyW1gYxmpM=) 12: 5779406CEC8A11F0B07D25495A6F56BC.roa (hash: ya5zBGTAzEnkpdGfPaAZhxBhwxTEybn5xef5FKCLtPE=) 13: D630A6B206D511EFB6CFDF2DC4F9AE02.roa (hash: hMNH1yK3IUdK/bsrfxvFW1bCN5AbdrDoJdwyVBW90z0=) 14: 4DC27210558111EF880A8679C4F9AE02.roa (hash: h9yTe7lhrg8907g7zfUvE00jCBHzORz0gLImI24Dzc0=) 15: 8FF00754732F11EE90078C13C4F9AE02.roa (hash: uVN+bNlw+OOE50aRxrD+T3n1qZSGGMQ4+q09H5P1seg=) 16: E83E047071F111F0BBD1B63FC4F9AE02.roa (hash: 5WE41zFMFc5HZkU5VkY9kQVVNvhSy9TJUUfKgnqnIio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 14:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14020 (0x36c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Validity Not Before: Jan 26 14:28:14 2026 GMT Not After : Feb 2 14:28:14 2026 GMT Subject: CN=697779ff-036e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3c:89:f9:84:27:8c:0e:86:da:90:5b:15:10: af:0d:a6:8e:ef:2c:e0:aa:0b:e4:9e:d7:d9:6d:cc: 3d:d5:40:1d:6d:b5:27:71:ff:f0:ea:7a:ab:1e:af: a4:9c:89:d5:20:68:5b:3c:20:fe:12:80:5c:96:97: f5:39:b9:f5:4d:d5:c4:51:b4:bb:09:a3:9f:10:2b: 2c:05:93:04:97:e1:98:a2:e3:f5:89:eb:aa:b4:49: 97:52:e0:b4:38:2d:34:59:ff:59:aa:7f:39:3c:0f: 71:eb:05:ce:34:6c:f9:90:f2:ea:b0:b4:81:56:a0: e0:a1:5a:7c:6d:ef:99:3a:aa:88:2e:09:2e:c3:5c: e3:8b:d0:f7:3b:76:60:2a:5d:e3:20:07:80:bf:f0: 1f:d0:0a:bd:7d:34:86:3f:2b:12:3d:a7:b3:3d:64: 37:e1:a9:d0:a0:90:4c:fb:6e:99:77:1a:7f:9e:4d: d6:d7:e8:1e:4b:92:17:ef:1b:7a:ea:fb:51:6a:3c: d6:7f:9c:98:c5:c4:dd:5a:84:a2:bb:92:6d:08:cb: c5:62:76:81:57:d3:04:ff:03:18:3f:af:86:4f:bf: f8:cb:a5:b9:4e:74:fc:ca:48:2f:da:27:6b:6d:4c: a7:24:d8:7f:f9:62:74:f5:fc:a6:f2:6a:28:ea:71: b0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:29:60:F1:D6:F5:BB:03:10:2E:C8:AA:84:75:D5:DF:47:EA:78:FF X509v3 Authority Key Identifier: keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d4:df:ca:c6:70:34:18:a3:58:cf:35:13:f0:7d:c5:34:60: 53:89:4f:8f:a5:fc:7b:90:57:e9:0a:48:74:26:fc:e5:e1:de: 31:64:70:61:ce:02:7f:f3:24:8c:1f:e9:30:b8:f5:31:00:46: 3d:02:27:35:b6:81:e2:e7:3e:0d:a6:a2:5b:13:d7:4d:46:2b: e6:fa:5c:8e:bf:e4:24:08:21:e3:6d:fb:b7:cc:a7:14:86:30: a6:c9:18:02:c9:06:db:d5:ba:f1:ea:cf:55:1e:05:5d:9a:78: 78:90:24:18:e7:b4:7d:5c:e0:98:f7:a0:80:27:16:92:fd:2b: 06:63:00:06:78:a5:31:69:0c:03:63:d9:26:a5:ea:4d:d4:24: 8a:b4:83:6d:4b:d4:01:59:26:83:4e:7d:4f:98:01:35:c6:76: 8e:f2:a6:08:a8:ec:e0:bd:68:6b:fe:dc:c5:d3:e5:eb:ed:dd: 19:ed:aa:c9:9d:a2:c9:6c:1f:f4:a6:d9:d0:07:50:f3:b4:50: eb:16:5e:c8:ed:b3:0b:3f:5d:15:e0:c6:bb:13:e6:e0:29:7a: b2:e4:be:57:8a:bf:a5:8d:fc:45:19:7d:27:17:74:fd:6d:a9: a0:40:a3:fa:ec:ea:c2:3b:ad:d1:94:5a:7c:34:16:79:c9:3f: ca:b8:dd:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx NkQxNTdCMzQwHhcNMjYwMTI2MTQyODE0WhcNMjYwMjAyMTQyODE0WjAYMRYwFAYD VQQDDA02OTc3NzlmZi0wMzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkDyJ+YQnjA6G2pBbFRCvDaaO7yzgqgvkntfZbcw91UAdbbUncf/w6nqrHq+k nInVIGhbPCD+EoBclpf1Obn1TdXEUbS7CaOfECssBZMEl+GYouP1ieuqtEmXUuC0 OC00Wf9Zqn85PA9x6wXONGz5kPLqsLSBVqDgoVp8be+ZOqqILgkuw1zji9D3O3Zg Kl3jIAeAv/Af0Aq9fTSGPysSPaezPWQ34anQoJBM+26Zdxp/nk3W1+geS5IX7xt6 6vtRajzWf5yYxcTdWoSiu5JtCMvFYnaBV9ME/wMYP6+GT7/4y6W5TnT8ykgv2idr bUynJNh/+WJ09fym8moo6nGwYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMpYPHW 9bsDEC7IqoR11d9H6nj/MB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUQ3RS9FQ0E2ODIzNDFEODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2ly M2JtYnpPNVBwYWtXMFZlelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP1N/KxnA0GKNYzzUT8H3FNGBTiU+Ppfx7kFfpCkh0Jvzl4d4xZHBh zgJ/8ySMH+kwuPUxAEY9Aic1toHi5z4NpqJbE9dNRivm+lyOv+QkCCHjbfu3zKcU hjCmyRgCyQbb1brx6s9VHgVdmnh4kCQY57R9XOCY96CAJxaS/SsGYwAGeKUxaQwD Y9kmpepN1CSKtINtS9QBWSaDTn1PmAE1xnaO8qYIqOzgvWhr/tzF0+Xr7d0Z7arJ naLJbB/0ptnQB1DztFDrFl7I7bMLP10V4Ma7E+bgKXqy5L5Xir+ljfxFGX0nF3T9 bamgQKP67OrCO63RlFp8NBZ5yT/KuN26 -----END CERTIFICATE-----Generated at Tue Jan 27 07:47:35 2026 by rpki-client