This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft File: U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft (raw, json) Hash identifier: QurmA7l6ODBRYNhSV06y6xWmHDANG3LHmgRb7/xpzh4= Subject key identifier: A5:0D:E6:88:17:1B:21:2E:78:4D:09:50:CC:2B:0F:8C:A7:AD:9B:99 Authority key identifier: 53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 Certificate issuer: /CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Certificate serial: 35E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft Manifest number: 3561 Signing time: Tue 20 Jan 2026 14:23:48 +0000 Manifest this update: Tue 20 Jan 2026 14:23:47 +0000 Manifest next update: Tue 27 Jan 2026 14:23:47 +0000 Files and hashes: 1: U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl (hash: jqJo8OjEYzR6zyyesyr1Wu9Q1FtrB3Wd8GtJKT6uTOA=) 2: D0886954188811EC8E86754FC4F9AE02.roa (hash: 6VbOvgdK5CTvuRLAoKi7F+0CDGeRIa2tmkBoLvAgouA=) 3: 99CF729E221011ED980A6F47C4F9AE02.roa (hash: atHB41zC9ox7WEbx/oU2a0/b1MGieqCzosX2UKLPzlk=) 4: 491E49AECDCA11ED8F57D386C4F9AE02.roa (hash: eobj/eFuFNpYpHWfoCh4R2f9ILietn5YmlGo8HxPsps=) 5: DF8602D05E5B11ED994E491CC4F9AE02.roa (hash: 6nK3GoLVaSP0VSJQQ8fMNbxkXH0UKpIkFpkEB95EEy0=) 6: AB9889725E5E11EDB5361D3BC4F9AE02.roa (hash: Co7SE3g9/ARrpsRXeCTg4P0jRRisbdn9kOGmwejTlBg=) 7: 9F3A919468D811EFB2FE405FC4F9AE02.roa (hash: nVehuPJuIkWIOjh795nZonFcwqqWF8/uu32Co6wlMr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13801 (0x35e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F47, serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Validity Not Before: Jan 20 14:23:47 2026 GMT Not After : Jan 27 14:23:47 2026 GMT Subject: CN=696f8ff3-2376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:2a:f5:27:a7:1c:c0:ae:73:da:78:a3:91: c6:1c:3f:d3:24:13:33:bf:fe:90:91:35:7d:24:57: d0:5f:6f:d9:c1:af:b0:ff:f8:5d:14:d2:60:e2:e4: 9f:ab:86:c6:0b:50:47:e5:93:08:15:66:1f:61:76: 60:91:da:a3:a9:34:54:29:61:d4:d6:cc:7e:6f:88: c1:e0:a8:4d:c8:e7:ff:2b:e6:36:38:ac:bb:1e:30: 84:2f:f0:ba:de:38:0d:65:6f:8e:72:4a:23:fb:c8: 9d:0a:9d:b9:aa:7c:bd:10:e1:22:4d:59:bc:9b:7b: d8:66:2b:5d:28:50:ad:3c:6b:32:4e:95:77:38:a2: c6:42:e8:87:3a:c5:77:96:f2:85:39:93:53:f4:5d: d7:bf:f2:64:4f:d3:7b:d4:6e:e5:61:12:cd:aa:c5: 84:da:2a:42:f6:55:92:08:8b:fa:82:fd:b7:ac:33: 4b:8c:0b:96:25:9e:ee:7c:9d:c2:75:27:ec:67:19: 4d:fa:f6:c8:2d:21:e6:e2:36:80:0f:f4:de:48:08: 45:2e:d7:22:3a:56:70:1d:0a:9b:42:00:de:ed:51: ef:fb:85:85:22:01:bc:22:ac:97:67:f6:90:e3:d3: 08:bf:08:40:2b:85:bf:c6:25:6f:8c:a1:38:fe:af: 12:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0D:E6:88:17:1B:21:2E:78:4D:09:50:CC:2B:0F:8C:A7:AD:9B:99 X509v3 Authority Key Identifier: keyid:53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:9a:96:67:9b:a1:a3:5b:ab:a6:4d:f0:98:ae:43:19:61:ac: 03:51:cf:ac:ee:28:96:a7:70:b0:48:12:09:58:56:23:3a:5b: 3e:39:24:f5:26:dd:ec:45:62:2c:f0:41:77:ba:86:ed:29:6a: 45:c4:5b:6a:ce:e9:c2:31:17:11:0a:c8:05:b4:52:73:fd:99: 8c:e7:89:cd:ea:b3:e3:eb:50:72:48:f7:cc:ca:18:50:40:b3: c8:bd:29:dd:31:19:fc:fe:2a:68:fb:3c:bd:f9:59:fe:19:1f: 78:0e:d2:89:87:ef:85:4c:5f:be:f2:d3:81:4d:6b:ce:f9:10: cd:ba:40:d4:e0:d7:b9:ac:7a:b2:d4:69:82:b4:c4:44:d0:51: da:09:29:71:c2:9b:9a:5e:d2:2e:7e:7e:7b:a2:eb:9d:d1:f5: 3a:be:23:7a:8b:9a:ff:90:c0:ab:31:5d:ae:50:fa:e5:ac:e5: 88:2d:7d:05:4f:b6:7f:31:d6:ef:be:0d:43:ea:64:6d:e6:a3: 70:33:06:3c:92:0b:0f:52:f6:95:c7:de:c6:f3:fa:a9:82:1b: 1d:4e:a9:78:af:54:46:0d:d3:5f:3a:b6:89:c9:03:f5:b8:1b: 02:30:85:4b:8e:04:27:cb:e6:0f:ae:ed:fa:c8:47:92:79:7b: ff:c0:44:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNDcxMTAvBgNVBAUTKDUzOEIwNzZFMEFBREQ4RkFFMjk3MEM5NTQzRTg0OUE5 MEZFNzM3NTIwHhcNMjYwMTIwMTQyMzQ3WhcNMjYwMTI3MTQyMzQ3WjAYMRYwFAYD VQQDDA02OTZmOGZmMy0yMzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKYq9SenHMCuc9p4o5HGHD/TJBMzv/6QkTV9JFfQX2/Zwa+w//hdFNJg4uSf q4bGC1BH5ZMIFWYfYXZgkdqjqTRUKWHU1sx+b4jB4KhNyOf/K+Y2OKy7HjCEL/C6 3jgNZW+Ockoj+8idCp25qny9EOEiTVm8m3vYZitdKFCtPGsyTpV3OKLGQuiHOsV3 lvKFOZNT9F3Xv/JkT9N71G7lYRLNqsWE2ipC9lWSCIv6gv23rDNLjAuWJZ7ufJ3C dSfsZxlN+vbILSHm4jaAD/TeSAhFLtciOlZwHQqbQgDe7VHv+4WFIgG8IqyXZ/aQ 49MIvwhAK4W/xiVvjKE4/q8S2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUN5ogX GyEueE0JUMwrD4ynrZuZMB8GA1UdIwQYMBaAFFOLB24Krdj64pcMlUPoSakP5zdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY0Ny9CNEE4NkMzODFE ODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQcmlsd3lWUS1oSnFRX25O MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0c0hiZ3F0MlByaWx3eVZRLWhKcVFfbk4xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY0Ny9CNEE4NkMzODFEODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQ cmlsd3lWUS1oSnFRX25OMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBmpZnm6GjW6umTfCYrkMZYawDUc+s7iiWp3CwSBIJWFYjOls+OST1 Jt3sRWIs8EF3uobtKWpFxFtqzunCMRcRCsgFtFJz/ZmM54nN6rPj61BySPfMyhhQ QLPIvSndMRn8/ipo+zy9+Vn+GR94DtKJh++FTF++8tOBTWvO+RDNukDU4Ne5rHqy 1GmCtMRE0FHaCSlxwpuaXtIufn57ouud0fU6viN6i5r/kMCrMV2uUPrlrOWILX0F T7Z/Mdbvvg1D6mRt5qNwMwY8kgsPUvaVx97G8/qpghsdTql4r1RGDdNfOraJyQP1 uBsCMIVLjgQny+YPru36yEeSeXv/wES8 -----END CERTIFICATE-----Generated at Thu Jan 22 01:51:09 2026 by rpki-client