This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft File: -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json) Hash identifier: Ne2h9F6j09Jw54uCoY8GRcdbLOEqLJ55W0EyGMjtUsY= Subject key identifier: 8D:47:30:36:A0:EC:B6:64:6C:5A:5E:FB:13:B0:AC:F7:44:27:75:D3 Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 Certificate issuer: /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Certificate serial: 3536 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft Manifest number: 351D Signing time: Tue 20 Jan 2026 14:16:05 +0000 Manifest this update: Tue 20 Jan 2026 14:16:05 +0000 Manifest next update: Tue 27 Jan 2026 14:16:05 +0000 Files and hashes: 1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: 4GWrH158TRkuRGPGziH3g4/ujrQ2wNPXtUtqAr0DLJs=) 2: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: eRpbjrs7GTwfzhpVzYBrg6AgI/qzL8mQbPqmgl8ihsU=) 3: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: jPHSUiUkbozR5N6j9xgdL/cbld0Q8j3JedxabqO04KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13622 (0x3536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Validity Not Before: Jan 20 14:16:05 2026 GMT Not After : Jan 27 14:16:05 2026 GMT Subject: CN=696f8e25-497e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b3:89:28:8f:3d:33:37:2f:62:6a:de:b3:0c: af:db:8d:9f:40:6a:07:2e:5d:9d:f5:0c:60:2a:92: 91:6d:0f:41:d7:ea:1b:07:f0:37:9f:d1:d1:b5:fd: ae:24:3f:93:45:bf:81:6a:1a:f2:59:6d:bf:b4:4c: 21:a8:cf:49:f9:a1:c0:e1:46:f4:71:fa:e1:cf:c4: b3:f4:e4:74:ab:84:a4:35:81:cc:b1:49:ec:16:91: dd:cb:9b:39:13:9f:f1:d2:e8:da:e3:bc:7b:ec:86: cc:da:bd:55:9a:78:7f:64:36:e5:fd:8a:d7:cb:48: 31:fc:0d:7a:e7:7a:01:de:11:cf:b6:69:d7:f2:9b: 5e:7f:68:bf:65:08:5f:fe:ce:bf:cc:d0:2f:b3:72: 21:ac:2f:5b:30:50:43:5a:cb:42:53:17:18:25:f0: 59:12:80:34:dd:81:2d:47:65:3b:85:40:79:c1:e5: e8:a7:79:3c:c3:f1:df:bc:e2:77:b1:96:04:8c:bf: 9d:e9:45:7d:97:9e:87:66:45:40:95:28:2d:5e:af: 87:0c:40:3e:d2:3a:a9:93:a3:2d:af:4f:43:2e:a2: 39:c2:f7:c3:6e:7e:06:e5:de:69:43:4b:67:da:8b: 75:b3:d0:fd:04:02:d8:97:96:78:22:fe:9e:62:b1: 6a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:47:30:36:A0:EC:B6:64:6C:5A:5E:FB:13:B0:AC:F7:44:27:75:D3 X509v3 Authority Key Identifier: keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:8f:d4:b4:59:31:70:78:76:f1:11:80:28:94:97:a6:77:31: 65:37:43:56:e1:0a:44:cc:20:19:e5:be:85:0f:d3:d7:f0:6e: 2f:21:f1:dd:d6:43:31:4b:48:16:7a:47:ff:f3:0d:67:2a:39: a0:96:ec:73:76:56:08:7c:06:8e:98:fe:8c:4d:af:e5:20:91: 61:3b:02:e7:92:5d:a0:76:fb:09:93:60:44:5e:78:9f:b6:4c: 98:8b:71:04:52:78:9e:84:dd:06:1a:0b:73:63:14:d7:65:28: 6d:78:fb:c4:df:8a:f5:6f:7e:93:f6:59:3d:63:f6:17:1e:21: a6:39:f4:b2:40:fb:1d:cc:d9:fb:71:7a:5c:f8:37:6f:4d:b7: f9:ca:7f:33:39:c6:4e:56:dd:72:a9:3b:29:71:dc:85:5b:52: 97:64:2c:9c:81:4e:b2:9d:d9:ee:41:99:7e:19:ab:37:8c:bf: fe:80:15:7e:de:25:22:13:5c:9b:02:fb:dd:68:5c:04:f3:24: c0:61:de:54:c7:2a:9f:42:8b:51:bb:f5:18:ff:fe:f4:19:ab: 8b:51:8e:c8:96:05:f6:70:8f:10:62:80:d1:53:12:e7:39:04: bc:bb:ef:85:b7:70:5c:8b:0b:f5:b7:4c:ca:85:2d:69:b7:1c: 60:a8:cc:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEZBNDE3OTYyN0Y1QjI2NTk0RTU2MzAzNTNBMEI3Nzg1 RTBENjkyQzUwHhcNMjYwMTIwMTQxNjA1WhcNMjYwMTI3MTQxNjA1WjAYMRYwFAYD VQQDDA02OTZmOGUyNS00OTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobOJKI89MzcvYmreswyv242fQGoHLl2d9QxgKpKRbQ9B1+obB/A3n9HRtf2u JD+TRb+BahryWW2/tEwhqM9J+aHA4Ub0cfrhz8Sz9OR0q4SkNYHMsUnsFpHdy5s5 E5/x0uja47x77IbM2r1Vmnh/ZDbl/YrXy0gx/A1653oB3hHPtmnX8ptef2i/ZQhf /s6/zNAvs3IhrC9bMFBDWstCUxcYJfBZEoA03YEtR2U7hUB5weXop3k8w/HfvOJ3 sZYEjL+d6UV9l56HZkVAlSgtXq+HDEA+0jqpk6Mtr09DLqI5wvfDbn4G5d5pQ0tn 2ot1s9D9BALYl5Z4Iv6eYrFqFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1HMDag 7LZkbFpe+xOwrPdEJ3XTMB8GA1UdIwQYMBaAFPpBeWJ/WyZZTlYwNToLd4Xg1pLF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS85OUQ2OERDRTFE NjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45YkpsbE9WakExT2d0M2hlRFdr c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1rRjVZbjliSmxsT1ZqQTFPZ3QzaGVEV2tzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyMS85OUQ2OERDRTFENjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45Ykps bE9WakExT2d0M2hlRFdrc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzj9S0WTFweHbxEYAolJemdzFlN0NW4QpEzCAZ5b6FD9PX8G4vIfHd 1kMxS0gWekf/8w1nKjmgluxzdlYIfAaOmP6MTa/lIJFhOwLnkl2gdvsJk2BEXnif tkyYi3EEUniehN0GGgtzYxTXZShtePvE34r1b36T9lk9Y/YXHiGmOfSyQPsdzNn7 cXpc+DdvTbf5yn8zOcZOVt1yqTspcdyFW1KXZCycgU6yndnuQZl+Gas3jL/+gBV+ 3iUiE1ybAvvdaFwE8yTAYd5UxyqfQotRu/UY//70GauLUY7IlgX2cI8QYoDRUxLn OQS8u++Ft3Bciwv1t0zKhS1ptxxgqMyN -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:27 2026 by rpki-client