This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: WPRYviS+/DLl4n71JGFSAJlt1f2PaoSyNcc5c4c4zFc= Subject key identifier: 94:55:D8:54:F3:5F:BC:2A:E7:4D:7B:FA:BC:BD:24:D5:4D:FB:0B:C0 Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 043A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 041F Signing time: Tue 20 Jan 2026 23:33:49 +0000 Manifest this update: Tue 20 Jan 2026 23:33:48 +0000 Manifest next update: Tue 27 Jan 2026 23:33:48 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: PYx8VTy1rxRnP5VFym5y7rWZxXlEdV771n8sCVupYYU=) 2: 513415BC400011EE88B66B4FC4F9AE02.roa (hash: La9bIBXUn7Pcc0HHfxEl2RzNwtBMPkoEmLR0KZnlaWs=) 3: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (hash: U0JaFB8CVVgKbLBmTTRMW+oeZZCXLA9kdsldXtwigwA=) 4: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: xABbFnxjesSqqxHb5Z3LU/MaNyiAYDrCsWPlJjK46gQ=) 5: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: yWfAEaYcbh5fjpOL87NsV9hi8Cg9epFjV+c+Su0AUew=) 6: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: PgsogDDZQkDovTqfqAZnCJjtewKfx64pNU23F3h3LOI=) 7: DF49B4400B4B11EEBAD3047AC4F9AE02.roa (hash: 5EplJ/qwJeqGMd35PNuR9x2zdZw/zJYIhHM0ma+2rK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 23:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1082 (0x43a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: Jan 20 23:33:48 2026 GMT Not After : Jan 27 23:33:48 2026 GMT Subject: CN=697010dd-5e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:79:21:ff:26:ca:38:9f:9b:91:fe:2a:17: 2f:54:31:2b:3b:25:88:52:a8:7e:cd:01:f6:a5:4d: e2:15:07:28:53:18:b1:91:41:a3:32:40:af:31:fd: c5:be:2f:86:29:52:18:87:8b:df:dc:1b:af:8b:6f: 41:1f:84:03:73:ae:55:6a:09:7e:73:dd:5f:b6:10: 6f:5a:7d:4d:41:cf:88:50:4c:6d:f4:e3:60:28:bc: ab:20:ed:6c:fd:d1:a4:70:15:06:f4:4e:69:0e:86: 32:53:47:90:51:da:31:a8:82:78:cf:99:1c:8e:42: 8a:b7:7e:33:f1:51:21:98:34:d7:37:04:be:12:d2: 25:ca:3e:d0:88:8a:f1:2b:42:88:25:d2:9a:31:e5: 45:64:15:d7:e8:02:81:15:94:58:e7:a4:4b:0a:75: d8:ff:1e:6f:93:05:04:0f:5b:04:b8:9a:e0:e3:7c: 06:4b:70:dc:0a:3f:39:1c:d7:1b:63:1a:ce:bb:f5: e2:56:eb:66:cd:e3:e5:18:ce:6f:20:59:9d:84:1f: 49:b8:ef:68:81:9b:0f:78:3f:7a:d4:4f:3a:dd:bf: ab:87:77:5f:91:c4:e9:53:54:10:f8:bb:65:81:1e: eb:85:e5:0a:26:9e:b4:92:06:69:23:f8:84:9f:a9: 55:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:55:D8:54:F3:5F:BC:2A:E7:4D:7B:FA:BC:BD:24:D5:4D:FB:0B:C0 X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:8d:91:58:6a:ad:12:ac:53:40:8a:4d:df:dc:2a:78:6d:c1: 84:de:14:5e:39:f1:a1:34:2e:7a:ae:9e:69:eb:7d:1f:44:ad: 95:fb:ff:30:d3:4b:f5:8d:51:41:d0:29:fc:96:37:92:4f:cd: 24:16:e0:22:0c:6a:e2:d9:cb:1d:0a:12:59:65:17:26:9e:cb: 81:72:90:90:2b:0a:56:c5:5b:49:33:42:1b:7b:3f:ed:e2:25: 3d:97:64:ac:3b:c5:b3:a1:66:30:d5:7c:8c:2a:c6:f7:84:45: fe:9f:81:34:0e:83:61:79:39:22:71:f5:06:eb:cb:74:9f:de: e2:fb:2e:d6:d9:c2:14:6f:70:57:45:f3:5f:7c:42:3a:81:c0: bf:50:86:ab:1b:a1:4e:a7:be:db:bc:9a:4d:38:bb:52:c2:ff: 7a:c7:e3:ae:0b:a4:7f:aa:4b:0e:7a:e3:f7:1c:a3:ed:bf:29: bd:e4:07:02:28:e9:83:a0:47:3b:de:0b:6b:ff:1b:65:4d:0b: 52:be:16:6b:ad:39:3e:93:2e:8b:a8:e4:85:d0:e3:a3:a7:74: 1a:af:50:2d:db:81:b0:f2:de:50:80:12:f5:13:21:a1:97:16: b1:fa:a4:a0:ba:12:1b:ac:f9:d0:fc:43:04:1d:07:7f:bd:f5: 0d:51:9b:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjYwMTIwMjMzMzQ4WhcNMjYwMTI3MjMzMzQ4WjAYMRYwFAYD VQQDDA02OTcwMTBkZC01ZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuL95If8myjifm5H+KhcvVDErOyWIUqh+zQH2pU3iFQcoUxixkUGjMkCvMf3F vi+GKVIYh4vf3Buvi29BH4QDc65Vagl+c91fthBvWn1NQc+IUExt9ONgKLyrIO1s /dGkcBUG9E5pDoYyU0eQUdoxqIJ4z5kcjkKKt34z8VEhmDTXNwS+EtIlyj7QiIrx K0KIJdKaMeVFZBXX6AKBFZRY56RLCnXY/x5vkwUED1sEuJrg43wGS3DcCj85HNcb YxrOu/XiVutmzePlGM5vIFmdhB9JuO9ogZsPeD961E863b+rh3dfkcTpU1QQ+Ltl gR7rheUKJp60kgZpI/iEn6lVKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRV2FTz X7wq5017+ry9JNVN+wvAMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChjZFYaq0SrFNAik3f3Cp4bcGE3hReOfGhNC56rp5p630fRK2V+/8w 00v1jVFB0Cn8ljeST80kFuAiDGri2csdChJZZRcmnsuBcpCQKwpWxVtJM0Ibez/t 4iU9l2SsO8WzoWYw1XyMKsb3hEX+n4E0DoNheTkicfUG68t0n97i+y7W2cIUb3BX RfNffEI6gcC/UIarG6FOp77bvJpNOLtSwv96x+OuC6R/qksOeuP3HKPtvym95AcC KOmDoEc73gtr/xtlTQtSvhZrrTk+ky6LqOSF0OOjp3Qar1At24Gw8t5QgBL1EyGh lxax+qSguhIbrPnQ/EMEHQd/vfUNUZuj -----END CERTIFICATE-----Generated at Thu Jan 22 22:52:09 2026 by rpki-client