This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft File: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft (raw, json) Hash identifier: ThoCvkTe2ytDoaveth49yEECEmD4uTNJjaPLC1aTcuw= Subject key identifier: B7:B9:A9:29:02:57:6F:BD:29:13:B9:74:A0:F4:F5:1A:65:FD:CE:46 Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Certificate serial: 09D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft Manifest number: 098D Signing time: Thu 22 Jan 2026 19:35:31 +0000 Manifest this update: Thu 22 Jan 2026 19:35:30 +0000 Manifest next update: Thu 29 Jan 2026 19:35:30 +0000 Files and hashes: 1: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl (hash: 2eCd/SF7hY9/Qk42hH/1ZxW6lAUulSIcq69mt+r8+mE=) 2: 6B7D02AEB4A111F08515F713C4F9AE02.roa (hash: 8dIXmowCXPZAD2UJ+5qefOaUBnMZVuWIuv6x5mQBQWI=) 3: BDB203466B5D11EF84E04577C4F9AE02.roa (hash: BOBDyoF9n7xbx3TtkofAs1yOLOgU9o92r9+fjg3ExtE=) 4: 51B031C80E8D11EE89A0B128C4F9AE02.roa (hash: 4OgZKWzHSPDUQ7eYlV4agiNuq4N/lgNw19COSO6Bfk8=) 5: 2857F2E4111A11EF86332415C4F9AE02.roa (hash: yNiSqyUgGq7X2OqvzLvfoSJUstp1wz+ZN5+bLrhI6IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Jan 2026 15:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2516 (0x9d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Validity Not Before: Jan 22 19:35:30 2026 GMT Not After : Jan 29 19:35:30 2026 GMT Subject: CN=69727c02-ff3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2c:76:0b:ba:46:da:d3:8a:27:39:f7:fe:e7: 32:d9:3e:af:b4:13:10:0c:92:33:5f:20:7b:fd:67: 72:1a:53:b4:f6:83:fa:a8:3a:78:6e:59:e1:0f:bc: f3:a0:d7:a6:97:b9:d1:56:0b:a2:5b:c7:30:86:8c: 7b:c4:56:9f:2a:7a:15:e0:71:86:4f:79:5c:68:cd: 65:a9:05:e3:72:ab:8a:e3:67:40:f2:48:d4:35:9d: 55:6b:d2:92:69:9d:e1:a8:9e:14:66:f9:46:8a:15: 9c:e4:4b:ab:e2:86:49:20:6c:a6:29:28:2c:11:5e: b4:c0:66:57:1c:df:e2:b2:1f:f5:55:4c:49:2e:03: e8:18:b1:dc:80:8a:d9:12:d2:ad:d3:86:1e:69:01: d0:6c:36:e6:7b:de:00:e3:de:02:14:dd:22:1d:d5: 39:fc:59:ce:b6:9e:58:bb:dd:68:a7:a2:3c:89:38: b4:ab:6c:b5:eb:c4:6b:4b:6e:08:18:56:46:d0:cd: 06:3d:f9:58:0d:07:37:84:ff:20:eb:e9:dd:83:d2: 0f:0b:6c:ef:1a:f7:57:06:77:f0:56:84:f7:6d:cd: 8e:f9:b9:1f:56:e3:5d:34:0c:ea:9a:76:e0:e9:1b: d2:ae:01:1b:2e:3e:72:01:c1:75:73:db:79:e9:29: cc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B9:A9:29:02:57:6F:BD:29:13:B9:74:A0:F4:F5:1A:65:FD:CE:46 X509v3 Authority Key Identifier: keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:81:b8:25:56:2a:bc:e1:a1:23:27:e9:db:a9:91:d4:21:85: 38:f4:2f:bc:a6:6f:04:8f:76:b1:c1:d6:b3:52:0b:78:d3:ee: c0:57:98:e1:00:22:d1:a6:90:bd:cc:1c:ae:4c:18:5e:60:6e: 11:73:b7:2d:b7:1e:ef:5a:5e:b2:ad:61:ee:5b:5b:a6:8e:71: c6:2a:86:13:6d:8d:18:50:93:0e:3b:7f:a0:28:04:6b:fe:e8: e0:93:3e:94:18:41:13:ff:b8:b9:56:1d:80:28:cc:3e:c9:c2: d9:6e:e3:7f:9d:86:d4:b3:af:ab:e4:d5:3e:2e:3f:6f:dd:89: 7f:dd:e5:8c:02:03:ab:aa:16:a8:fe:1e:be:2a:36:d3:d2:f9: 67:95:f5:56:47:cc:31:6c:9e:b9:e2:c0:66:91:f1:a7:19:38: 28:de:5f:c9:0a:e1:fd:8c:e9:0f:03:55:f9:c8:2b:85:14:3f: 85:77:99:fe:d4:bd:7b:b7:e3:15:a8:cb:31:d7:da:be:3b:37: 5c:38:da:40:9c:35:e3:05:c4:96:a9:49:20:c1:ed:e7:2b:8f: 0e:5e:14:c4:e1:8b:d6:f0:a2:0b:87:41:1b:52:9a:42:c0:b6: 54:06:33:6e:92:42:ac:68:9a:6f:bf:68:cc:5a:a4:a0:06:3a: b3:64:e5:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhGMjcxMTAvBgNVBAUTKEQxQTM2Q0Q4RUQyMzU1MDgyNzYxQTNEQjEzRUREMzBE RkRBMkNGRDAwHhcNMjYwMTIyMTkzNTMwWhcNMjYwMTI5MTkzNTMwWjAYMRYwFAYD VQQDDA02OTcyN2MwMi1mZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSx2C7pG2tOKJzn3/ucy2T6vtBMQDJIzXyB7/WdyGlO09oP6qDp4blnhD7zz oNeml7nRVguiW8cwhox7xFafKnoV4HGGT3lcaM1lqQXjcquK42dA8kjUNZ1Va9KS aZ3hqJ4UZvlGihWc5Eur4oZJIGymKSgsEV60wGZXHN/ish/1VUxJLgPoGLHcgIrZ EtKt04YeaQHQbDbme94A494CFN0iHdU5/FnOtp5Yu91op6I8iTi0q2y168RrS24I GFZG0M0GPflYDQc3hP8g6+ndg9IPC2zvGvdXBnfwVoT3bc2O+bkfVuNdNAzqmnbg 6RvSrgEbLj5yAcF1c9t56SnMHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLe5qSkC V2+9KRO5dKD09Rpl/c5GMB8GA1UdIwQYMBaAFNGjbNjtI1UIJ2Gj2xPt0w39os/Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEYyNy83RjUyMjlBOEIw OTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZRZ25ZYVBiRS0zVERmMml6 OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBhTnMyTzBqVlFnbllhUGJFLTNURGYyaXo5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEYyNy83RjUyMjlBOEIwOTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZR Z25ZYVBiRS0zVERmMml6OUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEgbglViq84aEjJ+nbqZHUIYU49C+8pm8Ej3axwdazUgt40+7AV5jh ACLRppC9zByuTBheYG4Rc7cttx7vWl6yrWHuW1umjnHGKoYTbY0YUJMOO3+gKARr /ujgkz6UGEET/7i5Vh2AKMw+ycLZbuN/nYbUs6+r5NU+Lj9v3Yl/3eWMAgOrqhao /h6+KjbT0vlnlfVWR8wxbJ654sBmkfGnGTgo3l/JCuH9jOkPA1X5yCuFFD+Fd5n+ 1L17t+MVqMsx19q+OzdcONpAnDXjBcSWqUkgwe3nK48OXhTE4YvW8KILh0EbUppC wLZUBjNukkKsaJpvv2jMWqSgBjqzZOUm -----END CERTIFICATE-----Generated at Thu Jan 22 22:50:46 2026 by rpki-client