This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft File: vkY_wZGbQUKyOCgTgn-3FtbukoM.mft (raw, json) Hash identifier: O58s3An1USx0WV7ZiTJAigJTJ4VwE58TE0UlO2v/Jio= Subject key identifier: 68:B0:2A:F0:58:5E:7F:88:8A:E9:99:41:FB:FA:79:E1:FC:78:C6:54 Authority key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83 Certificate issuer: /CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283 Certificate serial: 07DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft Manifest number: 07CB Signing time: Mon 26 Jan 2026 20:39:38 +0000 Manifest this update: Mon 26 Jan 2026 20:39:38 +0000 Manifest next update: Mon 02 Feb 2026 20:39:38 +0000 Files and hashes: 1: vkY_wZGbQUKyOCgTgn-3FtbukoM.crl (hash: Slc31oB98yKS5HNjkEyvLdEi4sncgHcd9GPQHFGTE+8=) 2: 2798B9A6BABA11EB8A51C234C4F9AE02.roa (hash: +zcjX2imATb1GbMG2fycsIcaiWvdU6/+K/wkiamqX6U=) 3: ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa (hash: XOt7bB+UgZTY8Thh+DvUt1JxAIDEDKn5j8X2t+ws97c=) 4: 28543AA0BABA11EB8A51C234C4F9AE02.roa (hash: tLbuywK1hQsCi3a1AqRQB3esx6wP54LrqFgdAXcaBdM=) 5: 58E4A6E8B60811F0AF40B71EC4F9AE02.roa (hash: 726+J+96Tj+HjEIghhxWecanICxHywnH4M9SjhljsVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 20:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2011 (0x7db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40BF, serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283 Validity Not Before: Jan 26 20:39:38 2026 GMT Not After : Feb 2 20:39:38 2026 GMT Subject: CN=6977d10a-e289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a5:a3:c5:c8:49:58:a7:32:50:76:d1:23:51: d4:d2:53:67:f0:16:88:d9:59:d4:a6:04:6e:7f:33: f8:09:0a:f9:29:64:4b:85:0b:2f:54:21:61:bd:a7: 1f:25:e0:bd:00:aa:7b:b8:46:cd:35:01:3b:b2:92: ea:9f:fb:11:47:28:40:b6:bc:e8:54:1e:e9:c8:83: c5:f3:3f:58:76:7d:c9:2b:6c:43:04:8c:86:b5:e1: 77:0c:9e:10:a4:f4:eb:68:13:5c:f8:81:90:2c:e2: bf:12:2e:3d:47:79:ca:9d:2e:5b:67:46:46:af:c5: a3:ea:0f:1d:77:2a:ea:95:f3:35:d5:a6:f3:a2:cc: 4f:33:c1:12:55:04:86:9f:05:ce:ba:52:7c:1f:3c: 84:4e:37:4d:1b:9d:f7:3a:d2:4c:c6:59:eb:eb:96: 90:f8:09:15:0a:e2:54:aa:28:fd:0c:65:c2:72:6b: a4:c3:62:9f:33:5c:ae:40:51:9e:42:d5:76:c4:c7: 4e:db:ac:16:b6:d7:fe:81:b7:61:25:ee:1b:16:d8: c2:cd:2f:47:bc:54:12:d5:a6:ab:34:38:f7:05:ba: 3b:d6:76:b6:c5:46:ad:41:15:04:16:21:13:02:22: 57:60:a5:5b:fa:30:44:1a:f4:75:8d:89:a3:bc:d0: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B0:2A:F0:58:5E:7F:88:8A:E9:99:41:FB:FA:79:E1:FC:78:C6:54 X509v3 Authority Key Identifier: keyid:BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:97:86:81:bc:b5:71:4f:6a:b5:1c:d2:b6:a2:2f:cf:c2:4b: ee:90:5f:07:81:3b:3e:c0:d8:0c:af:b0:23:cf:15:9b:e4:22: e9:21:d9:d3:f9:03:11:13:00:84:f0:e5:3d:3d:f0:7a:4e:d0: 9f:29:fa:61:a3:b9:df:95:e5:84:5d:99:15:2d:26:05:b8:0c: ef:91:af:64:67:b2:e8:54:95:b2:6d:0a:1f:67:f8:38:2d:ba: a1:1c:d4:6a:bc:08:08:b9:a9:71:87:1f:88:89:e3:80:1a:c0: 01:fa:a4:39:0a:81:40:02:7f:e6:fa:13:c6:b6:23:93:88:7e: af:fa:f3:bc:4c:86:c6:27:56:c1:41:d1:1d:19:4b:a0:eb:c9: 28:9c:e6:d2:6c:3f:ed:dd:a8:ed:9f:d1:95:f3:a0:28:c1:63: 9f:46:86:5f:24:29:4b:75:5e:90:08:74:eb:cb:c5:1d:62:ba: e0:b7:33:e5:10:8b:15:92:4d:d2:2a:aa:14:88:fd:7e:94:c1: a6:e5:c9:54:79:f4:0e:9c:98:b6:39:fd:38:23:8c:3a:d7:58: dc:87:c8:48:71:80:bc:a3:66:73:21:ff:b4:d9:5b:0c:bc:d2: 3f:94:05:a1:c1:31:97:c6:13:9d:76:c7:2b:12:a4:f0:44:ca: d3:55:0c:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQkYxMTAvBgNVBAUTKEJFNDYzRkMxOTE5QjQxNDJCMjM4MjgxMzgyN0ZCNzE2 RDZFRTkyODMwHhcNMjYwMTI2MjAzOTM4WhcNMjYwMjAyMjAzOTM4WjAYMRYwFAYD VQQDDA02OTc3ZDEwYS1lMjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqWjxchJWKcyUHbRI1HU0lNn8BaI2VnUpgRufzP4CQr5KWRLhQsvVCFhvacf JeC9AKp7uEbNNQE7spLqn/sRRyhAtrzoVB7pyIPF8z9Ydn3JK2xDBIyGteF3DJ4Q pPTraBNc+IGQLOK/Ei49R3nKnS5bZ0ZGr8Wj6g8ddyrqlfM11abzosxPM8ESVQSG nwXOulJ8HzyETjdNG533OtJMxlnr65aQ+AkVCuJUqij9DGXCcmukw2KfM1yuQFGe QtV2xMdO26wWttf+gbdhJe4bFtjCzS9HvFQS1aarNDj3Bbo71na2xUatQRUEFiET AiJXYKVb+jBEGvR1jYmjvNBdywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiwKvBY Xn+IiumZQfv6eeH8eMZUMB8GA1UdIwQYMBaAFL5GP8GRm0FCsjgoE4J/txbW7pKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBCRi8yN0I3QTI4NDI0 QzAxMUVCQjYyQjQzODdDNEY5QUUwMi92a1lfd1pHYlFVS3lPQ2dUZ24tM0Z0YnVr b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZrWV93WkdiUVVLeU9DZ1Rnbi0zRnRidWtvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBCRi8yN0I3QTI4NDI0QzAxMUVCQjYyQjQzODdDNEY5QUUwMi92a1lfd1pHYlFV S3lPQ2dUZ24tM0Z0YnVrb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQl4aBvLVxT2q1HNK2oi/PwkvukF8HgTs+wNgMr7AjzxWb5CLpIdnT +QMREwCE8OU9PfB6TtCfKfpho7nfleWEXZkVLSYFuAzvka9kZ7LoVJWybQofZ/g4 LbqhHNRqvAgIualxhx+IieOAGsAB+qQ5CoFAAn/m+hPGtiOTiH6v+vO8TIbGJ1bB QdEdGUug68konObSbD/t3ajtn9GV86AowWOfRoZfJClLdV6QCHTry8UdYrrgtzPl EIsVkk3SKqoUiP1+lMGm5clUefQOnJi2Of04I4w611jch8hIcYC8o2ZzIf+02VsM vNI/lAWhwTGXxhOddscrEqTwRMrTVQw0 -----END CERTIFICATE-----Generated at Tue Jan 27 04:26:30 2026 by rpki-client