This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft File: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft (raw, json) Hash identifier: NzCMBGHQpwjxxhS5o732UshwVCq86dKs8Qvd4bQ4KNY= Subject key identifier: E6:20:2E:20:24:1B:3F:75:F8:62:CA:9B:49:53:48:79:5B:42:3E:EA Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 Certificate issuer: /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft Manifest number: 0209 Signing time: Fri 16 Jan 2026 21:57:16 +0000 Manifest this update: Fri 16 Jan 2026 21:57:15 +0000 Manifest next update: Fri 23 Jan 2026 21:57:15 +0000 Files and hashes: 1: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl (hash: TkZy0EhQrK6+q407RrcE9uRqsWKCVCf30ZwU39v4osY=) 2: 15F2CAD0D0AD11F08058D727C4F9AE02.roa (hash: /PKG8wIjekSYApgOkwbdLrLLH3ha9coEuDnaItwW/mA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 21:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Validity Not Before: Jan 16 21:57:15 2026 GMT Not After : Jan 23 21:57:15 2026 GMT Subject: CN=696ab43c-acb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:62:dc:47:69:a2:27:03:fd:bf:a7:ad:03:13: 6f:9d:aa:b5:75:84:22:45:de:ee:9e:01:6d:c5:68: 9f:32:99:dd:bb:9e:58:e6:b5:24:b0:c6:aa:f8:60: 26:98:56:5b:e6:86:41:a3:5a:d0:b8:a4:57:59:0b: 59:90:09:00:45:64:da:88:83:e6:6a:60:14:ed:b1: 3b:3c:06:f2:9a:79:7b:de:3a:64:13:c4:8a:fe:b9: 17:48:87:84:7a:30:b5:31:53:e8:2d:af:bd:2b:d6: 1d:2d:9d:39:7a:e4:da:95:3d:07:31:f2:a4:ec:1e: ad:3a:91:ac:01:75:6e:de:10:68:0a:72:3d:20:4c: 1b:d0:f7:91:0d:b7:d4:16:e9:cf:a1:66:80:52:3f: 6d:c2:e8:77:42:6d:e2:a5:66:85:f1:46:96:dc:a7: 9f:c5:68:c7:dc:8e:a8:34:86:5b:af:63:c6:a0:5c: 20:bd:36:36:70:22:d1:cb:65:ae:91:9d:aa:f7:08: aa:09:c4:7f:9d:79:87:e6:93:b2:f7:c2:d4:3b:9e: 25:30:38:e4:2d:4e:39:08:d1:dc:d3:37:60:79:49: 46:0e:7b:75:2f:27:dc:9e:cf:d4:55:af:c0:e0:4d: e6:91:76:6f:58:02:d8:9f:f9:17:8a:91:0e:78:19: 61:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:20:2E:20:24:1B:3F:75:F8:62:CA:9B:49:53:48:79:5B:42:3E:EA X509v3 Authority Key Identifier: keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:94:37:e9:59:68:33:5a:4a:a8:1b:31:c2:74:2a:21:90:8e: 05:a0:76:e4:fa:f1:b4:18:98:f8:db:91:ed:42:44:54:c1:4d: 50:52:9e:09:ff:12:1f:39:c3:0b:2f:e4:4c:1a:30:d4:49:ea: 48:ab:58:54:a7:67:70:4a:b6:79:c3:8c:47:98:75:80:ed:ce: b5:ef:37:ac:3f:a0:fc:43:50:52:f2:13:38:59:d8:08:34:24: 0f:7c:fe:e9:9e:08:e4:52:8b:7d:ee:64:1d:a4:26:61:fc:c7: 9e:8e:bc:a3:63:fb:e4:0d:21:83:86:07:65:43:37:b2:f3:ef: 71:db:30:dd:5a:74:d4:12:86:01:71:a3:4c:bd:a7:51:e4:8a: ec:8f:6c:74:77:d8:8d:bd:9a:cb:60:4e:f0:22:4e:3c:08:46: 8e:d1:f4:18:63:68:fe:49:9f:0d:f6:85:42:81:77:3e:c1:2b: 27:89:c8:fc:9a:56:e8:c0:c9:7a:6b:e1:5f:36:a0:ab:f3:54: ff:55:52:7c:87:2c:10:e8:48:a1:b0:c8:95:42:eb:8c:06:45: c7:0e:c0:78:20:71:61:05:fb:c2:2e:70:87:8d:d8:f0:95:95: 7a:47:8e:6f:de:0b:c7:ef:d2:58:a3:0a:52:0d:2d:84:e9:60: 1f:0b:cc:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKDlGRTAwQzE5Q0UwQjhGOTZFQ0Y4OUEzNTdGN0QxQUY1 NThGOTZGRjUwHhcNMjYwMTE2MjE1NzE1WhcNMjYwMTIzMjE1NzE1WjAYMRYwFAYD VQQDDA02OTZhYjQzYy1hY2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomLcR2miJwP9v6etAxNvnaq1dYQiRd7ungFtxWifMpndu55Y5rUksMaq+GAm mFZb5oZBo1rQuKRXWQtZkAkARWTaiIPmamAU7bE7PAbymnl73jpkE8SK/rkXSIeE ejC1MVPoLa+9K9YdLZ05euTalT0HMfKk7B6tOpGsAXVu3hBoCnI9IEwb0PeRDbfU FunPoWaAUj9twuh3Qm3ipWaF8UaW3KefxWjH3I6oNIZbr2PGoFwgvTY2cCLRy2Wu kZ2q9wiqCcR/nXmH5pOy98LUO54lMDjkLU45CNHc0zdgeUlGDnt1Lyfcns/UVa/A 4E3mkXZvWALYn/kXipEOeBlh8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYgLiAk Gz91+GLKm0lTSHlbQj7qMB8GA1UdIwQYMBaAFJ/gDBnOC4+W7PiaNX99GvVY+W/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC82NzAwNThCNERG RjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1YnMtSm8xZjMwYTlWajVi X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24tQU1HYzRMajVicy1KbzFmMzBhOVZqNWJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzU3OC82NzAwNThCNERGRjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1 YnMtSm8xZjMwYTlWajViX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGlDfpWWgzWkqoGzHCdCohkI4FoHbk+vG0GJj425HtQkRUwU1QUp4J /xIfOcMLL+RMGjDUSepIq1hUp2dwSrZ5w4xHmHWA7c617zesP6D8Q1BS8hM4WdgI NCQPfP7pngjkUot97mQdpCZh/MeejryjY/vkDSGDhgdlQzey8+9x2zDdWnTUEoYB caNMvadR5Irsj2x0d9iNvZrLYE7wIk48CEaO0fQYY2j+SZ8N9oVCgXc+wSsnicj8 mlbowMl6a+FfNqCr81T/VVJ8hywQ6EihsMiVQuuMBkXHDsB4IHFhBfvCLnCHjdjw lZV6R45v3gvH79JYowpSDS2E6WAfC8xc -----END CERTIFICATE-----Generated at Sun Jan 18 03:16:29 2026 by rpki-client