This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json) Hash identifier: DA1CJAEIBUYVwJ6NhmUj8FG4qyRCsoeaduHoqHxo2io= Subject key identifier: E0:8C:D5:59:5E:80:02:2A:11:15:4B:E7:03:30:B1:9C:7B:F5:3C:13 Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 07D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft Manifest number: 0748 Signing time: Tue 20 Jan 2026 21:31:03 +0000 Manifest this update: Tue 20 Jan 2026 21:31:02 +0000 Manifest next update: Tue 27 Jan 2026 21:31:02 +0000 Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: BmeRknsGOT6h05Zfh0Ed8f+sdfkvAsSGEBi14ImzNKQ=) 2: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: VF1EKdtqMB8DRuSBnFKjSSnE5AI9LEnGrDvhJPYGcJw=) 3: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: j0xrsPerWvAmq5TrfXCCAXxhmW7uoVGvVR9TrXHmI/c=) 4: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: bcPbqQLGQnoAzNP2Fmg0TCnc4h72RS0Eli/gU7/zCsQ=) 5: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: Z/eyVAkA9R8S1+9PHNU8ppbtyyeeA+WhA6oeOKeAzo8=) 6: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: ahURvf3WgTOlPvJ2Yvz5ikj2GmylBcCLMIT4Gjnelzo=) 7: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: iacyWEeXTvXTILxRcADZ+9lCVjiDHQnMplIMRt/73Xk=) 8: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: q95wxrZ9LN/HMmU4q1987KOKTt7X/HBomrSB/BVWhIg=) 9: 317095E0A28911ECBC355360C4F9AE02.roa (hash: Pa0iKARYCWRSksppmbtkHK6D27x19i+sB6izIsd+594=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 21:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2003 (0x7d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Validity Not Before: Jan 20 21:31:02 2026 GMT Not After : Jan 27 21:31:02 2026 GMT Subject: CN=696ff417-c0b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:83:f1:26:76:ad:b0:30:fb:48:36:15:e4: 30:b7:cc:bd:df:ba:9a:a3:12:1e:ed:79:1a:a3:bd: 34:a2:24:b1:59:f2:b9:5b:77:3f:c3:16:51:81:59: 86:69:99:ee:2d:d3:6c:5d:ec:fe:ea:d2:7a:fc:55: f2:be:1c:8e:77:9f:78:55:e9:1e:c1:50:57:86:07: 4b:09:61:d8:c7:b2:51:9a:d9:88:45:7f:65:18:23: 97:81:1e:bb:a7:d3:9b:78:19:b3:2f:a4:e5:3b:a9: a0:2e:fc:65:a4:a9:93:d7:cc:d0:22:b6:e1:44:c6: f8:7a:14:39:aa:db:94:22:b9:4b:fc:1a:92:29:6f: 23:5b:5a:3b:53:71:99:1d:19:d6:c0:10:67:3b:df: 73:37:08:aa:82:0c:ad:12:c3:6d:84:b1:36:68:5b: e1:f2:4c:26:69:57:ba:6b:f5:1b:8d:d5:b9:fb:ce: fd:b9:aa:c2:72:33:df:b9:07:c5:b5:21:fb:37:cf: f6:a2:d0:7a:b5:76:7f:15:88:f4:27:cd:30:24:94: 42:0a:4e:12:7f:d9:be:b5:0d:8c:6d:d0:f6:7a:94: 3a:e6:a2:98:ff:c7:b2:da:18:5c:b8:b6:59:8c:fb: c7:48:94:5b:60:8c:b4:03:8f:75:03:b2:ff:ed:f8: 91:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8C:D5:59:5E:80:02:2A:11:15:4B:E7:03:30:B1:9C:7B:F5:3C:13 X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:c1:e8:c3:a0:77:5c:b8:c0:79:2c:4c:be:46:68:76:ce:36: 92:c5:67:c8:1b:be:2d:de:ce:09:82:db:37:4c:9c:9e:9a:d5: d5:e6:27:65:5d:f2:d6:f9:44:7f:8f:53:37:55:90:a4:61:fd: a0:23:11:c4:0c:6b:20:66:ff:6c:d6:e9:0f:d7:45:36:b4:a6: be:b4:d4:d3:6c:83:63:dd:af:e7:54:12:96:02:4c:30:3b:c0: 0f:9e:5e:3e:13:1a:48:f5:6f:03:db:b0:ec:d6:0b:ea:db:64: 0c:76:f0:76:2d:45:44:ac:bf:df:9e:1f:23:d1:4d:7a:1b:68: e6:6f:47:1e:ec:f5:6c:71:51:0d:a6:21:99:17:b9:c1:12:9a: 6c:50:f6:87:fb:47:a4:e0:b8:ca:fa:83:56:55:b2:f3:ad:b3: 7b:a8:4f:65:4f:d4:a7:fb:b9:ef:3b:ec:b2:eb:35:5b:c2:07: 71:0e:a6:97:61:0c:b5:1b:c2:cc:e4:b0:17:0b:9e:08:22:e0: f2:76:cc:6e:84:bf:9a:cb:16:64:43:19:37:6f:5d:f3:f8:90: ce:ed:87:c7:4a:01:8f:f1:a3:cd:41:90:f1:2f:68:5c:7c:d4: 31:27:0f:6a:74:6c:e3:7e:bf:5a:f5:5a:dd:66:f7:07:91:fb: d2:2c:42:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjYwMTIwMjEzMTAyWhcNMjYwMTI3MjEzMTAyWjAYMRYwFAYD VQQDDA02OTZmZjQxNy1jMGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8KD8SZ2rbAw+0g2FeQwt8y937qaoxIe7Xkao700oiSxWfK5W3c/wxZRgVmG aZnuLdNsXez+6tJ6/FXyvhyOd594VekewVBXhgdLCWHYx7JRmtmIRX9lGCOXgR67 p9ObeBmzL6TlO6mgLvxlpKmT18zQIrbhRMb4ehQ5qtuUIrlL/BqSKW8jW1o7U3GZ HRnWwBBnO99zNwiqggytEsNthLE2aFvh8kwmaVe6a/UbjdW5+879uarCcjPfuQfF tSH7N8/2otB6tXZ/FYj0J80wJJRCCk4Sf9m+tQ2MbdD2epQ65qKY/8ey2hhcuLZZ jPvHSJRbYIy0A491A7L/7fiRbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCM1Vle gAIqERVL5wMwsZx79TwTMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMxQi9EMEVDQ0Q0ODg5M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0 ejBhTFgwbHFrYXV3NUl6NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWwejDoHdcuMB5LEy+Rmh2zjaSxWfIG74t3s4Jgts3TJyemtXV5idl XfLW+UR/j1M3VZCkYf2gIxHEDGsgZv9s1ukP10U2tKa+tNTTbINj3a/nVBKWAkww O8APnl4+ExpI9W8D27Ds1gvq22QMdvB2LUVErL/fnh8j0U16G2jmb0ce7PVscVEN piGZF7nBEppsUPaH+0ek4LjK+oNWVbLzrbN7qE9lT9Sn+7nvO+yy6zVbwgdxDqaX YQy1G8LM5LAXC54IIuDydsxuhL+ayxZkQxk3b13z+JDO7YfHSgGP8aPNQZDxL2hc fNQxJw9qdGzjfr9a9VrdZvcHkfvSLEKH -----END CERTIFICATE-----Generated at Wed Jan 21 14:45:49 2026 by rpki-client