This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft File: rQUyxqhtSiMdAK5R-tgo9qK2qos.mft (raw, json) Hash identifier: /dtX6EbcfC6uU7Q5orhyUDrPI3I3ym8BP1LA0xoGmXU= Subject key identifier: 1B:15:0F:06:B2:C9:D8:C9:4E:A9:D5:B9:D1:F0:A2:20:EE:E1:4B:E6 Authority key identifier: AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B Certificate issuer: /CN=A91DE334/serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft Manifest number: 0F Signing time: Sat 17 Jan 2026 07:03:27 +0000 Manifest this update: Sat 17 Jan 2026 07:03:27 +0000 Manifest next update: Sat 24 Jan 2026 07:03:27 +0000 Files and hashes: 1: rQUyxqhtSiMdAK5R-tgo9qK2qos.crl (hash: CQyO6KYrxLyFOkaebIhHqGbFQTTMRyujgDaA7DknHzc=) 2: 0B291B7CE57A11F0A5AF7151426F56BC.roa (hash: DIU5kGTLTNGFsvjv9uvBhQKNuXuz6G02NRkZiUfNqtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 07:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE334, serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B Validity Not Before: Jan 17 07:03:27 2026 GMT Not After : Jan 24 07:03:27 2026 GMT Subject: CN=696b343f-edcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5e:c6:59:ec:67:5b:f3:ef:04:02:f0:7f:0d: 69:90:75:e1:fc:7a:70:43:09:c2:ef:2a:96:71:22: 90:96:f5:c4:91:13:cb:65:41:25:6e:f5:bb:d5:f7: 19:6c:e9:c6:70:97:6a:8d:4f:78:db:2f:f2:ae:6f: c1:67:10:68:ac:8d:e7:03:15:f1:77:60:d2:a5:28: bf:25:c5:cf:88:83:c7:2d:67:16:70:eb:24:40:59: 4e:a2:00:ba:45:78:92:db:07:71:84:71:fe:cb:a7: b4:52:12:81:02:83:3f:e9:80:75:f9:68:cb:c3:e7: f4:a1:f7:9f:99:59:c3:1b:48:e8:96:fe:ed:61:e1: 0f:11:25:a8:78:36:ba:1b:c7:be:81:48:f1:50:c0: fc:44:4e:9e:09:17:78:c1:9f:32:ac:10:f5:37:79: 6f:12:82:ed:76:25:c0:f6:8a:69:34:8c:66:b0:28: 3d:e9:c5:63:01:f0:0c:81:71:cf:99:d5:9b:df:f4: a1:43:5d:6b:4e:02:c7:17:ec:2c:66:80:69:86:c6: 74:f3:7c:b0:84:e7:a8:18:c6:a3:41:53:97:27:1d: a3:c0:60:03:84:0b:9a:e8:75:4f:15:45:05:f9:d2: 16:cc:fa:9d:1b:9c:5f:86:9d:8b:e5:57:94:66:0b: e8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:15:0F:06:B2:C9:D8:C9:4E:A9:D5:B9:D1:F0:A2:20:EE:E1:4B:E6 X509v3 Authority Key Identifier: keyid:AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:6d:ff:73:f1:41:86:9e:88:df:54:f7:b8:6e:15:7d:f8:64: 96:58:52:72:7c:4e:3e:8c:4c:dc:99:04:86:b1:10:cf:e3:3f: 94:f7:ef:36:d0:6d:eb:0b:6b:55:1e:d8:16:f2:69:86:96:68: b5:45:92:c8:3f:e4:00:cc:ac:f3:7b:a6:f1:54:a3:c6:90:f1: d5:64:07:2d:1f:c7:ff:bb:d7:3e:1d:76:3f:92:cf:9b:74:a0: 50:80:8f:f0:a6:11:34:21:b9:e3:04:bb:a5:da:b7:0e:84:0c: 1f:cb:d7:42:3e:44:57:2c:3a:a5:74:e9:6f:e2:f7:a8:8c:fc: 85:6d:19:51:f1:91:bc:23:6e:2b:a2:8b:98:ef:d2:a1:41:63: 8b:9f:87:0e:41:64:90:20:2e:3c:ce:11:db:4c:dd:13:6f:e1: 16:82:28:cc:af:19:c3:ca:2e:4b:74:0d:4e:ed:bf:4f:9b:de: 0b:90:26:0d:fc:0a:c6:b4:13:80:85:f5:d2:00:12:13:b4:4b: 14:50:81:28:ce:d8:80:64:6e:4c:33:5f:98:4c:36:f4:50:96: af:8f:41:2f:17:ee:fd:66:a1:43:be:08:fd:99:f6:07:04:e6: 59:76:b5:1f:b9:67:fe:8a:41:95:53:02:df:a5:6d:fc:70:f8: e6:7f:24:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFE RTMzNDExMC8GA1UEBRMoQUQwNTMyQzZBODZENEEyMzFEMDBBRTUxRkFEODI4RjZB MkI2QUE4QjAeFw0yNjAxMTcwNzAzMjdaFw0yNjAxMjQwNzAzMjdaMBgxFjAUBgNV BAMMDTY5NmIzNDNmLWVkY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3XsZZ7Gdb8+8EAvB/DWmQdeH8enBDCcLvKpZxIpCW9cSRE8tlQSVu9bvV9xls 6cZwl2qNT3jbL/Kub8FnEGisjecDFfF3YNKlKL8lxc+Ig8ctZxZw6yRAWU6iALpF eJLbB3GEcf7Lp7RSEoECgz/pgHX5aMvD5/Sh95+ZWcMbSOiW/u1h4Q8RJah4Nrob x76BSPFQwPxETp4JF3jBnzKsEPU3eW8Sgu12JcD2imk0jGawKD3pxWMB8AyBcc+Z 1Zvf9KFDXWtOAscX7CxmgGmGxnTzfLCE56gYxqNBU5cnHaPAYAOEC5rodU8VRQX5 0hbM+p0bnF+GnYvlV5RmC+j3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGxUPBrLJ 2MlOqdW50fCiIO7hS+YwHwYDVR0jBBgwFoAUrQUyxqhtSiMdAK5R+tgo9qK2qosw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMzM0L0JDNUI0QkJFRTU3 OTExRjA4MzZFRUFBMTQxNkY1NkJDL3JRVXl4cWh0U2lNZEFLNVItdGdvOXFLMnFv cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvclFVeXhxaHRTaU1kQUs1Ui10Z285cUsycW9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF MzM0L0JDNUI0QkJFRTU3OTExRjA4MzZFRUFBMTQxNkY1NkJDL3JRVXl4cWh0U2lN ZEFLNVItdGdvOXFLMnFvcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACNt/3PxQYaeiN9U97huFX34ZJZYUnJ8Tj6MTNyZBIaxEM/jP5T37zbQ besLa1Ue2BbyaYaWaLVFksg/5ADMrPN7pvFUo8aQ8dVkBy0fx/+71z4ddj+Sz5t0 oFCAj/CmETQhueMEu6Xatw6EDB/L10I+RFcsOqV06W/i96iM/IVtGVHxkbwjbiui i5jv0qFBY4ufhw5BZJAgLjzOEdtM3RNv4RaCKMyvGcPKLkt0DU7tv0+b3guQJg38 Csa0E4CF9dIAEhO0SxRQgSjO2IBkbkwzX5hMNvRQlq+PQS8X7v1moUO+CP2Z9gcE 5ll2tR+5Z/6KQZVTAt+lbfxw+OZ/JPU= -----END CERTIFICATE-----Generated at Sun Jan 18 02:57:33 2026 by rpki-client