This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft File: oE50OtMfT4PwncXS9-9Pq-HvaHs.mft (raw, json) Hash identifier: yqzoRcejmiNIbE0QtCYIkThjmtVVovp0z70rcQHq6RQ= Subject key identifier: 06:B6:27:F4:CF:1E:8D:70:AF:25:7E:D8:91:B4:83:D4:09:BA:75:68 Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Certificate serial: 0643 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft Manifest number: 0629 Signing time: Mon 26 Jan 2026 22:02:49 +0000 Manifest this update: Mon 26 Jan 2026 22:02:48 +0000 Manifest next update: Mon 02 Feb 2026 22:02:48 +0000 Files and hashes: 1: oE50OtMfT4PwncXS9-9Pq-HvaHs.crl (hash: 3eLQCLkvmcySwtIfDVByT+4Ac7/v/HhDNLRpNXUn7nc=) 2: 180DF9BE93C711EDB3D8A867C4F9AE02.roa (hash: SoMp5duXOAwol503IxpDfQSWDWEVUuEjZp2f9lzEdw8=) 3: 2F581CEA33F311EEABFC7410C4F9AE02.roa (hash: weFEOxrVQ1R73fykzCNyC6/gZBqdWvZXSpKP3W9J0hQ=) 4: 1767CE4A93C711EDB3D8A867C4F9AE02.roa (hash: MXR9v07MaUgaUp2EpRPUYi0YWE/byXOzVwu5NXbaWsg=) 5: 16A4DFE893C711EDB3D8A867C4F9AE02.roa (hash: vWRcSTu3hKVKTzFiY2NVAPZ7PA6+HMwNwvKyVpnCyx8=) 6: 1614034C93C711EDB3D8A867C4F9AE02.roa (hash: ywF33ZMJOUcpgMUIi20lZlpyg8JGMBrKC6zMJ/6wuTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 22:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1603 (0x643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF8, serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Validity Not Before: Jan 26 22:02:48 2026 GMT Not After : Feb 2 22:02:48 2026 GMT Subject: CN=6977e489-70d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d9:7a:5e:6c:ac:63:04:1d:73:81:7b:2c:3e: 7e:b0:53:c5:0d:29:08:89:ed:51:cc:50:09:fd:64: b3:58:f4:6e:f4:af:04:03:0f:c6:08:68:9e:d6:59: 1b:ed:8f:da:d7:1f:95:94:e3:f5:b5:81:30:ba:2b: fb:eb:45:5d:fb:64:c8:e4:a1:3b:fd:13:cd:ec:a3: 00:95:fd:2a:05:58:62:b1:10:83:ab:d8:7a:88:3b: 0a:0b:ad:cd:a4:67:37:5d:1d:cd:69:26:e9:44:fd: ae:29:53:ba:7c:54:0e:c7:22:19:3e:22:7e:ef:bd: d3:e4:32:fa:26:a0:61:4f:0f:f7:81:04:7a:8f:5d: 0a:10:7c:12:e0:b7:5c:71:a2:02:93:f0:c5:45:4e: cf:77:0e:6c:e9:22:5f:a0:87:15:e7:54:cb:59:5b: 98:d8:a9:bd:a2:0e:42:a9:85:2a:5f:46:2f:89:3e: 6f:a2:23:67:49:3a:0e:f6:45:6b:9d:cb:18:47:1c: 8d:27:c6:b3:8f:37:12:1c:f4:4e:41:08:5c:d5:27: b8:da:37:a7:40:19:2f:61:f1:ba:62:64:86:e9:65: 63:df:e2:e4:f8:de:25:11:73:60:74:be:87:af:40: be:23:e8:cd:ce:2d:47:0d:70:3e:d4:e0:71:2e:06: 6d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B6:27:F4:CF:1E:8D:70:AF:25:7E:D8:91:B4:83:D4:09:BA:75:68 X509v3 Authority Key Identifier: keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c7:d9:6e:3d:a3:29:06:94:56:c1:90:23:06:bc:88:06:4d: 47:da:5c:29:c2:81:6d:31:1e:30:c1:dd:03:55:ec:de:fb:8c: ff:03:0e:b8:fc:80:21:4d:e4:cc:ad:a0:a0:a4:74:21:52:9e: 67:e9:47:4e:87:d3:fa:df:28:cf:da:88:01:c3:b7:29:08:3e: 48:86:42:bf:e4:54:98:a3:15:ad:b5:83:91:55:33:77:c7:e1: 3f:0c:47:08:20:a5:96:e1:af:bb:40:26:9f:7e:16:83:d1:ef: 6b:1f:96:44:aa:6b:52:fb:82:15:54:c2:72:e0:c3:29:41:61: 4c:ba:b1:16:b0:6f:94:c7:ec:9e:a8:cd:a7:98:b9:7e:2e:76: 70:7f:ef:09:05:0e:a8:38:e1:dc:ca:5d:c5:f7:a0:df:9e:de: ac:34:0a:c2:73:97:0a:d2:16:ce:02:60:8b:2f:69:7a:8d:fb: 37:6c:46:48:59:f6:52:d3:d6:32:c5:b4:07:43:e8:7f:67:4d: 52:97:1a:4d:24:34:f6:d1:aa:3b:69:2e:e2:d8:d2:13:22:32: c6:f9:67:e4:3a:2b:a1:a6:cf:fa:27:2b:f4:27:21:27:16:7e: 88:f0:f9:21:91:0e:2e:c9:31:08:ce:e9:a4:3e:71:ce:6f:ff: 21:a8:69:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjgxMTAvBgNVBAUTKEEwNEU3NDNBRDMxRjRGODNGMDlEQzVEMkY3RUY0RkFC RTFFRjY4N0IwHhcNMjYwMTI2MjIwMjQ4WhcNMjYwMjAyMjIwMjQ4WjAYMRYwFAYD VQQDDA02OTc3ZTQ4OS03MGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tl6XmysYwQdc4F7LD5+sFPFDSkIie1RzFAJ/WSzWPRu9K8EAw/GCGie1lkb 7Y/a1x+VlOP1tYEwuiv760Vd+2TI5KE7/RPN7KMAlf0qBVhisRCDq9h6iDsKC63N pGc3XR3NaSbpRP2uKVO6fFQOxyIZPiJ+773T5DL6JqBhTw/3gQR6j10KEHwS4Ldc caICk/DFRU7Pdw5s6SJfoIcV51TLWVuY2Km9og5CqYUqX0YviT5voiNnSToO9kVr ncsYRxyNJ8azjzcSHPROQQhc1Se42jenQBkvYfG6YmSG6WVj3+Lk+N4lEXNgdL6H r0C+I+jNzi1HDXA+1OBxLgZt/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAa2J/TP Ho1wryV+2JG0g9QJunVoMB8GA1UdIwQYMBaAFKBOdDrTH0+D8J3F0vfvT6vh72h7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGOC9DOTM4RDEwNkNC NTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0UHduY1hTOS05UHEtSHZh SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29FNTBPdE1mVDRQd25jWFM5LTlQcS1IdmFIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEVGOC9DOTM4RDEwNkNCNTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0 UHduY1hTOS05UHEtSHZhSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBax9luPaMpBpRWwZAjBryIBk1H2lwpwoFtMR4wwd0DVeze+4z/Aw64 /IAhTeTMraCgpHQhUp5n6UdOh9P63yjP2ogBw7cpCD5IhkK/5FSYoxWttYORVTN3 x+E/DEcIIKWW4a+7QCaffhaD0e9rH5ZEqmtS+4IVVMJy4MMpQWFMurEWsG+Ux+ye qM2nmLl+LnZwf+8JBQ6oOOHcyl3F96Dfnt6sNArCc5cK0hbOAmCLL2l6jfs3bEZI WfZS09YyxbQHQ+h/Z01SlxpNJDT20ao7aS7i2NITIjLG+WfkOiuhps/6Jyv0JyEn Fn6I8PkhkQ4uyTEIzumkPnHOb/8hqGl8 -----END CERTIFICATE-----Generated at Tue Jan 27 07:47:33 2026 by rpki-client