This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft File: MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft (raw, json) Hash identifier: azdKqTNjSMgvzYwiyWtU13diOMcs7cEDUp0s1UAz4EE= Subject key identifier: 4E:03:59:6C:40:DC:5A:83:70:33:10:B0:17:38:02:8C:FB:BE:2A:02 Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft Manifest number: 3F Signing time: Fri 16 Jan 2026 22:48:47 +0000 Manifest this update: Fri 16 Jan 2026 22:48:46 +0000 Manifest next update: Fri 23 Jan 2026 22:48:46 +0000 Files and hashes: 1: MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl (hash: pYnSI+mg0Uk9xwrcbcYgosdyyO0i1r7+a5zKbh/TmHE=) 2: 485C422CA5FF11F08004B67CC4F9AE02.roa (hash: UyaIPOR5BtYKD7ht1J5Z5vKBp3WQiWRuvIXcjTfMuds=) 3: 48DA881CA5FF11F08004B67CC4F9AE02.roa (hash: U7Bt5g8XtBArxtex2r2qjcE8yon03irN5KZgG3SqjtY=) 4: 4988E222A5FF11F08004B67CC4F9AE02.roa (hash: y8ARtlnKOFD/ZdcLD/y5W8SXczj42QeGDvwDvopZPC8=) 5: 474BBE8AA5FF11F08004B67CC4F9AE02.roa (hash: SMOUlqbPMt2kafk5s8X5CGmsl0wmXm2GKsiELLusKwQ=) 6: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (hash: Yq/6jVPQzAm5hgRP7rXQoplDCQWlPs9QKDxMJ3MAfy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 22:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Jan 16 22:48:46 2026 GMT Not After : Jan 23 22:48:46 2026 GMT Subject: CN=696ac04f-a614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1c:ba:cc:08:da:ae:c1:b8:07:c0:c8:0d:86: 98:2f:d4:f2:62:d0:3b:5c:0a:c5:6d:e9:c7:eb:b2: 75:d3:5f:77:0e:99:12:94:6f:6f:cc:19:7b:04:cb: 7e:96:84:2f:af:64:e5:2a:c2:de:65:c0:0d:22:d1: 5d:d3:4e:db:ff:8d:89:54:3f:26:11:ad:90:6b:dd: 29:83:fb:19:38:9d:b8:b6:b2:f6:c8:15:14:51:cb: 66:5c:3d:c7:99:4a:41:c2:95:0d:99:b1:27:c0:c0: 1e:c0:30:ca:f9:e0:82:e9:fc:89:5f:60:0b:62:61: d0:02:01:db:cc:ac:7f:16:17:6a:ba:23:06:9b:a4: 03:a0:85:af:d0:79:dc:cf:81:2c:15:55:5c:20:f6: 08:4d:c2:70:c9:f1:dc:5b:3a:cc:75:42:7c:52:a2: 81:14:9b:45:13:6d:18:78:f1:a7:11:fb:fa:27:c5: 5e:f7:ed:fe:c5:f3:de:3a:42:91:68:7f:68:46:58: 5e:1b:b4:69:1b:f3:b9:51:7c:b2:62:77:79:ad:95: b5:87:ee:01:4b:6c:03:d8:86:5f:8d:63:ab:e5:3c: 43:7a:9a:14:0f:12:c2:ab:5e:d9:58:14:e8:e2:ea: 20:da:7d:82:e2:55:e5:6e:f5:a4:40:e9:bc:6c:c0: 88:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:03:59:6C:40:DC:5A:83:70:33:10:B0:17:38:02:8C:FB:BE:2A:02 X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:da:5e:50:60:05:26:41:04:63:0e:2f:93:6b:a7:ed:7e:40: f6:63:39:88:f9:ef:5d:25:99:cf:8f:49:b2:58:be:20:48:77: 5f:2c:53:9c:f4:56:a9:e4:d1:f5:c6:8a:00:cf:ae:d0:dc:71: 65:d9:cd:f9:d4:ff:3a:97:70:77:90:5a:8c:c9:49:0f:16:0e: 9d:f8:24:82:3e:b5:1a:92:1d:e2:97:c7:d8:97:fd:65:25:3c: 7c:2c:d5:2c:06:2e:f2:d1:9f:f9:95:28:bb:54:5f:3b:bc:b3: f9:5c:d8:d9:cc:42:2a:5a:89:3c:c9:6c:ce:c3:aa:99:44:a1: 5a:23:ee:f0:af:88:d1:ea:d1:6f:4a:ce:a2:d9:09:1b:1c:cf: f4:41:bd:26:2f:d8:27:43:23:90:53:fd:e0:ca:31:32:94:13: 83:8c:c3:bc:de:eb:29:a4:a6:da:47:91:eb:c9:6c:86:31:19: e1:ee:37:61:5a:68:5b:77:27:1d:31:c7:b7:44:d3:79:60:a6: f6:52:25:6a:2a:18:09:80:c9:ee:eb:f8:b6:de:75:5c:b4:7f: 2f:f5:53:d6:96:9e:82:0b:a9:3c:27:41:9c:66:6f:28:81:cc: 0c:66:77:29:22:01:f9:1d:8c:39:fb:12:cb:60:b2:1d:d7:a7: 7a:51:c6:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzQ5MzExMC8GA1UEBRMoMzEzMTFDRkNDMTQwMUJENkQwRTZCNkIzOTE2N0I2NUMy MTA5MjExNDAeFw0yNjAxMTYyMjQ4NDZaFw0yNjAxMjMyMjQ4NDZaMBgxFjAUBgNV BAMMDTY5NmFjMDRmLWE2MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/HLrMCNquwbgHwMgNhpgv1PJi0DtcCsVt6cfrsnXTX3cOmRKUb2/MGXsEy36W hC+vZOUqwt5lwA0i0V3TTtv/jYlUPyYRrZBr3SmD+xk4nbi2svbIFRRRy2ZcPceZ SkHClQ2ZsSfAwB7AMMr54ILp/IlfYAtiYdACAdvMrH8WF2q6IwabpAOgha/QedzP gSwVVVwg9ghNwnDJ8dxbOsx1QnxSooEUm0UTbRh48acR+/onxV737f7F8946QpFo f2hGWF4btGkb87lRfLJid3mtlbWH7gFLbAPYhl+NY6vlPEN6mhQPEsKrXtlYFOji 6iDafYLiVeVu9aRA6bxswIi9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTgNZbEDc WoNwMxCwFzgCjPu+KgIwHwYDVR0jBBgwFoAUMTEc/MFAG9bQ5razkWe2XCEJIRQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDkzL0U1MkMxNEMwOUZG QTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVRFY19NRkFHOWJRNXJhemtXZTJYQ0VKSVJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NDkzL0U1MkMxNEMwOUZGQTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZBRzli UTVyYXprV2UyWENFSklSUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALraXlBgBSZBBGMOL5Nrp+1+QPZjOYj5710lmc+PSbJYviBId18sU5z0 Vqnk0fXGigDPrtDccWXZzfnU/zqXcHeQWozJSQ8WDp34JII+tRqSHeKXx9iX/WUl PHws1SwGLvLRn/mVKLtUXzu8s/lc2NnMQipaiTzJbM7DqplEoVoj7vCviNHq0W9K zqLZCRscz/RBvSYv2CdDI5BT/eDKMTKUE4OMw7ze6ymkptpHkevJbIYxGeHuN2Fa aFt3Jx0xx7dE03lgpvZSJWoqGAmAye7r+LbedVy0fy/1U9aWnoILqTwnQZxmbyiB zAxmdykiAfkdjDn7Estgsh3Xp3pRxmw= -----END CERTIFICATE-----Generated at Sun Jan 18 03:10:28 2026 by rpki-client