This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft File: 3nORs21uduLMQKkEd3LACw93Umw.mft (raw, json) Hash identifier: 2x2LjzkpGrg1DTAt/TBMRZvevk8S87N1q03Ht+HEhbc= Subject key identifier: 53:B0:D2:E9:55:4A:61:BB:61:C3:BF:8F:67:62:B2:57:2F:DA:4B:CF Authority key identifier: DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C Certificate issuer: /CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft Manifest number: 01EB Signing time: Sat 17 Jan 2026 01:09:36 +0000 Manifest this update: Sat 17 Jan 2026 01:09:36 +0000 Manifest next update: Sat 24 Jan 2026 01:09:36 +0000 Files and hashes: 1: 3nORs21uduLMQKkEd3LACw93Umw.crl (hash: 58rpCn1awCqL2RN3l2OvGE9aSdMvd21HLdkk9agvlME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 01:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Validity Not Before: Jan 17 01:09:36 2026 GMT Not After : Jan 24 01:09:36 2026 GMT Subject: CN=696ae150-6adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:69:7f:ed:f8:a8:65:d8:1c:18:51:4e:e8: 12:38:07:88:b3:82:d3:c5:60:22:40:9a:70:78:2e: 2c:64:f7:a6:ad:0a:c0:b3:d2:a7:a4:58:4e:78:e9: 49:45:64:25:f0:37:30:d5:ff:45:25:6e:ca:43:f9: 1f:2f:6e:63:d0:30:18:95:29:aa:5a:d8:a5:f5:41: 46:9b:e4:7e:7f:3f:e0:fd:b9:9c:31:9f:e8:21:a3: 3e:a1:dd:bd:4d:75:79:69:78:ea:a9:16:8a:14:96: 43:57:01:f1:3b:4c:6f:50:55:0e:4a:d3:c7:a7:9a: 35:06:93:d9:82:86:78:49:15:65:d5:a5:6b:e4:a8: a7:51:7f:b0:ab:7d:49:6b:ee:59:cb:66:48:6f:f5: 22:f9:b2:c4:eb:09:a6:05:cb:77:eb:90:64:b6:e2: b7:1c:32:e6:25:ce:67:1b:65:29:46:7b:36:7f:94: a4:8a:b6:a0:89:87:d2:38:1f:a9:a3:50:3d:3c:17: 00:64:df:e4:46:e2:a5:c4:0a:8b:c5:b7:69:ad:cd: b0:11:40:6e:26:eb:57:e3:02:81:0e:ef:57:0f:04: 49:21:6c:74:75:3f:be:de:6e:20:2d:66:40:e8:61: 19:7c:f3:35:0d:88:17:83:11:4a:70:b4:5a:d8:ee: ad:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B0:D2:E9:55:4A:61:BB:61:C3:BF:8F:67:62:B2:57:2F:DA:4B:CF X509v3 Authority Key Identifier: keyid:DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:4c:95:33:de:6c:25:00:d4:30:68:8b:e8:fe:24:50:0a:a6: 93:d4:da:74:fd:f1:75:86:3d:14:da:95:94:e8:21:a7:f9:56: 7d:7e:7c:7c:b5:c9:c1:50:21:d4:c7:48:6b:32:ec:96:c8:dd: 26:47:09:4e:ea:a2:b5:fc:2e:ec:90:9a:b8:2b:0b:87:47:ac: fa:85:3a:ae:50:ef:ba:b9:14:dc:10:e6:03:70:6c:d1:07:bb: 10:4c:86:00:8d:a2:81:c0:9d:f1:7e:53:03:08:73:1a:89:73: d9:57:da:69:61:88:ea:c7:a5:53:fc:ef:bf:83:18:a9:25:c1: 77:4b:62:03:92:c4:b5:2f:56:29:ae:64:e4:7e:99:4f:39:9f: 1e:5c:52:ec:fb:c1:32:0b:75:eb:e1:7a:b5:c1:c9:3b:4c:1d: 91:57:73:56:ac:0c:64:b8:a7:bc:c2:43:eb:b5:83:a3:18:b0: 50:51:06:e9:e8:ef:67:e9:f6:88:c1:f2:f8:d8:81:ad:61:77: 26:55:9d:ae:0d:18:2d:3f:4c:18:5d:61:5e:87:f5:84:35:c2: e3:e5:34:21:2c:9e:65:38:90:6f:8b:3f:4e:28:23:38:ee:32: 6c:2d:2c:b6:e9:a5:0f:9a:29:1b:9b:6c:c4:e0:4d:83:c4:67: 1a:83:62:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKERFNzM5MUIzNkQ2RTc2RTJDQzQwQTkwNDc3NzJDMDBC MEY3NzUyNkMwHhcNMjYwMTE3MDEwOTM2WhcNMjYwMTI0MDEwOTM2WjAYMRYwFAYD VQQDDA02OTZhZTE1MC02YWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAou1pf+34qGXYHBhRTugSOAeIs4LTxWAiQJpweC4sZPemrQrAs9KnpFhOeOlJ RWQl8Dcw1f9FJW7KQ/kfL25j0DAYlSmqWtil9UFGm+R+fz/g/bmcMZ/oIaM+od29 TXV5aXjqqRaKFJZDVwHxO0xvUFUOStPHp5o1BpPZgoZ4SRVl1aVr5KinUX+wq31J a+5Zy2ZIb/Ui+bLE6wmmBct365BktuK3HDLmJc5nG2UpRns2f5SkiragiYfSOB+p o1A9PBcAZN/kRuKlxAqLxbdprc2wEUBuJutX4wKBDu9XDwRJIWx0dT++3m4gLWZA 6GEZfPM1DYgXgxFKcLRa2O6twQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOw0ulV SmG7YcO/j2dislcv2kvPMB8GA1UdIwQYMBaAFN5zkbNtbnbizECpBHdywAsPd1Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni81RkNEOUZENDAw NTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1TE1RS2tFZDNMQUN3OTNV bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNuT1JzMjF1ZHVMTVFLa0VkM0xBQ3c5M1Vtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni81RkNEOUZENDAwNTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1 TE1RS2tFZDNMQUN3OTNVbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJTJUz3mwlANQwaIvo/iRQCqaT1Np0/fF1hj0U2pWU6CGn+VZ9fnx8 tcnBUCHUx0hrMuyWyN0mRwlO6qK1/C7skJq4KwuHR6z6hTquUO+6uRTcEOYDcGzR B7sQTIYAjaKBwJ3xflMDCHMaiXPZV9ppYYjqx6VT/O+/gxipJcF3S2IDksS1L1Yp rmTkfplPOZ8eXFLs+8EyC3Xr4Xq1wck7TB2RV3NWrAxkuKe8wkPrtYOjGLBQUQbp 6O9n6faIwfL42IGtYXcmVZ2uDRgtP0wYXWFeh/WENcLj5TQhLJ5lOJBviz9OKCM4 7jJsLSy26aUPmikbm2zE4E2DxGcag2Ji -----END CERTIFICATE-----Generated at Sun Jan 18 03:09:52 2026 by rpki-client