This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft File: SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft (raw, json) Hash identifier: nTAM7iQP9gMjRrA1WAkSZMsOQWaKOrVC/hdn6zZvSSg= Subject key identifier: 18:36:A7:37:17:5A:CC:C8:9C:B7:E1:82:A2:1A:9B:33:9B:E7:1F:F4 Authority key identifier: 48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F Certificate issuer: /CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F Certificate serial: 0955 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft Manifest number: 093A Signing time: Tue 20 Jan 2026 19:40:25 +0000 Manifest this update: Tue 20 Jan 2026 19:40:25 +0000 Manifest next update: Tue 27 Jan 2026 19:40:25 +0000 Files and hashes: 1: SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl (hash: nrXxU+6ltLrTK5d+h7kUXt90b2fUgZ8eZJW7yAbch0g=) 2: EA41FB0EB6A911EAB0EB257EC4F9AE02.roa (hash: +NWxZ4+1DLoMUKpAzUV8GXujacBHu2pkEpYyl5zFIic=) 3: E101BEF6BA1111EAA2AF621EC4F9AE02.roa (hash: S4rEl380BTJzcHGG2hyACdGlelyGvU4RyQMTlMFDOTU=) 4: EABCE94C932111EE8C70453EC4F9AE02.roa (hash: 3jZ9nHpwySfxwNtadAmSfYTid2BMJXTKTIVS2D09msI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 19:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2389 (0x955) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E563F, serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F Validity Not Before: Jan 20 19:40:25 2026 GMT Not After : Jan 27 19:40:25 2026 GMT Subject: CN=696fda29-64c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:c5:a5:d6:8b:69:3b:ce:09:b4:b1:f5:35: db:0e:e2:7f:4a:9f:1e:37:af:e6:b7:85:12:2e:62: 95:9a:36:7a:26:d7:cc:aa:24:0c:fd:bc:22:e7:90: 72:70:76:de:76:e8:c4:2e:b5:33:ee:4d:8d:56:df: 1f:8a:5b:df:b7:72:ac:8e:3f:ee:b5:da:84:19:67: 68:a6:34:ab:ba:0e:c0:62:cd:8f:0f:a8:9f:f9:3b: 6c:ec:7b:b3:66:cf:a7:57:e3:c2:18:db:ef:3d:44: 6f:da:09:31:a8:e0:00:3c:df:a8:dd:43:e7:76:05: 8b:c9:2a:5c:83:ad:1a:89:d1:00:3a:e5:b8:a8:70: f0:c0:1c:67:a3:a5:59:ab:02:93:b3:ae:a0:ae:4b: 47:c2:a5:e2:7e:6c:4b:f2:b9:e1:8c:eb:ce:65:a7: a3:ef:be:e2:8b:c3:11:82:29:05:64:cf:cf:c9:99: 40:15:38:94:40:34:fd:4c:b0:ee:3b:8a:e0:97:91: b4:ba:81:26:93:de:bc:67:c0:61:a3:b7:7a:6b:a9: 12:93:01:d1:41:3e:2d:ce:15:25:b3:32:14:e0:b3: 46:78:6f:c8:cf:0e:f1:72:73:6a:8d:d6:70:d2:84: 59:3e:e8:2c:07:7f:4f:80:91:f9:63:36:39:09:75: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:36:A7:37:17:5A:CC:C8:9C:B7:E1:82:A2:1A:9B:33:9B:E7:1F:F4 X509v3 Authority Key Identifier: keyid:48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:2c:6b:e1:e0:e6:14:62:ac:82:81:90:75:fb:d5:ee:fe:67: 01:61:1e:5d:83:78:cc:64:15:b7:b7:a7:15:df:ad:a0:14:c9: ec:bc:47:3f:ee:da:4b:ff:b1:c0:46:95:34:f7:67:b7:85:77: 33:86:26:10:b2:08:81:12:52:2c:54:a8:75:ab:c7:b5:61:ca: d8:6a:c7:13:a9:96:cc:e5:6f:5a:7b:89:1a:40:1a:83:a8:0e: 0a:0d:40:3e:ff:20:c0:5b:72:65:f3:65:0b:a5:a0:2f:e9:b4: 8b:f2:f9:43:c4:15:17:d7:03:07:63:4d:32:8f:fc:56:af:d0: a9:7c:f9:2c:8b:e9:59:8a:a2:fe:41:df:48:9c:80:a6:9c:40: 27:a8:7a:9a:15:22:9d:ed:d9:b9:c5:d7:26:eb:cc:6b:ed:0a: c4:4d:6c:4e:3e:20:0f:23:0d:eb:1c:f7:26:96:9c:05:4b:6a: 44:86:76:bd:ae:7d:4a:6d:99:06:35:ae:70:c4:dd:79:71:4f: a4:82:bc:20:18:fe:99:65:de:f6:ac:59:14:7f:bf:69:58:0f: 79:f1:f7:2e:12:95:d2:4e:5b:71:8a:8f:c3:e2:01:54:a0:b7: 3d:68:fc:ef:5e:b5:5f:a3:ba:db:f5:dd:58:79:80:90:d3:fd: 9a:a0:f3:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU2M0YxMTAvBgNVBAUTKDQ4MjAxNkU1NkEwMjQxRkQyRDM1QkZENzdCQzk3MkU2 NzNDRTlGMkYwHhcNMjYwMTIwMTk0MDI1WhcNMjYwMTI3MTk0MDI1WjAYMRYwFAYD VQQDDA02OTZmZGEyOS02NGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyHFpdaLaTvOCbSx9TXbDuJ/Sp8eN6/mt4USLmKVmjZ6JtfMqiQM/bwi55By cHbedujELrUz7k2NVt8filvft3Ksjj/utdqEGWdopjSrug7AYs2PD6if+Tts7Huz Zs+nV+PCGNvvPURv2gkxqOAAPN+o3UPndgWLySpcg60aidEAOuW4qHDwwBxno6VZ qwKTs66grktHwqXifmxL8rnhjOvOZaej777ii8MRgikFZM/PyZlAFTiUQDT9TLDu O4rgl5G0uoEmk968Z8Bho7d6a6kSkwHRQT4tzhUlszIU4LNGeG/Izw7xcnNqjdZw 0oRZPugsB39PgJH5YzY5CXWltQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBg2pzcX WszInLfhgqIamzOb5x/0MB8GA1UdIwQYMBaAFEggFuVqAkH9LTW/13vJcuZzzp8v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTYzRi8wQUI3NzdEQUI2 QTgxMUVBQUVFMTRGN0JDNEY5QUUwMi9TQ0FXNVdvQ1FmMHROYl9YZThseTVuUE9u eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDQVc1V29DUWYwdE5iX1hlOGx5NW5QT255OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTYzRi8wQUI3NzdEQUI2QTgxMUVBQUVFMTRGN0JDNEY5QUUwMi9TQ0FXNVdvQ1Fm MHROYl9YZThseTVuUE9ueTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiLGvh4OYUYqyCgZB1+9Xu/mcBYR5dg3jMZBW3t6cV362gFMnsvEc/ 7tpL/7HARpU092e3hXczhiYQsgiBElIsVKh1q8e1YcrYascTqZbM5W9ae4kaQBqD qA4KDUA+/yDAW3Jl82ULpaAv6bSL8vlDxBUX1wMHY00yj/xWr9CpfPksi+lZiqL+ Qd9InICmnEAnqHqaFSKd7dm5xdcm68xr7QrETWxOPiAPIw3rHPcmlpwFS2pEhna9 rn1KbZkGNa5wxN15cU+kgrwgGP6ZZd72rFkUf79pWA958fcuEpXSTltxio/D4gFU oLc9aPzvXrVfo7rb9d1YeYCQ0/2aoPNb -----END CERTIFICATE-----Generated at Wed Jan 21 20:46:46 2026 by rpki-client