This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json) Hash identifier: ru1KsIAG30zvQ47LkGNVKGoUUSnA67J2+eJfU/xyNl0= Subject key identifier: 8D:AF:08:A1:49:54:99:BA:67:AC:2D:36:9B:68:34:10:23:18:57:54 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 11DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft Manifest number: 1193 Signing time: Mon 26 Jan 2026 16:56:19 +0000 Manifest this update: Mon 26 Jan 2026 16:56:19 +0000 Manifest next update: Mon 02 Feb 2026 16:56:19 +0000 Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: SaZGbp+GyB00MYIpE8najaNUrJpEd5gRkh7Ynk3VhB0=) 2: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: PDXFymAQeHbTCItIfy8LqqoHr3PVKA+eJZNU6voGL5A=) 3: 69915526EA0711F0976467B16F6F56BC.roa (hash: 5jCAijP2Uu4saLzkXJE1ajM89QlqkPOqvioTBCtU4d4=) 4: D276D68CACDC11F093B6B95AC4F9AE02.roa (hash: HogXJmL/NwNRLzeVXgVFZcWMkVgOGwGFOMaQzjDPXUk=) 5: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: GKHRKfwk3bqrqOFGPvJ+kjY0NTnB33jXoiW8bXeNOjw=) 6: 2E3A7CDCECB411F0B6919987656F56BC.roa (hash: fjxN8wbj/Fp3lEhazGggKd04goFlzE+40eucHtcjVaY=) 7: D9BBFBDA4D3111F099A48033C4F9AE02.roa (hash: A1A/LnUqdsNFUNCbA9pj78Zy7mXZZnhX+0nyseCL3vE=) 8: 98A0F61840AD11F0BB332714C4F9AE02.roa (hash: tKQU1f9hJtuAYfiy2kdRz9mYUmd+c/z8iKCPuJpB5Jo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 16:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4571 (0x11db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Jan 26 16:56:19 2026 GMT Not After : Feb 2 16:56:19 2026 GMT Subject: CN=69779cb3-02fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ea:f3:41:40:aa:b3:61:09:41:b3:b8:94:92: 63:14:ae:ce:f6:ae:77:a1:08:a4:c9:08:6d:4d:35: 11:3f:7d:f0:bc:c8:d3:25:78:8e:14:bc:6c:e7:c1: bf:a6:82:94:e0:c0:a4:e8:e3:c9:55:96:6b:ab:75: 9c:c2:dc:7e:6f:3c:79:f4:83:eb:c3:fa:25:fe:04: e2:e7:fc:d4:e1:35:d8:80:c7:11:0e:4a:28:0a:13: 24:e5:e6:ad:f2:2a:26:34:50:66:e2:b6:00:50:32: 2e:0b:92:72:4a:ce:81:d7:10:43:fa:c4:65:c1:ce: 09:6c:ac:4a:6b:99:a7:71:ae:2e:05:33:46:45:7d: 9d:07:cf:4f:a8:fb:c2:08:d6:18:8e:79:9d:a8:1e: fd:49:88:d0:b0:82:15:5e:bf:99:71:bb:fd:20:6c: 7a:99:4e:5f:0c:48:bc:70:05:5a:c7:8d:b3:4a:6d: ed:0c:f5:78:a4:ef:3f:07:f8:8f:2d:db:e7:31:12: a0:0a:04:ef:11:f8:64:fc:e9:ab:d1:c0:ad:fe:5d: 98:d1:5d:ee:4e:ba:8f:e1:68:8c:a3:24:c1:60:4f: 3e:bf:3d:d7:21:f4:c0:1e:68:a6:a0:2c:26:ec:14: ac:a4:f0:c1:70:dd:c3:75:d0:56:17:16:9f:0c:15: 4d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AF:08:A1:49:54:99:BA:67:AC:2D:36:9B:68:34:10:23:18:57:54 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b9:cb:65:61:a6:ed:7b:4e:cc:9a:78:a5:6a:c1:24:d4:8b: f6:32:ea:4f:e1:2a:7f:71:ea:79:e8:4a:e5:6b:d6:ef:01:6b: 06:68:96:ab:44:ef:cc:39:08:ab:98:7f:1c:f3:45:ac:a5:7c: 9c:b2:a0:de:ad:0c:35:f1:85:dc:30:de:b2:12:1f:66:9f:ba: e9:11:6f:53:cb:04:17:69:4d:64:fd:72:d7:70:84:a9:1a:25: 71:9a:ca:c2:4a:95:75:33:ba:f6:56:25:99:3b:25:ff:77:23: aa:be:4a:43:66:38:fb:0c:b8:31:32:b9:7c:dc:d3:ba:09:9e: 92:03:0b:eb:86:5e:60:3a:51:db:44:16:6d:db:ba:6c:14:02: 73:cc:b1:aa:16:4d:bb:7f:2b:ee:86:18:92:81:3f:3c:c0:99: 9c:57:79:7b:2d:69:da:cf:f4:17:2e:e1:3d:a0:61:53:e8:93: fe:a4:61:95:68:63:a1:37:01:c6:35:c1:cb:25:e0:9b:a8:7a: 71:10:68:2c:dc:8e:c0:0c:44:41:cd:7f:9c:f2:f9:8b:07:1e: f8:ab:bf:0e:a1:1c:ec:1e:bc:1c:ec:3c:82:36:d6:a4:ad:50: 66:db:f2:ac:e4:fd:a1:6d:f4:aa:f1:51:26:f2:83:92:a0:45: 5e:74:c0:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjYwMTI2MTY1NjE5WhcNMjYwMjAyMTY1NjE5WjAYMRYwFAYD VQQDDA02OTc3OWNiMy0wMmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAperzQUCqs2EJQbO4lJJjFK7O9q53oQikyQhtTTURP33wvMjTJXiOFLxs58G/ poKU4MCk6OPJVZZrq3Wcwtx+bzx59IPrw/ol/gTi5/zU4TXYgMcRDkooChMk5eat 8iomNFBm4rYAUDIuC5JySs6B1xBD+sRlwc4JbKxKa5mnca4uBTNGRX2dB89PqPvC CNYYjnmdqB79SYjQsIIVXr+Zcbv9IGx6mU5fDEi8cAVax42zSm3tDPV4pO8/B/iP LdvnMRKgCgTvEfhk/Omr0cCt/l2Y0V3uTrqP4WiMoyTBYE8+vz3XIfTAHmimoCwm 7BSspPDBcN3DddBWFxafDBVNowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2vCKFJ VJm6Z6wtNptoNBAjGFdUMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdEQy8zNUY3OTg2NjFGMDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85 aEhPUjhzTHBabDVPN2h0MEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKuctlYabte07MmnilasEk1Iv2MupP4Sp/cep56Erla9bvAWsGaJar RO/MOQirmH8c80WspXycsqDerQw18YXcMN6yEh9mn7rpEW9TywQXaU1k/XLXcISp GiVxmsrCSpV1M7r2ViWZOyX/dyOqvkpDZjj7DLgxMrl83NO6CZ6SAwvrhl5gOlHb RBZt27psFAJzzLGqFk27fyvuhhiSgT88wJmcV3l7LWnaz/QXLuE9oGFT6JP+pGGV aGOhNwHGNcHLJeCbqHpxEGgs3I7ADERBzX+c8vmLBx74q78OoRzsHrwc7DyCNtak rVBm2/Ks5P2hbfSq8VEm8oOSoEVedMD1 -----END CERTIFICATE-----Generated at Tue Jan 27 11:35:17 2026 by rpki-client