This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft File: 9fW2D5FdvXIk_85g8fnQXoNwLvM.mft (raw, json) Hash identifier: 3Bgm7cw/vC+JMiAVX3COslzSQPgvxgG3yx5HGoo/ouQ= Subject key identifier: B8:5C:FE:6D:93:4B:1E:64:D9:B8:A1:77:D9:CA:99:FE:58:EE:D2:FE Authority key identifier: F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3 Certificate issuer: /CN=A91E585B/serialNumber=F5F5B60F915DBD7224FFCE60F1F9D05E83702EF3 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft Manifest number: 08 Signing time: Tue 27 Jan 2026 07:20:44 +0000 Manifest this update: Tue 27 Jan 2026 07:20:43 +0000 Manifest next update: Tue 03 Feb 2026 07:20:43 +0000 Files and hashes: 1: 9fW2D5FdvXIk_85g8fnQXoNwLvM.crl (hash: 1DWUnlPoqrOJQCMyTIofXUWI0DaeMEZ5QAg/AX82epc=) 2: F59E9504F20611F0B4D6054A4A6F56BC.roa (hash: t5NVWnlTc6I8bVb/subO3WOyEwc4wN3m4tJs6ujVL4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.crl rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 07:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E585B, serialNumber=F5F5B60F915DBD7224FFCE60F1F9D05E83702EF3 Validity Not Before: Jan 27 07:20:43 2026 GMT Not After : Feb 3 07:20:43 2026 GMT Subject: CN=6978674c-0d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:20:d5:1a:72:09:eb:38:68:35:8b:8a:25:50: 59:cb:79:11:21:ac:39:82:d0:8d:e8:92:1d:a5:72: c5:0a:c6:d2:3f:2f:58:a1:b5:ed:7e:40:79:8c:7c: 04:b5:29:4a:02:f2:76:5f:85:76:be:29:ab:02:06: 90:de:c2:87:17:3f:41:22:e5:e4:e8:e0:8a:fa:22: e0:65:b1:de:f4:06:3d:f2:d6:3a:30:d4:17:b9:24: 17:7b:d6:24:7b:ef:5f:25:f6:c4:f8:e2:2f:af:fb: 01:0c:82:c3:1c:61:a5:a5:85:36:49:35:0c:60:6a: 39:c6:c9:08:c8:38:e3:00:aa:50:ec:5b:e7:6f:58: 7b:fb:37:58:74:e6:11:2d:a5:66:d0:6e:c2:bd:e4: af:fa:16:55:b3:c1:1e:06:e8:e5:ea:81:53:64:37: a8:d1:8b:14:40:e7:42:47:d5:4c:f9:47:2c:a1:f4: ce:5a:6a:4e:66:ac:b2:4a:cb:2b:6f:ab:ca:79:18: af:9d:52:d0:64:e4:3f:24:2f:bf:4d:d7:cf:ff:bc: 98:96:42:e9:f3:8a:60:c8:3a:2d:2d:16:00:b5:a4: 26:49:5f:e4:3d:82:49:31:2e:40:9c:1c:ef:40:b2: 27:cd:14:4e:8c:b1:61:7a:29:74:9b:cf:96:71:13: 73:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5C:FE:6D:93:4B:1E:64:D9:B8:A1:77:D9:CA:99:FE:58:EE:D2:FE X509v3 Authority Key Identifier: keyid:F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ec:0d:73:a2:9f:08:cf:03:97:67:ae:c8:2a:4a:da:d7:ce: 7a:a8:e5:b7:70:f4:c0:4e:98:ba:0a:ff:4b:6b:51:e1:52:a9: e1:d0:cf:88:9d:04:82:7e:8e:c5:24:e3:cb:b9:1f:b7:78:47: ce:24:67:0b:a8:11:b2:e7:49:1b:f1:0f:b8:6e:3d:dc:94:59: 48:aa:6d:05:f9:6b:0a:a3:7e:45:b8:47:c3:36:0a:54:ff:62: 87:89:ef:95:86:bb:b3:eb:8d:c7:43:0c:69:1d:03:a1:c5:fc: e5:98:ab:88:d4:25:0c:2d:99:8f:27:7c:47:35:5d:f3:73:dd: 7f:f7:36:bb:f7:a9:7e:82:68:31:82:d0:fd:e9:3c:40:cd:0e: 83:f3:72:52:19:c1:1f:0b:e8:d0:ef:1e:dc:5b:a6:33:68:06: 22:4b:a6:94:33:a6:64:1a:31:7a:53:aa:cd:f8:1b:0c:7c:ee: 20:b4:ed:9a:81:04:e9:09:43:b7:42:6d:25:14:29:be:29:44: c9:a6:b1:df:d4:bb:d4:1a:70:8a:7b:98:ad:35:96:f6:41:ae: e3:d3:64:98:eb:72:27:36:38:da:6f:17:be:ed:6b:c9:d2:36: 98:e3:37:49:6e:a0:56:95:bf:3b:05:99:4e:6e:d0:f4:23:d4: 88:e4:72:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFF NTg1QjExMC8GA1UEBRMoRjVGNUI2MEY5MTVEQkQ3MjI0RkZDRTYwRjFGOUQwNUU4 MzcwMkVGMzAeFw0yNjAxMjcwNzIwNDNaFw0yNjAyMDMwNzIwNDNaMBgxFjAUBgNV BAMMDTY5Nzg2NzRjLTBkOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVINUacgnrOGg1i4olUFnLeREhrDmC0I3okh2lcsUKxtI/L1ihte1+QHmMfAS1 KUoC8nZfhXa+KasCBpDewocXP0Ei5eTo4Ir6IuBlsd70Bj3y1jow1Be5JBd71iR7 718l9sT44i+v+wEMgsMcYaWlhTZJNQxgajnGyQjIOOMAqlDsW+dvWHv7N1h05hEt pWbQbsK95K/6FlWzwR4G6OXqgVNkN6jRixRA50JH1Uz5Ryyh9M5aak5mrLJKyytv q8p5GK+dUtBk5D8kL79N18//vJiWQunzimDIOi0tFgC1pCZJX+Q9gkkxLkCcHO9A sifNFE6MsWF6KXSbz5ZxE3MlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuFz+bZNL HmTZuKF32cqZ/lju0v4wHwYDVR0jBBgwFoAU9fW2D5FdvXIk/85g8fnQXoNwLvMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODVCL0I4NkNDRjU4RjIw NTExRjA4MThCNzczMjRBNkY1NkJDLzlmVzJENUZkdlhJa184NWc4Zm5RWG9Od0x2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWZXMkQ1RmR2WElrXzg1ZzhmblFYb053THZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 ODVCL0I4NkNDRjU4RjIwNTExRjA4MThCNzczMjRBNkY1NkJDLzlmVzJENUZkdlhJ a184NWc4Zm5RWG9Od0x2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAArsDXOinwjPA5dnrsgqStrXznqo5bdw9MBOmLoK/0trUeFSqeHQz4id BIJ+jsUk48u5H7d4R84kZwuoEbLnSRvxD7huPdyUWUiqbQX5awqjfkW4R8M2ClT/ YoeJ75WGu7PrjcdDDGkdA6HF/OWYq4jUJQwtmY8nfEc1XfNz3X/3Nrv3qX6CaDGC 0P3pPEDNDoPzclIZwR8L6NDvHtxbpjNoBiJLppQzpmQaMXpTqs34Gwx87iC07ZqB BOkJQ7dCbSUUKb4pRMmmsd/Uu9QacIp7mK01lvZBruPTZJjrcic2ONpvF77ta8nS NpjjN0luoFaVvzsFmU5u0PQj1IjkcgI= -----END CERTIFICATE-----Generated at Wed Jan 28 13:51:40 2026 by rpki-client