This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft File: MSRAIBsu90t8rGwx-4X0HpxGhqA.mft (raw, json) Hash identifier: 5JuibPrIzj9zFpMBgbaUAz00pJOhhhIwpgPVzfNv0RM= Subject key identifier: 37:22:B6:B7:84:35:0B:9E:4E:75:9D:C1:D2:B6:7D:48:E1:FE:66:0B Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 Certificate issuer: /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft Manifest number: B2 Signing time: Fri 23 Jan 2026 05:22:59 +0000 Manifest this update: Fri 23 Jan 2026 05:22:58 +0000 Manifest next update: Fri 30 Jan 2026 05:22:58 +0000 Files and hashes: 1: MSRAIBsu90t8rGwx-4X0HpxGhqA.crl (hash: Nd80FwB7J4WvQBHRtu+PlvH0Qq28LJSmKXT3F2gXQyY=) 2: 2178DCD2FF3E11EF8D834053C4F9AE02.roa (hash: JSwC8LvkFFx+csBawa+WzjqR/g3wGIngxuIt67ID3sc=) 3: 070DB3BAFB6D11EFA5E39678C4F9AE02.roa (hash: q1x47yUs6U+uQS9ousQECTrxQCfwChHW+mjdafLrJuY=) 4: F5FC39B600F811F0BD702A69C4F9AE02.roa (hash: d3Ztp/QXe6hyPV/VR1BVSJgcfduo9pSnhik7tX10cpI=) 5: F14B18CE64C611F0A7F4DB79C4F9AE02.roa (hash: 1OAyMVa0XBUo/ryUsoyI81mxhEqjOM4w6I8EktKs9g0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 05:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Validity Not Before: Jan 23 05:22:58 2026 GMT Not After : Jan 30 05:22:58 2026 GMT Subject: CN=697305b3-b4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:b0:92:49:6e:60:bb:d0:23:f6:30:72:24: 17:dd:ae:fe:c7:47:d0:d6:e1:c7:eb:43:cf:77:80: d3:42:39:47:8b:a3:08:c1:26:5c:85:2a:89:d5:72: 5e:7d:ca:69:f9:74:f2:74:5b:c0:19:a3:ca:08:50: fd:33:c4:78:18:f8:07:e1:54:76:e0:88:a3:26:16: 0d:ed:72:75:f9:e2:2b:d1:fc:80:4d:73:1b:b3:ca: 9d:a3:e8:67:0e:f8:dc:ae:c9:be:62:df:c3:ee:ad: a9:20:7d:97:83:c4:63:5e:96:01:03:d0:f4:f1:cd: 4c:f6:a3:1f:cb:92:2f:61:ef:99:6c:31:c9:b4:98: ab:12:c6:a4:4b:cf:38:ff:6d:60:8f:03:93:2d:87: 82:5a:70:00:c8:3d:a3:b7:59:ca:52:3a:cd:21:9a: a5:2a:ff:4f:6c:bf:8d:91:10:94:60:91:f4:c2:82: e6:38:07:25:2f:c3:51:8d:9c:a1:b5:fa:85:28:8b: 43:0c:40:98:b0:9d:47:7b:da:2d:e2:2f:02:9f:18: be:2e:a3:d7:7e:ef:c4:25:92:5b:c6:ff:e3:26:b2: 94:40:ba:fa:7e:f5:1e:39:cb:27:1c:af:27:b4:3a: e2:00:52:b7:2b:1e:3d:5e:c7:1b:60:4a:6a:28:3c: 68:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:22:B6:B7:84:35:0B:9E:4E:75:9D:C1:D2:B6:7D:48:E1:FE:66:0B X509v3 Authority Key Identifier: keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:95:db:80:47:33:be:c7:ac:40:ac:c6:f9:2a:c4:25:66:29: 7b:45:8c:18:2f:6e:00:f1:12:09:8a:7a:aa:5c:4c:e2:bb:8a: c8:bd:c8:fd:68:a3:09:9f:4c:8e:39:5a:eb:97:4c:16:9a:fb: f0:3d:0d:f3:69:15:83:1f:13:cd:6e:cd:e6:38:56:1e:90:fc: 0c:ff:18:fd:9d:8c:c5:32:82:80:cf:87:8a:c3:68:49:13:d8: a8:97:19:8a:ea:4b:c9:b8:31:9c:1d:d4:34:47:91:7d:2d:98: c8:6c:70:a4:8c:d4:a9:74:df:0f:8a:cc:99:ed:8b:67:65:e2: d6:cc:7f:49:09:f3:d8:34:47:a0:9e:7a:af:0d:b4:ea:bf:28: bc:b1:65:36:35:7b:aa:c6:de:ea:57:d1:b7:3b:8e:b6:03:85: 30:10:83:af:07:b2:6d:09:20:7b:29:ea:61:0e:0d:95:2a:65: 1b:01:5e:1c:50:4f:63:0c:ed:42:a3:51:ef:61:ab:f1:f1:02: 4d:82:62:83:25:13:ab:5d:64:58:8e:1f:5d:52:71:4f:3f:d3: 41:dd:d0:d2:dc:d6:56:8e:06:79:43:62:81:46:94:45:38:8c: 8a:c9:f7:bb:89:63:aa:68:1f:84:7e:37:6b:a6:2b:c6:6c:d5: 2a:2d:dc:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE4MEMxMTAvBgNVBAUTKDMxMjQ0MDIwMUIyRUY3NEI3Q0FDNkMzMUZCODVGNDFF OUM0Njg2QTAwHhcNMjYwMTIzMDUyMjU4WhcNMjYwMTMwMDUyMjU4WjAYMRYwFAYD VQQDDA02OTczMDViMy1iNGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPiwkkluYLvQI/YwciQX3a7+x0fQ1uHH60PPd4DTQjlHi6MIwSZchSqJ1XJe fcpp+XTydFvAGaPKCFD9M8R4GPgH4VR24IijJhYN7XJ1+eIr0fyATXMbs8qdo+hn Dvjcrsm+Yt/D7q2pIH2Xg8RjXpYBA9D08c1M9qMfy5IvYe+ZbDHJtJirEsakS884 /21gjwOTLYeCWnAAyD2jt1nKUjrNIZqlKv9PbL+NkRCUYJH0woLmOAclL8NRjZyh tfqFKItDDECYsJ1He9ot4i8Cnxi+LqPXfu/EJZJbxv/jJrKUQLr6fvUeOcsnHK8n tDriAFK3Kx49XscbYEpqKDxofwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcitreE NQueTnWdwdK2fUjh/mYLMB8GA1UdIwQYMBaAFDEkQCAbLvdLfKxsMfuF9B6cRoag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTgwQy9ERTk4RUFGMEZC NjUxMUVGQTM3NkU0NDlDNEY5QUUwMi9NU1JBSUJzdTkwdDhyR3d4LTRYMEhweEdo cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TUkFJQnN1OTB0OHJHd3gtNFgwSHB4R2hxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTgwQy9ERTk4RUFGMEZCNjUxMUVGQTM3NkU0NDlDNEY5QUUwMi9NU1JBSUJzdTkw dDhyR3d4LTRYMEhweEdocUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATlduARzO+x6xArMb5KsQlZil7RYwYL24A8RIJinqqXEziu4rIvcj9 aKMJn0yOOVrrl0wWmvvwPQ3zaRWDHxPNbs3mOFYekPwM/xj9nYzFMoKAz4eKw2hJ E9iolxmK6kvJuDGcHdQ0R5F9LZjIbHCkjNSpdN8PisyZ7YtnZeLWzH9JCfPYNEeg nnqvDbTqvyi8sWU2NXuqxt7qV9G3O462A4UwEIOvB7JtCSB7KephDg2VKmUbAV4c UE9jDO1Co1HvYavx8QJNgmKDJROrXWRYjh9dUnFPP9NB3dDS3NZWjgZ5Q2KBRpRF OIyKyfe7iWOqaB+EfjdrpivGbNUqLdw5 -----END CERTIFICATE-----Generated at Fri Jan 23 15:17:22 2026 by rpki-client