This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft File: qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft (raw, json) Hash identifier: 0eV3eOuCrzzk1XMcGzOQ/pxWf1YmuHsoLppCNxyCP/8= Subject key identifier: 96:65:66:AB:5E:A2:4C:1B:5E:D2:2D:33:5F:9D:B3:30:AA:75:75:4F Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 Certificate issuer: /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Certificate serial: 0255 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft Manifest number: 024F Signing time: Sat 17 Jan 2026 00:56:20 +0000 Manifest this update: Sat 17 Jan 2026 00:56:19 +0000 Manifest next update: Sat 24 Jan 2026 00:56:19 +0000 Files and hashes: 1: qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl (hash: cLG80nfPj6/YwpgmAseN54UwtDo6oRXcgIPiS3HWrHA=) 2: CDA9BB546E0C11ED8BF41547C4F9AE02.roa (hash: 5xUQVljU0BWWuc6LYolHHzG3Hqi8KmssX696YCKuce8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 00:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5216, serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Validity Not Before: Jan 17 00:56:19 2026 GMT Not After : Jan 24 00:56:19 2026 GMT Subject: CN=696ade34-d65d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d9:e3:0c:39:4e:3a:b8:7a:9e:d2:30:7a:21: b1:05:06:35:f6:64:08:3e:8e:74:42:90:29:0b:f4: 5b:c0:fa:7b:e7:ff:50:50:d8:fb:3e:20:81:c5:26: 61:05:4e:14:6d:eb:af:13:46:4d:32:03:4c:73:8d: d5:c7:a3:b4:80:8d:59:17:9c:96:09:a5:e6:58:5a: f0:db:97:08:da:1b:12:75:c5:da:e5:5d:f9:ce:fd: 60:7d:9b:60:3d:db:c5:17:bb:58:6d:ef:7d:e4:08: 2d:25:d6:52:e1:6d:20:d0:7d:db:d0:b4:4f:58:00: c8:67:4d:8c:8d:f1:f0:be:6c:a1:ea:25:e8:dc:67: d6:b2:60:d8:61:28:55:e7:c9:9f:e9:41:54:16:3e: ae:8c:a0:13:1e:0a:0f:c7:cb:4a:14:22:0d:20:91: 60:30:5c:f4:90:d9:17:60:5e:f5:90:13:7e:7e:52: 53:26:eb:cf:0b:7a:6e:73:8f:b2:9a:d3:6e:95:bd: 4d:f7:3d:7f:71:8f:70:d1:9a:cc:00:ad:b5:dc:dd: 9a:3a:ad:3d:36:65:13:2c:c3:e7:75:b4:20:f2:86: c2:d4:3a:c0:8a:01:8d:15:ae:c6:e0:5a:e1:f1:e0: 63:72:62:8a:8d:9f:ea:68:37:8c:a1:33:35:b1:67: 94:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:65:66:AB:5E:A2:4C:1B:5E:D2:2D:33:5F:9D:B3:30:AA:75:75:4F X509v3 Authority Key Identifier: keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:41:f6:5b:f4:bd:ff:c9:2f:f7:67:5f:29:66:4f:dd:7a:c3: d1:fa:dc:d8:28:97:53:7a:c8:f7:b0:5d:b9:3b:a0:3d:ea:7c: ce:21:a5:ce:99:57:db:9b:87:cb:86:b6:51:60:44:cb:8d:92: 6f:95:6b:3f:62:0b:02:80:cb:20:fe:cc:aa:34:d8:33:67:0f: 5f:7f:32:e9:39:6a:08:96:d9:66:3b:25:d3:04:15:f6:46:05: 00:dd:9e:d2:9e:ec:9f:f8:a9:b6:06:3a:f3:2a:ad:b3:af:c4: f1:87:f4:9c:34:58:43:73:eb:ac:7c:5e:af:e8:19:7c:a5:76: 03:7c:de:bd:9e:e1:40:9f:98:52:88:ef:65:cf:44:54:79:5a: 46:33:76:9f:77:50:8f:54:d3:16:f8:2b:5c:1c:49:90:d5:25: 11:54:0d:f3:b9:bd:c3:95:45:00:ba:47:6b:da:94:f3:fb:d4: 4a:3d:2b:de:4e:46:42:3f:57:f3:ae:fb:b7:51:b2:28:3f:2a: b4:4d:b7:17:95:dc:d2:78:1f:fe:fd:67:3e:dd:01:a9:56:52: f9:97:34:f2:23:29:77:ee:03:4a:f9:e7:4a:71:8c:63:e9:4c: 28:56:a8:fb:66:7b:a2:fb:45:cb:69:be:3e:41:85:d9:af:74: 51:88:ae:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMTYxMTAvBgNVBAUTKEE4NDFCREM1QUZBOUU5QTBBOTVCODg1NDYxMTNDQTc0 NUVFOTYzQjUwHhcNMjYwMTE3MDA1NjE5WhcNMjYwMTI0MDA1NjE5WjAYMRYwFAYD VQQDDA02OTZhZGUzNC1kNjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3tnjDDlOOrh6ntIweiGxBQY19mQIPo50QpApC/RbwPp75/9QUNj7PiCBxSZh BU4UbeuvE0ZNMgNMc43Vx6O0gI1ZF5yWCaXmWFrw25cI2hsSdcXa5V35zv1gfZtg PdvFF7tYbe995AgtJdZS4W0g0H3b0LRPWADIZ02MjfHwvmyh6iXo3GfWsmDYYShV 58mf6UFUFj6ujKATHgoPx8tKFCINIJFgMFz0kNkXYF71kBN+flJTJuvPC3puc4+y mtNulb1N9z1/cY9w0ZrMAK213N2aOq09NmUTLMPndbQg8obC1DrAigGNFa7G4Frh 8eBjcmKKjZ/qaDeMoTM1sWeUawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZlZqte okwbXtItM1+dszCqdXVPMB8GA1UdIwQYMBaAFKhBvcWvqemgqVuIVGETynRe6WO1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi81Q0Q1RTczMDZF MDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZhQ3BXNGhVWVJQS2RGN3BZ N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FFRzl4YS1wNmFDcFc0aFVZUlBLZEY3cFk3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIxNi81Q0Q1RTczMDZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZh Q3BXNGhVWVJQS2RGN3BZN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcQfZb9L3/yS/3Z18pZk/desPR+tzYKJdTesj3sF25O6A96nzOIaXO mVfbm4fLhrZRYETLjZJvlWs/YgsCgMsg/syqNNgzZw9ffzLpOWoIltlmOyXTBBX2 RgUA3Z7Snuyf+Km2BjrzKq2zr8Txh/ScNFhDc+usfF6v6Bl8pXYDfN69nuFAn5hS iO9lz0RUeVpGM3afd1CPVNMW+CtcHEmQ1SURVA3zub3DlUUAukdr2pTz+9RKPSve TkZCP1fzrvu3UbIoPyq0TbcXldzSeB/+/Wc+3QGpVlL5lzTyIyl37gNK+edKcYxj 6UwoVqj7Znui+0XLab4+QYXZr3RRiK5V -----END CERTIFICATE-----Generated at Sun Jan 18 03:16:14 2026 by rpki-client