This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft File: oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft (raw, json) Hash identifier: qtt8ucjGxYZQYZgyWQokUReshG2/MDruQEpi+/9S3fA= Subject key identifier: 3C:03:C5:1D:0B:09:E4:2C:6E:18:86:01:56:66:43:19:F0:C8:E7:06 Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft Manifest number: 0212 Signing time: Tue 03 Feb 2026 02:17:08 +0000 Manifest this update: Tue 03 Feb 2026 02:17:07 +0000 Manifest next update: Tue 10 Feb 2026 02:17:07 +0000 Files and hashes: 1: oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl (hash: dFmLDImPhdXhtf+dyuXs5p1RZEu4jkW2C3WAQovQTxM=) 2: E762B166FAF811EE92A3642EC4F9AE02.roa (hash: e/dOTjn5zjRzl7VVF4lYBqEjUR3aP4ajbLKyVpxXtqo=) 3: CE65A4E4A57E11EFA1B6E428C4F9AE02.roa (hash: 1SKbx2XsDMYzA80POo6zzafuauDwKbPNh6n7Ob5AjVA=) 4: D0103496FD6611EE9188C568C4F9AE02.roa (hash: PxpNeamT7nJAO8ypf86mF4tTFHjbBgphhBI0WaQ2K6I=) 5: 13D68EB430AB11F0A15DC75AC4F9AE02.roa (hash: 8ceZRP/XUhaUyTjeioD/K4mCivFkQCLXcH6cjJ7JFq0=) 6: 803597528D5911F087734E0BC4F9AE02.roa (hash: nE7csU7wzmCX2AbBS7z4n8sEfZSzQpZLx/oSC0wZ/sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Feb 2026 02:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Validity Not Before: Feb 3 02:17:07 2026 GMT Not After : Feb 10 02:17:07 2026 GMT Subject: CN=69815aa4-7535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:f7:ba:e4:29:45:cc:29:df:96:c0:4f:22: f5:48:e7:16:f3:56:5b:a9:00:a0:8e:6b:29:c2:5c: e5:d2:ef:9d:ba:3f:aa:e6:45:e2:26:61:83:03:b1: dc:4d:eb:a5:53:10:bf:1d:32:10:bc:6f:25:74:b9: 3b:e1:6e:bb:93:85:8c:03:b7:84:a4:06:bb:39:de: 8e:73:dd:79:a4:ff:38:05:a6:c6:33:2b:63:d3:93: 62:d9:2c:8a:3e:21:80:cb:19:b9:50:08:bd:a7:63: 91:8a:4a:ee:4c:51:17:80:3b:0f:c6:4b:b1:4f:65: bf:f6:26:24:c2:19:55:50:d4:1a:3a:6a:c0:d7:c0: 7f:2f:a7:c7:be:86:e4:19:c3:eb:1d:fa:3c:b4:97: 20:04:7f:bb:89:46:3c:a5:d5:f9:5d:f5:47:5e:4b: d4:f2:54:ba:4c:5b:be:5a:f7:56:3a:29:f4:a4:6a: 65:cb:61:48:c3:ba:c6:f3:fc:31:65:3b:6d:1a:57: 95:d4:d7:70:f4:16:aa:d6:0a:44:bd:e8:a1:88:61: 8d:d9:cc:70:6c:06:4f:52:ca:5b:1f:ac:9d:de:0d: 91:71:3f:73:cf:f3:37:5a:32:c1:f7:ff:8f:d9:1d: 01:4a:f9:f6:2e:74:5a:b1:b4:4f:0a:7a:6c:af:9a: 89:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:03:C5:1D:0B:09:E4:2C:6E:18:86:01:56:66:43:19:F0:C8:E7:06 X509v3 Authority Key Identifier: keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:59:b1:ac:dc:d3:7d:39:17:2a:22:ef:8b:ba:25:08:20:16: e2:cf:63:68:b5:73:5c:88:48:76:0e:9f:bd:48:f3:7c:d8:f4: 27:46:aa:ff:14:0a:61:bd:46:79:a6:c2:99:99:6f:86:82:21: d1:d2:26:4b:d3:90:c4:ee:9d:aa:e7:a5:0a:ba:9f:41:95:6a: cc:48:d4:df:3e:1d:a0:2d:98:18:a2:ad:eb:7e:13:68:a0:3f: 94:de:1c:7b:bc:6f:fc:b7:4a:3d:88:37:07:6f:6a:5e:bb:18: a8:16:95:6a:00:2d:3f:7b:e8:c4:96:c2:67:0f:db:2e:31:09: 33:21:3b:c3:28:d7:ed:c1:3c:28:2b:7f:3f:41:eb:53:f6:41: 72:0b:81:58:bf:fa:4b:8e:4c:17:04:85:ca:97:ac:4c:2c:84: a4:d1:ad:8b:31:5b:7a:6a:c7:ac:e7:04:49:c2:04:76:af:40: 71:d3:b1:0c:5e:90:fe:0f:10:2b:a2:ce:92:fa:79:b4:74:27: 8a:36:e4:ba:40:04:01:91:0a:99:08:f3:56:dd:46:9d:2a:07: ef:06:85:cc:25:98:78:d8:c9:3b:1b:dd:4e:f5:59:8c:c3:cd: 38:25:4a:47:ee:ae:f6:4a:a1:90:1d:6e:9c:19:8a:21:9e:00: 65:9f:9e:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBOTExMTAvBgNVBAUTKEEwQzgwQ0VFMDYzQzlDQzgyQ0RDQjBCQzc0NUM0RkU0 NkREMDI2NTcwHhcNMjYwMjAzMDIxNzA3WhcNMjYwMjEwMDIxNzA3WjAYMRYwFAYD VQQDDA02OTgxNWFhNC03NTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsX/3uuQpRcwp35bATyL1SOcW81ZbqQCgjmspwlzl0u+duj+q5kXiJmGDA7Hc TeulUxC/HTIQvG8ldLk74W67k4WMA7eEpAa7Od6Oc915pP84BabGMytj05Ni2SyK PiGAyxm5UAi9p2ORikruTFEXgDsPxkuxT2W/9iYkwhlVUNQaOmrA18B/L6fHvobk GcPrHfo8tJcgBH+7iUY8pdX5XfVHXkvU8lS6TFu+WvdWOin0pGply2FIw7rG8/wx ZTttGleV1Ndw9Baq1gpEveihiGGN2cxwbAZPUspbH6yd3g2RcT9zz/M3WjLB9/+P 2R0BSvn2LnRasbRPCnpsr5qJpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwDxR0L CeQsbhiGAVZmQxnwyOcGMB8GA1UdIwQYMBaAFKDIDO4GPJzILNywvHRcT+Rt0CZX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUE5MS85NDIwRDIxMDBB NUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5NZ3MzTEM4ZEZ4UDVHM1FK bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NZ003Z1k4bk1nczNMQzhkRnhQNUczUUpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUE5MS85NDIwRDIxMDBBNUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5N Z3MzTEM4ZEZ4UDVHM1FKbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbWbGs3NN9ORcqIu+LuiUIIBbiz2NotXNciEh2Dp+9SPN82PQnRqr/ FAphvUZ5psKZmW+GgiHR0iZL05DE7p2q56UKup9BlWrMSNTfPh2gLZgYoq3rfhNo oD+U3hx7vG/8t0o9iDcHb2peuxioFpVqAC0/e+jElsJnD9suMQkzITvDKNftwTwo K38/QetT9kFyC4FYv/pLjkwXBIXKl6xMLISk0a2LMVt6ases5wRJwgR2r0Bx07EM XpD+DxAros6S+nm0dCeKNuS6QAQBkQqZCPNW3UadKgfvBoXMJZh42Mk7G91O9VmM w804JUpH7q72SqGQHW6cGYohngBln57G -----END CERTIFICATE-----Generated at Wed Feb 4 08:29:58 2026 by rpki-client