This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: i7hKLPHQkrEdHn1gvuiSfwD8RWGa5y9cb28u/+5eUwk= Subject key identifier: 74:B1:54:F0:8B:A3:98:E0:3F:ED:21:71:1D:A3:B5:A7:C2:57:53:7C Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 32E459C24A6B59A697DF664176CDBD5507638FB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 0807 Signing time: Tue 27 Jan 2026 12:00:02 +0000 Manifest this update: Tue 27 Jan 2026 11:55:02 +0000 Manifest next update: Wed 28 Jan 2026 12:12:02 +0000 Files and hashes: 1: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 5imQlduqeaq1QvJMmjo0ae6fSl4CkZx6HlLkioO4Cbc=) 2: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: SM0+cgtb00YjXMGrcRALmni4Gyl+2LXulcXvQtwP6Xc=) 3: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: i3k7btMAhGgYuFeM+1u1fTFRv0VjkseVCLvNPnabQB0=) 4: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: 3JqSuEVckTth8YH0yCGKnYpuvZOAUByKaiW8pTu7UJ0=) 5: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: L/el4bzkuzcsjhPMOkht1KvFdFkUsS00ZQpcwoXhNkM=) 6: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=) 7: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: odxXuw9t56FFIVWRF6USpgfH3EtxcqrQch+FND/pnf8=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 12:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e4:59:c2:4a:6b:59:a6:97:df:66:41:76:cd:bd:55:07:63:8f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Jan 27 11:55:02 2026 GMT Not After : Jan 28 12:12:02 2026 GMT Subject: CN=74B154F08BA398E03FED21711DA3B5A7C257537C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ed:c3:5e:e5:5a:eb:c5:26:50:61:0d:ca:0b: fa:5d:91:f3:30:57:93:b8:42:ae:c5:35:a1:34:52: 1d:8f:b5:23:87:5d:70:ee:ef:f7:d5:a9:cf:05:d2: 8f:66:e2:27:f9:82:fb:c4:e6:d1:35:64:29:61:78: a8:39:7f:52:52:a0:2a:3d:78:59:86:81:23:93:25: 73:3c:fa:e3:c0:5a:ba:af:f7:c1:cc:a3:1a:1f:fd: 15:8e:5b:9c:1e:df:1e:24:54:51:1b:b9:c8:cf:4a: 55:a0:71:d0:18:98:64:a6:c2:91:ac:43:75:a8:92: b2:0f:be:a4:03:be:f2:cf:0d:b4:35:f3:86:11:48: f5:6a:47:84:79:dc:d8:5b:d7:50:4f:1c:12:18:bc: 4d:91:db:43:72:17:7c:0a:88:0b:19:4d:56:1b:6e: b0:84:ee:4b:69:b5:02:fc:4a:4b:b5:37:30:db:a4: 4c:17:41:b3:e2:48:dc:4c:01:1a:d3:a8:b6:ac:7d: 82:37:11:8b:0e:c9:79:10:81:1c:1b:d7:39:27:6b: ed:b6:a7:07:20:d4:34:2c:3e:cf:b0:2b:30:64:ba: 0c:fa:12:99:7a:ab:22:c8:11:57:3b:29:94:1a:63: 22:1c:b3:37:5c:3b:2f:9f:e4:7a:d6:f9:fe:9a:92: db:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B1:54:F0:8B:A3:98:E0:3F:ED:21:71:1D:A3:B5:A7:C2:57:53:7C X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c5:6a:e5:37:0e:d4:bd:3d:33:79:7e:7c:53:e9:db:ae:6d: 69:f3:57:6e:19:f4:a1:f8:49:5a:6a:d9:30:3a:0f:82:96:74: 99:3e:6c:29:3f:2e:24:7c:3d:3d:71:d7:e5:f5:33:b6:29:5e: 3b:46:8d:9e:25:a6:1f:ba:9c:a6:b6:92:bd:77:47:bc:1c:f6: 96:fa:a0:c7:96:e4:5f:e5:d0:75:42:8f:f7:4d:e4:00:e1:9f: ca:29:49:12:15:df:2d:a4:ce:b1:d5:51:d0:57:e0:13:c3:14: bd:99:2f:21:02:b1:e9:e8:99:34:40:39:ee:9c:f0:fb:f3:67: 71:be:84:71:31:8a:ca:a6:2d:3a:05:2c:bb:f3:9e:55:53:1f: 38:cb:83:a5:f0:a6:3b:4c:cf:e3:5f:30:a9:8d:57:a9:88:c8: 14:88:5c:14:f1:87:a5:fa:43:28:eb:52:1e:e1:6a:90:90:30: 71:be:a1:4c:b1:cc:a7:a3:eb:d4:02:b8:c8:98:95:dc:8d:61: c9:6f:e2:86:7e:1f:a2:20:c8:d1:9e:c4:99:34:21:d6:9d:75: 89:56:29:c2:61:eb:fe:cc:6d:6c:22:6b:4e:a6:26:7d:e2:8c: 89:fc:17:d8:01:fb:75:2e:06:3f:12:5a:ec:a7:1f:19:ce:82: 3d:9a:1b:bb -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUMuRZwkprWaaX32ZBds29VQdjj7QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI2MDEyNzExNTUwMloX DTI2MDEyODEyMTIwMlowMzExMC8GA1UEAxMoNzRCMTU0RjA4QkEzOThFMDNGRUQy MTcxMURBM0I1QTdDMjU3NTM3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOTtw17lWuvFJlBhDcoL+l2R8zBXk7hCrsU1oTRSHY+1I4ddcO7v99WpzwXS j2biJ/mC+8Tm0TVkKWF4qDl/UlKgKj14WYaBI5Mlczz648Bauq/3wcyjGh/9FY5b nB7fHiRUURu5yM9KVaBx0BiYZKbCkaxDdaiSsg++pAO+8s8NtDXzhhFI9WpHhHnc 2FvXUE8cEhi8TZHbQ3IXfAqICxlNVhtusITuS2m1AvxKS7U3MNukTBdBs+JI3EwB GtOotqx9gjcRiw7JeRCBHBvXOSdr7banByDUNCw+z7ArMGS6DPoSmXqrIsgRVzsp lBpjIhyzN1w7L5/ketb5/pqS20UCAwEAAaOCAhEwggINMB0GA1UdDgQWBBR0sVTw i6OY4D/tIXEdo7WnwldTfDAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA6xWrlNw7UvT0zeX58U+nbrm1p81duGfSh+ElaatkwOg+ClnSZPmwpPy4kfD09 cdfl9TO2KV47Ro2eJaYfupymtpK9d0e8HPaW+qDHluRf5dB1Qo/3TeQA4Z/KKUkS Fd8tpM6x1VHQV+ATwxS9mS8hArHp6Jk0QDnunPD782dxvoRxMYrKpi06BSy7855V Ux84y4Ol8KY7TM/jXzCpjVepiMgUiFwU8Yel+kMo61Ie4WqQkDBxvqFMscyno+vU ArjImJXcjWHJb+KGfh+iIMjRnsSZNCHWnXWJVinCYev+zG1sImtOpiZ94oyJ/BfY Aft1LgY/Elrspx8ZzoI9mhu7 -----END CERTIFICATE-----Generated at Tue Jan 27 17:56:03 2026 by rpki-client