This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft File: 0PiwBllsfAN8tUkwWzlpAACq6KQ.mft (raw, json) Hash identifier: 0WkPwPbhZEByGX2r5hGvQYwd1Lv1c6sfYGjaHW64THM= Subject key identifier: 9C:9A:6C:54:FF:A5:02:D9:0D:33:D1:07:8C:3E:68:AA:9C:06:6F:3C Authority key identifier: D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4 Certificate issuer: /CN=A91754C0/serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft Manifest number: 0164 Signing time: Tue 13 Jan 2026 03:07:58 +0000 Manifest this update: Tue 13 Jan 2026 03:07:57 +0000 Manifest next update: Tue 20 Jan 2026 03:07:57 +0000 Files and hashes: 1: 0PiwBllsfAN8tUkwWzlpAACq6KQ.crl (hash: /eIVPHniKBjegTTDQteNrQYcpJkKiCD6yMF9vgv1/n8=) 2: 6BA3FEA4CCBD11EEBADDFC4AC4F9AE02.roa (hash: qBQp3vvSD9elb8dQbwCPuGirBXWWVwR3GT0tS3LqEZA=) 3: D0CB00D4CCBD11EEAC4BCD4BC4F9AE02.roa (hash: tE5MO0yGqfdQRPhR9mD7EUVj7T64niX8BINnA3y1Amk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Jan 2026 03:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91754C0, serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4 Validity Not Before: Jan 13 03:07:57 2026 GMT Not After : Jan 20 03:07:57 2026 GMT Subject: CN=6965b70e-fa57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:60:9e:b5:61:4f:55:d1:41:62:35:f4:76: 0c:4c:db:2b:6e:06:ab:00:1d:a3:62:30:4d:c5:ba: ac:eb:a6:80:9b:91:ea:9e:fc:37:ae:5a:d2:ce:ed: c5:d3:b6:f2:f5:c0:4c:4b:d4:29:70:5a:71:63:2a: 3f:2e:66:4a:78:64:75:6d:c7:df:c1:70:f9:17:9c: 3c:df:6c:f3:0f:ab:84:23:0e:26:a2:67:61:16:85: 20:e3:2f:3f:63:a4:46:dc:f5:f4:2f:ea:fa:9d:88: 41:17:fe:77:a0:17:9b:ab:33:f9:03:81:a5:9c:89: 3e:45:c0:82:70:47:1e:06:9b:8d:6b:31:56:68:8b: dc:b5:b8:13:7d:ac:18:9f:a3:c8:cc:ae:12:ee:17: bc:70:ad:63:08:a1:6c:18:4f:0e:53:aa:b8:60:ed: 60:5a:c9:0a:c0:48:ed:ff:c6:dd:7a:31:d2:7c:a2: 55:43:8e:46:77:db:45:83:8e:7c:fc:42:49:6e:ae: 41:6f:67:65:aa:7f:23:81:5e:3f:d1:6e:64:1e:bb: 5f:14:a9:e4:a9:ab:14:98:54:41:9f:9b:40:75:ca: 58:01:a8:11:67:5c:29:0c:a8:71:8f:36:83:4b:0a: 14:d7:bf:7c:88:50:b3:88:85:53:7a:85:c6:64:5f: b6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9A:6C:54:FF:A5:02:D9:0D:33:D1:07:8C:3E:68:AA:9C:06:6F:3C X509v3 Authority Key Identifier: keyid:D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4e:58:1e:16:f8:52:1b:1b:76:cd:02:fc:1f:76:be:06:d9: e9:b0:db:81:82:e8:cb:a8:f9:38:03:78:34:52:a5:51:ae:07: 8c:f8:9a:3b:f7:8b:21:79:0e:90:75:f2:c1:b9:51:7b:dd:d2: 61:29:82:74:58:3f:8b:4e:b3:36:70:d7:40:f8:4e:89:4b:29: 18:16:13:63:1f:41:6c:19:39:bd:56:07:34:c0:46:db:2a:64: 5e:e6:0c:89:30:3f:77:46:31:c2:26:d4:44:0d:56:65:d5:c6: bc:67:7b:f0:ef:d8:8d:db:bb:d8:bf:22:1c:1b:94:ba:83:8e: ef:6e:84:9d:74:ad:8d:c1:68:5f:5e:d7:69:59:2b:bd:11:b6: d5:87:f5:53:ee:63:9e:2b:8e:b6:8d:2f:1a:3e:59:a2:9e:01: 9e:8e:2a:28:b5:28:c7:31:8c:b0:0f:37:f9:92:a3:7d:5d:ae: 9b:bc:ee:83:36:73:b0:c3:9b:96:21:2a:05:b9:49:6a:bd:84: 65:c0:ed:84:bd:bf:14:bf:e4:5c:7e:9e:16:57:90:d4:d3:c4: a9:d9:19:5b:27:73:c2:0a:7a:a3:54:8d:0c:16:6f:b1:fb:e7: 91:31:80:8f:14:6b:14:a8:af:31:99:4f:03:eb:99:26:4a:58: 75:86:ea:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU0QzAxMTAvBgNVBAUTKEQwRjhCMDA2NTk2QzdDMDM3Q0I1NDkzMDVCMzk2OTAw MDBBQUU4QTQwHhcNMjYwMTEzMDMwNzU3WhcNMjYwMTIwMDMwNzU3WjAYMRYwFAYD VQQDDA02OTY1YjcwZS1mYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIJgnrVhT1XRQWI19HYMTNsrbgarAB2jYjBNxbqs66aAm5Hqnvw3rlrSzu3F 07by9cBMS9QpcFpxYyo/LmZKeGR1bcffwXD5F5w832zzD6uEIw4momdhFoUg4y8/ Y6RG3PX0L+r6nYhBF/53oBebqzP5A4GlnIk+RcCCcEceBpuNazFWaIvctbgTfawY n6PIzK4S7he8cK1jCKFsGE8OU6q4YO1gWskKwEjt/8bdejHSfKJVQ45Gd9tFg458 /EJJbq5Bb2dlqn8jgV4/0W5kHrtfFKnkqasUmFRBn5tAdcpYAagRZ1wpDKhxjzaD SwoU1798iFCziIVTeoXGZF+26wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyabFT/ pQLZDTPRB4w+aKqcBm88MB8GA1UdIwQYMBaAFND4sAZZbHwDfLVJMFs5aQAAquik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTRDMC9GRURGNTcyRUND QkIxMUVFOEEwRjc3NDhDNEY5QUUwMi8wUGl3Qmxsc2ZBTjh0VWt3V3pscEFBQ3E2 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBQaXdCbGxzZkFOOHRVa3dXemxwQUFDcTZLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTRDMC9GRURGNTcyRUNDQkIxMUVFOEEwRjc3NDhDNEY5QUUwMi8wUGl3Qmxsc2ZB Tjh0VWt3V3pscEFBQ3E2S1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6TlgeFvhSGxt2zQL8H3a+BtnpsNuBgujLqPk4A3g0UqVRrgeM+Jo7 94sheQ6QdfLBuVF73dJhKYJ0WD+LTrM2cNdA+E6JSykYFhNjH0FsGTm9Vgc0wEbb KmRe5gyJMD93RjHCJtREDVZl1ca8Z3vw79iN27vYvyIcG5S6g47vboSddK2NwWhf XtdpWSu9EbbVh/VT7mOeK462jS8aPlmingGejiootSjHMYywDzf5kqN9Xa6bvO6D NnOww5uWISoFuUlqvYRlwO2Evb8Uv+Rcfp4WV5DU08Sp2RlbJ3PCCnqjVI0MFm+x ++eRMYCPFGsUqK8xmU8D65kmSlh1hurN -----END CERTIFICATE-----Generated at Tue Jan 13 12:54:24 2026 by rpki-client