This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft File: DlgFGyS9WtsbzJ844tPnN0to23w.mft (raw, json) Hash identifier: CkcJeis5RSZB0oQcrPxEazfyGzvqgA0BBvjfxPtCUdw= Subject key identifier: 64:58:47:C6:E9:2D:64:DF:9E:62:02:80:9C:C7:E2:F0:71:ED:3F:7A Authority key identifier: 0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C Certificate issuer: /CN=A91847B9/serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C Certificate serial: 0237 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft Manifest number: 022E Signing time: Sun 11 Jan 2026 01:20:19 +0000 Manifest this update: Sun 11 Jan 2026 01:20:18 +0000 Manifest next update: Sun 18 Jan 2026 01:20:18 +0000 Files and hashes: 1: DlgFGyS9WtsbzJ844tPnN0to23w.crl (hash: LT0mFksFnfnq7gIMx5MvcBBogvmEnR+rkAkEZKlVFEc=) 2: B08DD41EE73E11EDB9372A29C4F9AE02.roa (hash: 0gXG6s1XCg7u3bAeXFvctWsk7n6C+d/n5aBUKeABS1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 01:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847B9, serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C Validity Not Before: Jan 11 01:20:18 2026 GMT Not After : Jan 18 01:20:18 2026 GMT Subject: CN=6962fad3-d40c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ab:0b:14:83:bd:85:1a:6c:bc:73:12:a4:8d: d6:01:16:80:e7:23:cb:aa:dd:8e:38:ad:4f:e6:dc: 9f:ac:a7:7a:d3:b0:3c:fc:62:8a:da:c2:ec:5f:50: 36:d8:38:67:7e:24:35:d0:63:ec:18:ff:38:ba:bb: bd:ad:a5:2c:7f:52:90:44:a9:0d:de:2d:77:1c:9b: 8f:32:b4:69:de:de:9d:ef:1b:3b:89:48:d8:cd:38: ed:69:d5:45:a4:19:ac:73:0a:eb:ab:5b:1d:7c:b2: f3:48:ef:c5:33:c6:3d:2f:4a:81:f9:ce:23:f7:43: 22:69:de:e1:1e:da:09:23:b6:a2:1b:d2:4b:cf:da: 6a:e0:da:50:0c:84:bb:30:9a:07:68:81:52:53:81: eb:6a:bf:6d:44:94:36:00:6e:a7:d4:7b:1b:68:f5: 5b:df:da:94:a6:f3:00:aa:9c:8b:7c:5e:99:89:3d: 6f:6f:66:48:84:b8:52:cb:26:36:2a:3e:a2:9e:47: 75:d4:02:76:83:9e:79:86:3d:f1:ef:09:9e:09:71: 86:af:96:fa:92:5f:26:72:2a:10:17:b8:4c:17:ce: c8:bc:37:e6:d9:3b:14:af:ce:51:c1:01:58:e2:d3: 0e:05:95:17:10:5f:b1:52:04:e5:1d:61:0b:d5:cf: 95:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:58:47:C6:E9:2D:64:DF:9E:62:02:80:9C:C7:E2:F0:71:ED:3F:7A X509v3 Authority Key Identifier: keyid:0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8c:86:42:ed:96:94:5f:b7:bf:d1:b4:43:08:7a:c5:3b:f2: f0:63:b6:ac:b5:0a:da:bb:10:17:ed:0b:d9:d5:6a:3f:fa:07: 7d:fc:24:7d:a4:38:ad:78:4d:d2:7b:a1:83:4c:fd:e9:ca:b0: 15:ff:13:70:ab:91:b8:07:fb:a3:ed:3a:11:26:3a:20:da:03: 48:99:ed:44:44:3a:1c:89:c8:d6:e8:b0:dd:0f:2b:55:af:f9: ca:88:d1:ae:58:d2:c4:fd:59:e7:65:cd:26:5d:39:02:e0:81: d5:a7:4a:5f:2c:a2:0b:91:05:58:bf:b2:f9:38:81:be:d5:3e: 13:4c:1c:47:fa:c1:1e:0a:51:a5:80:f3:bb:c3:eb:e1:36:ed: 88:42:ef:ba:38:42:74:25:97:a4:99:c3:d6:42:59:04:c9:d6: 20:91:a5:02:64:d0:8f:5f:17:b6:42:2e:fe:f7:eb:f1:7c:83: b8:75:cd:91:73:9e:9a:39:9e:61:d3:98:1b:44:7a:04:ec:02: 55:3c:38:f6:0e:fc:f4:4a:0e:5c:8e:5e:3b:10:00:6f:f7:62: 20:44:97:d6:6b:02:47:43:bf:b1:ae:fc:71:84:6d:a6:b5:5c: 30:d8:a3:bf:bb:91:0c:e6:7c:fc:70:8a:33:f1:cf:1b:1b:70: f4:9e:9c:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QjkxMTAvBgNVBAUTKDBFNTgwNTFCMjRCRDVBREIxQkNDOUYzOEUyRDNFNzM3 NEI2OERCN0MwHhcNMjYwMTExMDEyMDE4WhcNMjYwMTE4MDEyMDE4WjAYMRYwFAYD VQQDDA02OTYyZmFkMy1kNDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqsLFIO9hRpsvHMSpI3WARaA5yPLqt2OOK1P5tyfrKd607A8/GKK2sLsX1A2 2DhnfiQ10GPsGP84uru9raUsf1KQRKkN3i13HJuPMrRp3t6d7xs7iUjYzTjtadVF pBmscwrrq1sdfLLzSO/FM8Y9L0qB+c4j90Miad7hHtoJI7aiG9JLz9pq4NpQDIS7 MJoHaIFSU4Hrar9tRJQ2AG6n1HsbaPVb39qUpvMAqpyLfF6ZiT1vb2ZIhLhSyyY2 Kj6inkd11AJ2g555hj3x7wmeCXGGr5b6kl8mcioQF7hMF87IvDfm2TsUr85RwQFY 4tMOBZUXEF+xUgTlHWEL1c+VAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRYR8bp LWTfnmICgJzH4vBx7T96MB8GA1UdIwQYMBaAFA5YBRskvVrbG8yfOOLT5zdLaNt8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdCOS9GQzU1ODg4MkEx NDQxMUVEOTU3MDQzODZDNEY5QUUwMi9EbGdGR3lTOVd0c2J6Sjg0NHRQbk4wdG8y M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZ0ZHeVM5V3RzYnpKODQ0dFBuTjB0bzIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdCOS9GQzU1ODg4MkExNDQxMUVEOTU3MDQzODZDNEY5QUUwMi9EbGdGR3lTOVd0 c2J6Sjg0NHRQbk4wdG8yM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqjIZC7ZaUX7e/0bRDCHrFO/LwY7astQrauxAX7QvZ1Wo/+gd9/CR9 pDiteE3Se6GDTP3pyrAV/xNwq5G4B/uj7ToRJjog2gNIme1ERDocicjW6LDdDytV r/nKiNGuWNLE/VnnZc0mXTkC4IHVp0pfLKILkQVYv7L5OIG+1T4TTBxH+sEeClGl gPO7w+vhNu2IQu+6OEJ0JZekmcPWQlkEydYgkaUCZNCPXxe2Qi7+9+vxfIO4dc2R c56aOZ5h05gbRHoE7AJVPDj2Dvz0Sg5cjl47EABv92IgRJfWawJHQ7+xrvxxhG2m tVww2KO/u5EM5nz8cIoz8c8bG3D0npxS -----END CERTIFICATE-----Generated at Mon Jan 12 17:37:17 2026 by rpki-client