This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft File: p1cNzzcgqNWohWpLtlg_G66uAJM.mft (raw, json) Hash identifier: ayFVnu5f2LEYI41Zwf0lnvWk2AljyuJjxSfxLaKg2gI= Subject key identifier: DA:C8:8A:22:FA:EC:DC:9F:CC:42:F2:84:CA:83:8F:37:4C:F2:49:4A Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Certificate serial: 0D10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft Manifest number: 0CE1 Signing time: Sat 10 Jan 2026 17:51:42 +0000 Manifest this update: Sat 10 Jan 2026 17:51:41 +0000 Manifest next update: Sat 17 Jan 2026 17:51:41 +0000 Files and hashes: 1: p1cNzzcgqNWohWpLtlg_G66uAJM.crl (hash: bB1sEQ8ZjU7W8nGotauvy8/vwhKUPeQwdJ7qa9YgY/A=) 2: 1994900403CE11EAA10C6A84C4F9AE02.roa (hash: +t2OsFQRgFf0c7jNBR5fu1U2IpPKMIuwM5iZNaY//qo=) 3: 4F6721CEB84B11EAB6247B7AC4F9AE02.roa (hash: coEgjngsR/Ce6vFWSBZaZ5rCfdvEVYlwbgZyFrxHv0s=) 4: 5B47C2265D8411F0BBB04858C4F9AE02.roa (hash: Uur2jCKI44RTppdHPrBOV4rDdME7NfVW8X3JWQwRDe0=) 5: 24252532B84711EA8A7F036DC4F9AE02.roa (hash: 5MqZOZoSVhwobP4LcJgxINFesjcjTvuIMp43rKBprmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 17:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3344 (0xd10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B37E3, serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Validity Not Before: Jan 10 17:51:41 2026 GMT Not After : Jan 17 17:51:41 2026 GMT Subject: CN=696291ae-b63d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b2:ee:bf:a0:e5:83:a5:38:fb:24:5f:61:3a: 51:ae:1d:9c:5c:84:0c:71:91:21:43:e4:c7:b8:ce: 50:ed:8c:98:8f:3e:fa:31:14:e7:f8:0e:94:2a:dc: ff:e6:ff:ad:f2:67:2d:d5:5b:d1:93:d3:dc:ad:c7: 03:0f:19:aa:41:21:a4:b1:a6:e8:7a:b2:26:81:e4: 12:3a:2b:19:35:39:4d:36:22:7c:f2:3f:a7:e2:85: f6:c7:47:5c:9b:63:27:f4:1a:4b:59:e2:89:09:c1: f7:79:66:4e:e2:81:66:0d:d7:ad:87:e3:ad:3f:26: 94:06:52:1f:ff:af:f9:5c:d6:87:37:75:c5:bc:14: 39:18:36:8f:06:18:82:79:48:ef:9a:fc:7f:10:81: 72:08:11:59:ae:82:61:c6:91:fe:5a:7c:b6:59:3f: c1:cc:49:de:0a:0e:a1:2b:92:3e:9c:81:48:bb:a4: 4c:3e:1a:04:2b:72:3a:5a:b9:6c:ed:dc:45:99:aa: 0a:79:03:8b:f3:f6:60:6e:2e:a9:67:14:31:43:7f: bd:d4:76:d8:0e:3b:75:b5:d5:41:27:52:d5:ae:fe: 11:26:24:87:39:5c:bc:9b:6c:59:33:aa:b5:1a:c6: f5:4f:3c:80:d7:84:71:d0:a0:c1:a9:6a:e1:2e:45: e4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C8:8A:22:FA:EC:DC:9F:CC:42:F2:84:CA:83:8F:37:4C:F2:49:4A X509v3 Authority Key Identifier: keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:91:29:0d:77:eb:5e:86:74:a1:49:2d:1e:db:81:57:cc:13: 07:81:ae:87:e4:47:68:09:81:41:7d:bc:08:14:a3:ba:29:c3: 29:fa:ee:8b:5b:c9:fb:3c:08:ae:6f:63:24:49:95:94:bc:bd: b6:34:f3:0d:de:be:fc:0f:52:52:dc:2d:64:fb:04:d1:f2:de: 9d:df:85:ad:24:2a:13:12:04:6a:44:6b:20:d0:f6:e5:65:92: 0d:fa:4e:2c:7b:3f:dd:a5:07:ea:b6:43:03:65:6a:f5:a6:28: 8b:33:9c:18:72:35:8f:f2:ef:3d:e2:5d:c4:b4:b0:1d:5b:ac: e3:bd:9f:9f:78:94:67:1e:88:b7:d5:9b:ac:ea:ee:a2:f3:c8: 74:d6:28:9b:c4:0b:1b:5f:93:ae:1e:62:e8:b7:a8:3e:f6:88: a0:ff:3b:32:fe:64:d2:92:98:e5:dd:06:a3:8b:06:59:85:f9: 02:75:81:d6:b3:f0:36:d6:b0:27:8d:f2:55:c0:ff:56:fa:6c: 28:e2:cd:70:38:1c:72:a1:c7:54:05:c0:6a:61:bf:c6:18:c7: db:7c:86:84:eb:c3:05:c0:bf:62:9a:27:ed:a8:b4:7a:84:14: 00:63:e1:8a:b1:ff:9c:1d:50:98:45:b8:5e:85:2e:52:38:b2: c6:b0:13:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3RTMxMTAvBgNVBAUTKEE3NTcwRENGMzcyMEE4RDVBODg1NkE0QkI2NTgzRjFC QUVBRTAwOTMwHhcNMjYwMTEwMTc1MTQxWhcNMjYwMTE3MTc1MTQxWjAYMRYwFAYD VQQDDA02OTYyOTFhZS1iNjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rLuv6Dlg6U4+yRfYTpRrh2cXIQMcZEhQ+THuM5Q7YyYjz76MRTn+A6UKtz/ 5v+t8mct1VvRk9PcrccDDxmqQSGksaboerImgeQSOisZNTlNNiJ88j+n4oX2x0dc m2Mn9BpLWeKJCcH3eWZO4oFmDdeth+OtPyaUBlIf/6/5XNaHN3XFvBQ5GDaPBhiC eUjvmvx/EIFyCBFZroJhxpH+Wny2WT/BzEneCg6hK5I+nIFIu6RMPhoEK3I6Wrls 7dxFmaoKeQOL8/Zgbi6pZxQxQ3+91HbYDjt1tdVBJ1LVrv4RJiSHOVy8m2xZM6q1 Gsb1TzyA14Rx0KDBqWrhLkXkRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrIiiL6 7NyfzELyhMqDjzdM8klKMB8GA1UdIwQYMBaAFKdXDc83IKjVqIVqS7ZYPxuurgCT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzdFMy8wQUZFQTdDRTAz QTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FOV29oV3BMdGxnX0c2NnVB Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AxY056emNncU5Xb2hXcEx0bGdfRzY2dUFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzdFMy8wQUZFQTdDRTAzQTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FO V29oV3BMdGxnX0c2NnVBSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHkSkNd+tehnShSS0e24FXzBMHga6H5EdoCYFBfbwIFKO6KcMp+u6L W8n7PAiub2MkSZWUvL22NPMN3r78D1JS3C1k+wTR8t6d34WtJCoTEgRqRGsg0Pbl ZZIN+k4sez/dpQfqtkMDZWr1piiLM5wYcjWP8u894l3EtLAdW6zjvZ+feJRnHoi3 1Zus6u6i88h01iibxAsbX5OuHmLot6g+9oig/zsy/mTSkpjl3QajiwZZhfkCdYHW s/A21rAnjfJVwP9W+mwo4s1wOBxyocdUBcBqYb/GGMfbfIaE68MFwL9imiftqLR6 hBQAY+GKsf+cHVCYRbhehS5SOLLGsBNa -----END CERTIFICATE-----Generated at Mon Jan 12 07:57:17 2026 by rpki-client