This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json) Hash identifier: dS0jyhgNi1kOg5Ly7ae9/iIWLtB7+2NUZiawM/0MX20= Subject key identifier: 70:28:63:BC:2D:DC:33:16:17:86:A4:F4:F5:00:E5:68:15:AD:B4:20 Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Certificate serial: 353C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft Manifest number: 3517 Signing time: Tue 06 Jan 2026 14:28:35 +0000 Manifest this update: Tue 06 Jan 2026 14:28:34 +0000 Manifest next update: Tue 13 Jan 2026 14:28:34 +0000 Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: cn+zMkYwKV+F9+ZF7ezyfQg9RAme0jTH3Nh+5JDow/8=) 2: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: NQ44ywkdXvwjY8pBPw8S7NRNivsvd48rEIIAsaIuTIc=) 3: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: FdTUsXBXGlULvnBF3k+ULhUtZ8ZP1Y0Le1mnqhZZpPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Jan 2026 14:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13628 (0x353c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Validity Not Before: Jan 6 14:28:34 2026 GMT Not After : Jan 13 14:28:34 2026 GMT Subject: CN=695d1c13-27b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:88:3f:b2:ae:3a:9f:3a:06:c5:74:18:22:a6: b3:7c:bf:d3:ba:17:79:9a:55:8b:64:41:85:86:0c: a2:d8:4f:7e:1c:e7:ee:8e:18:b2:0f:a8:08:41:ba: b5:70:ae:2e:6b:b4:e5:ee:dd:52:1f:05:b9:fd:a9: fa:2a:62:8a:df:cb:7f:9b:2a:19:37:d7:45:0e:c3: 9a:a2:07:74:6a:15:83:35:56:62:6a:2e:02:7b:71: cc:13:b7:e1:6c:93:f4:02:cb:dc:ca:f4:ad:23:36: 2a:27:b6:51:c7:b5:26:db:d8:db:f5:45:7f:dd:ce: 1b:e3:5d:52:e2:5b:ee:d0:cd:7e:ac:a0:ab:80:7f: 12:5b:59:47:d0:38:f2:c2:41:fa:0c:4a:92:58:b8: a2:c5:55:be:22:af:ac:85:3a:97:e2:69:07:79:56: 6c:f7:c5:b3:b1:66:dc:53:c6:fc:ae:43:eb:6c:34: 05:d1:9d:b7:57:c9:2f:b5:ea:00:ee:27:cf:22:02: 10:e9:ed:a4:05:24:b6:1c:fe:a1:43:04:2f:a5:63: f7:d3:44:1e:c1:8f:1b:2d:01:bc:e5:00:69:45:db: 14:e0:22:9e:ca:a7:88:d5:fd:1e:c0:de:0c:8d:c8: 2b:e5:65:fb:94:3f:81:28:8c:b6:78:1d:3d:57:05: f6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:28:63:BC:2D:DC:33:16:17:86:A4:F4:F5:00:E5:68:15:AD:B4:20 X509v3 Authority Key Identifier: keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:5b:5c:f8:e0:bc:44:e3:a8:2b:b1:8e:6c:11:22:6a:8b:70: 20:99:12:28:4d:6a:a9:73:af:20:82:63:f4:d3:c6:de:87:1e: d7:c7:e7:af:de:48:f3:e6:aa:de:16:ce:24:26:38:3c:78:5d: 31:6b:01:5d:58:90:8d:e4:f6:32:ae:19:e4:fe:9b:cd:25:b9: 2a:5e:86:6b:d5:9a:09:85:b9:89:58:d0:c5:f1:cf:18:26:31: 9d:96:c9:c8:61:3e:94:15:ff:64:3a:be:f4:7d:58:a7:36:2c: 7d:f1:15:f3:be:28:94:91:ea:6c:4f:ed:03:e5:0e:17:60:b2: 23:f5:06:6d:f6:5f:3c:9a:29:35:f4:c2:63:c5:2f:2e:82:ba: cd:c9:b0:f1:c3:39:ed:7b:7b:be:66:4b:e1:74:b2:f3:e9:b5: 7c:84:5e:39:c7:e2:db:f1:8d:f6:7f:89:7a:d9:4c:db:3f:64: 17:e9:24:3b:6c:87:e8:00:33:c0:e9:3d:2b:0a:e4:49:c2:ec: bc:93:da:b4:24:e2:f9:2c:ae:cc:39:ce:f6:42:6b:3a:46:67: 80:43:c1:dd:40:88:5f:75:ac:e7:b7:a1:0d:c6:57:05:f3:a2: e9:87:64:45:06:9f:74:97:84:1e:92:07:8f:f4:f8:33:17:17: bb:9c:27:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyRkIxMTAvBgNVBAUTKDRDMzZGODEyRTc2RDgyN0VDRTZFNTlCRDE1NjA1ODVD NTFFQ0Q5OTIwHhcNMjYwMTA2MTQyODM0WhcNMjYwMTEzMTQyODM0WjAYMRYwFAYD VQQDDA02OTVkMWMxMy0yN2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4g/sq46nzoGxXQYIqazfL/Tuhd5mlWLZEGFhgyi2E9+HOfujhiyD6gIQbq1 cK4ua7Tl7t1SHwW5/an6KmKK38t/myoZN9dFDsOaogd0ahWDNVZiai4Ce3HME7fh bJP0AsvcyvStIzYqJ7ZRx7Um29jb9UV/3c4b411S4lvu0M1+rKCrgH8SW1lH0Djy wkH6DEqSWLiixVW+Iq+shTqX4mkHeVZs98WzsWbcU8b8rkPrbDQF0Z23V8kvteoA 7ifPIgIQ6e2kBSS2HP6hQwQvpWP300QewY8bLQG85QBpRdsU4CKeyqeI1f0ewN4M jcgr5WX7lD+BKIy2eB09VwX2hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAoY7wt 3DMWF4ak9PUA5WgVrbQgMB8GA1UdIwQYMBaAFEw2+BLnbYJ+zm5ZvRVgWFxR7NmS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTJGQi8zMjdGQzZCMjFE ODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGduN09ibG05RldCWVhGSHMy WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REYjRFdWR0Z243T2JsbTlGV0JZWEZIczJaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTJGQi8zMjdGQzZCMjFEODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGdu N09ibG05RldCWVhGSHMyWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBW1z44LxE46grsY5sESJqi3AgmRIoTWqpc68ggmP008behx7Xx+ev 3kjz5qreFs4kJjg8eF0xawFdWJCN5PYyrhnk/pvNJbkqXoZr1ZoJhbmJWNDF8c8Y JjGdlsnIYT6UFf9kOr70fVinNix98RXzviiUkepsT+0D5Q4XYLIj9QZt9l88mik1 9MJjxS8ugrrNybDxwznte3u+ZkvhdLLz6bV8hF45x+Lb8Y32f4l62UzbP2QX6SQ7 bIfoADPA6T0rCuRJwuy8k9q0JOL5LK7MOc72Qms6RmeAQ8HdQIhfdaznt6ENxlcF 86Lph2RFBp90l4QekgeP9PgzFxe7nCfD -----END CERTIFICATE-----Generated at Tue Jan 6 20:31:12 2026 by rpki-client