This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft File: tTRQOC5F-KPX1ikQ83nHidFH_7A.mft (raw, json) Hash identifier: eUUAnGM2CVvY0iPsNNj+heq5gqQCsT70ai9O4qW+keg= Subject key identifier: 67:FD:96:C7:4C:9A:B3:FE:3F:C2:43:26:62:B2:A3:83:2E:B3:96:E3 Authority key identifier: B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0 Certificate issuer: /CN=A91DFA83/serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0 Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft Manifest number: 024F Signing time: Sun 11 Jan 2026 01:00:47 +0000 Manifest this update: Sun 11 Jan 2026 01:00:46 +0000 Manifest next update: Sun 18 Jan 2026 01:00:46 +0000 Files and hashes: 1: tTRQOC5F-KPX1ikQ83nHidFH_7A.crl (hash: k78HZCO++mOXLjoRZwFS3k1mxLlU4D82lxHz3RZfe/0=) 2: 61B47D886B5211EDB97A2834C4F9AE02.roa (hash: +3v4STyxr/zeU0RYF53X4MGXWGvAcT5sIBZD/HJJRoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFA83, serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0 Validity Not Before: Jan 11 01:00:46 2026 GMT Not After : Jan 18 01:00:46 2026 GMT Subject: CN=6962f63f-432e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fc:47:82:0c:49:f4:65:97:8c:6a:2f:1d:81: 29:59:29:60:38:dc:05:a8:39:94:4d:fe:3e:dc:e1: dd:dc:f2:65:fc:97:28:0f:00:a1:87:6f:08:4e:46: fd:87:fd:00:34:70:4b:08:ed:3a:ff:ab:14:17:b1: db:08:97:e1:ee:08:0e:38:ed:a9:84:39:29:b9:0b: c3:7f:10:46:76:32:79:a2:a5:02:52:53:b9:bc:cd: 17:7c:4a:c0:e4:07:45:43:5e:26:d6:63:0d:f4:eb: 15:72:ee:65:e2:33:fe:4e:b9:65:7c:d6:b9:ff:06: 61:57:75:fb:ef:60:13:2f:70:78:e1:9d:de:55:ae: 09:d8:56:94:00:c4:c8:8a:6a:75:fd:4a:ec:c3:74: 34:5c:5f:8a:f7:f5:e8:a5:4c:e4:1d:ce:98:77:b7: 27:26:4e:4a:0d:f7:4a:44:7d:ca:06:7f:a9:50:66: 98:af:c8:a9:f7:9f:fc:c9:8f:0f:3d:ed:97:7b:7f: 57:2c:18:74:f9:19:f5:88:ec:3d:d4:9a:25:f8:66: 2a:c9:19:a6:6b:a8:0c:73:9e:4c:ef:25:7d:b2:68: 7e:f8:51:d3:cc:a2:6e:ac:56:97:8b:fe:63:8c:c8: ff:b8:46:d1:cb:32:a5:c1:31:7f:fe:1c:0f:1c:78: f8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FD:96:C7:4C:9A:B3:FE:3F:C2:43:26:62:B2:A3:83:2E:B3:96:E3 X509v3 Authority Key Identifier: keyid:B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:17:30:91:02:d1:16:40:8c:2c:ea:86:a7:df:0c:71:1f:59: f2:d8:1b:41:8d:8a:3b:a1:23:05:cf:64:c7:8d:20:d3:76:00: 2e:77:f7:91:cc:6e:65:39:69:c7:c0:57:9a:2d:41:eb:52:37: 00:8d:f6:c1:b2:31:01:25:14:bb:38:41:f3:90:e6:db:fa:c4: ec:ec:42:e2:86:88:27:d8:ed:f0:75:59:ae:5b:bc:ac:ab:ce: 69:60:d4:39:7f:99:c2:fa:c1:39:53:da:9c:86:a6:f1:12:21: fe:a4:f6:3b:93:b1:50:a9:ea:2b:b9:b3:18:eb:8b:d7:e8:97: 68:c3:93:7e:be:8f:1d:b9:a6:79:0b:f5:59:54:50:74:91:ff: 98:54:d2:bc:23:b4:09:7f:4d:22:11:1d:91:8d:3d:e6:06:56: b7:31:5c:2d:42:d6:32:4b:81:6d:43:07:c0:7b:23:bb:98:93: a9:bf:31:61:94:8e:e5:95:9b:1a:d4:b7:a0:f3:08:fe:c0:51: 96:81:09:fe:1e:34:11:25:c6:07:7e:64:53:e9:06:76:10:2a: 8a:4a:af:96:e2:0f:89:5b:65:48:3d:24:a2:e9:6c:db:c4:66: de:a8:12:73:db:5e:15:42:22:78:79:0b:5a:ce:df:91:35:b5: 11:76:46:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBODMxMTAvBgNVBAUTKEI1MzQ1MDM4MkU0NUY4QTNEN0Q2MjkxMEYzNzlDNzg5 RDE0N0ZGQjAwHhcNMjYwMTExMDEwMDQ2WhcNMjYwMTE4MDEwMDQ2WjAYMRYwFAYD VQQDDA02OTYyZjYzZi00MzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi/xHggxJ9GWXjGovHYEpWSlgONwFqDmUTf4+3OHd3PJl/JcoDwChh28ITkb9 h/0ANHBLCO06/6sUF7HbCJfh7ggOOO2phDkpuQvDfxBGdjJ5oqUCUlO5vM0XfErA 5AdFQ14m1mMN9OsVcu5l4jP+TrllfNa5/wZhV3X772ATL3B44Z3eVa4J2FaUAMTI imp1/Ursw3Q0XF+K9/XopUzkHc6Yd7cnJk5KDfdKRH3KBn+pUGaYr8ip95/8yY8P Pe2Xe39XLBh0+Rn1iOw91Jol+GYqyRmma6gMc55M7yV9smh++FHTzKJurFaXi/5j jMj/uEbRyzKlwTF//hwPHHj47QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGf9lsdM mrP+P8JDJmKyo4Mus5bjMB8GA1UdIwQYMBaAFLU0UDguRfij19YpEPN5x4nRR/+w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkE4My82NEFGODAwMjZC MzIxMUVEQjRFQ0I3NjhDNEY5QUUwMi90VFJRT0M1Ri1LUFgxaWtRODNuSGlkRkhf N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RUUlFPQzVGLUtQWDFpa1E4M25IaWRGSF83QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkE4My82NEFGODAwMjZCMzIxMUVEQjRFQ0I3NjhDNEY5QUUwMi90VFJRT0M1Ri1L UFgxaWtRODNuSGlkRkhfN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBFzCRAtEWQIws6oan3wxxH1ny2BtBjYo7oSMFz2THjSDTdgAud/eR zG5lOWnHwFeaLUHrUjcAjfbBsjEBJRS7OEHzkObb+sTs7ELihogn2O3wdVmuW7ys q85pYNQ5f5nC+sE5U9qchqbxEiH+pPY7k7FQqeorubMY64vX6Jdow5N+vo8duaZ5 C/VZVFB0kf+YVNK8I7QJf00iER2RjT3mBla3MVwtQtYyS4FtQwfAeyO7mJOpvzFh lI7llZsa1Leg8wj+wFGWgQn+HjQRJcYHfmRT6QZ2ECqKSq+W4g+JW2VIPSSi6Wzb xGbeqBJz214VQiJ4eQtazt+RNbURdkaz -----END CERTIFICATE-----Generated at Mon Jan 12 08:09:46 2026 by rpki-client