This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft File: t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft (raw, json) Hash identifier: swKODzpcPTlRaBbR/jTigUWpC3B5Fq3sJFgRoDevdkQ= Subject key identifier: 04:1D:11:84:BE:CA:D0:02:CC:63:FF:7F:15:3E:DD:1E:A1:3E:58:CB Authority key identifier: B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A Certificate issuer: /CN=A91EF72D/serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Certificate serial: 0474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft Manifest number: 0471 Signing time: Sat 10 Jan 2026 23:18:26 +0000 Manifest this update: Sat 10 Jan 2026 23:18:26 +0000 Manifest next update: Sat 17 Jan 2026 23:18:26 +0000 Files and hashes: 1: t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl (hash: 5uKL0h/Z4AZCtkZU2/asxrWe2bC9vmqpPbX1Y9Dj7v4=) 2: 46F09F74546A11EF9B82D11DC4F9AE02.roa (hash: QPIlgvNpdxz2M9+klBq+UYhVT3TOPqyM+K3bldlrxAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 23:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1140 (0x474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF72D, serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Validity Not Before: Jan 10 23:18:26 2026 GMT Not After : Jan 17 23:18:26 2026 GMT Subject: CN=6962de42-32f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:95:4b:34:e4:e5:b5:d3:9a:be:83:c3:cd: 84:44:93:e3:1a:c0:53:ce:59:ec:01:fb:64:94:56: 11:82:11:9c:33:6a:96:05:f6:03:ed:d7:e0:8c:18: 49:f6:aa:f0:31:f6:00:dc:e4:be:cd:c2:20:ea:75: 98:79:d2:c3:d9:d9:e1:bc:6b:dc:d0:1b:4f:0b:0d: 25:82:5f:b3:ad:1d:d8:5f:eb:8c:cc:f9:50:38:c7: 2c:75:01:08:cc:7c:4f:8c:73:de:be:42:d9:c4:66: 33:fc:63:dd:24:ab:cf:79:9b:7a:52:2c:1c:6c:cc: 17:75:b3:28:b2:d9:92:c5:07:ac:a0:9f:8b:b3:c0: 5b:d4:6b:96:72:bf:af:a4:bf:39:7b:0b:4c:b7:c1: 5e:45:d6:fe:bc:7f:e8:a6:6b:a7:f5:8e:84:a0:90: f4:91:af:fc:6d:bc:41:44:04:4e:ba:14:15:4b:5f: a4:da:a8:ed:65:6b:1f:7a:05:01:e1:91:08:36:8d: 75:1e:41:92:4c:15:d4:cb:c3:90:4f:7a:0b:92:11: 7a:de:af:0b:30:3f:23:0f:ab:a9:da:42:c7:61:a2: 83:66:96:27:79:85:2c:86:42:be:3d:16:94:92:ad: bc:23:60:91:41:11:ba:32:21:4a:bc:1e:27:0f:60: 06:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1D:11:84:BE:CA:D0:02:CC:63:FF:7F:15:3E:DD:1E:A1:3E:58:CB X509v3 Authority Key Identifier: keyid:B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e9:52:95:d9:b2:14:c5:ab:3e:43:e1:03:d5:29:6b:b4:4d: d7:0b:16:2d:ed:7c:3c:e9:70:43:2c:df:0e:74:d4:ec:22:c9: a2:86:4f:32:03:d5:95:00:a3:af:55:04:c7:6b:5d:bc:2d:91: 86:07:83:fa:15:ea:3c:eb:f9:8a:2b:7b:34:5e:63:88:be:71: 17:aa:92:1f:9a:44:bc:f1:51:b0:03:f2:2c:78:42:5a:cb:93: 32:c1:b8:ec:1c:fd:63:6b:a3:c1:ca:fe:59:c1:cf:41:2d:0b: 81:85:e9:43:8f:a8:60:8c:43:a4:f3:d5:74:d0:b2:17:2f:ac: cb:fc:73:3e:87:03:d1:15:c7:c9:4d:d1:69:c1:9c:e5:74:7c: 02:4c:17:d1:6b:18:b0:d3:a8:42:ed:f2:9c:2e:b2:4d:78:69: f1:29:fa:9b:6d:7d:de:c0:ca:ed:b8:c5:bc:08:61:c9:7d:84: f4:1f:b7:ae:ad:ed:79:43:30:5e:90:5d:40:ae:8b:f1:d3:cd: 84:3d:5a:09:b0:43:ae:1d:6d:69:d3:e3:eb:82:c9:e8:8c:49: 85:9a:4d:56:9b:73:bb:1b:e8:e7:50:5a:e6:6f:29:ef:e9:18: e5:ba:55:45:db:2a:71:9e:77:28:e0:47:90:38:f3:37:1f:7f: 2d:0f:34:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3MkQxMTAvBgNVBAUTKEI3NzI5MTdDQjVDMDc2N0REOEI5RTk0QzQwQzFBN0FB QTY1OURGMkEwHhcNMjYwMTEwMjMxODI2WhcNMjYwMTE3MjMxODI2WjAYMRYwFAYD VQQDDA02OTYyZGU0Mi0zMmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6KVSzTk5bXTmr6Dw82ERJPjGsBTzlnsAftklFYRghGcM2qWBfYD7dfgjBhJ 9qrwMfYA3OS+zcIg6nWYedLD2dnhvGvc0BtPCw0lgl+zrR3YX+uMzPlQOMcsdQEI zHxPjHPevkLZxGYz/GPdJKvPeZt6UiwcbMwXdbMostmSxQesoJ+Ls8Bb1GuWcr+v pL85ewtMt8FeRdb+vH/opmun9Y6EoJD0ka/8bbxBRAROuhQVS1+k2qjtZWsfegUB 4ZEINo11HkGSTBXUy8OQT3oLkhF63q8LMD8jD6up2kLHYaKDZpYneYUshkK+PRaU kq28I2CRQRG6MiFKvB4nD2AG+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQdEYS+ ytACzGP/fxU+3R6hPljLMB8GA1UdIwQYMBaAFLdykXy1wHZ92LnpTEDBp6qmWd8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjcyRC84NDg1RjI0QTcz Q0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRuM1l1ZWxNUU1HbnFxWloz eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS1JmTFhBZG4zWXVlbE1RTUducXFaWjN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjcyRC84NDg1RjI0QTczQ0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRu M1l1ZWxNUU1HbnFxWlozeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN6VKV2bIUxas+Q+ED1SlrtE3XCxYt7Xw86XBDLN8OdNTsIsmihk8y A9WVAKOvVQTHa128LZGGB4P6Feo86/mKK3s0XmOIvnEXqpIfmkS88VGwA/IseEJa y5MywbjsHP1ja6PByv5Zwc9BLQuBhelDj6hgjEOk89V00LIXL6zL/HM+hwPRFcfJ TdFpwZzldHwCTBfRaxiw06hC7fKcLrJNeGnxKfqbbX3ewMrtuMW8CGHJfYT0H7eu re15QzBekF1Arovx082EPVoJsEOuHW1p0+PrgsnojEmFmk1Wm3O7G+jnUFrmbynv 6RjlulVF2ypxnnco4EeQOPM3H38tDzRu -----END CERTIFICATE-----Generated at Mon Jan 12 17:23:46 2026 by rpki-client