This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft File: _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json) Hash identifier: TNEEyzAR8oOtBn+Gseu9qiIRWUM+JJ2rSovcP3Lxlu4= Subject key identifier: 7F:74:C8:3C:34:14:84:84:BF:A6:A2:EE:8E:EB:EB:7B:49:35:A1:95 Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft Manifest number: 01CA Signing time: Sun 11 Jan 2026 02:11:20 +0000 Manifest this update: Sun 11 Jan 2026 02:11:19 +0000 Manifest next update: Sun 18 Jan 2026 02:11:19 +0000 Files and hashes: 1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: fW+0+7rxvXjUZK8ABLAWF1nGF2S7y402+7WUmlY8XG4=) 2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: m1n+fMnb/ADNpdU1kcDXhgieJ7VTBfqDuhZU4DVN5dI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 02:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Validity Not Before: Jan 11 02:11:19 2026 GMT Not After : Jan 18 02:11:19 2026 GMT Subject: CN=696306c8-fb8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5d:98:a4:80:8c:01:62:f0:3b:c2:ee:72:e5: 22:3e:d7:7e:09:81:af:1e:95:33:d0:e2:3f:a3:c0: 3c:ed:67:0e:98:3b:a0:a1:01:76:3f:3c:3b:58:77: f6:7f:21:40:0d:6b:0b:17:79:e8:cd:59:41:ea:3a: 39:7b:26:9c:b8:68:e1:43:66:88:09:a5:85:4a:b0: 59:ea:41:f9:0a:5f:c8:8a:f6:cc:92:97:5d:75:13: 36:a5:ac:67:b7:01:35:66:60:69:97:ab:88:62:71: 6c:14:9b:50:fe:8c:4f:67:26:44:4f:34:4a:d9:9c: cf:ab:df:40:b3:8f:18:ff:19:30:3e:d4:27:77:d7: a3:8a:4b:1f:69:b4:2a:28:cb:0d:19:dd:ee:29:27: ac:a8:75:cc:0f:b6:99:55:7a:4e:96:80:e8:68:ba: 9c:14:d9:4b:e4:e7:e1:d9:b6:97:43:13:cd:74:4d: 02:fe:f3:04:da:36:82:72:b7:c6:2d:e5:1a:64:31: 14:27:a5:de:22:6e:f1:fa:db:c1:e5:df:04:4b:24: 9a:12:41:a5:f8:e4:11:fc:18:0a:a2:af:78:92:4a: 76:3d:f4:a2:49:53:0f:9e:52:fa:d7:0f:12:75:95: bb:d4:e0:9d:06:2f:cb:82:d1:1a:e8:b3:11:55:fe: 4b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:74:C8:3C:34:14:84:84:BF:A6:A2:EE:8E:EB:EB:7B:49:35:A1:95 X509v3 Authority Key Identifier: keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:dd:8b:68:1e:ff:11:2c:05:e9:bf:41:43:31:ee:52:23:85: d2:1e:50:10:76:24:bf:fd:66:6d:c0:7e:06:df:a2:ad:6d:34: ae:0c:99:54:a6:9c:68:54:9c:9a:cd:a9:be:91:db:11:61:8e: 7e:e1:20:bd:dc:1e:37:4f:f2:b7:37:a5:5b:bb:64:a3:e3:e7: ca:bf:92:af:0d:d0:9b:2d:b7:8a:8c:6c:c7:e4:c1:31:33:a9: c4:11:59:04:f8:5b:8a:53:aa:1d:86:85:4f:82:e5:89:5f:07: f1:bb:5c:17:e8:bf:5e:3a:ef:9e:f4:58:e6:78:0b:c3:76:12: 00:40:4f:df:d4:5b:32:9b:78:40:cc:41:3e:73:e3:6d:76:0f: eb:fe:af:16:7a:6e:ef:ac:da:69:1c:7a:7e:16:3e:88:b2:da: 82:0c:e2:e0:bd:4e:eb:1f:bb:e2:62:cc:97:05:2b:8d:7b:a7: 76:c6:01:f1:56:46:33:74:98:5f:74:aa:25:5e:b9:74:03:32: 75:86:f9:85:3d:f8:ac:94:53:d6:b3:23:10:bb:bb:91:c0:52: b1:bc:bf:28:3b:c6:2e:ae:76:1e:36:8e:07:10:bb:88:b2:3b: de:db:16:09:db:f5:b9:95:25:d4:7d:4a:b0:d5:95:bc:51:bc: 8b:73:b4:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNCM0IxMTAvBgNVBAUTKEZDOEQ1MURBNTM1MjEyM0REQUU2Mzc2NTY0RjhENTY4 MURBNEIzMUMwHhcNMjYwMTExMDIxMTE5WhcNMjYwMTE4MDIxMTE5WjAYMRYwFAYD VQQDDA02OTYzMDZjOC1mYjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsV2YpICMAWLwO8LucuUiPtd+CYGvHpUz0OI/o8A87WcOmDugoQF2Pzw7WHf2 fyFADWsLF3nozVlB6jo5eyacuGjhQ2aICaWFSrBZ6kH5Cl/IivbMkpdddRM2paxn twE1ZmBpl6uIYnFsFJtQ/oxPZyZETzRK2ZzPq99As48Y/xkwPtQnd9ejiksfabQq KMsNGd3uKSesqHXMD7aZVXpOloDoaLqcFNlL5Ofh2baXQxPNdE0C/vME2jaCcrfG LeUaZDEUJ6XeIm7x+tvB5d8ESySaEkGl+OQR/BgKoq94kkp2PfSiSVMPnlL61w8S dZW71OCdBi/LgtEa6LMRVf5LdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH90yDw0 FISEv6ai7o7r63tJNaGVMB8GA1UdIwQYMBaAFPyNUdpTUhI92uY3ZWT41WgdpLMc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0IzQi84NjI5QzQzMjMx RDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0VqM2E1amRsWlBqVmFCMmtz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JMVIybE5TRWozYTVqZGxaUGpWYUIya3N4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0IzQi84NjI5QzQzMjMxRDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0Vq M2E1amRsWlBqVmFCMmtzeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD3YtoHv8RLAXpv0FDMe5SI4XSHlAQdiS//WZtwH4G36KtbTSuDJlU ppxoVJyazam+kdsRYY5+4SC93B43T/K3N6Vbu2Sj4+fKv5KvDdCbLbeKjGzH5MEx M6nEEVkE+FuKU6odhoVPguWJXwfxu1wX6L9eOu+e9FjmeAvDdhIAQE/f1Fsym3hA zEE+c+Ntdg/r/q8Wem7vrNppHHp+Fj6IstqCDOLgvU7rH7viYsyXBSuNe6d2xgHx VkYzdJhfdKolXrl0AzJ1hvmFPfislFPWsyMQu7uRwFKxvL8oO8YurnYeNo4HELuI sjve2xYJ2/W5lSXUfUqw1ZW8UbyLc7Sh -----END CERTIFICATE-----Generated at Mon Jan 12 09:22:19 2026 by rpki-client