This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft File: owBvXZI9TJzDuBs4ocpnEnR9RAY.mft (raw, json) Hash identifier: 2ZPGHfWz/uLy6UG4wPYMXy6peezSeAymmpSoMB+C4FQ= Subject key identifier: 45:71:F0:0B:63:67:E9:B7:A0:0A:82:73:DE:36:CF:42:96:9B:2C:63 Authority key identifier: A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06 Certificate issuer: /CN=A91185B8/serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406 Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft Manifest number: 021B Signing time: Sun 25 Jan 2026 01:28:42 +0000 Manifest this update: Sun 25 Jan 2026 01:28:42 +0000 Manifest next update: Sun 01 Feb 2026 01:28:42 +0000 Files and hashes: 1: owBvXZI9TJzDuBs4ocpnEnR9RAY.crl (hash: OlToYBX4jtxYBDsFRxskKITfbgKaq5YB4cW4tvLkG8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91185B8, serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406 Validity Not Before: Jan 25 01:28:42 2026 GMT Not After : Feb 1 01:28:42 2026 GMT Subject: CN=697571ca-ae44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d2:cf:6a:96:50:ec:88:22:24:79:30:33:41: 12:ba:e9:59:e9:a1:7d:76:22:89:e5:1a:66:1e:90: ea:af:bc:8d:9f:3e:3a:0b:a0:21:81:ca:4d:4c:06: eb:8b:e7:89:06:01:93:01:ff:ae:65:d1:06:f8:0b: 81:f5:d2:b7:65:d3:24:55:5a:d8:74:d2:68:8a:1b: 91:7d:e8:b9:b3:9f:e6:9c:95:b6:58:7a:12:0b:69: 13:31:1a:eb:72:14:26:d2:0b:3e:13:93:1e:62:aa: 10:6e:00:84:2d:87:0c:5e:aa:f5:75:2b:8e:96:25: 98:ed:81:a7:54:71:af:18:36:c0:bf:13:ea:a5:68: d4:4b:b9:39:1a:19:2d:90:8d:97:af:ba:c7:85:91: 85:36:07:0d:79:76:d7:9e:98:4c:1c:c2:df:77:1b: b9:e9:6d:2d:86:35:c2:e1:33:c7:4b:e9:79:33:ff: b4:76:3c:b9:65:e8:60:cc:44:42:fe:3f:d5:d0:20: 6d:15:91:fb:ac:7d:46:bb:27:6c:a7:07:19:6e:28: f7:3e:e6:05:94:47:53:65:c8:62:6f:af:be:83:c0: fe:f2:71:71:d0:e4:72:39:98:ea:8b:b0:ec:8c:7a: c0:51:3d:c2:a9:80:fd:f2:5a:34:c6:9d:76:66:fc: 05:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:71:F0:0B:63:67:E9:B7:A0:0A:82:73:DE:36:CF:42:96:9B:2C:63 X509v3 Authority Key Identifier: keyid:A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:d4:a6:7f:52:26:8c:78:b2:72:17:93:66:00:78:04:4a:d2: be:15:99:77:b0:f3:d7:b4:0c:66:bb:6f:bc:fa:7c:23:57:24: 50:bc:6b:be:e3:68:52:f0:4d:57:61:69:9d:99:d0:55:9c:82: 6a:6a:cb:66:e6:66:1e:d0:11:e3:c4:0e:19:58:46:05:f7:a9: 8c:21:d5:2d:ae:79:e1:85:be:6e:cb:e5:8c:91:b6:8a:c0:15: 0f:67:16:e7:56:52:45:7d:12:2f:dc:ce:7a:f0:de:45:98:88: dc:c7:fa:05:59:bf:ad:27:7e:d2:da:21:15:4c:dc:e8:dc:ba: a5:a3:8f:c8:8b:52:b6:e1:ce:ce:aa:17:90:b9:a6:9f:63:ee: 95:c5:d1:70:71:af:88:eb:9c:a9:5c:1e:0b:1a:a3:ba:cf:9e: 60:8b:b6:b1:d5:28:83:5d:9e:23:ca:ce:3a:3f:14:ed:24:88: 3d:d0:fc:d4:1b:bb:d3:10:46:2c:01:da:dc:2a:50:81:03:14: 3a:f2:5a:2d:63:d0:01:01:d6:10:4c:3d:14:da:01:e4:96:39: 48:eb:38:8a:8e:6a:0e:08:a3:a2:14:7a:9a:1b:84:dc:9e:c1: 5e:a6:ba:af:00:c0:27:26:ab:32:ed:8c:0d:7e:ab:3a:3a:7f: e8:3b:66:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MTg1QjgxMTAvBgNVBAUTKEEzMDA2RjVEOTIzRDRDOUNDM0I4MUIzOEExQ0E2NzEy NzQ3RDQ0MDYwHhcNMjYwMTI1MDEyODQyWhcNMjYwMjAxMDEyODQyWjAYMRYwFAYD VQQDDA02OTc1NzFjYS1hZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtLPapZQ7IgiJHkwM0ESuulZ6aF9diKJ5RpmHpDqr7yNnz46C6AhgcpNTAbr i+eJBgGTAf+uZdEG+AuB9dK3ZdMkVVrYdNJoihuRfei5s5/mnJW2WHoSC2kTMRrr chQm0gs+E5MeYqoQbgCELYcMXqr1dSuOliWY7YGnVHGvGDbAvxPqpWjUS7k5Ghkt kI2Xr7rHhZGFNgcNeXbXnphMHMLfdxu56W0thjXC4TPHS+l5M/+0djy5ZehgzERC /j/V0CBtFZH7rH1GuydspwcZbij3PuYFlEdTZchib6++g8D+8nFx0ORyOZjqi7Ds jHrAUT3CqYD98lo0xp12ZvwFEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVx8Atj Z+m3oAqCc942z0KWmyxjMB8GA1UdIwQYMBaAFKMAb12SPUycw7gbOKHKZxJ0fUQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODVCOC9EOUJGNDM5NEJF MzExMUVEQjRGRjdEMzRDNEY5QUUwMi9vd0J2WFpJOVRKekR1QnM0b2NwbkVuUjlS QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293QnZYWkk5VEp6RHVCczRvY3BuRW5SOVJBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODVCOC9EOUJGNDM5NEJFMzExMUVEQjRGRjdEMzRDNEY5QUUwMi9vd0J2WFpJOVRK ekR1QnM0b2NwbkVuUjlSQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX1KZ/UiaMeLJyF5NmAHgEStK+FZl3sPPXtAxmu2+8+nwjVyRQvGu+ 42hS8E1XYWmdmdBVnIJqastm5mYe0BHjxA4ZWEYF96mMIdUtrnnhhb5uy+WMkbaK wBUPZxbnVlJFfRIv3M568N5FmIjcx/oFWb+tJ37S2iEVTNzo3Lqlo4/Ii1K24c7O qheQuaafY+6VxdFwca+I65ypXB4LGqO6z55gi7ax1SiDXZ4jys46PxTtJIg90PzU G7vTEEYsAdrcKlCBAxQ68lotY9ABAdYQTD0U2gHkljlI6ziKjmoOCKOiFHqaG4Tc nsFeprqvAMAnJqsy7YwNfqs6On/oO2ZT -----END CERTIFICATE-----Generated at Sun Jan 25 12:24:59 2026 by rpki-client