This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft File: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft (raw, json) Hash identifier: AkaocMUbvK2OVEgiyytDsNtkbK+5bNwd6Hj1BULz6eE= Subject key identifier: 0D:F5:88:07:03:7E:06:1E:A0:E2:14:AB:EC:C5:E5:D3:93:BE:B6:D4 Authority key identifier: E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74 Certificate issuer: /CN=A9125DDA/serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft Manifest number: 55 Signing time: Sun 25 Jan 2026 06:17:07 +0000 Manifest this update: Sun 25 Jan 2026 06:17:07 +0000 Manifest next update: Sun 01 Feb 2026 06:17:07 +0000 Files and hashes: 1: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl (hash: kARgH9aYAMPs7kep/f2P2B0Sr5ta7j0V/lVYNHkJbtU=) 2: F91331C4796E11F095D14275C4F9AE02.roa (hash: 6wo7WUrPZLKlQaonftVwuTXqab8pX51e733TWWNJa3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125DDA, serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74 Validity Not Before: Jan 25 06:17:07 2026 GMT Not After : Feb 1 06:17:07 2026 GMT Subject: CN=6975b563-1828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:50:88:91:fd:70:0f:e6:09:b5:df:c5:29:a2: 84:d4:7b:84:7a:35:2a:b4:b4:f6:4b:8e:6c:aa:b1: 67:7c:17:a1:8f:ce:e2:28:7b:fc:6d:27:5e:c5:31: 7a:1e:41:cd:a2:4d:b9:27:6c:39:d3:e1:68:86:b3: 12:9a:32:04:8a:33:92:01:a2:1f:5c:4a:bf:e7:2b: 1e:b2:76:41:ad:b9:f2:8f:c6:8f:db:26:07:ec:77: 60:0c:c2:65:30:8d:94:f6:43:94:b6:8b:7e:c7:af: ee:64:5b:da:f9:0d:57:6e:61:7f:92:7f:24:1b:20: 6b:bf:1e:e4:d3:68:67:5a:8e:1e:00:c2:94:a9:1f: bb:04:8e:3f:5a:d4:8c:79:c0:82:b2:af:7a:fd:4f: 82:9f:47:9a:2c:68:11:01:6c:f8:e2:c4:6b:90:cc: ad:67:05:11:6e:db:f6:fb:e2:39:9d:3f:2d:55:12: 9d:fc:8f:8c:8f:da:5e:74:99:b1:19:09:6d:0e:56: 56:0a:a6:5e:e4:2f:62:43:4e:46:a1:28:bc:1e:cc: f1:87:79:df:c1:d4:46:9a:bd:81:a0:8b:d1:e6:71: 64:4c:70:a5:bd:60:46:44:08:c9:bf:ad:c3:48:e5: 18:fb:ac:09:7d:cd:70:c5:ad:8f:66:e4:13:13:36: 38:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F5:88:07:03:7E:06:1E:A0:E2:14:AB:EC:C5:E5:D3:93:BE:B6:D4 X509v3 Authority Key Identifier: keyid:E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:13:3e:e6:9e:5a:1b:23:f5:75:63:1a:5a:7a:fe:17:fd:0b: 53:b6:9b:2f:48:e9:ed:cf:4f:8a:61:5b:81:c9:54:d7:2d:7b: d8:62:18:c8:5e:27:c9:1d:a2:fd:23:ff:0f:c6:db:9a:5e:26: 70:e1:bc:db:7f:a2:8a:34:d2:60:95:dc:5a:7c:85:c7:d3:5a: ca:7a:73:8d:26:5f:bd:4c:66:5d:02:73:24:16:66:cd:62:b0: 58:bf:8a:c5:a2:cd:0e:a6:ae:97:a3:82:50:de:9c:32:87:9f: ec:b1:b6:6c:1f:6c:55:ee:65:5b:fa:47:44:74:9d:7e:a5:ac: 16:b8:1a:d4:80:f1:8e:7c:c7:39:2e:ae:ec:3c:b1:ce:36:a8: 02:ac:00:56:6d:c9:fc:a3:d0:33:e9:44:ee:9c:1b:1d:60:97: 16:14:6f:57:38:03:f2:7f:df:de:4f:d4:3e:e1:66:76:e9:11: 49:9f:eb:e2:81:3d:dc:2a:2d:93:18:ea:f6:1d:db:cc:a4:d2: 7e:17:85:fa:c7:39:c8:70:81:4e:cd:20:1d:a9:4b:6a:d0:8a: f6:0c:39:47:8f:8d:ad:9c:50:b1:7e:d2:20:a5:61:af:28:99: fb:ee:2e:48:ad:b0:51:4b:9c:57:19:e4:cf:2a:cc:ef:37:f5: e7:9c:4b:22 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUREQTExMC8GA1UEBRMoRTUxMDIwOEZEMzkwNDJFMzM2NjIxMzBBNDJBOEY4M0ZF RUNGQkU3NDAeFw0yNjAxMjUwNjE3MDdaFw0yNjAyMDEwNjE3MDdaMBgxFjAUBgNV BAMMDTY5NzViNTYzLTE4MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqUIiR/XAP5gm138UpooTUe4R6NSq0tPZLjmyqsWd8F6GPzuIoe/xtJ17FMXoe Qc2iTbknbDnT4WiGsxKaMgSKM5IBoh9cSr/nKx6ydkGtufKPxo/bJgfsd2AMwmUw jZT2Q5S2i37Hr+5kW9r5DVduYX+SfyQbIGu/HuTTaGdajh4AwpSpH7sEjj9a1Ix5 wIKyr3r9T4KfR5osaBEBbPjixGuQzK1nBRFu2/b74jmdPy1VEp38j4yP2l50mbEZ CW0OVlYKpl7kL2JDTkahKLwezPGHed/B1EaavYGgi9HmcWRMcKW9YEZECMm/rcNI 5Rj7rAl9zXDFrY9m5BMTNjgXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDfWIBwN+ Bh6g4hSr7MXl05O+ttQwHwYDVR0jBBgwFoAU5RAgj9OQQuM2YhMKQqj4P+7PvnQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1RERBLzgwQUMwOTg2Nzk2 RTExRjA4RkM1MTc3NEM0RjlBRTAyLzVSQWdqOU9RUXVNMlloTUtRcWo0UC03UHZu US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNVJBZ2o5T1FRdU0yWWhNS1FxajRQLTdQdm5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 RERBLzgwQUMwOTg2Nzk2RTExRjA4RkM1MTc3NEM0RjlBRTAyLzVSQWdqOU9RUXVN MlloTUtRcWo0UC03UHZuUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKQTPuaeWhsj9XVjGlp6/hf9C1O2my9I6e3PT4phW4HJVNcte9hiGMhe J8kdov0j/w/G25peJnDhvNt/ooo00mCV3Fp8hcfTWsp6c40mX71MZl0CcyQWZs1i sFi/isWizQ6mrpejglDenDKHn+yxtmwfbFXuZVv6R0R0nX6lrBa4GtSA8Y58xzku ruw8sc42qAKsAFZtyfyj0DPpRO6cGx1glxYUb1c4A/J/395P1D7hZnbpEUmf6+KB PdwqLZMY6vYd28yk0n4XhfrHOchwgU7NIB2pS2rQivYMOUePja2cULF+0iClYa8o mfvuLkitsFFLnFcZ5M8qzO839eecSyI= -----END CERTIFICATE-----Generated at Sun Jan 25 18:56:33 2026 by rpki-client