This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json) Hash identifier: PEUwO7+f0u/6b2Q0ISTPgaitBOcnPRGxUoMwGLOLvA4= Subject key identifier: 7C:E3:ED:44:92:85:C0:49:FA:7F:37:8F:9A:10:FE:37:FA:57:6E:30 Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Certificate serial: 0BA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft Manifest number: 0B8D Signing time: Sat 24 Jan 2026 18:38:58 +0000 Manifest this update: Sat 24 Jan 2026 18:38:58 +0000 Manifest next update: Sat 31 Jan 2026 18:38:58 +0000 Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: kKsz1wr8fmh8TCo3QHjuFulnAzMF7QxZNzDg+42tbYI=) 2: 5F47B232DF0711F0899AA5EF5C6F56BC.roa (hash: SauP6nDooiqlWIoLNHqPCC3v5Fx+lq8e50AU0GvqpMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2979 (0xba3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Validity Not Before: Jan 24 18:38:58 2026 GMT Not After : Jan 31 18:38:58 2026 GMT Subject: CN=697511c2-8680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e9:5e:65:c3:01:fa:76:f8:83:70:c7:a0:af: 21:97:ca:15:2a:ce:9d:fd:e2:bb:85:70:db:47:b7: 71:a4:1b:7c:2a:c5:d1:c9:ea:60:74:60:4a:cc:47: db:36:e3:40:4c:5d:f2:9a:5f:ce:c0:63:f0:ba:22: 48:af:a6:40:12:ff:db:24:03:65:4e:da:2a:7f:d2: db:24:18:3c:ab:e5:9c:ca:c8:c5:17:02:89:f0:03: 1d:03:0f:36:f4:8d:6e:e4:43:ac:4e:77:8e:a3:32: 90:7c:5b:92:d3:cb:d6:81:0c:9d:8f:1e:1a:72:05: dc:df:e6:81:8f:8a:0d:37:c1:5e:6b:8c:f8:9c:9f: c6:f6:33:58:05:25:28:01:b6:5f:d2:ca:bc:dd:19: fd:3f:33:d6:65:96:36:63:e1:d0:2f:94:a2:ad:8e: 85:72:3b:68:e2:9c:c2:ab:e9:54:99:8b:e6:5c:6d: f8:96:fa:76:9a:93:22:ab:67:b7:1c:98:02:99:70: da:ed:ae:38:18:52:a1:e9:de:66:1c:26:2a:af:6a: b7:86:2d:89:23:6a:fc:af:db:39:98:fe:1d:63:a6: ec:f6:9b:8b:89:71:e3:cc:c1:b9:69:58:5a:64:10: a5:cc:19:9e:8c:cd:9b:d1:c2:33:48:dd:9d:65:ff: e3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E3:ED:44:92:85:C0:49:FA:7F:37:8F:9A:10:FE:37:FA:57:6E:30 X509v3 Authority Key Identifier: keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:be:64:cb:8f:3e:98:7e:06:f2:fd:6b:c1:44:01:af:45:df: 21:e6:b2:bd:40:2b:cd:57:df:5e:c9:ea:b1:b4:a2:ca:60:61: 6a:dd:dd:b2:83:bf:b4:3e:65:0d:51:90:c6:49:a6:62:a5:7c: e1:63:48:e0:93:fc:c6:f0:ac:24:64:b3:8d:14:be:75:33:72: 59:c8:61:5d:c9:65:8a:bf:ff:81:5b:2b:2e:aa:17:44:ac:44: cf:aa:66:27:85:65:42:a5:64:7f:2f:4b:8a:ef:30:05:d3:a2: b2:19:b2:c7:1c:3c:07:b0:2d:13:9d:0f:36:00:e5:bc:16:9b: 6c:05:4a:1d:a4:32:68:ac:44:bf:97:0d:b1:54:3e:a7:28:34: 89:8d:9c:36:ae:34:3a:5f:9d:53:64:08:58:d3:d5:cd:26:e0: 1a:7e:ae:8f:c9:41:f8:a6:8b:52:fc:27:fc:1c:92:3f:08:d4: ea:11:e4:34:8a:f6:0c:da:89:a3:b4:bc:13:02:98:fb:57:d6: c3:6d:e4:d8:b0:fb:61:8c:c4:78:65:c8:b7:c8:9e:3c:a5:5e: bb:ce:02:17:1c:d3:50:f0:56:58:3d:f8:8a:c1:a5:b1:90:cc: f4:23:33:56:20:1a:f4:13:0d:6f:47:92:00:5c:b8:f5:59:41: ee:fb:ea:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1REMxMTAvBgNVBAUTKEQxMEU0M0UwNTkzREVGMURCOEQ3RjQ0QzZGMUNEMTNF NzNDMkYyMzAwHhcNMjYwMTI0MTgzODU4WhcNMjYwMTMxMTgzODU4WjAYMRYwFAYD VQQDDA02OTc1MTFjMi04NjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+leZcMB+nb4g3DHoK8hl8oVKs6d/eK7hXDbR7dxpBt8KsXRyepgdGBKzEfb NuNATF3yml/OwGPwuiJIr6ZAEv/bJANlTtoqf9LbJBg8q+WcysjFFwKJ8AMdAw82 9I1u5EOsTneOozKQfFuS08vWgQydjx4acgXc3+aBj4oNN8Fea4z4nJ/G9jNYBSUo AbZf0sq83Rn9PzPWZZY2Y+HQL5SirY6Fcjto4pzCq+lUmYvmXG34lvp2mpMiq2e3 HJgCmXDa7a44GFKh6d5mHCYqr2q3hi2JI2r8r9s5mP4dY6bs9puLiXHjzMG5aVha ZBClzBmejM2b0cIzSN2dZf/j3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzj7USS hcBJ+n83j5oQ/jf6V24wMB8GA1UdIwQYMBaAFNEOQ+BZPe8duNf0TG8c0T5zwvIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVEQy80NjEyRDUxRTQz MTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4MjQxX1JNYnh6UlBuUEM4 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRNUQ0Rms5N3gyNDFfUk1ieHpSUG5QQzhqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVEQy80NjEyRDUxRTQzMTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4 MjQxX1JNYnh6UlBuUEM4akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCivmTLjz6Yfgby/WvBRAGvRd8h5rK9QCvNV99eyeqxtKLKYGFq3d2y g7+0PmUNUZDGSaZipXzhY0jgk/zG8KwkZLONFL51M3JZyGFdyWWKv/+BWysuqhdE rETPqmYnhWVCpWR/L0uK7zAF06KyGbLHHDwHsC0TnQ82AOW8FptsBUodpDJorES/ lw2xVD6nKDSJjZw2rjQ6X51TZAhY09XNJuAafq6PyUH4potS/Cf8HJI/CNTqEeQ0 ivYM2omjtLwTApj7V9bDbeTYsPthjMR4Zci3yJ48pV67zgIXHNNQ8FZYPfiKwaWx kMz0IzNWIBr0Ew1vR5IAXLj1WUHu++rO -----END CERTIFICATE-----Generated at Sun Jan 25 09:28:36 2026 by rpki-client