This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft File: khO1BHpA8jx8YASA5tqnoc9_oug.mft (raw, json) Hash identifier: vk5FwrJXanofnjtqRyM3DJ6LJbQtofBxYmZnaZ4Mlbo= Subject key identifier: 9E:0A:39:1A:F1:07:B4:ED:B3:AE:7C:74:A9:E2:80:61:91:D9:E2:C6 Authority key identifier: 92:13:B5:04:7A:40:F2:3C:7C:60:04:80:E6:DA:A7:A1:CF:7F:A2:E8 Certificate issuer: /CN=A91435F3/serialNumber=9213B5047A40F23C7C600480E6DAA7A1CF7FA2E8 Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft Manifest number: 01BB Signing time: Sun 25 Jan 2026 02:20:06 +0000 Manifest this update: Sun 25 Jan 2026 02:20:06 +0000 Manifest next update: Sun 01 Feb 2026 02:20:06 +0000 Files and hashes: 1: khO1BHpA8jx8YASA5tqnoc9_oug.crl (hash: ZId6szeUIo3wvxQ7WWeJG4YKFF2MhdZ+mSWU+PIYKm4=) 2: 4E18682450A911EEA39AAE41C4F9AE02.roa (hash: 3nZkRqzVFhraaOpvrG0LDJguOxKECxTU8dAQntDOqqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.crl rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91435F3, serialNumber=9213B5047A40F23C7C600480E6DAA7A1CF7FA2E8 Validity Not Before: Jan 25 02:20:06 2026 GMT Not After : Feb 1 02:20:06 2026 GMT Subject: CN=69757dd6-15aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:0e:49:43:e1:d6:38:03:f0:69:3b:68:9f: e8:97:fe:ef:00:c5:ec:37:d1:a3:33:52:b8:a0:c6: fc:b2:44:cf:a4:e4:46:cf:a4:17:ad:c5:ed:72:7f: 25:02:3a:e5:99:74:b7:3f:ef:51:46:ba:7b:91:75: 87:84:30:7e:8b:a9:50:8c:d0:75:a8:54:4e:52:1d: 39:61:12:39:1f:ec:0d:e9:e6:ff:e5:bc:d9:aa:5b: 52:39:71:b5:5b:aa:4f:4b:38:25:b6:ab:e4:12:0e: 66:c4:8e:28:47:d0:e4:c5:80:8b:f6:db:d3:e3:4a: 0d:4c:f7:a8:83:8c:2a:94:a1:59:87:c1:89:cf:1e: be:dd:18:e7:a3:9d:93:b3:a4:ae:59:bd:2d:41:65: 28:17:dc:80:94:aa:55:d4:00:40:c3:84:17:93:6b: ab:f2:bf:dd:e5:b3:6f:2c:e0:1e:10:12:ad:f3:e6: e6:c7:a5:36:11:d8:87:df:a0:3e:6e:b9:a8:c9:b3: a6:c4:d0:e5:7b:c6:1b:e4:b7:fd:14:33:c1:fb:64: 0d:13:4f:65:cf:0b:1b:19:fe:10:30:e3:0f:ea:48: 08:7b:13:de:56:34:1a:8b:90:94:f9:2e:80:75:73: 1d:00:79:2e:16:52:15:3b:3c:96:35:69:0b:6b:f8: 3a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0A:39:1A:F1:07:B4:ED:B3:AE:7C:74:A9:E2:80:61:91:D9:E2:C6 X509v3 Authority Key Identifier: keyid:92:13:B5:04:7A:40:F2:3C:7C:60:04:80:E6:DA:A7:A1:CF:7F:A2:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:56:65:3f:7a:14:25:18:f2:05:60:13:0e:77:1e:bb:92:0c: 22:1b:a9:92:3b:75:49:39:b4:26:2c:56:17:3b:16:41:7e:6c: 91:4c:7f:bd:67:86:d7:4b:09:35:d6:06:a1:43:09:d1:d5:33: 6f:d1:36:21:47:32:d2:c6:73:fb:8d:31:8b:1e:8a:f8:cf:ee: 84:de:c5:e7:91:54:bd:c6:b5:c7:cc:52:f7:1e:ff:e6:ea:25: 17:ab:35:a6:15:c0:a2:44:44:1c:e6:23:f6:8e:03:d4:e8:17: 98:c4:1b:53:d3:24:43:cb:e2:9e:12:de:5f:58:9d:91:cd:55: 43:cf:d5:36:0b:b7:e3:de:15:06:8b:eb:b8:b3:6e:26:b3:e6: 55:ff:85:47:b5:fc:cd:a6:05:ef:82:d1:2d:a4:76:fc:bf:34: 00:29:5c:ce:71:f1:51:b8:35:a6:58:ed:4b:69:8f:5a:44:3b: 78:7f:b6:8e:e6:01:e3:c0:73:21:f2:2e:ae:ac:c4:3a:ac:ad: 81:30:7a:91:2a:b9:3f:b5:8a:b9:73:4f:bb:f9:7a:58:e5:aa: 10:02:c5:89:e8:37:2d:ec:f5:5c:67:ca:46:f0:e4:92:57:ba: 5f:9e:19:cb:d9:82:07:e9:d2:42:ca:bb:b8:cc:5f:36:c5:4d: 48:bd:9b:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM1RjMxMTAvBgNVBAUTKDkyMTNCNTA0N0E0MEYyM0M3QzYwMDQ4MEU2REFBN0Ex Q0Y3RkEyRTgwHhcNMjYwMTI1MDIyMDA2WhcNMjYwMjAxMDIyMDA2WjAYMRYwFAYD VQQDDA02OTc1N2RkNi0xNWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlIOSUPh1jgD8Gk7aJ/ol/7vAMXsN9GjM1K4oMb8skTPpORGz6QXrcXtcn8l AjrlmXS3P+9RRrp7kXWHhDB+i6lQjNB1qFROUh05YRI5H+wN6eb/5bzZqltSOXG1 W6pPSzgltqvkEg5mxI4oR9DkxYCL9tvT40oNTPeog4wqlKFZh8GJzx6+3Rjno52T s6SuWb0tQWUoF9yAlKpV1ABAw4QXk2ur8r/d5bNvLOAeEBKt8+bmx6U2EdiH36A+ brmoybOmxNDle8Yb5Lf9FDPB+2QNE09lzwsbGf4QMOMP6kgIexPeVjQai5CU+S6A dXMdAHkuFlIVOzyWNWkLa/g6YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4KORrx B7Tts658dKnigGGR2eLGMB8GA1UdIwQYMBaAFJITtQR6QPI8fGAEgObap6HPf6Lo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzVGMy85QjVEQjVFQTUw QTgxMUVFQjZERTA5M0ZDNEY5QUUwMi9raE8xQkhwQThqeDhZQVNBNXRxbm9jOV9v dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2toTzFCSHBBOGp4OFlBU0E1dHFub2M5X291Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzVGMy85QjVEQjVFQTUwQTgxMUVFQjZERTA5M0ZDNEY5QUUwMi9raE8xQkhwQThq eDhZQVNBNXRxbm9jOV9vdWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsVmU/ehQlGPIFYBMOdx67kgwiG6mSO3VJObQmLFYXOxZBfmyRTH+9 Z4bXSwk11gahQwnR1TNv0TYhRzLSxnP7jTGLHor4z+6E3sXnkVS9xrXHzFL3Hv/m 6iUXqzWmFcCiREQc5iP2jgPU6BeYxBtT0yRDy+KeEt5fWJ2RzVVDz9U2C7fj3hUG i+u4s24ms+ZV/4VHtfzNpgXvgtEtpHb8vzQAKVzOcfFRuDWmWO1LaY9aRDt4f7aO 5gHjwHMh8i6urMQ6rK2BMHqRKrk/tYq5c0+7+XpY5aoQAsWJ6Dct7PVcZ8pG8OSS V7pfnhnL2YIH6dJCyru4zF82xU1IvZuH -----END CERTIFICATE-----Generated at Sun Jan 25 22:02:11 2026 by rpki-client