This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C7E1/439170E6DB3811F0A74194838DD3641D/5CljsoJaEksoEaVP3nfMc3g2n34.mft File: 5CljsoJaEksoEaVP3nfMc3g2n34.mft (raw, json) Hash identifier: cpkhDQeaF39tYSAxiyD6EJMel6S/WeYykQ+hRhgi1lQ= Subject key identifier: 91:16:6E:22:FF:27:EC:3C:E2:46:21:75:10:F2:B3:B4:A5:1C:F8:34 Authority key identifier: E4:29:63:B2:82:5A:12:4B:28:11:A5:4F:DE:77:CC:73:78:36:9F:7E Certificate issuer: /CN=A915C7E1/serialNumber=E42963B2825A124B2811A54FDE77CC7378369F7E Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CljsoJaEksoEaVP3nfMc3g2n34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C7E1/439170E6DB3811F0A74194838DD3641D/5CljsoJaEksoEaVP3nfMc3g2n34.mft Manifest number: 15 Signing time: Fri 23 Jan 2026 06:59:32 +0000 Manifest this update: Fri 23 Jan 2026 06:59:31 +0000 Manifest next update: Fri 30 Jan 2026 06:59:31 +0000 Files and hashes: 1: 5CljsoJaEksoEaVP3nfMc3g2n34.crl (hash: /DFi0kOVY0F8rOmlnJrWbfJgDcXhH7Ll/WzXn3C2V0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C7E1/439170E6DB3811F0A74194838DD3641D/5CljsoJaEksoEaVP3nfMc3g2n34.crl rsync://rpki.apnic.net/member_repository/A915C7E1/439170E6DB3811F0A74194838DD3641D/5CljsoJaEksoEaVP3nfMc3g2n34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CljsoJaEksoEaVP3nfMc3g2n34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C7E1, serialNumber=E42963B2825A124B2811A54FDE77CC7378369F7E Validity Not Before: Jan 23 06:59:31 2026 GMT Not After : Jan 30 06:59:31 2026 GMT Subject: CN=69731c54-163e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7a:49:5d:9e:aa:0a:b3:03:22:5b:fa:35:a3: 5c:ec:6b:fb:09:39:19:37:c0:44:19:06:32:76:04: 58:cb:b9:e3:35:94:49:cd:7a:a2:f3:a6:cd:c3:3a: b0:0b:f8:a4:b9:04:c3:a6:fb:0d:85:79:79:de:d8: a6:36:db:10:f8:8f:be:bf:39:da:53:dc:c9:ba:3e: c7:9d:2f:da:e2:70:b2:04:aa:6a:8a:27:f9:bb:1e: 24:df:be:85:49:5d:89:21:58:2e:4c:51:08:6e:47: b9:26:71:fb:50:6f:b4:49:23:4a:a2:db:4a:46:78: 6b:25:29:ad:34:e3:e9:fa:80:16:1e:6d:25:56:2a: 00:10:74:05:e5:c0:0d:ad:5e:e1:1e:a3:8c:77:55: 88:44:0d:11:03:00:76:64:23:33:e3:33:1a:10:49: 6f:b0:ec:c9:ae:5a:6c:21:01:b9:f6:f1:71:d1:9b: a0:73:66:8b:5c:43:95:25:ca:16:b5:9a:52:89:e2: 7d:5d:31:41:28:e3:3e:f3:0b:91:59:a6:61:2b:0e: d7:88:e8:fe:46:77:85:1d:7c:a5:e0:8e:14:84:b7: 70:4b:9f:d2:5b:26:34:0f:7e:8e:8d:4f:02:8a:1a: be:48:d7:e9:d0:4a:75:cd:3c:f5:52:0e:d6:d2:cf: 13:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:16:6E:22:FF:27:EC:3C:E2:46:21:75:10:F2:B3:B4:A5:1C:F8:34 X509v3 Authority Key Identifier: keyid:E4:29:63:B2:82:5A:12:4B:28:11:A5:4F:DE:77:CC:73:78:36:9F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C7E1/439170E6DB3811F0A74194838DD3641D/5CljsoJaEksoEaVP3nfMc3g2n34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CljsoJaEksoEaVP3nfMc3g2n34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C7E1/439170E6DB3811F0A74194838DD3641D/5CljsoJaEksoEaVP3nfMc3g2n34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:14:70:4a:74:12:e3:eb:93:57:fb:de:f9:41:81:a8:64:62: da:a4:a7:07:09:b2:cd:1f:db:89:6a:3c:54:b0:5e:73:60:e4: 5a:8b:9a:9b:60:88:8c:f5:77:ae:f6:79:ff:03:a8:27:45:df: be:b5:39:23:ab:aa:56:24:e7:c7:3b:d7:d5:ca:5f:50:67:d7: 49:27:a3:e6:fd:2f:fa:6a:e1:45:5d:ae:3b:28:f1:5b:aa:7f: 37:c1:c0:d6:06:c5:71:34:85:4f:48:90:31:b1:9b:07:35:49: 08:1d:a2:df:4c:c9:ca:ab:c8:b7:c2:f9:96:ef:91:9b:01:50: 26:bf:74:22:32:1b:64:9f:15:a4:f5:0a:ee:a6:5d:66:aa:23: 3b:d7:be:a1:2f:aa:16:6d:8a:44:10:89:e5:85:78:f1:81:c4: ce:b3:9a:d4:7d:08:44:8f:84:72:0f:88:8d:ea:9a:23:1c:65: 0b:da:4f:d2:ba:26:9b:a0:2f:4a:1f:2a:e7:12:e9:ce:90:bd: 4c:25:73:c5:08:df:ce:4d:9a:73:a6:4e:d0:17:bd:98:e6:69: 41:89:db:e6:2d:62:35:2a:ee:05:a4:c7:3f:78:e5:34:1b:0f: fd:9c:3d:07:05:e2:06:1d:71:5e:64:3a:c7:24:f2:b3:86:1b: c5:26:d7:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QzdFMTExMC8GA1UEBRMoRTQyOTYzQjI4MjVBMTI0QjI4MTFBNTRGREU3N0NDNzM3 ODM2OUY3RTAeFw0yNjAxMjMwNjU5MzFaFw0yNjAxMzAwNjU5MzFaMBgxFjAUBgNV BAMMDTY5NzMxYzU0LTE2M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKekldnqoKswMiW/o1o1zsa/sJORk3wEQZBjJ2BFjLueM1lEnNeqLzps3DOrAL +KS5BMOm+w2FeXne2KY22xD4j76/OdpT3Mm6PsedL9ricLIEqmqKJ/m7HiTfvoVJ XYkhWC5MUQhuR7kmcftQb7RJI0qi20pGeGslKa004+n6gBYebSVWKgAQdAXlwA2t XuEeo4x3VYhEDREDAHZkIzPjMxoQSW+w7MmuWmwhAbn28XHRm6BzZotcQ5Ulyha1 mlKJ4n1dMUEo4z7zC5FZpmErDteI6P5Gd4UdfKXgjhSEt3BLn9JbJjQPfo6NTwKK Gr5I1+nQSnXNPPVSDtbSzxMVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkRZuIv8n 7DziRiF1EPKztKUc+DQwHwYDVR0jBBgwFoAU5CljsoJaEksoEaVP3nfMc3g2n34w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDN0UxLzQzOTE3MEU2REIz ODExRjBBNzQxOTQ4MzhERDM2NDFELzVDbGpzb0phRWtzb0VhVlAzbmZNYzNnMm4z NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUNsanNvSmFFa3NvRWFWUDNuZk1jM2cybjM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD N0UxLzQzOTE3MEU2REIzODExRjBBNzQxOTQ4MzhERDM2NDFELzVDbGpzb0phRWtz b0VhVlAzbmZNYzNnMm4zNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH8UcEp0EuPrk1f73vlBgahkYtqkpwcJss0f24lqPFSwXnNg5FqLmptg iIz1d672ef8DqCdF3761OSOrqlYk58c719XKX1Bn10kno+b9L/pq4UVdrjso8Vuq fzfBwNYGxXE0hU9IkDGxmwc1SQgdot9MycqryLfC+ZbvkZsBUCa/dCIyG2SfFaT1 Cu6mXWaqIzvXvqEvqhZtikQQieWFePGBxM6zmtR9CESPhHIPiI3qmiMcZQvaT9K6 JpugL0ofKucS6c6QvUwlc8UI385NmnOmTtAXvZjmaUGJ2+YtYjUq7gWkxz945TQb D/2cPQcF4gYdcV5kOsck8rOGG8Um164= -----END CERTIFICATE-----Generated at Sun Jan 25 02:48:07 2026 by rpki-client