This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft File: KcmzN9Z7DxREgXmLTVsNc9eIrys.mft (raw, json) Hash identifier: 2hiPWwirYU4NgWO2WxJikYmO6whEmoaIRJOlvlx6EMQ= Subject key identifier: 93:93:58:FD:9A:D2:9F:D9:3F:3E:63:58:91:4B:40:E9:CB:88:66:E1 Authority key identifier: 29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B Certificate issuer: /CN=A91608B2/serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft Manifest number: 75 Signing time: Sun 25 Jan 2026 05:57:37 +0000 Manifest this update: Sun 25 Jan 2026 05:57:36 +0000 Manifest next update: Sun 01 Feb 2026 05:57:36 +0000 Files and hashes: 1: KcmzN9Z7DxREgXmLTVsNc9eIrys.crl (hash: 4/D665j/V0EKppic6NHD8SQBaSJQFZ2KRHkxW9AbBPI=) 2: 13B4125A4A5311F08B06EF0FC4F9AE02.roa (hash: JRzGJdFSse2irDcL+W7kuHv+w+d8AeO+g8YTYnBtHyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91608B2, serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B Validity Not Before: Jan 25 05:57:36 2026 GMT Not After : Feb 1 05:57:36 2026 GMT Subject: CN=6975b0d1-081d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:6e:70:c5:fc:50:79:6b:c3:f1:fa:81:dd: 5c:24:3b:20:98:5d:0a:87:60:d7:9c:38:b9:7e:b7: 08:83:22:62:cf:92:53:64:98:19:a7:6a:8f:6d:eb: 48:ae:06:b1:c1:c1:c4:05:35:ec:69:c9:9c:9d:28: f3:ae:38:8a:70:45:0b:07:79:e3:43:4e:d5:12:ff: da:32:60:c1:41:9b:2e:d6:b1:44:1d:d4:93:1b:32: cf:f1:f1:50:fb:d0:3e:a2:bc:bb:43:40:78:40:ac: 9f:4f:f6:6b:f0:50:9e:fc:80:18:6e:83:86:0d:02: f6:2e:a4:7a:16:d4:85:1e:e5:a3:8c:db:87:e0:46: 8d:c1:65:9a:40:94:74:e9:19:ad:18:e8:4b:01:17: 79:9e:f5:63:7e:c9:f2:26:39:cd:d5:f8:13:7d:78: c4:bb:14:3d:fc:5e:33:ab:22:1f:44:10:e9:84:bf: fd:11:62:10:38:43:ff:50:79:82:ec:be:12:b6:73: 77:29:44:51:4c:36:56:e6:bd:11:e7:b7:84:dc:c3: 65:df:aa:ef:60:fe:e3:4b:e9:9d:ca:33:7b:b4:ab: 3c:76:91:e5:26:41:9a:e7:17:38:82:d8:0c:b8:8c: d5:c8:e0:aa:8e:01:3d:b2:31:94:be:4f:74:2f:a4: b1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:93:58:FD:9A:D2:9F:D9:3F:3E:63:58:91:4B:40:E9:CB:88:66:E1 X509v3 Authority Key Identifier: keyid:29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:75:eb:2f:24:5f:98:f7:6d:3e:d3:b7:86:fd:46:3b:64:7f: a5:ec:82:37:e6:27:f8:19:c2:d6:3f:48:bd:c3:f8:45:42:a1: da:f7:f2:af:a9:34:97:6d:e9:06:4e:35:42:11:28:fb:80:de: 69:9c:89:ce:ff:89:a5:e7:85:fc:a4:b8:c6:98:4b:44:ca:88: 1a:1c:55:1f:5c:bd:3e:7a:76:8b:29:de:9a:15:4d:f0:dc:84: b4:0b:fb:a1:46:f0:77:78:ef:72:53:c3:2b:44:f7:fb:45:c0: b0:ac:2f:db:2e:fd:eb:bb:21:7e:a7:f1:a2:2f:dc:f2:ce:4e: 9e:ee:e4:21:2a:a8:c7:36:c6:b9:58:a0:ec:ac:12:8e:30:95: 18:b5:ee:a2:bf:af:6d:9f:de:7a:f6:f1:b0:f2:d0:88:02:df: b3:aa:54:0f:21:e2:ce:2a:69:57:84:1d:fe:8a:c5:6b:68:df: 54:34:61:c2:1c:bb:ea:17:27:c3:6d:72:70:50:67:de:42:93: 08:98:18:ef:31:c6:7a:f1:36:df:6c:9e:38:89:06:4d:52:82: 56:48:ce:8c:d5:75:91:e8:e0:cb:b5:63:4e:90:4b:78:40:44: c8:15:a5:d9:ef:42:6e:ea:0c:c0:87:87:db:7d:ac:35:5d:eb: 59:4b:02:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MDhCMjExMC8GA1UEBRMoMjlDOUIzMzdENjdCMEYxNDQ0ODE3OThCNEQ1QjBENzNE Nzg4QUYyQjAeFw0yNjAxMjUwNTU3MzZaFw0yNjAyMDEwNTU3MzZaMBgxFjAUBgNV BAMMDTY5NzViMGQxLTA4MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWLG5wxfxQeWvD8fqB3VwkOyCYXQqHYNecOLl+twiDImLPklNkmBmnao9t60iu BrHBwcQFNexpyZydKPOuOIpwRQsHeeNDTtUS/9oyYMFBmy7WsUQd1JMbMs/x8VD7 0D6ivLtDQHhArJ9P9mvwUJ78gBhug4YNAvYupHoW1IUe5aOM24fgRo3BZZpAlHTp Ga0Y6EsBF3me9WN+yfImOc3V+BN9eMS7FD38XjOrIh9EEOmEv/0RYhA4Q/9QeYLs vhK2c3cpRFFMNlbmvRHnt4Tcw2Xfqu9g/uNL6Z3KM3u0qzx2keUmQZrnFziC2Ay4 jNXI4KqOAT2yMZS+T3QvpLHPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk5NY/ZrS n9k/PmNYkUtA6cuIZuEwHwYDVR0jBBgwFoAUKcmzN9Z7DxREgXmLTVsNc9eIrysw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwOEIyL0M5NUE0OUFFNEE1 MjExRjA5ODlENzAwRkM0RjlBRTAyL0tjbXpOOVo3RHhSRWdYbUxUVnNOYzllSXJ5 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS2Ntek45WjdEeFJFZ1htTFRWc05jOWVJcnlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw OEIyL0M5NUE0OUFFNEE1MjExRjA5ODlENzAwRkM0RjlBRTAyL0tjbXpOOVo3RHhS RWdYbUxUVnNOYzllSXJ5cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHh16y8kX5j3bT7Tt4b9Rjtkf6XsgjfmJ/gZwtY/SL3D+EVCodr38q+p NJdt6QZONUIRKPuA3mmcic7/iaXnhfykuMaYS0TKiBocVR9cvT56dosp3poVTfDc hLQL+6FG8Hd473JTwytE9/tFwLCsL9su/eu7IX6n8aIv3PLOTp7u5CEqqMc2xrlY oOysEo4wlRi17qK/r22f3nr28bDy0IgC37OqVA8h4s4qaVeEHf6KxWto31Q0YcIc u+oXJ8NtcnBQZ95CkwiYGO8xxnrxNt9snjiJBk1SglZIzozVdZHo4Mu1Y06QS3hA RMgVpdnvQm7qDMCHh9t9rDVd61lLAkI= -----END CERTIFICATE-----Generated at Sun Jan 25 09:25:47 2026 by rpki-client