This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft File: kMt_oTeWnENWpMpS9wXcoasiX9A.mft (raw, json) Hash identifier: k3sfgLo2UwEVKqFXmafv5K7QOVvErsZQz8+Yy6NWseY= Subject key identifier: B9:0A:F0:D2:1E:A3:35:DE:7E:A6:FD:F5:46:FA:D5:FC:06:8B:12:0A Authority key identifier: 90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0 Certificate issuer: /CN=A91907D3/serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft Manifest number: 5C Signing time: Fri 23 Jan 2026 06:11:24 +0000 Manifest this update: Fri 23 Jan 2026 06:11:23 +0000 Manifest next update: Fri 30 Jan 2026 06:11:23 +0000 Files and hashes: 1: kMt_oTeWnENWpMpS9wXcoasiX9A.crl (hash: F/zXttabb6fv55Qwe/NezIZbasCkbbpeo6BmbGL5ZHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91907D3, serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0 Validity Not Before: Jan 23 06:11:23 2026 GMT Not After : Jan 30 06:11:23 2026 GMT Subject: CN=6973110c-cc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:be:3f:60:c3:14:3a:45:57:83:4b:5d:0f:ba: 92:40:7c:d5:ed:58:bb:26:bc:c7:47:dc:6d:b7:eb: a3:18:cb:c2:74:c3:c2:8c:bd:08:7d:85:ab:83:2a: 6c:b4:9c:18:c3:ad:28:42:31:ee:03:af:4e:c6:1a: 2f:cc:ef:f4:b0:e8:d0:0b:26:15:d6:b8:f0:f6:7e: b6:81:c9:3e:4c:3c:4f:b4:5e:53:8b:ae:99:14:b2: cb:d6:92:11:4b:9f:f6:43:ff:73:7d:36:16:62:0c: a7:d1:4e:95:06:ff:89:a7:86:27:3e:5f:45:cd:4e: e0:81:4e:f1:d9:e6:27:9b:a5:ba:a9:7e:bd:e7:d8: 7d:4a:43:ce:6d:c3:47:25:f7:99:aa:b2:ee:34:14: 58:de:a3:fd:ab:f4:81:61:5c:f5:55:f3:ea:e2:a0: 76:70:4f:6b:ec:88:f0:bd:a6:9b:37:6c:19:6a:e0: b2:aa:f2:96:69:95:57:1b:b5:d8:50:6e:bf:57:00: ee:ab:01:1f:b6:63:5d:0e:53:49:6c:19:29:ba:53: a0:5d:6a:54:26:a4:5c:0a:e7:90:fe:a3:3c:91:9f: 91:9c:b5:b6:5e:04:c5:98:9f:f6:b8:1e:21:90:1e: 26:7f:d6:91:9a:98:f7:ab:ac:be:38:c3:7f:07:57: a5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0A:F0:D2:1E:A3:35:DE:7E:A6:FD:F5:46:FA:D5:FC:06:8B:12:0A X509v3 Authority Key Identifier: keyid:90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:c2:e0:5f:14:0e:fe:84:f4:65:87:39:b9:ce:30:3f:cc:1e: f1:a6:34:e8:c0:d5:ea:92:18:69:61:2f:0d:91:37:80:16:48: a6:93:72:52:d3:01:11:5b:be:01:bf:56:c5:a2:e2:97:24:32: 68:82:3a:46:13:86:70:35:11:f0:76:e4:41:75:97:b7:9b:0f: 3c:24:91:a8:ea:c8:64:87:40:54:dd:94:63:ab:e9:ef:55:67: 36:86:06:db:bb:ab:6e:fa:a9:47:70:5f:c1:50:86:af:1b:13: 94:36:6d:65:a2:ee:61:cf:9a:d8:05:f3:5c:55:67:67:40:09: bc:07:1b:24:49:6c:47:65:16:3b:98:e9:66:41:67:53:23:4d: 80:05:68:bb:4e:a6:69:a6:ff:ec:b1:05:48:7c:d4:f2:43:35: 05:55:be:8c:9e:ff:aa:be:a4:76:74:fd:90:2b:bb:c1:91:f2: ee:cd:7d:41:5c:5e:7b:48:56:26:93:02:72:2a:84:f7:78:5f: 75:65:5e:8c:e0:e9:8e:8f:39:9b:52:57:e9:c6:1e:fc:ca:b0: b2:e1:e7:10:3f:e7:bb:67:65:d0:be:5b:ee:ca:50:1a:9c:55: 37:32:fe:c8:fe:84:f3:d3:20:f0:78:6c:4d:cb:7b:4f:f3:40: c4:bd:4e:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDdEMzExMC8GA1UEBRMoOTBDQjdGQTEzNzk2OUM0MzU2QTRDQTUyRjcwNURDQTFB QjIyNUZEMDAeFw0yNjAxMjMwNjExMjNaFw0yNjAxMzAwNjExMjNaMBgxFjAUBgNV BAMMDTY5NzMxMTBjLWNjNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCevj9gwxQ6RVeDS10PupJAfNXtWLsmvMdH3G2366MYy8J0w8KMvQh9hauDKmy0 nBjDrShCMe4Dr07GGi/M7/Sw6NALJhXWuPD2fraByT5MPE+0XlOLrpkUssvWkhFL n/ZD/3N9NhZiDKfRTpUG/4mnhic+X0XNTuCBTvHZ5iebpbqpfr3n2H1KQ85tw0cl 95mqsu40FFjeo/2r9IFhXPVV8+rioHZwT2vsiPC9pps3bBlq4LKq8pZplVcbtdhQ br9XAO6rAR+2Y10OU0lsGSm6U6BdalQmpFwK55D+ozyRn5GctbZeBMWYn/a4HiGQ HiZ/1pGamPerrL44w38HV6WtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuQrw0h6j Nd5+pv31RvrV/AaLEgowHwYDVR0jBBgwFoAUkMt/oTeWnENWpMpS9wXcoasiX9Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwN0QzLzQxOUU3RTEyNkM1 OTExRjBBMzg4NEU3QUM0RjlBRTAyL2tNdF9vVGVXbkVOV3BNcFM5d1hjb2FzaVg5 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva010X29UZVduRU5XcE1wUzl3WGNvYXNpWDlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw N0QzLzQxOUU3RTEyNkM1OTExRjBBMzg4NEU3QUM0RjlBRTAyL2tNdF9vVGVXbkVO V3BNcFM5d1hjb2FzaVg5QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAITC4F8UDv6E9GWHObnOMD/MHvGmNOjA1eqSGGlhLw2RN4AWSKaTclLT ARFbvgG/VsWi4pckMmiCOkYThnA1EfB25EF1l7ebDzwkkajqyGSHQFTdlGOr6e9V ZzaGBtu7q276qUdwX8FQhq8bE5Q2bWWi7mHPmtgF81xVZ2dACbwHGyRJbEdlFjuY 6WZBZ1MjTYAFaLtOpmmm/+yxBUh81PJDNQVVvoye/6q+pHZ0/ZAru8GR8u7NfUFc XntIViaTAnIqhPd4X3VlXozg6Y6POZtSV+nGHvzKsLLh5xA/57tnZdC+W+7KUBqc VTcy/sj+hPPTIPB4bE3Le0/zQMS9Tok= -----END CERTIFICATE-----Generated at Sun Jan 25 08:26:19 2026 by rpki-client