This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft File: BRnee0hmA7e6W2bauYkgP98ttJQ.mft (raw, json) Hash identifier: saQXKhdebNB/ve60pPa3bff0gWCBkCYtEKsnlVfXn80= Subject key identifier: 61:36:F9:96:43:B8:F2:9D:F9:AC:CB:73:17:01:B2:62:76:03:4B:E8 Authority key identifier: 05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 Certificate issuer: /CN=A91912DD/serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Certificate serial: 0C8B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft Manifest number: 0C84 Signing time: Sat 24 Jan 2026 16:23:40 +0000 Manifest this update: Sat 24 Jan 2026 16:23:40 +0000 Manifest next update: Sat 31 Jan 2026 16:23:40 +0000 Files and hashes: 1: BRnee0hmA7e6W2bauYkgP98ttJQ.crl (hash: yJLcEBgCrRVG04OMHrJatgIe9zs+/30ESltV56vz+fU=) 2: 05BE20062C5811EAA90F4B0EC4F9AE02.roa (hash: KZLdlP1OQSAqnUANoQynhHKfuaNstAKbyzLi1TUSbtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3211 (0xc8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91912DD, serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Validity Not Before: Jan 24 16:23:40 2026 GMT Not After : Jan 31 16:23:40 2026 GMT Subject: CN=6974f20c-7aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c3:f2:be:53:82:5b:28:81:73:95:d2:8e:e3: 33:c1:d0:cf:8c:ea:48:ac:46:5a:b6:6f:21:6d:77: 1c:5d:77:ff:ac:1d:9e:5e:35:b3:47:50:59:1a:82: b3:1f:e8:8e:87:b1:a2:91:f2:59:71:d2:9b:97:a5: 42:a4:62:4d:95:4a:83:ca:e7:75:cd:6c:e0:1b:84: ba:ab:fa:34:c8:4f:9a:69:ea:a1:11:26:74:44:63: aa:ec:b5:b4:47:8c:38:3c:6a:85:f6:95:bb:dc:bc: 6b:7d:b3:e6:da:58:f9:44:a1:9d:cd:c8:ef:df:8e: e6:7f:ea:4a:8f:4f:05:6f:c2:a7:2c:dd:7e:91:4f: b9:6f:b8:14:12:32:ad:f8:07:d0:5a:95:8f:6b:d6: 0c:94:1a:44:40:73:1d:42:95:71:11:08:b9:5a:38: a3:ed:75:79:04:75:fd:5d:50:4c:83:8a:37:63:e6: 0c:90:ca:4b:42:e5:3c:fd:97:d2:81:58:b6:e8:1b: c8:13:3e:c1:df:2e:9a:a3:7d:43:1e:30:ca:7b:3e: a8:dc:28:f4:ff:cb:b4:27:cf:3d:56:b3:46:6a:3a: e7:57:5f:38:84:80:78:59:15:2e:d0:2c:b4:34:1d: c8:84:92:ab:af:b8:d0:19:94:2b:cb:52:6c:22:7c: ea:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:36:F9:96:43:B8:F2:9D:F9:AC:CB:73:17:01:B2:62:76:03:4B:E8 X509v3 Authority Key Identifier: keyid:05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:0a:92:ea:d4:d4:c3:0e:c9:5e:7a:47:1f:49:59:60:39:ef: 9e:c3:7b:18:c9:14:83:db:df:03:8c:28:b7:0b:98:ab:2a:73: 46:4c:b1:2d:46:4f:b0:55:68:fe:da:b3:df:f0:55:c8:24:84: 48:0b:50:de:16:38:2a:55:86:02:3c:b8:1c:3b:49:26:11:9b: fe:a4:0a:2f:27:22:55:3a:07:97:1e:ac:e0:40:91:22:f7:31: 14:fe:14:fe:cc:e8:30:ed:a8:2c:2d:20:a0:6c:16:ac:fc:7c: 58:f0:86:d5:f0:e6:62:71:51:4a:f0:c5:0f:a7:84:79:e5:e1: 0c:a4:8d:ed:77:c7:cd:31:4f:88:77:2f:a5:d8:0b:e1:9f:e7: f0:8c:fd:76:ba:17:ae:b5:ad:6e:dd:6c:7a:9a:69:d0:50:40: cd:86:e5:6c:f5:54:3a:18:93:9e:9f:5a:8a:ce:83:ce:73:aa: 41:f9:b2:e5:ac:1d:85:69:0c:e6:62:ac:95:1a:f2:06:5a:60: 9c:e4:8f:17:1e:d3:bb:f4:eb:6c:2c:7c:3e:62:85:32:58:e3: 4f:da:5f:d0:63:9e:ff:aa:e2:ca:62:09:10:33:aa:51:5d:15: fc:35:0c:b8:7b:12:38:d4:10:4d:43:57:a1:3a:3a:0b:86:17: 64:c6:45:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyREQxMTAvBgNVBAUTKDA1MTlERTdCNDg2NjAzQjdCQTVCNjZEQUI5ODkyMDNG REYyREI0OTQwHhcNMjYwMTI0MTYyMzQwWhcNMjYwMTMxMTYyMzQwWjAYMRYwFAYD VQQDDA02OTc0ZjIwYy03YWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsPyvlOCWyiBc5XSjuMzwdDPjOpIrEZatm8hbXccXXf/rB2eXjWzR1BZGoKz H+iOh7GikfJZcdKbl6VCpGJNlUqDyud1zWzgG4S6q/o0yE+aaeqhESZ0RGOq7LW0 R4w4PGqF9pW73LxrfbPm2lj5RKGdzcjv347mf+pKj08Fb8KnLN1+kU+5b7gUEjKt +AfQWpWPa9YMlBpEQHMdQpVxEQi5Wjij7XV5BHX9XVBMg4o3Y+YMkMpLQuU8/ZfS gVi26BvIEz7B3y6ao31DHjDKez6o3Cj0/8u0J889VrNGajrnV184hIB4WRUu0Cy0 NB3IhJKrr7jQGZQry1JsInzq6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGE2+ZZD uPKd+azLcxcBsmJ2A0voMB8GA1UdIwQYMBaAFAUZ3ntIZgO3ultm2rmJID/fLbSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTJERC9EQjRBNkNGQzEw RDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3ZTZXMmJhdVlrZ1A5OHR0 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JSbmVlMGhtQTdlNlcyYmF1WWtnUDk4dHRKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTJERC9EQjRBNkNGQzEwRDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3 ZTZXMmJhdVlrZ1A5OHR0SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGCpLq1NTDDsleekcfSVlgOe+ew3sYyRSD298DjCi3C5irKnNGTLEt Rk+wVWj+2rPf8FXIJIRIC1DeFjgqVYYCPLgcO0kmEZv+pAovJyJVOgeXHqzgQJEi 9zEU/hT+zOgw7agsLSCgbBas/HxY8IbV8OZicVFK8MUPp4R55eEMpI3td8fNMU+I dy+l2Avhn+fwjP12uheuta1u3Wx6mmnQUEDNhuVs9VQ6GJOen1qKzoPOc6pB+bLl rB2FaQzmYqyVGvIGWmCc5I8XHtO79OtsLHw+YoUyWONP2l/QY57/quLKYgkQM6pR XRX8NQy4exI41BBNQ1ehOjoLhhdkxkUo -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:34 2026 by rpki-client