This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft File: oPnraYHccqJ4sYUomQbB4RwLNfE.mft (raw, json) Hash identifier: EJEhU6zpgJCbmihokEgGKCCrGuYh7Tua95QIsbdkIHs= Subject key identifier: 5B:0A:4F:CE:8D:A2:5E:A2:52:25:78:27:E0:62:4A:D9:15:FD:4A:BD Authority key identifier: A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 Certificate issuer: /CN=A91A05A0/serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft Manifest number: 84 Signing time: Sun 25 Jan 2026 05:45:56 +0000 Manifest this update: Sun 25 Jan 2026 05:45:56 +0000 Manifest next update: Sun 01 Feb 2026 05:45:56 +0000 Files and hashes: 1: oPnraYHccqJ4sYUomQbB4RwLNfE.crl (hash: q3xQCgUnJbZdOH7Pz15/Uz2o1ESHMSlgi2JTQ/ti2NE=) 2: 25E96E4C2F6511F0A4430347C4F9AE02.roa (hash: YjLtFlGgcNbwn9rRIgf5MeQrG8tFe9vr3RMokUM4ipM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A05A0, serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Validity Not Before: Jan 25 05:45:56 2026 GMT Not After : Feb 1 05:45:56 2026 GMT Subject: CN=6975ae14-5a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f5:69:b2:39:8c:d4:ad:bb:49:b8:0f:ee:d7: 78:73:f0:c8:f9:f0:3c:eb:79:cb:13:2e:61:3f:ac: 94:e1:bb:fe:e8:ee:86:d0:c1:32:98:93:5a:01:45: fa:b1:a6:2e:a7:0a:41:2b:01:e2:bf:a4:60:0e:7a: e5:17:21:80:92:6e:a5:ec:1f:77:c2:25:94:4d:8e: f5:fd:2b:de:54:96:1f:7e:d5:b3:d5:fd:a2:6c:c8: c3:e4:ad:96:dc:9f:38:6a:0f:10:b7:ee:a8:f9:6a: b3:57:1e:6f:4b:2f:92:16:8a:7f:5d:08:38:a6:aa: ca:c1:91:a5:bb:5b:46:72:35:19:a5:70:94:a8:b4: 24:20:5f:76:29:f9:9f:b7:ea:68:a1:01:59:ab:a7: 2b:a9:45:20:e4:22:96:f1:58:03:d4:fb:c2:bc:6c: 82:9f:29:1e:eb:b5:62:a2:98:83:54:f1:10:80:da: 3a:66:2b:23:18:44:bc:4e:4d:e9:41:c3:98:02:11: 4e:a2:7f:40:15:49:1e:a2:f3:71:58:84:c0:74:ab: c0:49:aa:aa:54:22:df:fa:8e:7d:69:60:09:bd:c2: b9:fc:65:4d:3d:e9:03:3b:73:7a:6a:0e:b8:54:33: 67:c2:46:af:ab:f8:e6:b2:7a:f0:5d:2b:80:99:88: 02:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0A:4F:CE:8D:A2:5E:A2:52:25:78:27:E0:62:4A:D9:15:FD:4A:BD X509v3 Authority Key Identifier: keyid:A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:91:6b:00:dc:6e:65:54:c1:f6:08:9b:58:96:0a:5f:88:94: 04:ed:7e:16:65:c6:1c:6e:6b:27:0f:f5:3b:4e:05:64:58:7d: 6d:e8:fc:6c:5a:93:a3:a1:08:e3:8b:df:27:af:66:78:15:a9: 61:b6:9f:d1:39:8a:e3:b5:ff:11:7d:95:fc:43:34:a3:98:92: 9c:85:e9:3c:15:de:29:7e:f5:e2:05:01:14:5e:78:a1:91:26: fd:b9:30:f6:0a:9b:b6:ff:67:cd:75:af:1a:0a:2d:1a:76:f5: 4a:41:1a:99:3f:ab:86:fc:a3:81:c2:3b:a4:1b:79:f2:14:59: 70:db:01:61:9f:f2:c1:63:96:62:9c:c7:89:b8:08:bd:1d:d2: e9:8f:e7:55:73:11:69:1c:b4:8b:b2:2f:f8:38:73:38:ac:cf: ce:97:45:6c:bf:7d:6b:8a:02:a6:ff:d4:67:97:ba:b1:e9:9b: 25:6b:3a:b2:0f:34:6b:e8:7a:57:b0:fa:0e:6f:b5:64:76:aa: b1:c4:05:17:51:87:f0:44:13:c0:2d:f3:b7:ab:af:8d:b1:ef: 31:ad:8d:b0:1b:00:8b:e5:7e:e2:b8:73:0f:f7:e6:a4:1c:08: a9:4b:35:59:29:38:5e:b6:59:95:a3:3e:41:7c:24:1c:71:e0: e3:3c:79:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA1QTAxMTAvBgNVBAUTKEEwRjlFQjY5ODFEQzcyQTI3OEIxODUyODk5MDZDMUUx MUMwQjM1RjEwHhcNMjYwMTI1MDU0NTU2WhcNMjYwMjAxMDU0NTU2WjAYMRYwFAYD VQQDDA02OTc1YWUxNC01YTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/VpsjmM1K27SbgP7td4c/DI+fA863nLEy5hP6yU4bv+6O6G0MEymJNaAUX6 saYupwpBKwHiv6RgDnrlFyGAkm6l7B93wiWUTY71/SveVJYfftWz1f2ibMjD5K2W 3J84ag8Qt+6o+WqzVx5vSy+SFop/XQg4pqrKwZGlu1tGcjUZpXCUqLQkIF92Kfmf t+pooQFZq6crqUUg5CKW8VgD1PvCvGyCnyke67ViopiDVPEQgNo6ZisjGES8Tk3p QcOYAhFOon9AFUkeovNxWITAdKvASaqqVCLf+o59aWAJvcK5/GVNPekDO3N6ag64 VDNnwkavq/jmsnrwXSuAmYgCCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsKT86N ol6iUiV4J+BiStkV/Uq9MB8GA1UdIwQYMBaAFKD562mB3HKieLGFKJkGweEcCzXx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDVBMC85QzUzNzE3ODJG NjQxMUYwQjRGMkEyNDVDNEY5QUUwMi9vUG5yYVlIY2NxSjRzWVVvbVFiQjRSd0xO ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29QbnJhWUhjY3FKNHNZVW9tUWJCNFJ3TE5mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDVBMC85QzUzNzE3ODJGNjQxMUYwQjRGMkEyNDVDNEY5QUUwMi9vUG5yYVlIY2Nx SjRzWVVvbVFiQjRSd0xOZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwkWsA3G5lVMH2CJtYlgpfiJQE7X4WZcYcbmsnD/U7TgVkWH1t6Pxs WpOjoQjji98nr2Z4Falhtp/ROYrjtf8RfZX8QzSjmJKchek8Fd4pfvXiBQEUXnih kSb9uTD2Cpu2/2fNda8aCi0advVKQRqZP6uG/KOBwjukG3nyFFlw2wFhn/LBY5Zi nMeJuAi9HdLpj+dVcxFpHLSLsi/4OHM4rM/Ol0Vsv31rigKm/9Rnl7qx6Zslazqy DzRr6HpXsPoOb7VkdqqxxAUXUYfwRBPALfO3q6+Nse8xrY2wGwCL5X7iuHMP9+ak HAipSzVZKThetlmVoz5BfCQcceDjPHkq -----END CERTIFICATE-----Generated at Sun Jan 25 20:34:18 2026 by rpki-client