This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft File: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft (raw, json) Hash identifier: xl29rrOm+dcFk3L+H+PntmSdtNnlV0H7KLddhPqQu+M= Subject key identifier: 11:A5:63:21:06:06:DF:47:66:21:85:C4:B2:C9:6A:BF:F8:DF:55:FB Authority key identifier: 08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 Certificate issuer: /CN=A91A2C5D/serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft Manifest number: 0204 Signing time: Fri 23 Jan 2026 02:44:10 +0000 Manifest this update: Fri 23 Jan 2026 02:44:10 +0000 Manifest next update: Fri 30 Jan 2026 02:44:10 +0000 Files and hashes: 1: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl (hash: xqLpnxuS1Q53k1ctmjYAipidTfzQiqxwf6c4u01ke+U=) 2: 218937DC5E5011F0B9404662C4F9AE02.roa (hash: zc++r3Lo/GiMK07k2CpEGDEIsRyhw5JjpIcR6OksmNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 02:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5D, serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Validity Not Before: Jan 23 02:44:10 2026 GMT Not After : Jan 30 02:44:10 2026 GMT Subject: CN=6972e07a-454b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7b:ac:24:cf:b7:f2:39:0f:3b:32:5a:bd:71: cd:20:08:d0:5a:f3:f5:d0:8f:a0:f5:75:6c:bd:e7: f2:45:5e:2c:f4:69:c1:f4:20:6e:5d:fd:36:80:bb: ef:ff:91:6a:be:a0:49:61:74:1c:7e:06:4a:70:b4: 5f:58:7b:2c:36:0b:3a:19:fc:e6:c2:bc:07:a8:d4: 36:e6:7e:85:8c:1f:7e:80:5b:7a:98:d0:5e:3b:21: f7:fd:bd:51:a7:4b:19:52:f7:0c:5e:75:e6:f8:19: 6d:57:54:e4:85:92:78:da:95:34:d7:99:0a:e9:a8: 14:43:a3:8a:fe:9b:bb:6f:50:c9:36:92:68:7f:35: 94:8e:fb:a6:15:ea:c2:5c:2a:c0:4b:4f:74:d4:56: e9:64:93:ce:11:fd:d5:19:e0:a6:46:e5:c6:c3:56: e2:e6:75:91:35:4e:1f:25:74:5f:49:d9:59:91:19: 5e:51:ed:49:b5:9b:b7:8e:aa:7e:18:9f:3d:1b:e6: 96:4f:f2:fd:80:4c:0b:da:67:61:7b:8a:ff:e0:c9: 16:81:71:89:4a:71:6f:2b:c0:f0:44:c6:07:26:a2: 2f:17:ea:51:cd:c5:da:aa:51:09:b4:48:49:2b:a1: 76:c7:0a:cf:9d:96:47:2f:75:03:5d:e5:24:d8:63: 27:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A5:63:21:06:06:DF:47:66:21:85:C4:B2:C9:6A:BF:F8:DF:55:FB X509v3 Authority Key Identifier: keyid:08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b0:cd:a2:9e:85:c0:56:f5:52:8d:86:47:be:69:e9:1f:02: 4b:09:43:5b:2c:0d:16:64:ac:55:bb:79:4e:f2:b9:04:6b:4b: cd:7c:ed:42:14:ce:7c:c4:8b:31:00:92:61:16:5d:4e:c0:59: 7e:49:09:14:2e:a0:84:f6:76:8a:29:e9:5a:9f:2b:5d:a3:8d: ae:27:04:f9:89:af:bc:48:ec:49:9f:47:df:7f:b0:45:0f:3b: 51:ea:00:ba:8c:13:39:32:40:5c:f4:c4:01:d4:9a:5c:b5:3f: ca:37:7e:f7:93:5d:48:98:36:b1:65:6f:4a:57:f7:83:e2:1c: d4:c0:54:1c:70:41:28:29:dd:5a:d2:d1:67:16:9a:e8:24:e6: 41:51:55:e2:b8:fa:a0:26:27:b6:76:7e:42:19:26:eb:7a:07: e2:58:23:d9:08:fb:a8:05:07:3e:26:0c:7a:ef:f5:91:af:80: ef:7d:fb:0a:5e:33:a6:56:50:55:4d:d0:59:69:6b:08:60:b3: b3:2c:cc:03:fd:89:0b:1b:26:7a:50:16:00:6f:95:53:8a:75: d7:2d:c1:90:d3:c6:51:46:fe:1c:de:33:d7:c0:55:a8:45:7f: 21:df:69:47:3b:af:f0:79:35:1b:2a:b5:d7:49:38:83:cb:00: 3a:36:f1:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFB MkM1RDExMC8GA1UEBRMoMDg3NzdGQTM4MUJGMjU4RTBDQUMzN0Q1MDlFRjBCQUM3 MDY2NDg0NDAeFw0yNjAxMjMwMjQ0MTBaFw0yNjAxMzAwMjQ0MTBaMBgxFjAUBgNV BAMMDTY5NzJlMDdhLTQ1NGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCte6wkz7fyOQ87Mlq9cc0gCNBa8/XQj6D1dWy95/JFXiz0acH0IG5d/TaAu+// kWq+oElhdBx+BkpwtF9Yeyw2CzoZ/ObCvAeo1DbmfoWMH36AW3qY0F47Iff9vVGn SxlS9wxedeb4GW1XVOSFknjalTTXmQrpqBRDo4r+m7tvUMk2kmh/NZSO+6YV6sJc KsBLT3TUVulkk84R/dUZ4KZG5cbDVuLmdZE1Th8ldF9J2VmRGV5R7Um1m7eOqn4Y nz0b5pZP8v2ATAvaZ2F7iv/gyRaBcYlKcW8rwPBExgcmoi8X6lHNxdqqUQm0SEkr oXbHCs+dlkcvdQNd5STYYycHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEaVjIQYG 30dmIYXEsslqv/jfVfswHwYDVR0jBBgwFoAUCHd/o4G/JY4MrDfVCe8LrHBmSEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyQzVELzNCOURENDEwOTJD NDExRUVCNTIxQkI0OUM0RjlBRTAyL0NIZF9vNEdfSlk0TXJEZlZDZThMckhCbVNF US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ0hkX280R19KWTRNckRmVkNlOExySEJtU0VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy QzVELzNCOURENDEwOTJDNDExRUVCNTIxQkI0OUM0RjlBRTAyL0NIZF9vNEdfSlk0 TXJEZlZDZThMckhCbVNFUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHywzaKehcBW9VKNhke+aekfAksJQ1ssDRZkrFW7eU7yuQRrS8187UIU znzEizEAkmEWXU7AWX5JCRQuoIT2doop6VqfK12jja4nBPmJr7xI7EmfR99/sEUP O1HqALqMEzkyQFz0xAHUmly1P8o3fveTXUiYNrFlb0pX94PiHNTAVBxwQSgp3VrS 0WcWmugk5kFRVeK4+qAmJ7Z2fkIZJut6B+JYI9kI+6gFBz4mDHrv9ZGvgO99+wpe M6ZWUFVN0Flpawhgs7MszAP9iQsbJnpQFgBvlVOKddctwZDTxlFG/hzeM9fAVahF fyHfaUc7r/B5NRsqtddJOIPLADo28Rk= -----END CERTIFICATE-----Generated at Sun Jan 25 04:33:13 2026 by rpki-client