This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft File: 5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json) Hash identifier: DO3SDI7PTkAooJx4k7qtDt1sesnvs9ephnnixntgNzw= Subject key identifier: AB:9C:33:66:69:5A:85:48:C4:BE:3A:DD:CA:8E:55:DE:1B:F9:EC:53 Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Certificate serial: 0302 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft Manifest number: 02EC Signing time: Sun 25 Jan 2026 00:33:18 +0000 Manifest this update: Sun 25 Jan 2026 00:33:17 +0000 Manifest next update: Sun 01 Feb 2026 00:33:17 +0000 Files and hashes: 1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: Zk0FGZp6FOqko/pMe1JueTTc9Q4D7Fr3uCGcvoxI4WQ=) 2: F3997FACE21D11EFA5819B7EC4F9AE02.roa (hash: YJknqh8T+qXW11AGQpkWixPSeb/oim2jtPvDZDC0Y5M=) 3: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (hash: 0d7okG44VFnG4nuLf3zjFz92ZcS33/9Y18izFVAiNWk=) 4: 3D331986E17211EFA5959B2FC4F9AE02.roa (hash: pOsL4nJKiT9Wc01cD2wPZO+WlYtBX9ZtStyQuOwRJu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 770 (0x302) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Validity Not Before: Jan 25 00:33:17 2026 GMT Not After : Feb 1 00:33:17 2026 GMT Subject: CN=697564ce-a8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:63:87:fc:06:45:c9:9a:1b:fc:f6:2f:0c: f3:2f:ed:e6:25:d2:15:03:d9:e0:b5:0d:a7:dd:7d: c1:1b:45:89:ef:35:5a:ce:04:90:11:06:aa:e3:8c: bd:f6:e0:b1:3f:2d:9b:a5:c6:6a:bd:30:85:71:e4: 1c:43:3c:4e:19:5b:44:b1:6e:b3:bb:e1:d8:94:62: 23:eb:4a:46:fe:8b:1d:4d:b0:6a:b2:67:2d:d8:fa: 90:ce:ef:fa:86:26:63:e9:60:3f:b4:31:c6:5f:bc: 79:75:a9:d1:b4:4b:bd:1a:c8:b0:09:d3:db:95:90: ad:47:2b:3b:19:1e:13:fc:24:2c:a6:57:40:03:a5: 38:f8:1e:b6:1e:ec:5a:32:9c:1f:d0:46:da:6e:92: c0:db:60:c8:0b:11:cd:55:20:a5:7e:70:02:4f:df: 2c:47:ec:bc:c4:53:ef:59:5d:0c:4b:8d:34:fc:9e: ae:fe:4c:3d:96:50:9a:a8:ef:de:0b:91:37:5e:d3: 05:ba:16:41:b6:e9:b7:34:97:73:2a:9e:08:02:fc: e7:40:36:ac:76:ee:c3:7b:61:b2:9c:62:70:30:ab: 59:8f:e0:81:13:e1:59:83:09:3e:e1:87:26:aa:39: 21:30:6b:87:fd:1e:99:10:c4:e9:02:c6:a3:b7:57: 40:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9C:33:66:69:5A:85:48:C4:BE:3A:DD:CA:8E:55:DE:1B:F9:EC:53 X509v3 Authority Key Identifier: keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:47:74:1b:8f:c5:72:bd:86:f6:5c:02:10:d1:43:e6:de:60: 97:5c:fc:95:7f:50:56:74:e1:5b:ea:26:41:ee:19:7e:06:e9: b5:6e:8f:2b:78:15:94:ff:a7:0d:9c:4b:db:ef:77:ca:ea:ef: 0b:75:85:c8:4c:e7:10:30:85:74:a6:3b:81:4a:94:71:ea:73: eb:4f:8b:d9:96:8e:34:e8:e9:67:1e:c7:7f:52:d6:43:76:42: 9a:db:6c:8e:9c:7b:54:8c:cb:7d:94:b9:5a:31:32:00:1e:40: cd:18:d4:b6:90:37:cb:f7:aa:b7:ff:7b:f3:92:d7:c5:68:b1: 05:4c:15:08:8f:af:d9:52:e5:51:08:26:de:1d:65:2c:29:f2: c8:a6:d1:93:da:8c:e4:cf:ff:4c:58:e3:85:2d:98:d0:ab:a1: c0:60:b6:77:b7:8c:a0:35:bb:b4:3c:7b:c5:cd:8a:ee:2d:ea: e1:57:be:1a:25:97:f6:ff:d9:02:6f:84:e8:20:25:bd:af:00: b5:6a:fb:7f:80:b2:e2:6b:f7:ac:fd:d5:cb:ca:49:30:94:de: 23:a8:70:c4:d7:46:29:39:c3:b3:7f:aa:2b:57:f4:86:c6:fc: a7:c2:fe:e6:e9:95:0e:55:59:cb:c3:76:21:48:6b:25:70:5f: cf:3f:21:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBQjMxMTAvBgNVBAUTKEU0QTk0Q0ZBOEQyRjlGNUIzOUVGNDYzNTA1OTFDRTMx MkU1MTRGQjMwHhcNMjYwMTI1MDAzMzE3WhcNMjYwMjAxMDAzMzE3WjAYMRYwFAYD VQQDDA02OTc1NjRjZS1hOGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhxjh/wGRcmaG/z2LwzzL+3mJdIVA9ngtQ2n3X3BG0WJ7zVazgSQEQaq44y9 9uCxPy2bpcZqvTCFceQcQzxOGVtEsW6zu+HYlGIj60pG/osdTbBqsmct2PqQzu/6 hiZj6WA/tDHGX7x5danRtEu9GsiwCdPblZCtRys7GR4T/CQspldAA6U4+B62Huxa Mpwf0EbabpLA22DICxHNVSClfnACT98sR+y8xFPvWV0MS400/J6u/kw9llCaqO/e C5E3XtMFuhZBtum3NJdzKp4IAvznQDasdu7De2GynGJwMKtZj+CBE+FZgwk+4Ycm qjkhMGuH/R6ZEMTpAsajt1dAHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKucM2Zp WoVIxL463cqOVd4b+exTMB8GA1UdIwQYMBaAFOSpTPqNL59bOe9GNQWRzjEuUU+z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0FCMy8wNUVEOTRDRTE5 NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4xczU3MFkxQlpIT01TNVJU N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVLbE0tbzB2bjFzNTcwWTFCWkhPTVM1UlQ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0FCMy8wNUVEOTRDRTE5NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4x czU3MFkxQlpIT01TNVJUN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJR3Qbj8VyvYb2XAIQ0UPm3mCXXPyVf1BWdOFb6iZB7hl+Bum1bo8r eBWU/6cNnEvb73fK6u8LdYXITOcQMIV0pjuBSpRx6nPrT4vZlo406OlnHsd/UtZD dkKa22yOnHtUjMt9lLlaMTIAHkDNGNS2kDfL96q3/3vzktfFaLEFTBUIj6/ZUuVR CCbeHWUsKfLIptGT2ozkz/9MWOOFLZjQq6HAYLZ3t4ygNbu0PHvFzYruLerhV74a JZf2/9kCb4ToICW9rwC1avt/gLLia/es/dXLykkwlN4jqHDE10YpOcOzf6orV/SG xvynwv7m6ZUOVVnLw3YhSGslcF/PPyHu -----END CERTIFICATE-----Generated at Sun Jan 25 06:16:41 2026 by rpki-client