This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft File: DKMWISTuZGKWQ_8p6zEQctkShTM.mft (raw, json) Hash identifier: akXi3AL1RmCgrnFlckgA5Mww0v6h3vmchFqPnL3O+yk= Subject key identifier: EC:5B:AC:49:09:5B:98:A4:A1:4D:78:8A:BF:F8:18:2E:75:1E:31:2A Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33 Certificate issuer: /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft Manifest number: 51 Signing time: Sun 25 Jan 2026 06:20:56 +0000 Manifest this update: Sun 25 Jan 2026 06:20:55 +0000 Manifest next update: Sun 01 Feb 2026 06:20:55 +0000 Files and hashes: 1: DKMWISTuZGKWQ_8p6zEQctkShTM.crl (hash: mNYHngpxcygv6qetWpdUO4zP3M1/XZrhhNTykG32A8M=) 2: 30A0F15C844211F08D5EDC71C4F9AE02.roa (hash: BRG8PCAPQi0/O3ne0ONgbWxdoF8gM0NMg0IhrG1Z1Gw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533 Validity Not Before: Jan 25 06:20:55 2026 GMT Not After : Feb 1 06:20:55 2026 GMT Subject: CN=6975b647-e44b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fc:28:9a:be:fb:a7:40:cc:39:df:12:6c:e7: 90:cd:62:74:58:8f:84:a1:43:f4:48:5d:75:23:2a: b3:bd:52:b4:b3:cf:63:8d:46:08:df:15:9c:a4:25: 48:5d:a1:f0:58:e9:08:c0:44:02:d6:cb:3f:60:c2: c8:6f:64:d1:07:d0:4b:e0:94:be:3b:80:19:40:88: 4d:f7:e3:ec:fe:77:1d:0f:27:37:03:e0:8c:28:ba: bd:54:72:1c:d3:8a:e2:2f:15:6a:d0:ba:b4:a3:11: 7f:82:3a:8d:98:37:71:b3:19:dd:22:7a:18:4b:98: 25:f5:09:bf:8d:96:c9:e4:94:17:97:38:26:34:cc: 5b:76:10:c8:11:8f:e4:bf:e1:d9:5d:6c:7e:81:e1: b8:6a:f4:74:a4:7b:fd:57:03:b0:91:71:04:76:d6: d6:f2:ba:eb:98:0d:a4:20:75:71:66:c5:38:83:bf: 5c:76:b0:4a:e0:93:39:d6:75:85:e8:d5:5f:39:8e: f6:a8:4a:a1:34:1f:8a:21:ee:91:dd:66:d0:3d:77: 6f:fb:87:8c:13:09:92:83:f7:62:d4:7c:d3:41:f5: 89:12:9a:06:fd:f1:1b:6e:8a:34:c5:00:02:a3:13: 92:82:c4:86:84:01:3a:f3:2a:0a:32:5c:f5:c7:49: 5c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5B:AC:49:09:5B:98:A4:A1:4D:78:8A:BF:F8:18:2E:75:1E:31:2A X509v3 Authority Key Identifier: keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:dc:aa:e5:d6:dc:39:1f:eb:63:aa:bd:33:4a:6a:3d:71:ad: 5f:75:c7:51:ea:0c:dc:01:0f:eb:8f:41:d7:ba:f0:b6:89:13: 44:2c:de:b5:84:9f:a0:29:9f:9b:26:66:d6:4b:80:0c:71:ca: 56:12:03:51:be:bd:1c:2a:0c:06:a5:b8:90:c1:57:1d:f8:4d: df:d2:5a:db:e3:c7:d6:20:8c:74:52:ed:21:72:f0:d2:65:3d: 08:21:46:cb:2b:1d:84:48:28:db:5f:9a:ed:fe:4c:75:3e:d1: 24:2c:93:09:0f:b0:aa:81:ba:6a:61:e6:73:ba:f3:6f:2e:b5: ab:4e:9c:14:b3:3b:cf:a9:86:ca:7d:dd:1a:20:6f:6b:e6:c8: cf:b2:11:a8:a4:1d:94:6a:c0:f2:42:ff:29:fb:6f:02:65:f7: d2:ec:21:23:66:2a:83:65:9d:b2:99:2c:24:c8:f0:6a:08:3b: 42:df:cd:94:91:94:f2:75:a0:1a:d9:30:a9:f5:72:76:08:c9: c2:ef:d2:df:00:cf:15:39:19:9b:67:20:e7:c8:58:38:07:d3: 1f:2a:f7:da:1b:09:d1:fc:35:55:56:20:47:63:55:07:7c:28: 3f:b5:c2:8b:91:b0:02:2a:f9:75:0d:b9:c6:ae:f8:13:f2:e5: 26:d2:a6:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFB NERCRjExMC8GA1UEBRMoMENBMzE2MjEyNEVFNjQ2Mjk2NDNGRjI5RUIzMTEwNzJE OTEyODUzMzAeFw0yNjAxMjUwNjIwNTVaFw0yNjAyMDEwNjIwNTVaMBgxFjAUBgNV BAMMDTY5NzViNjQ3LWU0NGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF/CiavvunQMw53xJs55DNYnRYj4ShQ/RIXXUjKrO9UrSzz2ONRgjfFZykJUhd ofBY6QjARALWyz9gwshvZNEH0EvglL47gBlAiE334+z+dx0PJzcD4Iwour1UchzT iuIvFWrQurSjEX+COo2YN3GzGd0iehhLmCX1Cb+NlsnklBeXOCY0zFt2EMgRj+S/ 4dldbH6B4bhq9HSke/1XA7CRcQR21tbyuuuYDaQgdXFmxTiDv1x2sErgkznWdYXo 1V85jvaoSqE0H4oh7pHdZtA9d2/7h4wTCZKD92LUfNNB9YkSmgb98RtuijTFAAKj E5KCxIaEATrzKgoyXPXHSVwnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7FusSQlb mKShTXiKv/gYLnUeMSowHwYDVR0jBBgwFoAUDKMWISTuZGKWQ/8p6zEQctkShTMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0REJGL0MxNDU2MDUwODQ0 MDExRjBBNTcwQkM0OUM0RjlBRTAyL0RLTVdJU1R1WkdLV1FfOHA2ekVRY3RrU2hU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREtNV0lTVHVaR0tXUV84cDZ6RVFjdGtTaFRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 REJGL0MxNDU2MDUwODQ0MDExRjBBNTcwQkM0OUM0RjlBRTAyL0RLTVdJU1R1WkdL V1FfOHA2ekVRY3RrU2hUTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADzcquXW3Dkf62OqvTNKaj1xrV91x1HqDNwBD+uPQde68LaJE0Qs3rWE n6Apn5smZtZLgAxxylYSA1G+vRwqDAaluJDBVx34Td/SWtvjx9YgjHRS7SFy8NJl PQghRssrHYRIKNtfmu3+THU+0SQskwkPsKqBumph5nO6828utatOnBSzO8+phsp9 3Rogb2vmyM+yEaikHZRqwPJC/yn7bwJl99LsISNmKoNlnbKZLCTI8GoIO0LfzZSR lPJ1oBrZMKn1cnYIycLv0t8AzxU5GZtnIOfIWDgH0x8q99obCdH8NVVWIEdjVQd8 KD+1wouRsAIq+XUNucau+BPy5SbSpn8= -----END CERTIFICATE-----Generated at Sun Jan 25 10:46:26 2026 by rpki-client