This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: uXM6xC2b4iZYlz5rO2hmb0yiZv+7Ikl+Veu27d3L+fI= Subject key identifier: 1A:B5:31:8E:C0:FF:73:FB:F4:9F:C3:67:79:F7:8D:AD:93:D8:C4:F7 Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0A6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 0A39 Signing time: Sat 24 Jan 2026 19:17:23 +0000 Manifest this update: Sat 24 Jan 2026 19:17:23 +0000 Manifest next update: Sat 31 Jan 2026 19:17:23 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: wGbNc2HWGQXDpWK68Ahu7YJbmyV3Oxd5R7FAevGIeDw=) 2: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: mrdifevaNrjgGPKQ1OBlBf3Ozo1jwgzsiYqzgjiO4VY=) 3: 61FA8E20DCD011F0B585C4234F6F56BC.roa (hash: mNYe4FUja3MrCQuFkjZ9mW3HWoF6dWXAjyDLZL2gjns=) 4: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: 6VJ/GNSIy/hylC1oQdETMxyFm2bwrQgv/DatQcgwGhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2668 (0xa6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Jan 24 19:17:23 2026 GMT Not After : Jan 31 19:17:23 2026 GMT Subject: CN=69751ac3-a51d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:ec:af:b5:37:36:78:1d:93:42:ea:65:29: c5:a9:5b:cc:a2:c4:bf:18:bb:aa:6e:04:f6:6d:d6: cb:c6:5a:4f:31:05:cf:d4:ba:30:28:77:d4:25:67: e1:0a:90:6d:be:d2:09:e0:8b:e6:99:0c:68:57:36: 06:19:e0:ff:ca:9d:55:73:b7:89:e0:5d:c7:d9:52: 34:f6:7c:fb:e9:13:1f:00:6c:e4:1e:0f:7d:47:a9: 34:d8:61:f6:d7:54:6b:af:9c:a4:45:f7:50:ea:f5: 47:1d:ac:4f:2e:80:34:4c:bd:a9:cc:d5:35:59:fe: 20:65:55:d4:e0:07:2e:a0:48:d0:21:87:ea:91:ff: e8:c2:e2:e1:ed:6b:45:77:28:0d:8f:aa:a4:7f:a2: cf:d2:76:c5:e1:a2:62:59:bd:37:d6:d9:b3:a1:b9: 0c:61:0f:d9:da:80:62:9e:47:e6:cb:99:d4:4c:76: e5:80:1f:f5:90:ae:34:9c:3e:32:2a:87:79:c3:7d: 61:aa:48:ff:d0:2b:0c:07:34:9a:3a:92:93:0c:0c: c3:50:80:b4:a2:4d:22:4f:43:ad:fb:3c:06:c7:01: 28:a7:e7:7e:7d:9c:51:8c:a6:e7:a1:b7:48:ba:e2: 5c:2a:e0:85:b1:d2:73:75:94:2f:29:75:43:42:9e: 68:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B5:31:8E:C0:FF:73:FB:F4:9F:C3:67:79:F7:8D:AD:93:D8:C4:F7 X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:51:77:31:e7:d9:a9:3d:e2:5c:f7:cd:70:24:15:78:47:f9: 26:fd:a2:80:71:19:68:4f:f6:85:54:4b:e8:8e:ba:3c:92:e0: 84:c4:8f:be:06:c0:6c:73:35:c5:31:7d:0a:c8:fd:84:ff:7a: e6:02:79:c2:cb:86:76:50:04:ce:06:10:b3:1b:09:50:a7:1e: 1a:32:66:ce:02:82:9b:d3:e1:34:c1:b4:1c:fd:34:50:24:d1: 62:8e:d4:2b:7a:d7:8c:92:2e:eb:29:bb:c0:4a:7b:8f:f0:8f: 64:2f:19:e0:a0:0d:97:c7:52:9d:1e:f8:a0:70:61:f6:ea:9d: 52:ff:64:b5:1f:f9:85:bc:33:7c:5c:f1:0c:7e:10:c6:f1:2e: 9e:39:22:8f:f7:e8:61:b7:5c:01:30:da:92:03:46:b5:2e:19: d3:f1:0b:5a:24:1f:7f:a3:79:a0:1f:b0:28:3b:12:33:36:1d: cf:bc:41:03:f8:bd:c6:0e:53:54:cc:d6:20:a0:63:13:90:61: 01:18:93:68:60:89:ab:25:91:6f:72:ff:fb:63:ab:90:a7:04: 39:43:48:00:26:a1:a8:fe:a1:15:50:8a:dc:3d:fd:5a:f4:c7: 6c:01:7b:11:0b:2c:94:f9:90:f7:1d:fe:09:d7:f5:9f:f5:95: 90:33:19:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjYwMTI0MTkxNzIzWhcNMjYwMTMxMTkxNzIzWjAYMRYwFAYD VQQDDA02OTc1MWFjMy1hNTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthnsr7U3Nngdk0LqZSnFqVvMosS/GLuqbgT2bdbLxlpPMQXP1LowKHfUJWfh CpBtvtIJ4IvmmQxoVzYGGeD/yp1Vc7eJ4F3H2VI09nz76RMfAGzkHg99R6k02GH2 11Rrr5ykRfdQ6vVHHaxPLoA0TL2pzNU1Wf4gZVXU4AcuoEjQIYfqkf/owuLh7WtF dygNj6qkf6LP0nbF4aJiWb031tmzobkMYQ/Z2oBinkfmy5nUTHblgB/1kK40nD4y Kod5w31hqkj/0CsMBzSaOpKTDAzDUIC0ok0iT0Ot+zwGxwEop+d+fZxRjKbnobdI uuJcKuCFsdJzdZQvKXVDQp5oDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBq1MY7A /3P79J/DZ3n3ja2T2MT3MB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADUXcx59mpPeJc981wJBV4R/km/aKAcRloT/aFVEvojro8kuCExI++ BsBsczXFMX0KyP2E/3rmAnnCy4Z2UATOBhCzGwlQpx4aMmbOAoKb0+E0wbQc/TRQ JNFijtQreteMki7rKbvASnuP8I9kLxngoA2Xx1KdHvigcGH26p1S/2S1H/mFvDN8 XPEMfhDG8S6eOSKP9+hht1wBMNqSA0a1LhnT8QtaJB9/o3mgH7AoOxIzNh3PvEED +L3GDlNUzNYgoGMTkGEBGJNoYImrJZFvcv/7Y6uQpwQ5Q0gAJqGo/qEVUIrcPf1a 9MdsAXsRCyyU+ZD3Hf4J1/Wf9ZWQMxly -----END CERTIFICATE-----Generated at Sun Jan 25 16:02:33 2026 by rpki-client