This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft File: s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json) Hash identifier: ij13znN3+z8HaOP092aWhz7ygwj20XokPx45MDzoNO4= Subject key identifier: 6C:47:B7:D8:E2:D7:B8:7D:21:6A:7B:97:E9:0C:0B:F9:CC:5F:3D:A7 Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC Certificate issuer: /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft Manifest number: C5 Signing time: Sun 25 Jan 2026 05:01:20 +0000 Manifest this update: Sun 25 Jan 2026 05:01:20 +0000 Manifest next update: Sun 01 Feb 2026 05:01:20 +0000 Files and hashes: 1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: QpD8RrIwIbNDiui5zTQVU8JfUe626f5e5pEYLOaN5pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A85CF, serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Validity Not Before: Jan 25 05:01:20 2026 GMT Not After : Feb 1 05:01:20 2026 GMT Subject: CN=6975a3a0-4a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5a:c3:96:14:3f:3e:32:68:2a:2d:15:9b:9f: 92:2a:5c:8d:b8:cb:72:a7:db:ee:ae:30:fe:ba:44: dc:ad:46:f9:84:75:e2:56:9b:ea:57:9c:5a:b9:5c: 18:21:aa:4d:63:f8:8f:29:3e:5f:73:70:79:df:70: d9:7f:54:a2:e9:3e:28:c3:88:c8:a0:21:e9:bb:4b: 30:99:f6:80:56:fa:02:b3:d2:75:df:de:ea:ad:2d: d6:76:7e:c7:97:d7:ba:a4:6d:3f:22:0c:eb:d6:1c: f4:e5:18:00:68:1d:b1:6f:d0:9c:63:10:90:18:bd: 7e:20:b7:38:c6:cd:01:fe:24:cd:c9:60:d1:b5:13: 8b:d2:1b:a0:c9:40:74:52:9e:03:1a:4f:e3:0a:13: 4e:6c:34:5b:20:71:00:05:24:87:92:6d:ab:a6:74: 49:58:65:2f:a4:fd:d5:74:46:8c:27:35:9a:27:f5: ba:fc:9f:92:7e:05:6a:f9:63:7c:33:18:fb:3a:c5: 81:50:92:45:e1:90:84:60:15:55:c1:0a:27:b1:c8: 6d:90:db:c7:67:a1:30:21:0b:6d:e9:0a:12:55:ca: e0:74:57:4a:c5:bc:3c:05:60:19:6b:23:b7:3b:aa: 45:a8:8f:33:17:76:8d:f8:84:f8:a7:74:e2:1a:78: 31:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:47:B7:D8:E2:D7:B8:7D:21:6A:7B:97:E9:0C:0B:F9:CC:5F:3D:A7 X509v3 Authority Key Identifier: keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f7:69:48:30:9c:c2:c2:92:c6:3f:35:b7:18:bc:da:b3:b1: 67:16:41:98:8b:aa:8f:b9:f0:9f:0c:c8:be:6b:57:7d:e5:5e: c8:b8:43:b3:a7:1b:c0:0c:72:11:b8:80:da:5d:e4:24:a9:86: ea:ba:70:bc:65:7e:82:21:49:f9:79:c7:8c:fa:f7:89:1a:e9: 55:d7:3a:f3:82:5b:68:f5:89:ce:ab:15:b2:ae:53:1a:6d:75: de:f9:51:b2:77:4a:dd:0c:cd:67:7e:52:54:31:80:18:80:47: 5d:a6:c4:8a:22:79:65:8a:f2:83:a4:05:de:39:07:50:0c:6c: 39:92:6d:13:3a:65:47:84:c7:1f:8a:f4:62:d5:97:71:d9:44: 8b:33:40:b2:24:93:3e:81:10:b7:30:59:bd:0f:6e:1b:47:ea: c4:29:79:11:73:d5:de:ea:06:67:9a:8d:ab:84:e4:81:d4:b5: 2e:ee:ae:2c:26:17:8f:ca:b1:52:38:ff:23:4b:55:8c:f0:96: 35:d2:47:41:9a:75:52:1d:f5:8b:a9:6d:16:66:06:41:89:6f: e7:89:2e:9d:46:64:7d:98:45:4b:5f:c4:fc:3a:12:f8:06:35: ec:54:94:29:16:c3:21:72:0c:b1:d7:c9:6d:51:46:4f:14:97: 34:85:58:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg1Q0YxMTAvBgNVBAUTKEIzRTg2MjJBNDEwNjE5RkQ5NzIzRjlEMURCQzUzNTdF MTVGQTdEQ0MwHhcNMjYwMTI1MDUwMTIwWhcNMjYwMjAxMDUwMTIwWjAYMRYwFAYD VQQDDA02OTc1YTNhMC00YTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1rDlhQ/PjJoKi0Vm5+SKlyNuMtyp9vurjD+ukTcrUb5hHXiVpvqV5xauVwY IapNY/iPKT5fc3B533DZf1Si6T4ow4jIoCHpu0swmfaAVvoCs9J1397qrS3Wdn7H l9e6pG0/Igzr1hz05RgAaB2xb9CcYxCQGL1+ILc4xs0B/iTNyWDRtROL0hugyUB0 Up4DGk/jChNObDRbIHEABSSHkm2rpnRJWGUvpP3VdEaMJzWaJ/W6/J+SfgVq+WN8 Mxj7OsWBUJJF4ZCEYBVVwQonschtkNvHZ6EwIQtt6QoSVcrgdFdKxbw8BWAZayO3 O6pFqI8zF3aN+IT4p3TiGngxuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxHt9ji 17h9IWp7l+kMC/nMXz2nMB8GA1UdIwQYMBaAFLPoYipBBhn9lyP50dvFNX4V+n3M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODVDRi9GMDAwOTc3NENB RTIxMUVGQUY4RjEwMTFDNEY5QUUwMi9zLWhpS2tFR0dmMlhJX25SMjhVMWZoWDZm Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MtaGlLa0VHR2YyWElfblIyOFUxZmhYNmZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODVDRi9GMDAwOTc3NENBRTIxMUVGQUY4RjEwMTFDNEY5QUUwMi9zLWhpS2tFR0dm MlhJX25SMjhVMWZoWDZmY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc92lIMJzCwpLGPzW3GLzas7FnFkGYi6qPufCfDMi+a1d95V7IuEOz pxvADHIRuIDaXeQkqYbqunC8ZX6CIUn5eceM+veJGulV1zrzglto9YnOqxWyrlMa bXXe+VGyd0rdDM1nflJUMYAYgEddpsSKInllivKDpAXeOQdQDGw5km0TOmVHhMcf ivRi1Zdx2USLM0CyJJM+gRC3MFm9D24bR+rEKXkRc9Xe6gZnmo2rhOSB1LUu7q4s JhePyrFSOP8jS1WM8JY10kdBmnVSHfWLqW0WZgZBiW/niS6dRmR9mEVLX8T8OhL4 BjXsVJQpFsMhcgyx18ltUUZPFJc0hViC -----END CERTIFICATE-----Generated at Sun Jan 25 09:39:14 2026 by rpki-client