This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.mft (raw, json) Hash identifier: DbU3f240cXxnNzhas5HSOszFm4o+YYx3S3b947wqdWI= Subject key identifier: DF:F9:DF:C0:12:61:CA:1F:78:72:1F:3B:78:F4:AC:B1:19:AD:79:3C Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Certificate serial: 0D0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft Manifest number: 0CF6 Signing time: Sat 24 Jan 2026 17:46:03 +0000 Manifest this update: Sat 24 Jan 2026 17:46:03 +0000 Manifest next update: Sat 31 Jan 2026 17:46:03 +0000 Files and hashes: 1: 5Otd-leSQpC7j-xFuZd_xsf2-jc.crl (hash: Ydrch5UoF31p5/E2h4F9hLMUX+dpu2LXruj1xSemmCM=) 2: EA17F65E6C6711ECB7C0925AC4F9AE02.roa (hash: 80MLiBcpNIycThAKM26TDicBsDE58l79IER/QoSPi08=) 3: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (hash: 6JiNuWz5Fkw8aMu3lON6uTLPgLOG+xf9uCqK1rE3Qew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3338 (0xd0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B0B, serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Validity Not Before: Jan 24 17:46:03 2026 GMT Not After : Jan 31 17:46:03 2026 GMT Subject: CN=6975055b-9ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b7:19:52:a8:ec:b0:4b:5f:e7:4a:a5:7a:69: 20:92:d9:6b:6d:64:b5:2c:ac:04:2a:2e:a2:ad:51: 84:79:a0:61:f2:90:03:5f:d7:66:09:6b:73:80:86: 0c:2f:63:6d:0d:7b:c7:49:21:d8:d4:8a:f7:70:7a: 2e:96:fc:4c:0d:c2:75:ed:7a:2b:c7:7d:20:25:26: 45:48:46:e7:48:4b:7c:70:73:2b:6c:88:d9:58:da: ac:48:e9:80:6d:18:ae:13:3a:5c:9f:3d:6a:22:47: 45:23:ca:b7:0d:5e:e7:eb:fb:7f:7a:21:d4:8c:b2: cd:03:c4:5b:e6:16:7d:a9:ee:c8:be:d6:35:a7:e7: 98:a5:d1:9c:ae:10:89:26:38:0b:4e:4e:04:25:c7: 00:ac:1b:79:49:9c:5d:bd:4e:13:4e:63:14:03:85: 48:a8:85:ba:ee:b6:c9:5d:b4:73:9e:ce:b2:ca:95: 27:50:da:cb:c6:fb:13:4d:ef:cd:c9:fe:d5:35:f1: e6:87:e4:bc:74:07:94:38:48:52:61:3a:5f:d2:72: c3:8f:c7:f6:60:c2:b0:cd:7b:11:5a:46:dd:24:4d: df:f4:b2:24:6d:64:74:a9:51:de:d6:6e:f4:b9:2f: 74:85:f3:ea:66:5d:ef:0f:4a:fc:27:f5:d1:29:ed: 9a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F9:DF:C0:12:61:CA:1F:78:72:1F:3B:78:F4:AC:B1:19:AD:79:3C X509v3 Authority Key Identifier: keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:7e:ed:94:42:5d:02:de:f5:66:b4:c8:83:2d:1c:89:13:e2: cc:5f:4d:5e:7b:19:ad:16:af:f6:82:92:79:bc:49:94:c7:17: ae:3b:41:8a:67:98:13:fc:f9:2c:2d:be:86:2f:15:66:55:cc: 26:74:cc:52:d1:02:13:0d:fc:dd:f3:18:f7:88:13:3d:3f:1a: 36:29:14:40:09:86:82:09:2b:d9:b7:f9:02:a8:a8:4b:d3:52: 44:b1:3f:81:04:44:24:55:20:c5:96:1c:e3:9e:59:86:1e:44: 38:16:89:66:31:c1:83:c0:dc:9e:54:3b:be:8b:91:26:d5:41: a3:4a:79:33:93:f2:2b:1e:eb:7f:e4:5b:c1:33:47:f5:81:c8: 05:4e:48:d3:15:04:df:52:53:7f:ce:91:8c:d8:00:77:af:f7: b5:af:c1:a5:25:b5:92:62:d4:8c:79:87:ce:62:12:7d:e3:8c: da:2f:15:77:d3:a1:38:be:69:7e:8f:16:02:f2:6d:29:08:3d: 13:61:55:f7:87:87:bd:2a:11:74:56:5f:64:4c:68:16:8b:71: 75:87:b4:5f:62:38:61:14:fe:18:bb:bf:24:f0:9a:dd:da:d1: b3:c2:5c:a1:32:b5:da:a1:6c:b9:f8:f5:30:c5:46:30:df:90: db:f5:f7:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0NUI5OTc3RkM2 QzdGNkZBMzcwHhcNMjYwMTI0MTc0NjAzWhcNMjYwMTMxMTc0NjAzWjAYMRYwFAYD VQQDDA02OTc1MDU1Yi05Y2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7cZUqjssEtf50qlemkgktlrbWS1LKwEKi6irVGEeaBh8pADX9dmCWtzgIYM L2NtDXvHSSHY1Ir3cHoulvxMDcJ17Xorx30gJSZFSEbnSEt8cHMrbIjZWNqsSOmA bRiuEzpcnz1qIkdFI8q3DV7n6/t/eiHUjLLNA8Rb5hZ9qe7IvtY1p+eYpdGcrhCJ JjgLTk4EJccArBt5SZxdvU4TTmMUA4VIqIW67rbJXbRzns6yypUnUNrLxvsTTe/N yf7VNfHmh+S8dAeUOEhSYTpf0nLDj8f2YMKwzXsRWkbdJE3f9LIkbWR0qVHe1m70 uS90hfPqZl3vD0r8J/XRKe2aTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/538AS YcofeHIfO3j0rLEZrXk8MB8GA1UdIwQYMBaAFOTrXfpXkkKQu4/sRbmXf8bH9vo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEIwQi81QUVCNUVCMkZD QzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1FwQzdqLXhGdVpkX3hzZjIt amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPdGQtbGVTUXBDN2oteEZ1WmRfeHNmMi1qYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEIwQi81QUVCNUVCMkZDQzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1Fw QzdqLXhGdVpkX3hzZjItamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEfu2UQl0C3vVmtMiDLRyJE+LMX01eexmtFq/2gpJ5vEmUxxeuO0GK Z5gT/PksLb6GLxVmVcwmdMxS0QITDfzd8xj3iBM9Pxo2KRRACYaCCSvZt/kCqKhL 01JEsT+BBEQkVSDFlhzjnlmGHkQ4FolmMcGDwNyeVDu+i5Em1UGjSnkzk/IrHut/ 5FvBM0f1gcgFTkjTFQTfUlN/zpGM2AB3r/e1r8GlJbWSYtSMeYfOYhJ944zaLxV3 06E4vml+jxYC8m0pCD0TYVX3h4e9KhF0Vl9kTGgWi3F1h7RfYjhhFP4Yu78k8Jrd 2tGzwlyhMrXaoWy5+PUwxUYw35Db9fdv -----END CERTIFICATE-----Generated at Sun Jan 25 09:23:16 2026 by rpki-client