This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json) Hash identifier: puM+gEvxOt5PgCFcH4wL4OWVxlcjmbay5PIKW1FKlr4= Subject key identifier: 62:98:4A:41:B8:14:95:F4:3D:E9:0E:09:9F:45:A8:10:25:61:FD:86 Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Certificate serial: 0941 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft Manifest number: 0920 Signing time: Sat 24 Jan 2026 19:39:47 +0000 Manifest this update: Sat 24 Jan 2026 19:39:46 +0000 Manifest next update: Sat 31 Jan 2026 19:39:46 +0000 Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: xbIq4h2N7FOaC2gJLegd0RmrItdur6rGThxalTuSST4=) 2: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: DP8lG9el46NF03CMOLzrMzttp6pe74xkZuZziqnxmJ4=) 3: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: mYMneOcMzVSjWOSfz2l4H7HMRndq3Nml1V+jd7+ZSu8=) 4: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: LdDw24/Or3M92peybKBWsStvdJIFCX02q7LqBzB3QW8=) 5: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: EeEFahw1S1xzRQMqYweCJnCU9S+/LW0T/PuPJ3E+UWM=) 6: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: 1QX8DyT1A4CiikAaWBicwaY94hYcJgWNUoKN7UlLwiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2369 (0x941) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Validity Not Before: Jan 24 19:39:46 2026 GMT Not After : Jan 31 19:39:46 2026 GMT Subject: CN=69752003-c0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:16:ff:7e:e8:b8:bc:a0:14:94:80:ce:9e:71: f0:53:de:7b:e8:ae:05:d9:2e:67:1f:3c:d5:11:a5: 78:da:65:34:c6:e3:85:58:fc:61:f3:14:ce:6b:cd: 2d:81:e9:a5:bd:7a:ae:83:95:72:2a:0a:97:dd:a6: 5d:95:d4:11:dd:b6:d4:47:19:84:3c:ef:2b:75:27: 8d:2a:ba:a9:1d:b4:aa:45:3a:ba:2a:f8:27:6d:4b: a6:09:35:54:3f:50:86:4f:b6:02:c3:05:c4:1c:67: 1c:5e:be:98:e0:a3:27:5e:b9:59:62:8a:ee:b9:8d: d2:9e:8f:ad:9c:f8:9c:98:f3:0b:ba:84:96:84:fb: dd:51:88:a1:e0:c5:23:80:94:fc:2c:bc:a4:f3:27: f0:c6:01:27:44:24:c6:60:1e:23:9c:43:15:d3:7c: d7:29:44:fd:39:03:f1:82:8f:fd:e7:6c:e1:a5:c0: de:3b:0a:bc:76:3b:ff:2e:ae:4b:fb:53:52:20:2e: e8:02:fc:ff:49:4e:f3:69:a7:a7:15:d2:38:c5:a4: 5f:30:a7:7f:16:55:67:3e:a0:9d:71:bf:00:98:9c: 37:26:36:f9:1a:07:40:90:b6:af:a5:1a:df:6a:e9: ad:ae:36:86:30:ce:fc:33:eb:6a:05:fd:78:fd:db: d5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:98:4A:41:B8:14:95:F4:3D:E9:0E:09:9F:45:A8:10:25:61:FD:86 X509v3 Authority Key Identifier: keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:30:f6:d2:6d:bd:72:bc:4e:9d:d0:dc:23:ba:c3:66:1a:bf: 11:6a:9a:61:ce:6b:6a:8a:32:f0:a2:57:ed:62:01:74:96:b5: 64:02:cf:9c:3a:df:48:f7:6a:cb:69:df:da:31:e1:44:0c:0a: b0:18:d6:f7:53:81:82:41:cc:ed:b6:ba:14:94:de:96:81:61: c3:67:e3:43:20:b9:73:42:c5:8d:b1:55:94:e4:f7:20:6f:03: 4b:6e:95:44:d5:a5:cb:1f:8a:c6:61:c5:af:b5:4d:0a:5f:71: 64:14:08:8b:f5:4c:71:a9:d7:23:db:5b:18:40:35:2d:ec:ca: c5:35:36:e5:77:42:19:56:77:23:06:51:b0:3e:94:53:5d:4b: 5a:72:91:01:6f:75:a2:a3:f0:23:bb:5a:76:27:46:03:73:6f: cf:fc:86:c7:08:4d:88:78:86:7a:02:09:c7:84:1f:0c:cd:e8: d3:5c:ce:3c:27:4a:83:69:8a:be:9b:0a:af:af:3f:d6:33:f1: 98:2d:9e:b7:aa:0b:aa:48:d1:aa:2a:67:8e:40:06:53:a9:91: 80:98:cc:9b:3b:52:4b:db:a3:37:78:0d:90:ea:30:c9:b6:95: 5c:95:b7:64:fd:1f:31:b6:fc:62:71:aa:23:0c:11:b4:8b:73: b3:e8:51:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1 QTUwMjcwRTMwHhcNMjYwMTI0MTkzOTQ2WhcNMjYwMTMxMTkzOTQ2WjAYMRYwFAYD VQQDDA02OTc1MjAwMy1jMGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkBb/fui4vKAUlIDOnnHwU9576K4F2S5nHzzVEaV42mU0xuOFWPxh8xTOa80t gemlvXqug5VyKgqX3aZdldQR3bbURxmEPO8rdSeNKrqpHbSqRTq6KvgnbUumCTVU P1CGT7YCwwXEHGccXr6Y4KMnXrlZYoruuY3Sno+tnPicmPMLuoSWhPvdUYih4MUj gJT8LLyk8yfwxgEnRCTGYB4jnEMV03zXKUT9OQPxgo/952zhpcDeOwq8djv/Lq5L +1NSIC7oAvz/SU7zaaenFdI4xaRfMKd/FlVnPqCdcb8AmJw3Jjb5GgdAkLavpRrf aumtrjaGMM78M+tqBf14/dvVswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKYSkG4 FJX0PekOCZ9FqBAlYf2GMB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5 RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkZEOS80QUU4MDQxRUI5RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VX eG0wMUt3UjducHhhVUNjT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjMPbSbb1yvE6d0NwjusNmGr8RapphzmtqijLwolftYgF0lrVkAs+c Ot9I92rLad/aMeFEDAqwGNb3U4GCQczttroUlN6WgWHDZ+NDILlzQsWNsVWU5Pcg bwNLbpVE1aXLH4rGYcWvtU0KX3FkFAiL9Uxxqdcj21sYQDUt7MrFNTbld0IZVncj BlGwPpRTXUtacpEBb3Wio/Aju1p2J0YDc2/P/IbHCE2IeIZ6AgnHhB8MzejTXM48 J0qDaYq+mwqvrz/WM/GYLZ63qguqSNGqKmeOQAZTqZGAmMybO1JL26M3eA2Q6jDJ tpVclbdk/R8xtvxicaojDBG0i3Oz6FHg -----END CERTIFICATE-----Generated at Sun Jan 25 10:43:34 2026 by rpki-client