This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft File: kKozD4l2v2xASeZzwoIf0pHUO8E.mft (raw, json) Hash identifier: vJ9ki8ZUcSTcRqTNMnvlny4PZ+KCXf2GF8fItWHGBQc= Subject key identifier: BF:89:25:14:5E:45:AE:6B:24:F8:07:A5:C7:91:D2:92:BB:E5:43:A6 Authority key identifier: 90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 Certificate issuer: /CN=A91AE85E/serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Certificate serial: 05D0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft Manifest number: 05D0 Signing time: Sat 24 Jan 2026 14:17:54 +0000 Manifest this update: Sat 24 Jan 2026 14:17:54 +0000 Manifest next update: Sat 31 Jan 2026 14:17:54 +0000 Files and hashes: 1: kKozD4l2v2xASeZzwoIf0pHUO8E.crl (hash: ouHnQLFWckZ80+0BMjOONvuDAWUq8RD6VCHb1xS/EKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1488 (0x5d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Validity Not Before: Jan 24 14:17:54 2026 GMT Not After : Jan 31 14:17:54 2026 GMT Subject: CN=6974d492-1ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:c4:53:9d:e0:91:a4:4c:a9:53:6c:7f:8c: 8b:c0:ed:d1:a3:05:1f:d5:81:2d:e1:1c:db:ce:8e: 3e:d6:03:bf:6c:81:46:08:7c:2c:2d:59:a4:ff:a5: 16:a9:90:bd:20:a2:40:97:79:41:7c:ba:8f:20:27: 5e:a9:75:b0:a4:58:72:17:0c:a3:df:57:b7:ca:c3: 3d:a5:ae:b7:da:74:0f:02:df:c9:b3:3f:2d:91:46: 6f:e9:aa:52:27:6e:ba:6d:1e:50:c8:81:4c:8b:e8: f4:58:39:bb:eb:3e:76:f0:59:be:5f:73:f0:d9:a3: 38:e5:4e:5f:ad:c9:60:e9:fe:db:60:50:27:38:8a: 74:11:9c:3b:32:f4:dd:f4:71:37:39:4e:c8:08:0f: 6a:5f:80:30:6f:c0:cb:87:f6:de:0e:80:75:09:87: ac:6d:54:a7:4e:5a:de:d4:0f:a2:d0:d2:f9:2f:a6: 95:95:18:a8:ed:6e:68:36:74:f9:13:2e:f5:39:53: 68:be:c4:a8:6f:28:d0:cb:56:6a:1e:17:34:1a:b4: d0:76:c1:ab:c9:51:2f:4a:c1:74:91:f8:24:a3:c5: c8:b4:58:96:04:b8:c1:4e:a5:16:64:8d:77:8b:06: 1f:61:a3:91:13:84:19:b0:20:7a:56:84:16:df:c9: 47:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:89:25:14:5E:45:AE:6B:24:F8:07:A5:C7:91:D2:92:BB:E5:43:A6 X509v3 Authority Key Identifier: keyid:90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:56:53:eb:f8:34:7c:a9:25:80:06:b4:4b:a5:89:83:4c:36: 74:91:de:56:04:65:d5:c8:ef:8a:45:9b:90:0a:9a:ba:ec:46: 5d:31:eb:11:77:d9:1e:b3:be:4b:26:0b:13:f9:1b:85:36:d7: 2a:4e:c8:63:8a:c3:e5:02:3d:9c:7c:1c:47:6c:08:59:0e:37: cc:29:20:1d:f9:8a:f6:a6:c9:b3:aa:f7:20:ff:08:ff:35:45: 9b:97:f2:7e:39:9e:06:d2:13:0a:30:98:13:fc:57:7b:5c:88: 3e:9e:45:62:ab:19:f8:cd:bd:d9:67:c9:1e:36:4c:91:4c:b6: 1c:33:8f:82:47:27:e5:3d:c2:dc:9c:b4:3b:81:2d:2e:7b:1f: f2:cb:4f:ca:fa:7f:8e:63:d3:62:8d:22:1b:bf:b1:71:40:6b: 68:5d:b6:42:a3:0a:9c:53:13:0e:a9:76:d8:5e:1a:4c:f4:85: 5f:8e:26:3c:07:0c:2a:83:a5:40:fc:71:d1:de:cd:0f:e0:6d: dc:a2:87:a9:64:6c:8a:ef:f4:7c:15:dc:3a:72:e2:0e:be:a9: ab:af:c6:90:d1:d6:ab:c7:ba:c6:c4:94:f1:56:47:88:f9:40: 97:56:db:2c:e6:b3:56:6f:11:57:fc:f3:ee:b6:87:8a:50:e3: f7:de:63:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDkwQUEzMzBGODk3NkJGNkM0MDQ5RTY3M0MyODIxRkQy OTFENDNCQzEwHhcNMjYwMTI0MTQxNzU0WhcNMjYwMTMxMTQxNzU0WjAYMRYwFAYD VQQDDA02OTc0ZDQ5Mi0xZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqjEU53gkaRMqVNsf4yLwO3RowUf1YEt4Rzbzo4+1gO/bIFGCHwsLVmk/6UW qZC9IKJAl3lBfLqPICdeqXWwpFhyFwyj31e3ysM9pa632nQPAt/Jsz8tkUZv6apS J266bR5QyIFMi+j0WDm76z528Fm+X3Pw2aM45U5frclg6f7bYFAnOIp0EZw7MvTd 9HE3OU7ICA9qX4Awb8DLh/beDoB1CYesbVSnTlre1A+i0NL5L6aVlRio7W5oNnT5 Ey71OVNovsSobyjQy1ZqHhc0GrTQdsGryVEvSsF0kfgko8XItFiWBLjBTqUWZI13 iwYfYaORE4QZsCB6VoQW38lHnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+JJRRe Ra5rJPgHpceR0pK75UOmMB8GA1UdIwQYMBaAFJCqMw+Jdr9sQEnmc8KCH9KR1DvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8xQTE2RUI4NkYz RUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYyeEFTZVp6d29JZjBwSFVP OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tLb3pENGwydjJ4QVNlWnp3b0lmMHBIVU84RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8xQTE2RUI4NkYzRUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYy eEFTZVp6d29JZjBwSFVPOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQVlPr+DR8qSWABrRLpYmDTDZ0kd5WBGXVyO+KRZuQCpq67EZdMesR d9kes75LJgsT+RuFNtcqTshjisPlAj2cfBxHbAhZDjfMKSAd+Yr2psmzqvcg/wj/ NUWbl/J+OZ4G0hMKMJgT/Fd7XIg+nkViqxn4zb3ZZ8keNkyRTLYcM4+CRyflPcLc nLQ7gS0uex/yy0/K+n+OY9NijSIbv7FxQGtoXbZCowqcUxMOqXbYXhpM9IVfjiY8 Bwwqg6VA/HHR3s0P4G3cooepZGyK7/R8Fdw6cuIOvqmrr8aQ0darx7rGxJTxVkeI +UCXVtss5rNWbxFX/PPutoeKUOP33mM2 -----END CERTIFICATE-----Generated at Sun Jan 25 11:53:05 2026 by rpki-client