This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json) Hash identifier: E1uj6nmThEB+eSksbi14vRNZUKBanNML5ahRm6B9wkA= Subject key identifier: DC:F2:B6:DB:BC:86:22:58:B9:BA:FC:0B:C5:83:88:E7:E2:D0:11:2D Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft Manifest number: 8E Signing time: Sun 25 Jan 2026 05:41:30 +0000 Manifest this update: Sun 25 Jan 2026 05:41:29 +0000 Manifest next update: Sun 01 Feb 2026 05:41:29 +0000 Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: sCU5gfStA5KD6yEdq2Jj3Y8fu22V0+ZOSEpwUkDNl4s=) 2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: 3DawsxjCSxaO9Yqtl+Go5xRwWPPzE2NpLIfRRBuYg5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Validity Not Before: Jan 25 05:41:29 2026 GMT Not After : Feb 1 05:41:29 2026 GMT Subject: CN=6975ad0a-f3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:51:10:0d:55:15:e2:4c:6d:9f:9f:01:e4:89: a9:18:07:6e:7d:2d:d9:fb:d0:63:0b:81:f4:56:e2: 1b:cb:bf:17:fd:e2:2e:74:a2:94:00:0d:4c:74:a7: b9:95:a1:42:32:cb:fc:7e:5e:32:65:cb:83:c6:60: ed:9e:15:df:b5:74:cb:ed:34:54:fc:82:f5:e6:90: 9c:30:2d:ad:dc:99:93:ce:77:f0:6f:5f:66:b0:8a: 54:88:86:a9:3f:3a:f4:e0:a5:a0:e7:a4:27:9f:d6: f4:ca:68:8e:b2:97:a7:b0:e0:d0:23:3f:2d:ad:71: bc:b7:9d:85:4e:be:e0:3a:00:22:1b:fb:01:ff:39: 96:4b:7f:01:cc:28:31:5e:c5:fb:0a:e0:5e:2a:a2: 47:36:23:1b:e7:3e:c7:2e:74:8c:d9:80:ec:07:62: 0b:31:19:ae:4a:6d:51:18:7b:7e:ff:b1:ee:51:df: 12:06:74:34:3b:15:a0:7c:80:13:d6:4e:9b:fb:ed: 33:a5:ba:08:e2:f8:01:3e:a2:b5:1d:68:f8:24:a9: 70:4a:4b:df:05:90:9f:5d:75:b0:f0:55:74:f2:4a: ab:be:c1:db:59:ad:03:89:3a:13:ef:fe:83:e6:97: fb:30:d6:f9:28:c3:5c:ad:ca:63:3b:6a:ec:d0:ac: c9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F2:B6:DB:BC:86:22:58:B9:BA:FC:0B:C5:83:88:E7:E2:D0:11:2D X509v3 Authority Key Identifier: keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:93:c3:0e:8a:c3:2f:bf:c1:5f:f4:cd:08:96:8e:8e:00:0a: d3:ef:27:3e:6f:58:70:58:db:53:0c:34:e7:0b:29:13:d6:ed: 7e:84:ae:f7:3c:35:07:1e:e9:f3:51:d9:62:47:26:83:4b:85: a1:54:48:54:8d:3c:2f:89:a0:05:5b:25:ad:81:99:01:cb:ec: ee:62:14:b6:34:17:03:ac:c2:14:e0:4d:41:82:32:09:27:96: d8:bb:e3:19:ec:a3:5c:3c:74:0d:9b:4d:08:12:6b:b3:f4:f1: 96:aa:33:62:e7:ed:72:b4:a3:4c:ad:f3:50:f1:f2:02:14:5f: 91:1d:b5:5c:1a:ea:6b:63:c9:ca:c4:40:3f:a7:24:40:95:54: 9d:11:71:a4:17:65:44:e5:9c:17:9e:fe:a0:6f:e7:f6:a0:5a: 12:aa:14:4d:d1:e4:3d:c5:34:45:86:07:b7:e2:f7:7b:43:06: 02:e8:d3:fc:bc:90:dc:e6:0d:16:13:d7:14:79:23:30:88:44: 70:ed:1d:07:9a:e7:e4:82:f4:16:0f:5a:10:f5:c3:9c:00:82: b9:d5:a8:75:e0:5f:c6:c0:76:c8:59:17:45:d9:2a:6a:a6:b6: bc:1c:85:70:92:0b:c0:d0:5a:7a:32:59:df:9b:83:18:55:b3: 21:24:48:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEzREExMTAvBgNVBAUTKDBBNDZBRTJGQUZDQ0M3QURERUYyNzJDNzAyQUI1RkZB QkRDQ0FBNEYwHhcNMjYwMTI1MDU0MTI5WhcNMjYwMjAxMDU0MTI5WjAYMRYwFAYD VQQDDA02OTc1YWQwYS1mM2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21EQDVUV4kxtn58B5ImpGAdufS3Z+9BjC4H0VuIby78X/eIudKKUAA1MdKe5 laFCMsv8fl4yZcuDxmDtnhXftXTL7TRU/IL15pCcMC2t3JmTznfwb19msIpUiIap Pzr04KWg56Qnn9b0ymiOspensODQIz8trXG8t52FTr7gOgAiG/sB/zmWS38BzCgx XsX7CuBeKqJHNiMb5z7HLnSM2YDsB2ILMRmuSm1RGHt+/7HuUd8SBnQ0OxWgfIAT 1k6b++0zpboI4vgBPqK1HWj4JKlwSkvfBZCfXXWw8FV08kqrvsHbWa0DiToT7/6D 5pf7MNb5KMNcrcpjO2rs0KzJ4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzyttu8 hiJYubr8C8WDiOfi0BEtMB8GA1UdIwQYMBaAFApGri+vzMet3vJyxwKrX/q9zKpP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTNEQS8yRUFDQUUyODIw RjUxMUYwOTVCNjUxODJDNEY5QUUwMi9Da2F1TDZfTXg2M2U4bkxIQXF0Zi1yM01x azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrYXVMNl9NeDYzZThuTEhBcXRmLXIzTXFrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTNEQS8yRUFDQUUyODIwRjUxMUYwOTVCNjUxODJDNEY5QUUwMi9Da2F1TDZfTXg2 M2U4bkxIQXF0Zi1yM01xazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1k8MOisMvv8Ff9M0Ilo6OAArT7yc+b1hwWNtTDDTnCykT1u1+hK73 PDUHHunzUdliRyaDS4WhVEhUjTwviaAFWyWtgZkBy+zuYhS2NBcDrMIU4E1BgjIJ J5bYu+MZ7KNcPHQNm00IEmuz9PGWqjNi5+1ytKNMrfNQ8fICFF+RHbVcGuprY8nK xEA/pyRAlVSdEXGkF2VE5ZwXnv6gb+f2oFoSqhRN0eQ9xTRFhge34vd7QwYC6NP8 vJDc5g0WE9cUeSMwiERw7R0HmufkgvQWD1oQ9cOcAIK51ah14F/GwHbIWRdF2Spq pra8HIVwkgvA0Fp6Mlnfm4MYVbMhJEjf -----END CERTIFICATE-----Generated at Sun Jan 25 10:47:59 2026 by rpki-client