This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft File: kbKJkWte97NoabO6gQwkWzZOQ8A.mft (raw, json) Hash identifier: JM3oOHz238qy2GZlW3EyMK24sxSZW4SzafBaRkafyZo= Subject key identifier: 52:2B:62:22:E0:3C:EB:B4:A3:0E:61:E5:F6:90:EE:ED:8C:A4:66:62 Authority key identifier: 91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 Certificate issuer: /CN=A91B2D56/serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft Manifest number: 25 Signing time: Sun 25 Jan 2026 06:47:09 +0000 Manifest this update: Sun 25 Jan 2026 06:47:09 +0000 Manifest next update: Sun 01 Feb 2026 06:47:09 +0000 Files and hashes: 1: kbKJkWte97NoabO6gQwkWzZOQ8A.crl (hash: 32dZEYb2w69YnpOtjHVTq/esPGKpSq8C0HNsq6Vfw8U=) 2: 436251B0C52311F0A1118818C4F9AE02.roa (hash: uZ9eyof3QzVDzi9BWRf2zBi6dJBoVZqfZeDAKMhvj2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D56, serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Validity Not Before: Jan 25 06:47:09 2026 GMT Not After : Feb 1 06:47:09 2026 GMT Subject: CN=6975bc6d-011e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:16:e9:9c:bb:f5:4c:6b:dd:6c:7d:07:f6:1b: 08:b3:2c:c8:ac:cb:dd:4c:fe:ac:8b:14:71:c3:c0: c7:5f:36:86:45:e2:e2:8d:c2:7f:f3:34:38:8d:f9: 58:b9:86:c7:e2:8b:5e:7c:d1:07:46:ec:fc:00:e5: 1b:94:e3:81:4e:ab:73:be:9e:f0:37:71:f6:d3:fe: 0c:c5:6e:7a:45:0d:b9:4d:da:d5:5f:09:cd:01:77: 99:dc:af:18:1b:b7:06:57:ac:d1:85:84:c5:f8:54: 39:b5:03:ce:4a:d6:5e:7b:b6:d7:7a:72:b2:56:df: 54:ef:c8:27:f3:b7:3d:59:df:77:a6:d7:cb:96:51: 91:c8:c0:4e:fb:7b:e9:8f:c4:a7:1b:c3:b5:69:c0: 7f:e0:08:ca:bf:c9:5f:c5:72:ab:7d:9a:1f:5e:80: 96:24:88:91:69:e3:e3:0e:06:fe:e2:d2:cc:ee:ea: f0:7e:23:40:e5:df:17:55:97:0b:1c:14:86:6b:8f: a5:d5:70:92:10:c4:dc:cd:2f:ce:b0:46:96:ca:37: b2:e4:1c:fc:1d:ba:f4:80:8e:8f:bd:86:43:62:7a: 0e:ba:28:b2:de:df:ec:24:5c:7a:7e:00:97:a3:e2: fb:7d:f9:48:63:f8:a3:fd:75:2f:bf:26:04:8a:00: 81:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2B:62:22:E0:3C:EB:B4:A3:0E:61:E5:F6:90:EE:ED:8C:A4:66:62 X509v3 Authority Key Identifier: keyid:91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c9:cb:9e:dd:a2:90:52:a4:ee:85:35:df:33:7b:d4:3f:9d: f6:14:49:bb:37:0c:69:fa:da:41:72:1e:02:9f:4e:7a:95:19: 1b:fb:59:64:7b:33:22:e2:3c:6b:9d:88:64:b1:0f:43:a9:cb: 9a:ea:d9:86:dd:13:b2:6e:12:d6:9b:a5:1f:4b:6e:1c:c6:b8: 06:d9:65:e4:a4:cc:ec:ad:b0:f5:e9:77:43:25:c8:99:1a:65: b4:ba:f9:da:2d:44:a4:16:89:f3:7f:2e:14:81:b4:d4:ff:73: 5e:54:59:01:da:ce:30:70:2f:ad:a5:f6:89:9f:73:25:3f:e9: 0d:ab:6f:40:cf:3e:45:0f:3e:3f:cc:60:46:dd:e4:10:f4:19: f0:52:32:0a:11:02:8b:96:24:21:9b:e1:8a:43:bc:da:43:f8: ad:30:64:02:79:d5:70:13:f5:ab:ea:67:a5:7c:30:4f:71:33: 9f:82:eb:a1:a9:29:18:91:8b:ec:3c:bf:c2:e7:e1:0d:3e:ae: 88:2a:e6:0d:4b:9f:ef:b1:cb:2b:2a:e0:9a:4a:cc:37:fb:cb: 82:77:9d:90:39:22:c8:bb:95:ba:52:23:ab:ad:cb:7a:45:89: 56:5d:84:18:ce:1f:9d:94:67:d3:d7:d4:80:fc:62:36:d1:76: 9e:58:88:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkQ1NjExMC8GA1UEBRMoOTFCMjg5OTE2QjVFRjdCMzY4NjlCM0JBODEwQzI0NUIz NjRFNDNDMDAeFw0yNjAxMjUwNjQ3MDlaFw0yNjAyMDEwNjQ3MDlaMBgxFjAUBgNV BAMMDTY5NzViYzZkLTAxMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcFumcu/VMa91sfQf2GwizLMisy91M/qyLFHHDwMdfNoZF4uKNwn/zNDiN+Vi5 hsfii1580QdG7PwA5RuU44FOq3O+nvA3cfbT/gzFbnpFDblN2tVfCc0Bd5ncrxgb twZXrNGFhMX4VDm1A85K1l57ttd6crJW31TvyCfztz1Z33em18uWUZHIwE77e+mP xKcbw7VpwH/gCMq/yV/Fcqt9mh9egJYkiJFp4+MOBv7i0szu6vB+I0Dl3xdVlwsc FIZrj6XVcJIQxNzNL86wRpbKN7LkHPwduvSAjo+9hkNieg66KLLe3+wkXHp+AJej 4vt9+Uhj+KP9dS+/JgSKAIEdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUitiIuA8 67SjDmHl9pDu7YykZmIwHwYDVR0jBBgwFoAUkbKJkWte97NoabO6gQwkWzZOQ8Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRDU2L0VEQkJERkQ4QzUy MjExRjA4N0M3QjIxN0M0RjlBRTAyL2tiS0prV3RlOTdOb2FiTzZnUXdrV3paT1E4 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2JLSmtXdGU5N05vYWJPNmdRd2tXelpPUThBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy RDU2L0VEQkJERkQ4QzUyMjExRjA4N0M3QjIxN0M0RjlBRTAyL2tiS0prV3RlOTdO b2FiTzZnUXdrV3paT1E4QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA7Jy57dopBSpO6FNd8ze9Q/nfYUSbs3DGn62kFyHgKfTnqVGRv7WWR7 MyLiPGudiGSxD0Opy5rq2YbdE7JuEtabpR9LbhzGuAbZZeSkzOytsPXpd0MlyJka ZbS6+dotRKQWifN/LhSBtNT/c15UWQHazjBwL62l9omfcyU/6Q2rb0DPPkUPPj/M YEbd5BD0GfBSMgoRAouWJCGb4YpDvNpD+K0wZAJ51XAT9avqZ6V8ME9xM5+C66Gp KRiRi+w8v8Ln4Q0+rogq5g1Ln++xyysq4JpKzDf7y4J3nZA5Isi7lbpSI6uty3pF iVZdhBjOH52UZ9PX1ID8YjbRdp5YiP0= -----END CERTIFICATE-----Generated at Sun Jan 25 12:38:40 2026 by rpki-client