This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft File: D-jKZIcKPWORHI0tZRuinKztDso.mft (raw, json) Hash identifier: THA5uWq29QphpaXAef209ihgWfW198Jq9+E3PfXMD2M= Subject key identifier: 42:7B:40:C9:25:43:07:F5:9B:D7:A2:BB:F3:1C:69:30:A2:4C:FC:D8 Authority key identifier: 0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA Certificate issuer: /CN=A91B428B/serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA Certificate serial: 0A36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft Manifest number: 0A2F Signing time: Sat 24 Jan 2026 19:13:07 +0000 Manifest this update: Sat 24 Jan 2026 19:13:06 +0000 Manifest next update: Sat 31 Jan 2026 19:13:06 +0000 Files and hashes: 1: D-jKZIcKPWORHI0tZRuinKztDso.crl (hash: 1WFKARKQufeOn2JD7255Ol7CTEzmJlnJocrkaLSXcVA=) 2: 319DF660847811EA8EE07E81C4F9AE02.roa (hash: ZlFR2HTwg3fDW4lClQanT4TaI4rdoCBr8+QBrXHDB9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2614 (0xa36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B428B, serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA Validity Not Before: Jan 24 19:13:06 2026 GMT Not After : Jan 31 19:13:06 2026 GMT Subject: CN=697519c3-3a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:51:07:32:83:91:b2:91:42:fd:9f:4f:47:8f: b5:1f:66:1c:df:b1:d9:db:b9:e1:f2:8c:2e:17:ea: 97:8a:66:f3:7e:ee:d9:b9:80:60:66:5b:89:32:87: 38:ae:f3:ee:2a:49:e2:11:9e:7d:9b:5f:67:2e:96: f0:33:3d:c2:94:c6:9f:22:79:94:a5:65:d3:38:1f: 79:10:10:c2:7e:ba:ca:f7:52:d8:2c:8a:eb:df:13: cd:77:09:7f:bb:d3:60:a8:92:4f:b1:63:7a:2f:dd: 67:2d:88:8a:51:00:75:3e:f0:73:dd:a7:6a:fb:b9: b2:4f:99:d1:51:24:75:f8:28:3a:2c:f4:22:2c:76: 2f:5c:a0:f6:eb:c5:cf:4d:99:87:cc:f5:62:4f:5b: 99:92:bd:53:41:d2:94:2f:53:a7:64:9f:bc:f3:42: 60:31:52:c5:6e:1e:ac:30:2c:ab:9b:0e:0f:f1:2f: 33:39:3e:ef:68:b0:88:cd:68:1d:7f:d3:73:cb:77: 9a:54:5f:fc:4a:81:cc:f5:4a:50:26:c0:bc:71:f6: 7c:58:c4:71:91:9f:83:56:58:d7:6d:09:b7:ca:fb: 6e:6b:67:8e:5b:79:56:f9:d0:cb:c5:14:36:a9:7d: 26:26:34:93:44:1a:ff:3c:cb:92:1c:74:c6:8f:02: 72:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7B:40:C9:25:43:07:F5:9B:D7:A2:BB:F3:1C:69:30:A2:4C:FC:D8 X509v3 Authority Key Identifier: keyid:0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ec:46:ab:70:65:ae:64:bd:c1:5f:61:91:6c:16:e0:22:a2: 9b:a6:90:e0:b0:71:64:9c:d3:2a:a0:da:0e:4c:42:62:65:86: d2:17:42:58:d9:30:e1:6e:9a:e1:7c:a7:57:5a:8d:10:28:88: 75:6b:bc:06:b8:1b:8f:08:ed:b2:9d:fa:a9:4b:90:be:60:50: ed:5a:e5:0f:95:eb:ec:b4:2e:28:82:91:34:91:b1:3b:6e:c5: 39:02:f8:02:97:b6:75:00:04:19:ca:81:c6:eb:2f:b0:5e:e4: 5b:3d:f7:78:48:fb:c2:bd:d0:ed:7c:8e:6b:b2:96:81:ca:f6: e3:e5:50:52:f5:dc:d6:69:be:da:8a:7f:0c:57:b2:2f:34:45: 6e:a2:a8:68:a1:2c:44:f2:61:a6:5b:90:8b:d9:24:1e:e8:58: 0d:60:e9:06:1c:be:8d:84:3b:63:53:5e:53:d9:41:2f:fd:fa: fe:0b:aa:e4:6d:f5:47:42:14:e5:91:2b:2f:4c:13:08:d0:8e: b9:5c:94:87:69:cb:c0:64:0c:0e:7d:69:b6:ec:cd:56:e7:d4: bc:ad:87:b8:1e:78:e8:98:e2:6d:24:81:e0:07:1b:23:d2:fa: b5:27:24:dc:42:3b:2c:6d:ff:4f:e8:6c:1d:40:59:e3:29:0e: df:b8:4d:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyOEIxMTAvBgNVBAUTKDBGRThDQTY0ODcwQTNENjM5MTFDOEQyRDY1MUJBMjlD QUNFRDBFQ0EwHhcNMjYwMTI0MTkxMzA2WhcNMjYwMTMxMTkxMzA2WjAYMRYwFAYD VQQDDA02OTc1MTljMy0zYTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1EHMoORspFC/Z9PR4+1H2Yc37HZ27nh8owuF+qXimbzfu7ZuYBgZluJMoc4 rvPuKkniEZ59m19nLpbwMz3ClMafInmUpWXTOB95EBDCfrrK91LYLIrr3xPNdwl/ u9NgqJJPsWN6L91nLYiKUQB1PvBz3adq+7myT5nRUSR1+Cg6LPQiLHYvXKD268XP TZmHzPViT1uZkr1TQdKUL1OnZJ+880JgMVLFbh6sMCyrmw4P8S8zOT7vaLCIzWgd f9Nzy3eaVF/8SoHM9UpQJsC8cfZ8WMRxkZ+DVljXbQm3yvtua2eOW3lW+dDLxRQ2 qX0mJjSTRBr/PMuSHHTGjwJyVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJ7QMkl Qwf1m9eiu/McaTCiTPzYMB8GA1UdIwQYMBaAFA/oymSHCj1jkRyNLWUbopys7Q7K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Qi8zQTBCNkMwQzg0 NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BXT1JISTB0WlJ1aW5LenRE c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QtaktaSWNLUFdPUkhJMHRaUnVpbkt6dERzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDI4Qi8zQTBCNkMwQzg0NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BX T1JISTB0WlJ1aW5LenREc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh7EarcGWuZL3BX2GRbBbgIqKbppDgsHFknNMqoNoOTEJiZYbSF0JY 2TDhbprhfKdXWo0QKIh1a7wGuBuPCO2ynfqpS5C+YFDtWuUPlevstC4ogpE0kbE7 bsU5AvgCl7Z1AAQZyoHG6y+wXuRbPfd4SPvCvdDtfI5rspaByvbj5VBS9dzWab7a in8MV7IvNEVuoqhooSxE8mGmW5CL2SQe6FgNYOkGHL6NhDtjU15T2UEv/fr+C6rk bfVHQhTlkSsvTBMI0I65XJSHacvAZAwOfWm27M1W59S8rYe4HnjomOJtJIHgBxsj 0vq1JyTcQjssbf9P6GwdQFnjKQ7fuE1V -----END CERTIFICATE-----Generated at Sun Jan 25 08:18:03 2026 by rpki-client