This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft File: 5bRMaejecz32GWYFbn5BXsfHDSo.mft (raw, json) Hash identifier: BqicVXbrZFixGlzvd2XuTHp+COVnpVkSHiVV7tU0kSQ= Subject key identifier: 08:E5:A6:92:E8:09:AC:32:0E:05:73:6E:BC:0E:58:88:12:2C:94:14 Authority key identifier: E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A Certificate issuer: /CN=A91B4873/serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft Manifest number: 0126 Signing time: Sun 25 Jan 2026 03:54:49 +0000 Manifest this update: Sun 25 Jan 2026 03:54:48 +0000 Manifest next update: Sun 01 Feb 2026 03:54:48 +0000 Files and hashes: 1: 5bRMaejecz32GWYFbn5BXsfHDSo.crl (hash: V6e8jKuaZzuFhDY2580NxPITyEFMcvwQ1s6+o9OHnWE=) 2: F9AAE6F8994011F097180C40C4F9AE02.roa (hash: RU5OhSVcdir8OrT3E9J1urB5y05ack2UMndknf/XUMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4873, serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A Validity Not Before: Jan 25 03:54:48 2026 GMT Not After : Feb 1 03:54:48 2026 GMT Subject: CN=69759409-ab4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2e:aa:ef:46:69:43:25:30:8d:fd:04:1e:49: 2d:4c:16:98:7b:90:c5:2f:ea:e6:7b:e9:63:b4:df: 09:e5:8a:f2:b5:12:92:d2:0f:e5:a6:e2:58:80:11: ca:22:a8:bd:c0:a7:6b:8a:4a:8a:b3:af:47:6c:6f: 00:69:8e:0f:c7:55:5e:7c:15:81:70:0c:60:ca:ac: 50:cd:78:2d:21:e7:81:3c:ee:62:86:69:28:92:09: 0f:32:ff:db:a5:aa:1e:d8:50:35:a2:bc:91:51:f3: 89:27:a8:68:7e:6c:dc:93:7f:09:95:06:46:48:d2: ed:42:83:60:b1:db:cc:14:40:bf:d3:95:af:bb:9c: 6a:3b:07:67:50:cc:a3:4f:18:50:69:8e:27:9c:d1: 62:22:a9:ae:83:af:c6:bd:21:cb:c6:ba:b3:1e:1d: b6:f2:01:05:88:bd:77:8c:97:fd:9f:e9:71:48:87: 7b:22:aa:e4:ba:c1:b2:66:0f:05:17:dd:aa:5b:e6: e5:84:bb:21:dc:f1:c1:a8:62:61:30:d2:2b:56:d9: 38:47:0f:34:b5:c0:de:7d:16:bf:23:9e:a1:8a:1b: 4c:87:55:32:e2:21:a1:cb:b6:ba:ad:ca:fb:a6:02: f8:b4:4d:82:0f:94:a6:c6:63:0c:f7:1d:a9:72:96: 35:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E5:A6:92:E8:09:AC:32:0E:05:73:6E:BC:0E:58:88:12:2C:94:14 X509v3 Authority Key Identifier: keyid:E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:77:96:68:13:fd:71:60:ca:a2:f4:9d:de:22:e9:41:08:8f: 8c:de:fa:93:80:c8:f2:06:1e:e4:2e:7b:55:f1:03:78:8e:32: 98:f9:91:33:b8:ac:dc:4d:f4:87:4a:73:8b:99:04:d9:f2:c3: 81:48:b7:b3:b4:fb:00:bd:9f:69:dd:ed:e6:de:c4:16:85:f1: 86:ea:ae:cc:1c:a2:52:cd:69:bc:cc:04:21:63:d2:1d:20:33: 01:f2:99:fd:6f:d5:f4:4c:ad:e6:5a:4c:bb:ca:6a:21:12:cd: fb:af:d6:c2:e7:57:10:ff:64:4c:17:38:64:d1:03:b6:83:6f: 04:30:82:91:3a:ff:09:c0:ec:c1:4c:ab:e4:f3:7a:62:56:0c: 90:0c:22:74:3d:3c:bc:a2:cd:ef:ed:d9:cd:15:d0:ca:e7:1c: db:86:e9:5d:dd:4e:30:33:f9:9b:8d:89:0e:3a:91:01:1a:b2: 38:b4:1f:00:d1:32:40:99:f8:0d:dd:ab:03:4a:1f:34:7f:12: 90:70:6f:4d:2f:89:5b:57:e8:93:95:1f:c3:a7:3e:9e:1f:7c: f0:8e:b9:91:5b:78:08:2b:d4:11:3f:69:a1:95:31:24:96:16: dc:8e:c3:15:6f:c1:a0:8e:03:99:c4:45:b2:b9:88:4a:51:2d: 6f:6e:44:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ4NzMxMTAvBgNVBAUTKEU1QjQ0QzY5RThERTczM0RGNjE5NjYwNTZFN0U0MTVF QzdDNzBEMkEwHhcNMjYwMTI1MDM1NDQ4WhcNMjYwMjAxMDM1NDQ4WjAYMRYwFAYD VQQDDA02OTc1OTQwOS1hYjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5y6q70ZpQyUwjf0EHkktTBaYe5DFL+rme+ljtN8J5YrytRKS0g/lpuJYgBHK Iqi9wKdrikqKs69HbG8AaY4Px1VefBWBcAxgyqxQzXgtIeeBPO5ihmkokgkPMv/b paoe2FA1oryRUfOJJ6hofmzck38JlQZGSNLtQoNgsdvMFEC/05Wvu5xqOwdnUMyj TxhQaY4nnNFiIqmug6/GvSHLxrqzHh228gEFiL13jJf9n+lxSId7IqrkusGyZg8F F92qW+blhLsh3PHBqGJhMNIrVtk4Rw80tcDefRa/I56hihtMh1Uy4iGhy7a6rcr7 pgL4tE2CD5SmxmMM9x2pcpY1lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjlppLo CawyDgVzbrwOWIgSLJQUMB8GA1UdIwQYMBaAFOW0TGno3nM99hlmBW5+QV7Hxw0q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDg3My80RTI1QzhCQzM4 RTcxMUVGODQ0QjRGNjVDNEY5QUUwMi81YlJNYWVqZWN6MzJHV1lGYm41QlhzZkhE U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzViUk1hZWplY3ozMkdXWUZibjVCWHNmSERTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDg3My80RTI1QzhCQzM4RTcxMUVGODQ0QjRGNjVDNEY5QUUwMi81YlJNYWVqZWN6 MzJHV1lGYm41QlhzZkhEU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNd5ZoE/1xYMqi9J3eIulBCI+M3vqTgMjyBh7kLntV8QN4jjKY+ZEz uKzcTfSHSnOLmQTZ8sOBSLeztPsAvZ9p3e3m3sQWhfGG6q7MHKJSzWm8zAQhY9Id IDMB8pn9b9X0TK3mWky7ymohEs37r9bC51cQ/2RMFzhk0QO2g28EMIKROv8JwOzB TKvk83piVgyQDCJ0PTy8os3v7dnNFdDK5xzbhuld3U4wM/mbjYkOOpEBGrI4tB8A 0TJAmfgN3asDSh80fxKQcG9NL4lbV+iTlR/Dpz6eH3zwjrmRW3gIK9QRP2mhlTEk lhbcjsMVb8GgjgOZxEWyuYhKUS1vbkQQ -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:26 2026 by rpki-client