This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft File: jos0Y56lTfgQuSvLp0JwTkyIQsI.mft (raw, json) Hash identifier: n410Fj+f+I7PdXUkC4z0H4gj5QwTKVqa3gJbfZ2kr7g= Subject key identifier: 52:41:D8:61:3F:D6:F4:30:98:69:0F:A7:C3:CD:42:9B:DD:DA:80:3C Authority key identifier: 8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 Certificate issuer: /CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft Manifest number: 0108 Signing time: Sun 25 Jan 2026 04:15:05 +0000 Manifest this update: Sun 25 Jan 2026 04:15:05 +0000 Manifest next update: Sun 01 Feb 2026 04:15:05 +0000 Files and hashes: 1: jos0Y56lTfgQuSvLp0JwTkyIQsI.crl (hash: L41qaGqzY7IVNgwr97yh9sVvaiue1VODQGKcQ7wGL8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C1B, serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Validity Not Before: Jan 25 04:15:05 2026 GMT Not After : Feb 1 04:15:05 2026 GMT Subject: CN=697598c9-1e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:71:1e:c6:8e:7b:7d:3a:13:dc:60:70:7f:4d: f2:da:37:c9:97:8c:9f:ce:4c:68:69:b5:57:01:e9: 4a:08:e2:34:39:e4:fb:38:b3:af:dc:a7:45:8c:26: 5e:af:fc:39:c2:d8:a5:cd:2d:62:24:f9:a5:10:c5: 41:72:f7:a9:e3:e3:c3:6a:c5:1c:e3:bc:ff:9e:17: c2:7f:a1:5c:53:0f:71:43:2a:6b:87:12:6e:00:71: 49:3a:c1:aa:52:06:7e:d7:ee:b9:3a:ee:63:e0:e9: f7:eb:be:5e:f0:21:ca:e9:56:44:ee:25:6c:d9:7a: 2f:87:f8:c9:f7:10:1e:32:cf:ab:aa:1a:c1:28:16: 5f:f5:65:81:d4:7b:5e:ba:ce:d0:77:c7:98:c2:e1: 26:1a:f4:9e:6a:aa:59:f5:a8:df:e4:27:0d:80:c1: 74:9d:fb:d8:66:09:b2:00:58:60:13:fb:e7:cc:36: 83:a9:96:a9:3b:9b:24:96:3e:33:59:fe:35:dc:a4: f1:03:07:40:32:86:95:10:70:8c:94:c8:5e:b5:07: 2f:ac:f6:c5:eb:c5:a9:69:da:83:31:e3:c7:0e:09: 70:b0:fe:07:fb:03:16:04:d8:fa:5b:7c:7c:94:8f: db:92:4f:77:ac:9c:16:44:80:c7:09:7f:8a:d9:6b: ce:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:41:D8:61:3F:D6:F4:30:98:69:0F:A7:C3:CD:42:9B:DD:DA:80:3C X509v3 Authority Key Identifier: keyid:8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:f2:0f:55:f4:cc:d6:ec:ab:22:eb:b9:24:a2:00:4a:00:9f: 2b:a8:51:d7:14:df:de:bb:f4:d4:a3:39:c1:d9:8c:48:28:9a: 55:eb:98:43:f6:9a:bc:47:1e:4a:7f:00:f0:fb:60:31:8f:0d: b2:02:c4:ca:fa:12:e1:29:0c:9b:ce:98:3e:af:e9:ff:c1:23: d3:03:a4:bd:9b:e6:91:bd:cf:8b:6c:ad:24:fa:f0:7b:4a:87: b3:ae:6a:d3:75:73:b5:1b:03:c6:37:48:92:04:17:e9:8e:52: 78:1a:aa:cb:76:68:5d:d7:22:8f:f7:d8:52:b2:57:7a:ba:5d: 10:20:fe:2c:6e:35:d1:70:00:80:34:6a:54:f2:51:ae:72:99: 2f:ec:3e:c7:3d:b1:63:89:8c:f6:d8:fe:05:8b:a1:9c:eb:16: b1:b1:ed:20:f8:c1:e0:61:3e:f7:bf:f1:ac:77:9b:3f:31:82: 8e:32:91:23:6b:0c:13:51:8e:2a:04:91:55:71:53:8b:8a:bf: 6e:59:7e:6a:6d:1e:55:42:44:3a:2f:52:a6:96:23:e8:86:b8: 5e:99:9c:15:45:77:95:01:fb:4d:c9:07:55:73:a1:a7:44:42: f1:e5:26:5e:74:e3:c6:5f:7a:a8:fa:78:57:79:09:fa:d7:d3: 47:0a:e5:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRDMUIxMTAvBgNVBAUTKDhFOEIzNDYzOUVBNTRERjgxMEI5MkJDQkE3NDI3MDRF NEM4ODQyQzIwHhcNMjYwMTI1MDQxNTA1WhcNMjYwMjAxMDQxNTA1WjAYMRYwFAYD VQQDDA02OTc1OThjOS0xZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHEexo57fToT3GBwf03y2jfJl4yfzkxoabVXAelKCOI0OeT7OLOv3KdFjCZe r/w5wtilzS1iJPmlEMVBcvep4+PDasUc47z/nhfCf6FcUw9xQyprhxJuAHFJOsGq UgZ+1+65Ou5j4On3675e8CHK6VZE7iVs2Xovh/jJ9xAeMs+rqhrBKBZf9WWB1Hte us7Qd8eYwuEmGvSeaqpZ9ajf5CcNgMF0nfvYZgmyAFhgE/vnzDaDqZapO5sklj4z Wf413KTxAwdAMoaVEHCMlMhetQcvrPbF68WpadqDMePHDglwsP4H+wMWBNj6W3x8 lI/bkk93rJwWRIDHCX+K2WvO1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJB2GE/ 1vQwmGkPp8PNQpvd2oA8MB8GA1UdIwQYMBaAFI6LNGOepU34ELkry6dCcE5MiELC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEMxQi9EOTY1QkE0MDY0 MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRmZ1F1U3ZMcDBKd1RreUlR c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvczBZNTZsVGZnUXVTdkxwMEp3VGt5SVFzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEMxQi9EOTY1QkE0MDY0MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRm Z1F1U3ZMcDBKd1RreUlRc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC58g9V9MzW7Ksi67kkogBKAJ8rqFHXFN/eu/TUoznB2YxIKJpV65hD 9pq8Rx5KfwDw+2Axjw2yAsTK+hLhKQybzpg+r+n/wSPTA6S9m+aRvc+LbK0k+vB7 SoezrmrTdXO1GwPGN0iSBBfpjlJ4GqrLdmhd1yKP99hSsld6ul0QIP4sbjXRcACA NGpU8lGucpkv7D7HPbFjiYz22P4Fi6Gc6xaxse0g+MHgYT73v/Gsd5s/MYKOMpEj awwTUY4qBJFVcVOLir9uWX5qbR5VQkQ6L1KmliPohrhemZwVRXeVAftNyQdVc6Gn RELx5SZedOPGX3qo+nhXeQn619NHCuWP -----END CERTIFICATE-----Generated at Sun Jan 25 12:40:21 2026 by rpki-client