This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json) Hash identifier: qXn3iJSd/dw2mgIc73zu58kMXw5m6BMQLo9csZYJQNk= Subject key identifier: B1:80:65:42:DF:D4:B6:F1:EB:07:1E:18:77:D3:B3:AE:F2:F7:9D:7D Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 Certificate issuer: /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Certificate serial: 04B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft Manifest number: 04AF Signing time: Sat 24 Jan 2026 23:11:10 +0000 Manifest this update: Sat 24 Jan 2026 23:11:10 +0000 Manifest next update: Sat 31 Jan 2026 23:11:10 +0000 Files and hashes: 1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: hle9AO0F0fHOD+4GdAiiRZqYa/DXTA8ZBYFZxZnr7rk=) 2: 02D13C94D4B211F093413921C4F9AE02.roa (hash: En51wQVhPTzRoGx7r1Oh3OXcO/1NON/tJNYvVfLMz3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1205 (0x4b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Validity Not Before: Jan 24 23:11:10 2026 GMT Not After : Jan 31 23:11:10 2026 GMT Subject: CN=6975518e-ff60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c7:d2:17:ee:e3:2d:08:8b:be:83:ba:72:65: 9d:b7:6e:36:51:1b:ae:52:bf:d6:cc:7b:c9:23:5d: 8d:b2:5e:c2:44:1b:2b:af:73:79:44:68:4d:df:98: f4:10:bb:11:e3:1f:51:73:df:33:4e:f4:6f:d9:fc: 93:35:f7:0a:b9:69:4b:98:b8:7c:f2:9a:aa:1f:51: 43:ac:a0:1f:5f:e2:ba:e5:eb:f6:15:36:76:12:63: 6a:75:86:0e:21:b3:aa:ce:a7:54:43:1c:70:0d:d3: 19:6f:62:2e:a9:9a:7e:d0:ab:17:ba:92:4b:e0:d6: d7:d1:00:3b:5e:69:e4:b5:98:a6:e7:17:25:e8:42: 46:70:8f:1f:02:12:87:1e:2e:98:72:e5:2f:ce:55: 28:18:15:63:d8:e1:34:31:07:0b:94:f0:9e:00:9c: b5:7b:58:06:d1:80:b9:43:85:c9:6a:c4:79:7a:1a: e0:73:bc:fa:7c:4c:de:31:8c:f7:38:f0:b0:04:0d: 0f:fd:0c:f6:fe:e7:83:68:03:57:77:7b:ca:f6:38: ec:f9:f9:b0:90:6c:f0:52:d5:a3:20:72:bc:b9:cf: 3b:34:80:7b:34:99:0c:b8:cb:81:1d:c7:4b:8b:81: 08:f6:cc:3d:ab:38:ca:04:68:84:22:0f:72:6d:53: 02:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:80:65:42:DF:D4:B6:F1:EB:07:1E:18:77:D3:B3:AE:F2:F7:9D:7D X509v3 Authority Key Identifier: keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:8b:b8:fa:90:1d:55:d6:0a:cc:2f:0e:1f:49:dc:6a:51:43: c2:fe:03:ad:cb:b9:ab:9f:a7:d0:4d:ac:27:41:19:bb:7f:5e: 3a:32:f4:e1:93:bb:93:28:47:78:5b:c3:e6:59:0b:3c:aa:54: 56:cc:0e:15:3c:c0:95:5e:47:08:b2:d1:ee:d5:fc:74:4d:89: f7:a4:fe:30:a7:60:2b:7d:96:be:e0:ae:b0:3d:dc:92:c7:78: ed:bb:f9:5a:88:51:51:8c:ac:fc:f5:48:d0:68:02:fe:29:b2: 38:1f:88:19:59:6a:d9:5d:98:3e:da:f0:21:73:85:f5:91:4d: 3e:4b:d3:59:5e:cf:06:ac:02:ae:e8:c4:3d:ae:0b:40:ad:c3: 8f:dd:1f:ca:8f:4e:f9:98:e8:81:a9:ff:aa:b7:ce:79:82:63: be:a8:66:d6:ce:71:b6:86:76:ec:92:80:03:2c:be:ac:60:21: 0d:40:5f:dc:33:3b:9a:0c:ea:40:cf:15:83:6c:a1:00:89:bf: bc:ee:43:9b:ba:23:bc:5a:9f:47:99:be:c9:90:eb:4c:f5:40: e3:22:13:bf:a2:9d:f9:16:32:61:48:05:eb:a8:e8:6e:93:2c: a0:0c:d1:31:29:ca:cd:82:a8:fb:c7:6c:93:1b:d6:5c:64:73: 3d:cc:ee:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk1MkUxMTAvBgNVBAUTKDkyMjkxOTk1MzVFQkVFNDQ3MkEyMkZDNTE5NUIwQTdF RkZDQjY2ODQwHhcNMjYwMTI0MjMxMTEwWhcNMjYwMTMxMjMxMTEwWjAYMRYwFAYD VQQDDA02OTc1NTE4ZS1mZjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysfSF+7jLQiLvoO6cmWdt242URuuUr/WzHvJI12Nsl7CRBsrr3N5RGhN35j0 ELsR4x9Rc98zTvRv2fyTNfcKuWlLmLh88pqqH1FDrKAfX+K65ev2FTZ2EmNqdYYO IbOqzqdUQxxwDdMZb2IuqZp+0KsXupJL4NbX0QA7XmnktZim5xcl6EJGcI8fAhKH Hi6YcuUvzlUoGBVj2OE0MQcLlPCeAJy1e1gG0YC5Q4XJasR5ehrgc7z6fEzeMYz3 OPCwBA0P/Qz2/ueDaANXd3vK9jjs+fmwkGzwUtWjIHK8uc87NIB7NJkMuMuBHcdL i4EI9sw9qzjKBGiEIg9ybVMC1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGAZULf 1Lbx6wceGHfTs67y9519MB8GA1UdIwQYMBaAFJIpGZU16+5EcqIvxRlbCn7/y2aE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTUyRS84M0NGODExNjYw RTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdrUnlvaV9GR1ZzS2Z2X0xa b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpa1psVFhyN2tSeW9pX0ZHVnNLZnZfTFpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTUyRS84M0NGODExNjYwRTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdr UnlvaV9GR1ZzS2Z2X0xab1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZi7j6kB1V1grMLw4fSdxqUUPC/gOty7mrn6fQTawnQRm7f146MvTh k7uTKEd4W8PmWQs8qlRWzA4VPMCVXkcIstHu1fx0TYn3pP4wp2ArfZa+4K6wPdyS x3jtu/laiFFRjKz89UjQaAL+KbI4H4gZWWrZXZg+2vAhc4X1kU0+S9NZXs8GrAKu 6MQ9rgtArcOP3R/Kj075mOiBqf+qt855gmO+qGbWznG2hnbskoADLL6sYCENQF/c MzuaDOpAzxWDbKEAib+87kObuiO8Wp9Hmb7JkOtM9UDjIhO/op35FjJhSAXrqOhu kyygDNExKcrNgqj7x2yTG9ZcZHM9zO68 -----END CERTIFICATE-----Generated at Sun Jan 25 18:15:21 2026 by rpki-client