This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft File: ChpgX3N8mCCzMTPlo1ecFw0idOw.mft (raw, json) Hash identifier: WAtB2UKH0F8fUKbh960u+nPFzyYDq0e6zXB0Ie6LSSU= Subject key identifier: E9:54:11:5D:BD:2F:50:60:C7:11:59:E7:13:27:AB:6D:B9:B9:2E:46 Authority key identifier: 0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC Certificate issuer: /CN=A91BD614/serialNumber=0A1A605F737C9820B33133E5A3579C170D2274EC Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft Manifest number: 028A Signing time: Sun 25 Jan 2026 01:28:57 +0000 Manifest this update: Sun 25 Jan 2026 01:28:57 +0000 Manifest next update: Sun 01 Feb 2026 01:28:57 +0000 Files and hashes: 1: ChpgX3N8mCCzMTPlo1ecFw0idOw.crl (hash: v9acUJUUKcCVo3WGezRAXORiX8wSxz6iVIpjrBLYMto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.crl rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD614, serialNumber=0A1A605F737C9820B33133E5A3579C170D2274EC Validity Not Before: Jan 25 01:28:57 2026 GMT Not After : Feb 1 01:28:57 2026 GMT Subject: CN=697571d9-5315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ac:14:3d:94:de:11:70:6e:be:0c:1b:40:9b: 0c:28:8e:50:23:70:67:8c:25:75:5d:98:92:85:de: d3:8b:be:7b:c6:54:f1:17:6a:12:0e:66:2a:37:f6: d8:1d:12:d4:47:f0:89:e8:6e:6e:9a:07:d8:b7:a8: 47:16:7c:0a:13:6c:5d:8e:fa:bc:86:35:d3:7f:4c: 9f:c7:47:af:84:6c:74:1f:e2:a6:27:b5:a3:96:87: db:b7:4d:6a:12:bb:75:75:5e:50:cb:70:8f:e5:e1: 85:63:3a:02:e8:cc:61:2d:87:5b:5f:c0:db:ac:c4: f6:b9:4c:ac:80:ac:b7:3c:15:e7:9c:ab:22:88:64: 13:34:1d:95:96:b0:d2:64:7d:fb:06:4f:7e:12:39: 50:0c:d8:17:56:6d:2b:f0:a3:f7:1a:98:00:79:8b: 15:93:d6:92:6d:8b:00:63:e9:99:cc:89:20:1d:ab: 9c:6f:b4:fe:19:0f:22:e8:d1:73:fb:e5:41:91:f1: 20:77:fc:8a:b0:62:44:f0:07:d5:fb:0c:d1:34:8d: e3:a7:dd:eb:91:8e:26:30:f0:00:cf:e7:33:63:0e: 8e:33:ad:f1:df:0e:f9:8d:6d:67:38:c2:8b:4d:01: 15:21:91:8d:2a:9f:87:96:3a:de:3c:8f:d6:c9:ab: e3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:54:11:5D:BD:2F:50:60:C7:11:59:E7:13:27:AB:6D:B9:B9:2E:46 X509v3 Authority Key Identifier: keyid:0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:81:60:62:d3:aa:c8:37:53:33:2e:3d:aa:25:e1:43:24:c9: 07:21:77:80:c0:2e:b6:04:67:f2:d4:2c:45:a8:16:80:95:09: b5:ee:aa:10:50:22:bc:88:37:9d:31:3b:91:03:c2:0a:bf:e5: 9b:cd:6d:a8:c2:09:4f:01:fa:e6:4c:01:b3:93:d5:ef:f6:d9: 8b:64:fb:af:c3:5a:f4:15:7a:50:33:f0:8d:60:b0:a9:d9:a8: 9b:df:7a:3f:1d:67:2c:8d:1d:9e:e2:af:e0:fd:93:1a:81:3a: a1:e8:f7:64:34:c1:47:9c:ed:33:2c:87:16:23:e3:c7:8a:78: aa:81:fd:62:9a:84:13:8b:ff:01:1e:8c:84:dd:a5:35:25:49: d8:56:3d:ea:15:d1:55:83:b7:8d:bd:62:d9:90:c4:50:ff:93: f3:4b:cc:ab:7a:67:16:3b:a3:2c:5a:a3:0b:14:24:bb:05:52: b1:ce:56:c5:de:78:03:01:92:2d:38:d4:b6:91:28:4e:6d:87: ba:63:02:bc:6a:b6:80:03:36:3a:3d:0f:8d:fa:b7:6f:5c:cb: bf:52:4b:22:0d:c5:25:30:f7:e9:02:23:23:2c:1d:98:89:f1: 51:ce:27:6a:11:03:ad:56:f1:67:4c:ea:e2:9d:13:27:5e:7d: c5:f8:86:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2MTQxMTAvBgNVBAUTKDBBMUE2MDVGNzM3Qzk4MjBCMzMxMzNFNUEzNTc5QzE3 MEQyMjc0RUMwHhcNMjYwMTI1MDEyODU3WhcNMjYwMjAxMDEyODU3WjAYMRYwFAYD VQQDDA02OTc1NzFkOS01MzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApawUPZTeEXBuvgwbQJsMKI5QI3BnjCV1XZiShd7Ti757xlTxF2oSDmYqN/bY HRLUR/CJ6G5umgfYt6hHFnwKE2xdjvq8hjXTf0yfx0evhGx0H+KmJ7Wjlofbt01q Ert1dV5Qy3CP5eGFYzoC6MxhLYdbX8DbrMT2uUysgKy3PBXnnKsiiGQTNB2VlrDS ZH37Bk9+EjlQDNgXVm0r8KP3GpgAeYsVk9aSbYsAY+mZzIkgHaucb7T+GQ8i6NFz ++VBkfEgd/yKsGJE8AfV+wzRNI3jp93rkY4mMPAAz+czYw6OM63x3w75jW1nOMKL TQEVIZGNKp+HljrePI/WyavjLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOlUEV29 L1BgxxFZ5xMnq225uS5GMB8GA1UdIwQYMBaAFAoaYF9zfJggszEz5aNXnBcNInTs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDYxNC8xREYwNzVFMkJF REMxMUVEOEUwQUREODBDNEY5QUUwMi9DaHBnWDNOOG1DQ3pNVFBsbzFlY0Z3MGlk T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NocGdYM044bUNDek1UUGxvMWVjRncwaWRPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDYxNC8xREYwNzVFMkJFREMxMUVEOEUwQUREODBDNEY5QUUwMi9DaHBnWDNOOG1D Q3pNVFBsbzFlY0Z3MGlkT3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvgWBi06rIN1MzLj2qJeFDJMkHIXeAwC62BGfy1CxFqBaAlQm17qoQ UCK8iDedMTuRA8IKv+WbzW2owglPAfrmTAGzk9Xv9tmLZPuvw1r0FXpQM/CNYLCp 2aib33o/HWcsjR2e4q/g/ZMagTqh6PdkNMFHnO0zLIcWI+PHiniqgf1imoQTi/8B HoyE3aU1JUnYVj3qFdFVg7eNvWLZkMRQ/5PzS8yremcWO6MsWqMLFCS7BVKxzlbF 3ngDAZItONS2kShObYe6YwK8araAAzY6PQ+N+rdvXMu/UksiDcUlMPfpAiMjLB2Y ifFRzidqEQOtVvFnTOrinRMnXn3F+Iac -----END CERTIFICATE-----Generated at Sun Jan 25 04:32:07 2026 by rpki-client