This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft File: CNJW1CbKIXH86BfGRSP4MqNpF70.mft (raw, json) Hash identifier: Ge5Fr+BaPlB+mRc/kkIoX5R9A073cO4kAAcNL5cNlIs= Subject key identifier: 9C:FD:7B:C7:92:E0:C7:B2:90:71:48:FD:68:6D:04:BA:1E:E1:13:75 Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Certificate serial: 0ACE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft Manifest number: 0AAA Signing time: Sat 24 Jan 2026 19:02:15 +0000 Manifest this update: Sat 24 Jan 2026 19:02:15 +0000 Manifest next update: Sat 31 Jan 2026 19:02:15 +0000 Files and hashes: 1: CNJW1CbKIXH86BfGRSP4MqNpF70.crl (hash: 0iWtBqBBYuhP41B7oHeqLlkTtDckZXsbPqtKY0XRJDs=) 2: 54098620A37B11EFAC4F8E3CC4F9AE02.roa (hash: FXrJzxpIMY/mjFWppW9CWCLKoy10/on9Vdnxt1X4PXY=) 3: 8F12C9C8391F11EFB455E565C4F9AE02.roa (hash: EvThvFOZKz48161MvTnVXiDNJ6HNF5HAel5hAOJCG+c=) 4: F15AD62031FA11EE96640F3EC4F9AE02.roa (hash: WTs+9o9qNNM6mr7pnkWN7ajLcOyi6E/nvXwiULfR9Fc=) 5: C6671418A37A11EFBED1AE3BC4F9AE02.roa (hash: RtmiTTWdzbSA6sjEHPl66WT8irnWI6qg0r7cthFL2r8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2766 (0xace) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Validity Not Before: Jan 24 19:02:15 2026 GMT Not After : Jan 31 19:02:15 2026 GMT Subject: CN=69751737-4d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:47:40:eb:37:de:79:29:8d:0f:d5:36:67: 1b:f8:ae:32:29:14:f8:47:bc:e6:b2:fe:0c:bf:fd: f9:f9:af:e9:3f:c9:d4:ab:77:d0:2b:2a:05:13:cf: f9:44:37:6c:d4:8a:bf:27:fe:34:ec:65:96:5c:bc: 20:07:5e:da:77:92:9a:eb:a2:53:26:26:48:5c:55: 63:0c:52:17:9d:6f:99:fa:a0:0b:5b:c8:79:0c:9a: da:c0:d9:9a:b1:9c:d9:2b:a4:9f:3f:34:6c:4d:3a: 72:b8:e0:5f:85:5a:94:77:d1:f2:fc:e2:d0:c4:97: e5:27:52:98:37:fd:93:e9:a7:57:7f:46:24:5a:b4: 60:ca:0e:61:de:c0:e9:4a:c6:8a:c1:e4:bf:49:90: 56:00:c4:59:5d:1d:d6:58:9f:32:5c:ea:84:8f:4b: 57:2b:4f:ca:97:18:85:8d:b5:a0:f3:3f:9f:23:34: f3:e5:49:d7:70:fd:f2:14:4d:78:77:b7:31:07:df: ff:41:b1:e5:31:43:53:3a:e5:59:8f:46:38:ce:b8: e6:d1:da:5a:ae:ce:96:26:32:fb:b2:f1:95:72:f2: 3e:d9:49:91:dc:e2:41:e9:52:0c:7d:c4:5a:68:cf: 7c:4c:9a:36:65:69:38:17:5d:7c:4c:f8:60:92:ce: 69:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FD:7B:C7:92:E0:C7:B2:90:71:48:FD:68:6D:04:BA:1E:E1:13:75 X509v3 Authority Key Identifier: keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:7d:a5:b4:54:87:10:f5:3d:2f:ca:17:f0:3c:f0:6b:8c:fc: 4d:2e:12:79:ea:90:5b:e0:dc:d5:d8:54:11:22:28:27:23:e2: a2:74:b6:e0:1f:3a:ad:70:07:33:19:b1:ea:25:1b:01:b8:e4: 8a:ce:aa:ac:30:dd:cf:d0:94:37:6b:94:dd:3d:b8:3d:00:d5: f3:e5:0f:83:7a:79:26:e5:67:21:46:fb:13:76:95:ed:41:5b: de:f5:90:46:a3:ee:db:c4:a3:55:ff:b1:6f:f3:d9:70:9e:7e: 6b:a8:fc:80:dd:91:cc:27:46:01:3b:b8:f9:77:25:45:5a:d7: 95:6a:ca:1c:ec:73:a4:7b:6f:2e:ae:8f:da:1c:6c:db:f2:f6: 26:33:03:51:5c:89:fe:39:c1:8f:25:e5:e3:ef:fa:07:1f:86: d2:33:a1:1f:e7:1f:5c:4d:7d:58:cc:be:46:77:8e:08:7d:40: 49:15:0a:1a:cb:ee:b3:a3:35:3e:32:d4:de:d4:65:04:81:9c: 6e:d6:86:b5:ca:e8:3a:a8:fe:1a:d6:2e:ee:29:f2:e4:12:4f: b3:31:30:e1:c7:bf:1c:2b:24:49:aa:41:7d:66:8f:84:31:f4: 0e:f1:a8:b0:2a:26:e6:29:09:a0:bc:46:5f:3c:17:cf:0d:fe: aa:34:dd:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQ0MxMTAvBgNVBAUTKDA4RDI1NkQ0MjZDQTIxNzFGQ0U4MTdDNjQ1MjNGODMy QTM2OTE3QkQwHhcNMjYwMTI0MTkwMjE1WhcNMjYwMTMxMTkwMjE1WjAYMRYwFAYD VQQDDA02OTc1MTczNy00ZDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHlHQOs33nkpjQ/VNmcb+K4yKRT4R7zmsv4Mv/35+a/pP8nUq3fQKyoFE8/5 RDds1Iq/J/407GWWXLwgB17ad5Ka66JTJiZIXFVjDFIXnW+Z+qALW8h5DJrawNma sZzZK6SfPzRsTTpyuOBfhVqUd9Hy/OLQxJflJ1KYN/2T6adXf0YkWrRgyg5h3sDp SsaKweS/SZBWAMRZXR3WWJ8yXOqEj0tXK0/KlxiFjbWg8z+fIzTz5UnXcP3yFE14 d7cxB9//QbHlMUNTOuVZj0Y4zrjm0dpars6WJjL7svGVcvI+2UmR3OJB6VIMfcRa aM98TJo2ZWk4F118TPhgks5p1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJz9e8eS 4MeykHFI/WhtBLoe4RN1MB8GA1UdIwQYMBaAFAjSVtQmyiFx/OgXxkUj+DKjaRe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZDQy9DREJDNTk4Njcz MDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lYSDg2QmZHUlNQNE1xTnBG NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOSlcxQ2JLSVhIODZCZkdSU1A0TXFOcEY3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZDQy9DREJDNTk4NjczMDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lY SDg2QmZHUlNQNE1xTnBGNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4faW0VIcQ9T0vyhfwPPBrjPxNLhJ56pBb4NzV2FQRIignI+KidLbg HzqtcAczGbHqJRsBuOSKzqqsMN3P0JQ3a5TdPbg9ANXz5Q+Denkm5WchRvsTdpXt QVve9ZBGo+7bxKNV/7Fv89lwnn5rqPyA3ZHMJ0YBO7j5dyVFWteVasoc7HOke28u ro/aHGzb8vYmMwNRXIn+OcGPJeXj7/oHH4bSM6Ef5x9cTX1YzL5Gd44IfUBJFQoa y+6zozU+MtTe1GUEgZxu1oa1yug6qP4a1i7uKfLkEk+zMTDhx78cKyRJqkF9Zo+E MfQO8aiwKibmKQmgvEZfPBfPDf6qNN1e -----END CERTIFICATE-----Generated at Sun Jan 25 09:31:13 2026 by rpki-client