This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft File: COCLoCKjnbSrPzvY0F7pcZSxdoI.mft (raw, json) Hash identifier: poTO8onnWtIFYE0pOYhfUWyKVg6wBrAGu23ArW04/PE= Subject key identifier: D6:92:74:96:4D:47:3A:EA:53:07:65:2C:38:C2:33:4E:1D:28:CF:3D Authority key identifier: 08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 Certificate issuer: /CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Certificate serial: 07BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft Manifest number: 07B3 Signing time: Sat 24 Jan 2026 20:47:33 +0000 Manifest this update: Sat 24 Jan 2026 20:47:33 +0000 Manifest next update: Sat 31 Jan 2026 20:47:33 +0000 Files and hashes: 1: COCLoCKjnbSrPzvY0F7pcZSxdoI.crl (hash: VHnQkhYNkvAIEeQc0dlJ9g4nh0oVdVeZ5uixUcEu4UA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1982 (0x7be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5105, serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Validity Not Before: Jan 24 20:47:33 2026 GMT Not After : Jan 31 20:47:33 2026 GMT Subject: CN=69752fe5-ad9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:09:3c:d1:b3:2a:11:0e:33:4e:aa:3e:19:f7: e1:dc:73:c4:1c:3b:79:e7:7b:27:ed:40:34:94:b8: 7e:c8:e1:63:fb:4a:3a:4d:c6:c2:99:63:5c:3a:9c: f2:aa:7a:82:09:0f:80:70:2e:00:45:5a:c3:05:a3: 97:75:84:a6:31:a2:39:9d:4f:4a:a1:f8:7e:b5:95: 1b:b6:05:6d:bc:f2:c0:ac:08:0f:87:bf:be:b7:87: a3:f4:46:33:d9:dd:85:64:92:54:36:e9:a0:f3:b8: d0:74:44:ef:a4:84:49:d5:f4:1d:e8:49:b0:7d:54: 49:22:ef:54:0e:27:3b:57:a1:bf:62:b3:e6:fd:ce: d6:1e:b1:5c:88:a7:ee:79:1d:25:67:ae:2a:1b:d5: 30:09:4d:ae:b0:13:9c:6f:c8:d7:2d:35:d2:d5:00: ad:27:d2:fb:05:03:e8:ea:ae:83:13:19:d4:7f:1b: 21:06:6c:9c:a0:dc:04:d3:11:f1:3c:22:9c:82:ba: 2d:53:9d:d8:d6:94:21:6b:e3:e7:33:a0:9b:c3:2a: 10:e1:37:88:ef:94:a8:6d:73:ac:a1:6a:89:ab:e4: 7f:50:07:62:ad:4d:dc:e6:1a:bc:25:0a:67:ed:68: df:ed:14:93:90:e1:0e:0b:e3:fe:12:62:a9:c9:a6: 1e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:92:74:96:4D:47:3A:EA:53:07:65:2C:38:C2:33:4E:1D:28:CF:3D X509v3 Authority Key Identifier: keyid:08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1d:ce:ac:44:1d:8d:88:0d:08:88:55:56:7f:6a:1d:73:0c: 21:6d:19:83:b3:4a:98:e4:a4:04:a1:07:f9:73:21:c6:db:9f: 15:10:61:84:09:21:52:ba:87:ad:4b:fe:3a:92:08:6b:3d:4e: 41:2a:cb:dc:2a:6d:a0:d7:40:0a:72:40:a5:06:c2:6a:0d:99: b0:4f:d8:88:50:4a:94:25:f7:dc:1d:ab:cf:fe:a6:39:96:e8: fe:5c:72:16:a4:3d:ae:c9:64:14:49:25:db:0c:eb:bd:5d:15: d7:16:ab:27:91:6c:5c:ab:eb:f9:23:a7:16:97:80:b1:e4:19: 54:96:89:b7:2f:1a:4f:6d:38:cd:b4:e7:11:09:bd:2f:12:af: 3b:da:14:93:3f:9d:b4:bc:ad:4e:06:fe:de:91:e5:29:56:64: 8f:65:4c:cb:85:41:a3:d5:8f:02:bf:fc:48:5b:d0:68:89:69: 6f:8c:48:2c:9e:19:ad:e9:3c:f6:84:c4:64:d8:23:0a:54:13: 19:fd:3a:b1:e9:ce:3e:7c:08:70:57:85:47:52:76:0d:89:36: 65:a4:ad:98:62:f1:da:5f:95:e2:8a:80:a1:2b:5e:70:62:72: 2d:ca:e2:b0:b8:46:a2:20:46:4e:28:04:82:6d:cc:40:50:e4: 2b:c1:56:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxMDUxMTAvBgNVBAUTKDA4RTA4QkEwMjJBMzlEQjRBQjNGM0JEOEQwNUVFOTcx OTRCMTc2ODIwHhcNMjYwMTI0MjA0NzMzWhcNMjYwMTMxMjA0NzMzWjAYMRYwFAYD VQQDDA02OTc1MmZlNS1hZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Ak80bMqEQ4zTqo+Gffh3HPEHDt553sn7UA0lLh+yOFj+0o6TcbCmWNcOpzy qnqCCQ+AcC4ARVrDBaOXdYSmMaI5nU9Kofh+tZUbtgVtvPLArAgPh7++t4ej9EYz 2d2FZJJUNumg87jQdETvpIRJ1fQd6EmwfVRJIu9UDic7V6G/YrPm/c7WHrFciKfu eR0lZ64qG9UwCU2usBOcb8jXLTXS1QCtJ9L7BQPo6q6DExnUfxshBmycoNwE0xHx PCKcgrotU53Y1pQha+PnM6CbwyoQ4TeI75SobXOsoWqJq+R/UAdirU3c5hq8JQpn 7Wjf7RSTkOEOC+P+EmKpyaYeuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaSdJZN RzrqUwdlLDjCM04dKM89MB8GA1UdIwQYMBaAFAjgi6Aio520qz872NBe6XGUsXaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTEwNS9ERDcyMEI4NjMw RjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5iU3JQenZZMEY3cGNaU3hk b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPQ0xvQ0tqbmJTclB6dlkwRjdwY1pTeGRvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTEwNS9ERDcyMEI4NjMwRjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5i U3JQenZZMEY3cGNaU3hkb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeHc6sRB2NiA0IiFVWf2odcwwhbRmDs0qY5KQEoQf5cyHG258VEGGE CSFSuoetS/46kghrPU5BKsvcKm2g10AKckClBsJqDZmwT9iIUEqUJffcHavP/qY5 luj+XHIWpD2uyWQUSSXbDOu9XRXXFqsnkWxcq+v5I6cWl4Cx5BlUlom3LxpPbTjN tOcRCb0vEq872hSTP520vK1OBv7ekeUpVmSPZUzLhUGj1Y8Cv/xIW9BoiWlvjEgs nhmt6Tz2hMRk2CMKVBMZ/Tqx6c4+fAhwV4VHUnYNiTZlpK2YYvHaX5XiioChK15w YnItyuKwuEaiIEZOKASCbcxAUOQrwVYL -----END CERTIFICATE-----Generated at Sun Jan 25 04:24:33 2026 by rpki-client