This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft File: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft (raw, json) Hash identifier: 7o9yatDaCt/hXCFStokjgymCTZwClzF7ABVpesvzhqM= Subject key identifier: 3E:9E:81:23:1D:70:5F:A7:6C:EF:2C:A5:95:FC:21:07:BC:60:F8:07 Authority key identifier: E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 Certificate issuer: /CN=A91C8790/serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Certificate serial: 052A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft Manifest number: 0525 Signing time: Sat 24 Jan 2026 22:46:57 +0000 Manifest this update: Sat 24 Jan 2026 22:46:56 +0000 Manifest next update: Sat 31 Jan 2026 22:46:56 +0000 Files and hashes: 1: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl (hash: ffdNgqjhfuyEoIa8f0a/6QpxQptqZYmIY7T/oGyQx3U=) 2: BA7E6B1A30B911EC974C3830C4F9AE02.roa (hash: DlfXyvIdL0s+0tBp2hXjHGEv5V90Epcx4LrbGdX7dDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1322 (0x52a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8790, serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Validity Not Before: Jan 24 22:46:56 2026 GMT Not After : Jan 31 22:46:56 2026 GMT Subject: CN=69754be0-f5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bc:dc:e0:ab:11:1a:74:07:85:e0:6b:69:f0: f1:3a:b1:6e:8e:42:c9:f3:a8:f2:58:32:f3:db:94: c1:33:c7:25:26:fb:70:a8:a0:85:eb:85:03:28:e9: cb:96:e5:27:d2:68:77:c0:35:57:1b:0c:ff:be:ef: be:8d:d1:44:a2:d3:da:83:ba:a0:c8:cb:1b:f8:2d: a6:9e:79:60:8a:7a:19:b4:79:af:40:a8:29:cf:06: 87:3b:d9:18:1d:cc:5b:ae:89:3d:82:87:0c:61:50: 1e:55:ae:96:fa:bc:33:0a:0b:43:43:b5:20:a2:d3: 6d:5b:92:32:d2:5d:6f:c2:81:3d:40:90:ef:5b:65: 5a:46:cf:7e:14:bf:22:a9:46:b6:72:90:f0:cc:99: f4:50:4a:e6:2d:9d:17:2b:c7:9d:ab:ae:a7:7a:c6: 63:10:ae:89:7c:2b:82:d5:1e:13:48:c6:ad:26:c8: 79:e5:e2:7a:63:ff:64:5a:57:01:65:b7:ba:7f:6e: 2e:15:1a:51:5e:50:9d:05:84:f4:ab:82:83:a3:e7: c8:39:b1:ad:6c:ea:16:70:49:c4:6d:9b:c2:79:fd: 42:33:e4:63:02:a2:2b:da:13:2e:4f:9d:8d:9a:cd: 7d:51:40:ae:34:b3:16:2b:b0:8b:7a:42:c8:5b:04: ed:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9E:81:23:1D:70:5F:A7:6C:EF:2C:A5:95:FC:21:07:BC:60:F8:07 X509v3 Authority Key Identifier: keyid:E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:bd:f4:43:75:05:c3:58:7e:80:6b:0d:58:12:76:d9:73:17: 72:b2:7f:22:9d:11:b9:ce:62:fa:1d:3f:21:13:33:7a:e9:21: f5:5d:d9:a9:12:44:99:04:0a:84:17:56:5e:2f:00:9f:f2:77: 45:dc:9b:a8:e0:88:99:4d:f6:44:f2:2c:7f:4c:5a:a6:cf:df: 12:60:7d:c3:f8:a6:e3:c9:93:bf:3d:e5:46:e8:76:df:51:03: 75:f3:6c:2d:5f:36:76:7e:c1:05:10:8e:33:ff:67:3f:5e:28: ac:ec:f7:60:ca:2b:ca:c6:d5:3e:d0:7a:18:c2:da:bc:05:99: cb:fb:45:a5:71:d9:a1:57:1a:e0:69:a7:26:bd:40:d4:4f:50: 4d:c1:1c:84:fc:7a:49:bf:cf:48:98:45:66:66:22:9f:7e:f6: cf:7a:39:93:f3:39:12:5c:e2:72:51:b7:32:dd:4d:fd:48:86: 81:87:24:53:bc:c0:58:c1:c6:88:61:04:c8:73:83:a6:03:32: 0c:a0:71:b2:b9:a3:e2:59:3f:c5:82:c2:99:88:38:00:d8:7f: db:7a:ac:eb:e6:49:0d:e6:9b:d8:f9:b3:f5:6e:a8:d1:0e:d3: 73:e7:ae:f4:d0:f4:d8:b5:85:48:1b:2d:11:29:81:f6:7c:a6: 6b:9e:77:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg3OTAxMTAvBgNVBAUTKEU1QTRENEY5NTYwQjVCNUM1QzVGRTREMDYxQjRCODgx QzhEMjIzNTIwHhcNMjYwMTI0MjI0NjU2WhcNMjYwMTMxMjI0NjU2WjAYMRYwFAYD VQQDDA02OTc1NGJlMC1mNWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbzc4KsRGnQHheBrafDxOrFujkLJ86jyWDLz25TBM8clJvtwqKCF64UDKOnL luUn0mh3wDVXGwz/vu++jdFEotPag7qgyMsb+C2mnnlginoZtHmvQKgpzwaHO9kY Hcxbrok9gocMYVAeVa6W+rwzCgtDQ7UgotNtW5Iy0l1vwoE9QJDvW2VaRs9+FL8i qUa2cpDwzJn0UErmLZ0XK8edq66nesZjEK6JfCuC1R4TSMatJsh55eJ6Y/9kWlcB Zbe6f24uFRpRXlCdBYT0q4KDo+fIObGtbOoWcEnEbZvCef1CM+RjAqIr2hMuT52N ms19UUCuNLMWK7CLekLIWwTtEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6egSMd cF+nbO8spZX8IQe8YPgHMB8GA1UdIwQYMBaAFOWk1PlWC1tcXF/k0GG0uIHI0iNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODc5MC8zM0ZFMzYyNjMw QjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcxeGNYLVRRWWJTNGdjalNJ MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVhVFUtVllMVzF4Y1gtVFFZYlM0Z2NqU0kxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODc5MC8zM0ZFMzYyNjMwQjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcx eGNYLVRRWWJTNGdjalNJMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvvfRDdQXDWH6Aaw1YEnbZcxdysn8inRG5zmL6HT8hEzN66SH1Xdmp EkSZBAqEF1ZeLwCf8ndF3Juo4IiZTfZE8ix/TFqmz98SYH3D+KbjyZO/PeVG6Hbf UQN182wtXzZ2fsEFEI4z/2c/Xiis7PdgyivKxtU+0HoYwtq8BZnL+0WlcdmhVxrg aacmvUDUT1BNwRyE/HpJv89ImEVmZiKffvbPejmT8zkSXOJyUbcy3U39SIaBhyRT vMBYwcaIYQTIc4OmAzIMoHGyuaPiWT/FgsKZiDgA2H/beqzr5kkN5pvY+bP1bqjR DtNz56700PTYtYVIGy0RKYH2fKZrnndQ -----END CERTIFICATE-----Generated at Mon Jan 26 00:21:01 2026 by rpki-client