This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft File: CO-lQmZek61vuSE1pf1ZJF_V-uM.mft (raw, json) Hash identifier: 62gPHL7KkCHB1rQ2jwemuMZcLg1fuqkP0fZDNyDgO3I= Subject key identifier: 16:1E:DE:1E:D0:5D:98:33:84:59:74:55:77:DA:75:1E:97:58:D0:23 Authority key identifier: 08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3 Certificate issuer: /CN=A91C8AF2/serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3 Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft Manifest number: 0235 Signing time: Sun 25 Jan 2026 01:14:46 +0000 Manifest this update: Sun 25 Jan 2026 01:14:46 +0000 Manifest next update: Sun 01 Feb 2026 01:14:46 +0000 Files and hashes: 1: CO-lQmZek61vuSE1pf1ZJF_V-uM.crl (hash: Dk0wGgru3FXZIpEstr6M61Vu5Ag93CMI+gWsTrQgh3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8AF2, serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3 Validity Not Before: Jan 25 01:14:46 2026 GMT Not After : Feb 1 01:14:46 2026 GMT Subject: CN=69756e86-75e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:43:38:f0:34:68:58:ec:1a:b4:5a:70:89:06: 9a:ac:27:9b:7c:4b:0f:ce:a8:48:fe:ce:ac:32:23: 37:70:f6:59:de:9b:b8:9c:55:f5:d0:7e:41:97:ef: f8:a6:26:f3:64:d6:06:31:35:de:d6:e2:72:e4:2e: e3:17:5b:32:bf:8c:f3:07:bb:f7:39:38:f1:4d:ad: 4d:d7:ee:ef:9b:73:7e:3e:cf:8f:41:73:3f:41:33: 4a:1c:a4:61:0a:83:48:8c:37:73:50:33:f5:dc:27: db:53:0c:a9:79:9b:25:92:75:ed:74:ed:07:61:42: e7:c9:a4:b0:65:4c:68:c9:f0:f7:2d:0a:7d:0d:6d: d4:ef:6a:19:33:78:55:a0:f7:a1:5b:56:5e:41:4f: 22:f5:4a:7f:85:43:ec:af:3d:09:76:5d:71:20:55: 6a:95:98:79:46:d8:fc:e4:90:c8:1a:37:2b:07:79: db:00:cc:77:18:a1:f0:1f:13:67:22:31:1c:4e:4a: e1:34:71:f6:a0:9f:c6:05:9a:86:2b:16:07:e6:1d: ea:9e:f6:a2:2e:fb:d0:b2:d7:7d:a5:bf:b9:6a:90: 61:f8:2e:0f:46:ae:ee:cf:35:0e:87:3d:34:22:a2: 8a:d5:6e:6b:8f:12:6e:3a:16:b0:1a:f0:02:ad:09: 8d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1E:DE:1E:D0:5D:98:33:84:59:74:55:77:DA:75:1E:97:58:D0:23 X509v3 Authority Key Identifier: keyid:08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4b:31:27:3b:39:43:78:5b:20:67:28:68:87:f0:9a:13:a2: 43:e6:8b:6e:1d:df:9f:b0:38:a8:61:1a:29:45:30:c9:69:c7: 4e:2d:0f:95:b3:3c:ab:f8:a2:e1:03:45:6d:cb:47:7e:cb:8c: 05:33:b7:e8:5c:f2:47:9e:3e:7e:48:96:3f:dd:10:75:7d:7a: 25:0c:e3:bd:af:5f:9e:9d:c9:23:36:cf:6b:1c:ae:c8:25:a6: 76:83:fc:a2:07:02:3d:6c:52:06:9e:c8:16:82:42:2f:57:b7: a5:44:62:ae:df:e0:9d:72:b9:56:b0:65:75:81:d9:c0:cf:63: 4f:a8:20:44:4a:2c:32:31:1a:a5:a7:4d:82:eb:5a:39:7f:15: 20:49:4e:82:d7:c5:83:48:b7:d7:fc:20:fd:a4:dc:ed:fe:1c: 47:69:d1:af:ff:e6:27:8f:50:8a:d4:b8:cc:bb:60:02:94:73: d1:e2:96:15:bd:7c:55:24:75:a4:8c:6e:d5:51:66:bf:3a:3f: d0:e9:df:6a:0d:ac:62:23:c6:ac:fb:7a:63:dc:fc:98:84:6b: db:6e:c0:ca:ad:b1:9b:c3:af:08:40:36:79:89:1a:65:c9:89: ec:2e:1d:dc:e1:8e:50:88:5a:f5:6c:ff:f9:c8:fc:dd:f1:9a: 70:1b:39:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhBRjIxMTAvBgNVBAUTKDA4RUZBNTQyNjY1RTkzQUQ2RkI5MjEzNUE1RkQ1OTI0 NUZENUZBRTMwHhcNMjYwMTI1MDExNDQ2WhcNMjYwMjAxMDExNDQ2WjAYMRYwFAYD VQQDDA02OTc1NmU4Ni03NWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0M48DRoWOwatFpwiQaarCebfEsPzqhI/s6sMiM3cPZZ3pu4nFX10H5Bl+/4 pibzZNYGMTXe1uJy5C7jF1syv4zzB7v3OTjxTa1N1+7vm3N+Ps+PQXM/QTNKHKRh CoNIjDdzUDP13CfbUwypeZslknXtdO0HYULnyaSwZUxoyfD3LQp9DW3U72oZM3hV oPehW1ZeQU8i9Up/hUPsrz0Jdl1xIFVqlZh5Rtj85JDIGjcrB3nbAMx3GKHwHxNn IjEcTkrhNHH2oJ/GBZqGKxYH5h3qnvaiLvvQstd9pb+5apBh+C4PRq7uzzUOhz00 IqKK1W5rjxJuOhawGvACrQmNAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYe3h7Q XZgzhFl0VXfadR6XWNAjMB8GA1UdIwQYMBaAFAjvpUJmXpOtb7khNaX9WSRf1frj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEFGMi9DN0U5RjQzQTkx MjYxMUVEOUFFNjUyNzdDNEY5QUUwMi9DTy1sUW1aZWs2MXZ1U0UxcGYxWkpGX1Yt dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPLWxRbVplazYxdnVTRTFwZjFaSkZfVi11TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEFGMi9DN0U5RjQzQTkxMjYxMUVEOUFFNjUyNzdDNEY5QUUwMi9DTy1sUW1aZWs2 MXZ1U0UxcGYxWkpGX1YtdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALSzEnOzlDeFsgZyhoh/CaE6JD5otuHd+fsDioYRopRTDJacdOLQ+V szyr+KLhA0Vty0d+y4wFM7foXPJHnj5+SJY/3RB1fXolDOO9r1+enckjNs9rHK7I JaZ2g/yiBwI9bFIGnsgWgkIvV7elRGKu3+CdcrlWsGV1gdnAz2NPqCBESiwyMRql p02C61o5fxUgSU6C18WDSLfX/CD9pNzt/hxHadGv/+Ynj1CK1LjMu2AClHPR4pYV vXxVJHWkjG7VUWa/Oj/Q6d9qDaxiI8as+3pj3PyYhGvbbsDKrbGbw68IQDZ5iRpl yYnsLh3c4Y5QiFr1bP/5yPzd8ZpwGzkf -----END CERTIFICATE-----Generated at Sun Jan 25 18:57:21 2026 by rpki-client