This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft File: cPEzmWaoGrwgfjvuM3CR2fLzydc.mft (raw, json) Hash identifier: 1ZWOed0QsblXgkJCmQ0iqqSZInny+ocW77Io8z9CQUQ= Subject key identifier: 5F:28:8A:1C:EF:33:C1:21:B6:41:69:35:09:37:CA:D5:0D:B3:D5:1B Authority key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 Certificate issuer: /CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft Manifest number: 0205 Signing time: Sat 24 Jan 2026 23:58:25 +0000 Manifest this update: Sat 24 Jan 2026 23:58:24 +0000 Manifest next update: Sat 31 Jan 2026 23:58:24 +0000 Files and hashes: 1: cPEzmWaoGrwgfjvuM3CR2fLzydc.crl (hash: xelZ2i7Z3EtW+IQ3chZ37b9o321ZzuJlJ3UX1+bZbx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324, serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Validity Not Before: Jan 24 23:58:24 2026 GMT Not After : Jan 31 23:58:24 2026 GMT Subject: CN=69755ca0-3b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8a:06:35:ee:61:7c:b7:5d:c4:28:17:c0:ab: 9b:b7:2b:e7:09:0c:98:91:17:60:78:b9:d1:7b:a1: 0b:36:55:32:e1:fc:bd:73:b2:a6:c3:ff:d1:b3:34: f9:20:bc:6b:22:58:b2:80:03:af:21:b0:13:2c:0d: df:35:a3:4f:e8:03:79:08:fa:f7:67:d4:54:76:fa: c7:c3:bf:2c:f4:c3:d4:87:0c:16:c2:b8:7d:82:02: e4:2c:e7:ff:24:cf:af:76:cd:f3:28:5a:0d:2f:b1: 54:c7:d3:ee:dd:6c:93:2c:bb:d0:1c:43:7d:7a:60: 7b:e9:5b:f9:eb:fe:77:9a:70:23:dd:97:5b:23:cb: 6e:cc:76:f6:58:de:c5:e3:6a:ad:91:05:1c:8d:74: ed:f9:7d:71:bb:d4:1c:43:b6:79:4c:02:1b:da:1a: 1a:4d:4a:32:bc:d6:7a:a6:3b:7d:4a:32:5d:eb:ac: 0a:67:b4:1d:12:83:60:25:d8:b9:f6:00:49:8e:14: 74:7b:e0:9f:78:a1:a6:cb:68:17:c7:ae:7d:1d:4b: 96:c7:c5:9d:eb:8a:3b:7f:8d:cf:f3:3c:1a:81:ce: 70:a9:d2:53:38:c7:59:bb:3b:82:ae:c4:bf:bb:79: 59:c9:ba:02:47:f2:7c:6d:68:0c:7c:07:18:2c:cf: ad:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:28:8A:1C:EF:33:C1:21:B6:41:69:35:09:37:CA:D5:0D:B3:D5:1B X509v3 Authority Key Identifier: keyid:70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:8a:e2:bd:05:f6:e3:06:7b:d3:95:92:0b:c0:57:53:7d:07: 3c:7c:2d:0e:fd:76:d0:3e:cd:9e:12:62:90:bd:45:e4:7a:56: 29:5f:5c:89:cb:98:3f:3b:9d:53:f1:1a:ba:26:ce:a5:d1:f4: 01:d4:25:30:8b:7a:de:cc:f4:54:7d:20:e7:b4:b0:35:97:9d: a8:81:f7:7b:cd:f2:57:65:62:fa:c0:37:6c:b2:0d:75:c1:61: eb:48:c2:fd:45:c3:51:04:1c:04:5b:bc:aa:72:5c:13:8e:18: d0:c9:bd:b7:5c:ec:68:56:d6:cb:88:a7:98:e7:77:3f:3d:5c: f5:e5:25:e8:f2:20:ca:95:39:d5:ff:8a:89:f3:03:6c:b8:e8: 75:5c:a5:83:96:2f:e2:65:79:36:fa:c6:c4:a4:b2:ce:3b:e3: 25:9e:c2:80:af:75:68:eb:77:05:5f:b6:9c:68:f6:f3:cc:93: ae:f1:ea:33:81:50:b1:3e:e3:59:a8:d5:ad:2d:e7:6d:7a:73: 6c:eb:4c:b0:1f:8e:36:f8:b7:18:21:39:2f:10:57:8e:cc:2f: ac:7c:c1:59:db:c8:4e:73:26:41:dd:de:c0:ee:b7:17:95:ec: 4d:40:ff:8c:33:14:93:09:50:6a:9f:17:4c:48:84:29:a5:59: a5:f7:6f:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDcwRjEzMzk5NjZBODFBQkMyMDdFM0JFRTMzNzA5MUQ5 RjJGM0M5RDcwHhcNMjYwMTI0MjM1ODI0WhcNMjYwMTMxMjM1ODI0WjAYMRYwFAYD VQQDDA02OTc1NWNhMC0zYjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA64oGNe5hfLddxCgXwKubtyvnCQyYkRdgeLnRe6ELNlUy4fy9c7Kmw//RszT5 ILxrIliygAOvIbATLA3fNaNP6AN5CPr3Z9RUdvrHw78s9MPUhwwWwrh9ggLkLOf/ JM+vds3zKFoNL7FUx9Pu3WyTLLvQHEN9emB76Vv56/53mnAj3ZdbI8tuzHb2WN7F 42qtkQUcjXTt+X1xu9QcQ7Z5TAIb2hoaTUoyvNZ6pjt9SjJd66wKZ7QdEoNgJdi5 9gBJjhR0e+CfeKGmy2gXx659HUuWx8Wd64o7f43P8zwagc5wqdJTOMdZuzuCrsS/ u3lZyboCR/J8bWgMfAcYLM+tvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8oihzv M8EhtkFpNQk3ytUNs9UbMB8GA1UdIwQYMBaAFHDxM5lmqBq8IH477jNwkdny88nX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC8yMkJGOEQzMkUw MkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dyd2dmanZ1TTNDUjJmTHp5 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NQRXptV2FvR3J3Z2ZqdnVNM0NSMmZMenlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTMyNC8yMkJGOEQzMkUwMkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dy d2dmanZ1TTNDUjJmTHp5ZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAiuK9BfbjBnvTlZILwFdTfQc8fC0O/XbQPs2eEmKQvUXkelYpX1yJ y5g/O51T8Rq6Js6l0fQB1CUwi3rezPRUfSDntLA1l52ogfd7zfJXZWL6wDdssg11 wWHrSML9RcNRBBwEW7yqclwTjhjQyb23XOxoVtbLiKeY53c/PVz15SXo8iDKlTnV /4qJ8wNsuOh1XKWDli/iZXk2+sbEpLLOO+MlnsKAr3Vo63cFX7acaPbzzJOu8eoz gVCxPuNZqNWtLedtenNs60ywH442+LcYITkvEFeOzC+sfMFZ28hOcyZB3d7A7rcX lexNQP+MMxSTCVBqnxdMSIQppVml928E -----END CERTIFICATE-----Generated at Sun Jan 25 18:56:49 2026 by rpki-client