This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft File: OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft (raw, json) Hash identifier: cQOSgOogMI7JH11Y+ALoVlOrYjA9l/9HxYpbZZ5S5Kc= Subject key identifier: EF:04:5A:2D:28:0C:03:3E:D0:AF:2E:D0:85:91:05:14:D2:A5:9A:FA Authority key identifier: 3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC Certificate issuer: /CN=A91CAB4E/serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC Certificate serial: 1407 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft Manifest number: 13FD Signing time: Sat 24 Jan 2026 16:39:19 +0000 Manifest this update: Sat 24 Jan 2026 16:39:19 +0000 Manifest next update: Sat 31 Jan 2026 16:39:19 +0000 Files and hashes: 1: OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl (hash: 7WFyd+yDykbAq2crVeJ0hVOsrjyaLGf6lchCCwSpgUM=) 2: 7F662C72997011E8B0FDEF57C4F9AE02.roa (hash: 9C6Tg9SKyHhrTv8/E20KOofW2E66mUILhErIQqYMZ/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5127 (0x1407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAB4E, serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC Validity Not Before: Jan 24 16:39:19 2026 GMT Not After : Jan 31 16:39:19 2026 GMT Subject: CN=6974f5b7-09e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:45:a0:a8:6c:b1:04:37:f3:0c:37:e7:ac:b1: df:25:b2:97:7b:c2:c0:7a:73:2e:f8:b8:da:15:57: 92:4a:3d:6a:57:ec:56:f7:fa:0c:5e:ee:5c:99:b9: d1:d2:cd:1b:e5:5c:f6:d8:f7:0b:ed:37:01:29:9b: a0:35:2b:04:81:f8:21:91:ec:e3:2d:f1:16:1f:f9: c9:02:ac:fc:8b:14:51:8c:c9:14:62:57:c8:06:5c: c3:46:93:fe:8d:81:2b:f9:ce:8d:0b:6c:56:a6:93: 79:5a:22:b7:60:d0:3c:4f:ef:30:9a:a9:6e:e6:a0: 2e:54:da:40:14:cf:b6:93:4b:fb:d5:9d:cc:ca:35: 93:c4:c0:42:d1:1f:73:58:dc:c3:75:81:b3:4b:3e: d0:99:49:ea:80:7d:ac:2d:f5:39:47:ec:ae:bb:58: 3d:9c:6f:39:48:df:74:a2:7f:38:8f:cd:04:1e:89: 94:e2:c5:84:01:30:7c:a1:b9:64:7c:19:e1:f4:b7: 97:23:75:ff:08:be:34:02:04:81:fe:bd:01:56:36: c1:db:52:b3:76:9c:e9:81:38:d6:69:06:73:09:4f: ea:01:d3:66:9e:bf:da:c0:4d:2d:37:d0:7b:8d:85: b2:df:79:22:4b:62:77:8d:13:56:63:df:b0:58:80: 13:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:04:5A:2D:28:0C:03:3E:D0:AF:2E:D0:85:91:05:14:D2:A5:9A:FA X509v3 Authority Key Identifier: keyid:3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6a:da:e8:f8:29:c8:e2:96:eb:47:01:85:01:27:cf:ce:c0: d4:3f:25:48:b1:79:0a:a8:79:37:6a:f4:02:09:4c:20:87:e0: a2:8b:0c:94:d7:1f:3d:5d:1f:8d:c4:26:3a:e6:71:32:37:eb: e4:f1:72:41:38:57:ed:24:5d:d7:1f:20:90:1b:8a:dd:1a:a5: 1b:8d:d5:d2:a5:9b:17:ba:95:f7:4d:c0:f0:9f:62:ca:2a:ef: 1f:93:90:db:ec:b0:c8:69:cc:aa:42:38:4b:ad:40:a7:f3:02: c2:77:3b:dc:26:b2:7d:03:3b:ad:6e:35:09:cd:3d:ec:e5:9e: 49:33:0a:83:a5:70:6d:0a:73:05:4b:48:76:39:6b:57:d4:b7: f6:69:f0:32:e1:e2:21:32:17:f7:ce:fe:42:ad:37:97:92:9a: ec:3c:90:a3:63:29:c2:ae:a5:3f:99:7a:c0:19:c5:f4:ad:cc: 5e:e9:01:00:49:56:9c:99:a8:eb:f2:30:2e:d6:b1:bb:fd:b6: 26:90:23:93:4a:1e:1f:cc:83:1b:f1:15:b6:f7:d7:62:0d:6b: dc:26:87:dd:cd:cd:04:53:b4:c2:06:08:0f:ed:6b:e2:99:f6: 24:9a:47:bd:86:ef:be:70:f8:00:07:bc:ab:1d:82:3c:de:dd: d9:74:9f:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FCNEUxMTAvBgNVBAUTKDNBMTQ5NDI1QkUzMjg1RDYxMTRCMDFGNkMyRkM4OEEx N0FGRjRCRUMwHhcNMjYwMTI0MTYzOTE5WhcNMjYwMTMxMTYzOTE5WjAYMRYwFAYD VQQDDA02OTc0ZjViNy0wOWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EWgqGyxBDfzDDfnrLHfJbKXe8LAenMu+LjaFVeSSj1qV+xW9/oMXu5cmbnR 0s0b5Vz22PcL7TcBKZugNSsEgfghkezjLfEWH/nJAqz8ixRRjMkUYlfIBlzDRpP+ jYEr+c6NC2xWppN5WiK3YNA8T+8wmqlu5qAuVNpAFM+2k0v71Z3MyjWTxMBC0R9z WNzDdYGzSz7QmUnqgH2sLfU5R+yuu1g9nG85SN90on84j80EHomU4sWEATB8oblk fBnh9LeXI3X/CL40AgSB/r0BVjbB21KzdpzpgTjWaQZzCU/qAdNmnr/awE0tN9B7 jYWy33kiS2J3jRNWY9+wWIAT5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8EWi0o DAM+0K8u0IWRBRTSpZr6MB8GA1UdIwQYMBaAFDoUlCW+MoXWEUsB9sL8iKF6/0vs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUI0RS8yQ0E0NzA2Njk5 NzAxMUU4ODYxREQwNTdDNEY5QUUwMi9PaFNVSmI0eWhkWVJTd0gyd3Z5SW9Ycl9T LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09oU1VKYjR5aGRZUlN3SDJ3dnlJb1hyX1Mtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUI0RS8yQ0E0NzA2Njk5NzAxMUU4ODYxREQwNTdDNEY5QUUwMi9PaFNVSmI0eWhk WVJTd0gyd3Z5SW9Ycl9TLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdatro+CnI4pbrRwGFASfPzsDUPyVIsXkKqHk3avQCCUwgh+CiiwyU 1x89XR+NxCY65nEyN+vk8XJBOFftJF3XHyCQG4rdGqUbjdXSpZsXupX3TcDwn2LK Ku8fk5Db7LDIacyqQjhLrUCn8wLCdzvcJrJ9AzutbjUJzT3s5Z5JMwqDpXBtCnMF S0h2OWtX1Lf2afAy4eIhMhf3zv5CrTeXkprsPJCjYynCrqU/mXrAGcX0rcxe6QEA SVacmajr8jAu1rG7/bYmkCOTSh4fzIMb8RW299diDWvcJofdzc0EU7TCBggP7Wvi mfYkmke9hu++cPgAB7yrHYI83t3ZdJ/8 -----END CERTIFICATE-----Generated at Sun Jan 25 11:28:55 2026 by rpki-client