This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft File: afotkTN0HoMAQ-tA5A0ivzU4684.mft (raw, json) Hash identifier: v8K0kKcfHssLuy7MpWTVLwtmS3iLUzAWKARGeDhsKRk= Subject key identifier: 5E:9F:66:0E:1E:94:58:33:7B:A1:C9:CE:74:12:84:54:C5:D3:6F:E3 Authority key identifier: 69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE Certificate issuer: /CN=A91CCB81/serialNumber=69FA2D9133741E830043EB40E40D22BF3538EBCE Certificate serial: 02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft Manifest number: 02 Signing time: Fri 23 Jan 2026 16:19:04 +0000 Manifest this update: Fri 23 Jan 2026 16:19:04 +0000 Manifest next update: Fri 30 Jan 2026 16:19:04 +0000 Files and hashes: 1: afotkTN0HoMAQ-tA5A0ivzU4684.crl (hash: b9o6JvcJYMtsnZBzAa1SMDCnl/n9aoy2HRoZ6tAccpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.crl rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 16:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCB81, serialNumber=69FA2D9133741E830043EB40E40D22BF3538EBCE Validity Not Before: Jan 23 16:19:04 2026 GMT Not After : Jan 30 16:19:04 2026 GMT Subject: CN=69739f78-bb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f0:bc:fc:d6:58:ef:e0:c4:e9:71:65:69:36: 63:92:41:43:d6:1a:e4:60:21:40:1e:3a:52:c4:ed: 48:2b:7a:61:02:61:1b:c3:ba:b9:28:56:66:ee:0e: 43:63:b9:68:d2:49:84:bb:14:79:9c:ab:69:e7:46: 2c:3d:19:40:4d:b9:90:51:23:4a:1d:e4:74:70:a0: 20:57:55:24:8c:8d:96:49:06:7e:33:cb:9f:32:dd: 93:9f:eb:a3:5f:fd:b5:aa:db:79:2a:f3:17:d6:83: 47:25:1e:ef:f8:9a:58:b8:3e:95:4a:c4:f6:e7:08: 17:5c:4c:0a:63:d5:ba:c8:97:7e:5f:20:85:2c:47: 65:d9:ec:6c:6a:06:65:eb:8c:93:f7:b4:8c:5a:4f: 49:41:51:1a:29:ff:2d:1d:3e:ce:a6:63:b5:36:5c: dc:44:f2:74:61:62:31:53:88:d4:f0:de:35:cf:e6: eb:57:46:15:4a:80:58:50:3e:78:fb:52:4f:d3:15: eb:39:6f:4c:c5:73:34:0f:1e:0e:55:e5:95:0d:af: 00:9c:7e:99:6f:3a:78:69:61:7f:40:39:b5:d3:ff: a9:28:49:eb:e7:81:ae:01:28:77:5f:85:a8:9a:e9: dc:d3:01:2b:dc:e2:4c:02:27:ab:3e:81:11:3c:58: e0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9F:66:0E:1E:94:58:33:7B:A1:C9:CE:74:12:84:54:C5:D3:6F:E3 X509v3 Authority Key Identifier: keyid:69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:0a:5c:e5:13:5b:c0:01:ef:62:94:2d:ae:48:87:ee:53:fd: ce:32:00:6c:e2:4c:0c:69:1f:e4:a8:5c:41:64:ba:42:cf:a9: 5f:4f:1b:73:97:0d:7b:1a:65:18:ce:d6:4c:ce:fb:82:fc:60: eb:af:59:ff:08:da:9b:0f:2f:f4:8e:b5:f1:51:a5:9d:5b:88: 14:fb:6e:a0:85:7c:1e:70:ca:d1:e6:dd:cc:32:ae:61:4b:e3: 0e:b6:27:4e:6a:e8:45:b4:0f:d6:2a:1f:46:bc:1e:1b:f5:c0: c7:53:55:09:16:2d:e6:f0:bc:03:db:7d:b6:68:5e:a4:f6:29: b9:64:ed:5f:18:ab:e2:b8:e3:eb:dc:3a:a7:76:9f:83:13:7f: 40:90:4d:27:5d:1e:0b:cb:4d:9f:3c:10:da:07:4f:bb:f5:ac: c5:2b:96:4a:4a:eb:27:65:ed:b0:1a:39:26:b6:ad:9f:c6:cf: 54:9b:54:1a:e6:50:d2:15:9e:79:d4:1c:e1:9e:07:02:4f:85: 15:e3:76:a3:f5:ed:11:43:08:6e:68:02:5f:62:96:08:8b:6a: d2:32:15:00:d0:66:5b:2e:b1:72:c6:10:30:27:96:7d:9a:5f: f0:4f:1e:e8:66:b2:df:97:1a:f6:80:a3:75:b7:03:72:7f:0b: 6f:2c:3b:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFD Q0I4MTExMC8GA1UEBRMoNjlGQTJEOTEzMzc0MUU4MzAwNDNFQjQwRTQwRDIyQkYz NTM4RUJDRTAeFw0yNjAxMjMxNjE5MDRaFw0yNjAxMzAxNjE5MDRaMBgxFjAUBgNV BAMMDTY5NzM5Zjc4LWJiNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC48Lz81ljv4MTpcWVpNmOSQUPWGuRgIUAeOlLE7UgremECYRvDurkoVmbuDkNj uWjSSYS7FHmcq2nnRiw9GUBNuZBRI0od5HRwoCBXVSSMjZZJBn4zy58y3ZOf66Nf /bWq23kq8xfWg0clHu/4mli4PpVKxPbnCBdcTApj1brIl35fIIUsR2XZ7GxqBmXr jJP3tIxaT0lBURop/y0dPs6mY7U2XNxE8nRhYjFTiNTw3jXP5utXRhVKgFhQPnj7 Uk/TFes5b0zFczQPHg5V5ZUNrwCcfplvOnhpYX9AObXT/6koSevnga4BKHdfhaia 6dzTASvc4kwCJ6s+gRE8WOBHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXp9mDh6U WDN7ocnOdBKEVMXTb+MwHwYDVR0jBBgwFoAUafotkTN0HoMAQ+tA5A0ivzU4684w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQjgxLzI4NjFFNDk2Rjg2 QTExRjBCNEJCQUYzQzRBNkY1NkJDL2Fmb3RrVE4wSG9NQVEtdEE1QTBpdnpVNDY4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWZvdGtUTjBIb01BUS10QTVBMGl2elU0Njg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QjgxLzI4NjFFNDk2Rjg2QTExRjBCNEJCQUYzQzRBNkY1NkJDL2Fmb3RrVE4wSG9N QVEtdEE1QTBpdnpVNDY4NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJcKXOUTW8AB72KULa5Ih+5T/c4yAGziTAxpH+SoXEFkukLPqV9PG3OX DXsaZRjO1kzO+4L8YOuvWf8I2psPL/SOtfFRpZ1biBT7bqCFfB5wytHm3cwyrmFL 4w62J05q6EW0D9YqH0a8Hhv1wMdTVQkWLebwvAPbfbZoXqT2Kblk7V8Yq+K44+vc Oqd2n4MTf0CQTSddHgvLTZ88ENoHT7v1rMUrlkpK6ydl7bAaOSa2rZ/Gz1SbVBrm UNIVnnnUHOGeBwJPhRXjdqP17RFDCG5oAl9ilgiLatIyFQDQZlsusXLGEDAnln2a X/BPHuhmst+XGvaAo3W3A3J/C28sOw0= -----END CERTIFICATE-----Generated at Sun Jan 25 02:48:16 2026 by rpki-client