This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft File: oSTS0QT3ck-7jw8maUnikFSMAbE.mft (raw, json) Hash identifier: JooyYuZZiyJX7sP3yi/nLZY8LmFzVCAqQWbVjSWbb14= Subject key identifier: 22:43:FE:3C:17:B6:DF:6E:11:98:D5:33:FC:41:78:54:41:55:37:DF Authority key identifier: A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1 Certificate issuer: /CN=A91CD0DE/serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft Manifest number: 34 Signing time: Fri 23 Jan 2026 06:32:45 +0000 Manifest this update: Fri 23 Jan 2026 06:32:44 +0000 Manifest next update: Fri 30 Jan 2026 06:32:44 +0000 Files and hashes: 1: oSTS0QT3ck-7jw8maUnikFSMAbE.crl (hash: eU2qtXSPjQVftjeQnr21Aixbobt54LyMPdhXvBEv5wQ=) 2: 60F50042A99411F0A4CF2116C4F9AE02.roa (hash: Ws+o5lfxkWBzbjla9ZUB6K0ykZgSsGy7AqspFs8FAvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD0DE, serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1 Validity Not Before: Jan 23 06:32:44 2026 GMT Not After : Jan 30 06:32:44 2026 GMT Subject: CN=6973160d-8059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0a:5d:6a:c3:c1:9a:56:06:7e:31:c6:56:85: a1:f8:b4:40:7e:bb:1b:e8:e5:27:92:b3:60:06:b0: 77:28:8b:b3:1b:28:ae:52:88:12:36:4d:2a:c8:f8: e2:af:49:87:39:60:8f:74:84:2d:01:1f:8e:05:35: 33:09:ed:62:41:82:94:c7:2d:bf:94:f3:58:f8:93: 05:53:9d:0b:45:ab:05:c4:cc:92:52:da:f5:09:46: ed:25:35:7d:51:13:99:a5:7c:87:16:60:3a:80:48: 1f:50:bb:88:98:68:98:a1:ee:cd:61:1f:18:08:cd: 64:ef:f7:85:36:61:fb:19:91:df:6b:e2:03:db:e7: 1b:cf:fd:38:13:8a:2d:7b:a4:33:3c:60:66:e7:b2: 36:55:36:e4:5e:a9:a0:dd:f5:25:28:8d:2f:b8:db: 94:82:07:de:42:44:c2:51:a1:e6:62:fe:92:f5:59: e3:d0:bf:b6:2b:12:ca:5a:40:7c:ed:1e:48:ea:ee: c5:9b:11:80:51:72:2c:ea:8f:5c:58:39:37:d6:86: 0e:83:fa:cf:01:cd:de:06:5f:6b:5d:3c:1b:3e:0b: 4d:1d:d6:ca:3c:06:32:fb:23:eb:4f:9c:7c:b3:5d: cd:30:23:ce:ff:9f:cf:10:d5:3e:c2:22:34:ab:df: d4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:43:FE:3C:17:B6:DF:6E:11:98:D5:33:FC:41:78:54:41:55:37:DF X509v3 Authority Key Identifier: keyid:A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:0b:5c:4b:9c:86:20:23:d4:21:8d:d9:80:d0:35:22:a6:2d: c6:a5:b7:5c:fd:2f:21:43:8d:c3:b9:bf:44:b1:1c:3e:db:f8: b3:46:81:d2:d5:26:5c:dc:fd:f8:99:2b:ad:41:22:3e:61:0a: 55:df:d3:65:4d:49:01:52:60:42:22:6a:84:fa:0e:45:ec:7d: 1f:33:63:ad:94:e9:98:bc:cc:d6:d0:ab:09:be:56:df:93:a4: 69:04:62:7d:8c:c0:47:4e:20:cd:a9:35:61:df:63:d4:5e:29: 0d:12:74:c9:98:a0:8a:2f:47:49:36:9e:db:f9:72:4f:16:e0: 69:43:f6:93:12:3c:c0:6c:1f:03:15:5f:0e:c1:08:e9:15:e3: 27:24:f8:e9:8f:92:07:95:fe:12:d3:66:1b:28:7e:5e:d2:d6: 0d:0c:0d:7e:5d:18:ad:4f:85:be:7c:5a:0e:46:23:e7:59:68: 9e:20:84:8b:58:60:e8:e2:7a:fc:23:3d:33:a1:09:e8:02:3b: 42:44:1a:1b:ba:96:19:a9:fd:e7:d3:4f:9a:96:ab:71:5e:68: ba:48:03:0c:0e:7f:b6:01:38:9d:88:f3:a9:a7:69:3c:e7:83: 33:88:48:45:4c:8f:70:e1:c3:ac:7a:48:dc:0e:7f:1b:25:be: 97:63:f0:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDBERTExMC8GA1UEBRMoQTEyNEQyRDEwNEY3NzI0RkJCOEYwRjI2Njk0OUUyOTA1 NDhDMDFCMTAeFw0yNjAxMjMwNjMyNDRaFw0yNjAxMzAwNjMyNDRaMBgxFjAUBgNV BAMMDTY5NzMxNjBkLTgwNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2Cl1qw8GaVgZ+McZWhaH4tEB+uxvo5SeSs2AGsHcoi7MbKK5SiBI2TSrI+OKv SYc5YI90hC0BH44FNTMJ7WJBgpTHLb+U81j4kwVTnQtFqwXEzJJS2vUJRu0lNX1R E5mlfIcWYDqASB9Qu4iYaJih7s1hHxgIzWTv94U2YfsZkd9r4gPb5xvP/TgTii17 pDM8YGbnsjZVNuReqaDd9SUojS+425SCB95CRMJRoeZi/pL1WePQv7YrEspaQHzt Hkjq7sWbEYBRcizqj1xYOTfWhg6D+s8Bzd4GX2tdPBs+C00d1so8BjL7I+tPnHyz Xc0wI87/n88Q1T7CIjSr39SNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIkP+PBe2 324RmNUz/EF4VEFVN98wHwYDVR0jBBgwFoAUoSTS0QT3ck+7jw8maUnikFSMAbEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMERFLzVCNUY0NTE2QTk4 RjExRjBCMUZBNTA2NkM0RjlBRTAyL29TVFMwUVQzY2stN2p3OG1hVW5pa0ZTTUFi RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1NUUzBRVDNjay03anc4bWFVbmlrRlNNQWJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MERFLzVCNUY0NTE2QTk4RjExRjBCMUZBNTA2NkM0RjlBRTAyL29TVFMwUVQzY2st N2p3OG1hVW5pa0ZTTUFiRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFcLXEuchiAj1CGN2YDQNSKmLcalt1z9LyFDjcO5v0SxHD7b+LNGgdLV Jlzc/fiZK61BIj5hClXf02VNSQFSYEIiaoT6DkXsfR8zY62U6Zi8zNbQqwm+Vt+T pGkEYn2MwEdOIM2pNWHfY9ReKQ0SdMmYoIovR0k2ntv5ck8W4GlD9pMSPMBsHwMV Xw7BCOkV4yck+OmPkgeV/hLTZhsofl7S1g0MDX5dGK1Phb58Wg5GI+dZaJ4ghItY YOjievwjPTOhCegCO0JEGhu6lhmp/efTT5qWq3FeaLpIAwwOf7YBOJ2I86mnaTzn gzOISEVMj3Dhw6x6SNwOfxslvpdj8Kk= -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:44 2026 by rpki-client