This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft File: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft (raw, json) Hash identifier: RJsmhvS2I4eUfDHJRxVyq/3bYxfLT4qKTR1tkEaVMUI= Subject key identifier: 8E:53:5A:94:52:03:32:A2:0E:90:7D:88:9E:79:E0:92:20:FE:B3:81 Authority key identifier: A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 Certificate issuer: /CN=A91CE6EC/serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Certificate serial: 2600 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft Manifest number: 25F4 Signing time: Sat 24 Jan 2026 15:34:16 +0000 Manifest this update: Sat 24 Jan 2026 15:34:16 +0000 Manifest next update: Sat 31 Jan 2026 15:34:16 +0000 Files and hashes: 1: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl (hash: gHvCnGPcB8WxA+YvifJzZo/r8b8EFtInDg2v0guxRYQ=) 2: 96F26DD8E4A511EF8259C769C4F9AE02.roa (hash: 106BmLtTyVCv8aiEyQESyMsMUTUgBCG4YPN0EmuEMYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9728 (0x2600) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6EC, serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Validity Not Before: Jan 24 15:34:16 2026 GMT Not After : Jan 31 15:34:16 2026 GMT Subject: CN=6974e678-d493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a8:16:53:e8:85:ed:75:13:d0:75:80:14:f7: 7c:c7:da:45:fd:d4:0b:19:91:c0:f8:c5:8b:cf:b8: d4:05:09:c5:d0:fd:71:47:64:cd:11:13:3b:b9:d4: 22:3c:af:fb:af:11:8b:1e:f6:cc:9b:b4:07:5c:ae: 13:52:b4:7d:31:6a:55:a9:d7:6c:a7:05:ec:e0:28: 87:6f:14:26:f3:a4:e4:e9:dd:41:8a:4c:67:22:fa: 0f:8c:56:54:a1:87:8d:05:ab:c1:66:1a:d1:ed:ac: 13:66:3e:fa:d4:b8:ec:60:3e:ce:bc:8f:1c:9e:12: 92:76:9d:65:62:13:5b:08:57:8a:fc:37:40:88:8a: 3f:f7:a1:c1:2e:3f:11:64:10:3f:af:a1:0b:4f:1c: 7d:b4:cf:50:44:c0:e5:52:91:85:eb:98:43:b1:51: b6:8c:3c:98:1f:c8:60:cb:8b:f0:4b:a5:58:e7:ef: 93:8d:8a:84:45:d7:1d:1a:89:8d:5a:e0:ab:78:43: c5:b6:0e:fd:f3:2e:1a:24:6d:cb:2e:a7:4c:a4:cf: 55:14:df:5d:9c:ef:12:08:e8:8c:c6:88:fa:5f:5e: 5a:fe:db:d8:76:41:dc:50:9a:cb:3c:6a:98:e1:d3: f2:ed:f2:cc:b1:2c:f5:67:d7:ce:18:79:30:86:12: 1e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:53:5A:94:52:03:32:A2:0E:90:7D:88:9E:79:E0:92:20:FE:B3:81 X509v3 Authority Key Identifier: keyid:A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e5:28:ba:dd:e4:42:2c:ee:54:43:bc:e8:1a:0a:fb:0c:08:93: 03:fb:1d:bc:f7:2d:a1:e8:1a:c8:84:e3:85:19:af:84:a2:de: e5:8c:fb:a9:42:de:18:50:89:9c:a2:6b:9f:07:b1:86:92:bb: 40:f9:6e:b2:3a:13:52:ff:19:81:0e:dd:6a:80:22:74:49:1b: db:d2:77:e3:b3:60:4c:48:ce:97:df:bb:2e:1e:78:45:e0:ff: 5c:c6:f0:5c:84:33:90:62:c5:de:45:54:c5:49:6e:52:31:1d: 63:b9:24:fd:4a:ea:cd:cf:40:ac:3f:ec:4a:3c:2d:4b:b4:54: e4:66:b7:9e:eb:69:1a:b1:27:29:23:f7:69:6b:92:8a:d0:88: ed:91:b2:57:01:62:7b:12:83:63:3b:8a:cb:2c:f0:9f:c3:30: 24:a6:79:0c:20:07:97:fc:9a:54:7f:18:9b:6a:dc:c1:c8:5c: b7:1a:24:f4:3d:7a:d4:5e:16:50:62:3f:91:f3:19:af:36:cb: 51:55:5f:c3:56:a9:a1:bd:3d:ed:c6:77:6c:bc:27:7f:29:83: a0:6f:d9:f1:28:68:81:f8:db:a6:d1:fe:32:3e:54:0f:4d:34: e9:27:bc:11:74:a1:8c:5d:86:5a:8d:4a:59:3b:db:f5:6a:da: c8:76:44:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2RUMxMTAvBgNVBAUTKEExQzIzOTY1NzA0MDE3NzI0MjlFQjhDQkIwREY2NjUz RjE2NzhDRjYwHhcNMjYwMTI0MTUzNDE2WhcNMjYwMTMxMTUzNDE2WjAYMRYwFAYD VQQDDA02OTc0ZTY3OC1kNDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl6gWU+iF7XUT0HWAFPd8x9pF/dQLGZHA+MWLz7jUBQnF0P1xR2TNERM7udQi PK/7rxGLHvbMm7QHXK4TUrR9MWpVqddspwXs4CiHbxQm86Tk6d1BikxnIvoPjFZU oYeNBavBZhrR7awTZj761LjsYD7OvI8cnhKSdp1lYhNbCFeK/DdAiIo/96HBLj8R ZBA/r6ELTxx9tM9QRMDlUpGF65hDsVG2jDyYH8hgy4vwS6VY5++TjYqERdcdGomN WuCreEPFtg798y4aJG3LLqdMpM9VFN9dnO8SCOiMxoj6X15a/tvYdkHcUJrLPGqY 4dPy7fLMsSz1Z9fOGHkwhhIe8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5TWpRS AzKiDpB9iJ554JIg/rOBMB8GA1UdIwQYMBaAFKHCOWVwQBdyQp64y7DfZlPxZ4z2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZFQy9EM0FCNjAxNjE0 QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYzSkNucmpMc045bVVfRm5q UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29jSTVaWEJBRjNKQ25yakxzTjltVV9GbmpQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTZFQy9EM0FCNjAxNjE0QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYz SkNucmpMc045bVVfRm5qUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDlKLrd5EIs7lRDvOgaCvsMCJMD+x289y2h6BrIhOOFGa+Eot7ljPup Qt4YUImcomufB7GGkrtA+W6yOhNS/xmBDt1qgCJ0SRvb0nfjs2BMSM6X37suHnhF 4P9cxvBchDOQYsXeRVTFSW5SMR1juST9SurNz0CsP+xKPC1LtFTkZree62kasScp I/dpa5KK0IjtkbJXAWJ7EoNjO4rLLPCfwzAkpnkMIAeX/JpUfxibatzByFy3GiT0 PXrUXhZQYj+R8xmvNstRVV/DVqmhvT3txndsvCd/KYOgb9nxKGiB+Num0f4yPlQP TTTpJ7wRdKGMXYZajUpZO9v1atrIdkQX -----END CERTIFICATE-----Generated at Sun Jan 25 09:20:54 2026 by rpki-client