This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft File: kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json) Hash identifier: 5+XuZEeumbJzWh1bA4uM4fhNL2sAc1Y9YShtESOnPvw= Subject key identifier: 39:2D:2C:EE:40:B5:10:33:11:3D:4F:8D:73:9F:3D:45:42:82:FC:CA Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E Certificate issuer: /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Certificate serial: 0D4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft Manifest number: 0D3D Signing time: Sat 24 Jan 2026 17:39:34 +0000 Manifest this update: Sat 24 Jan 2026 17:39:34 +0000 Manifest next update: Sat 31 Jan 2026 17:39:34 +0000 Files and hashes: 1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: oP7Kvu5LDjbB6aA3Gs3eDbX7kMXkfFHOEuU40mHkXNM=) 2: B579952EEBB311EEAF9E7718C4F9AE02.roa (hash: cQvewbJ40h6EgOgsAFnDbtknSxNEUHRWVYRLfKeQf+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3406 (0xd4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF83F, serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Validity Not Before: Jan 24 17:39:34 2026 GMT Not After : Jan 31 17:39:34 2026 GMT Subject: CN=697503d6-d87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:da:8b:f4:26:4c:51:7d:6f:09:7a:aa:c8:08: d4:b1:e0:dc:d4:61:b1:b9:df:ef:92:83:bc:6a:66: 4b:d6:b0:28:f3:25:8a:97:84:60:df:10:8a:51:bf: 24:1c:c7:60:c2:4e:5a:0b:98:04:22:a2:46:ec:58: ff:58:36:46:6c:53:17:11:9d:89:9a:0c:15:22:59: 23:7d:bc:5c:6a:cd:18:f2:76:08:e5:48:b0:fd:27: 36:90:aa:8b:1d:5c:6a:b4:cb:e2:06:44:ad:8b:cc: 3e:ca:03:ee:86:60:e8:48:fd:9f:6d:ce:05:61:77: 42:24:c0:db:7f:20:68:6b:d9:32:8e:46:35:de:3d: 9f:4b:84:f0:98:e8:5b:18:3d:c7:d9:3c:a7:d3:0f: 20:cc:a3:f1:45:1e:fe:a1:75:82:69:bc:c7:85:f5: f0:98:30:44:e7:d9:7b:8c:f6:7b:2a:33:64:0f:ae: f1:fd:ec:fc:77:48:a1:b5:c6:58:61:d4:ab:8d:14: 62:60:a8:b2:cb:2e:ae:77:e3:ad:95:9c:34:9b:a4: 57:96:67:2c:1b:97:c3:d0:97:80:7a:7c:a6:aa:64: fa:08:c5:fe:1c:9b:72:c4:ca:ed:62:fe:4e:99:53: 6a:99:49:f8:39:26:e6:e2:7b:98:95:2d:23:e2:b0: f2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2D:2C:EE:40:B5:10:33:11:3D:4F:8D:73:9F:3D:45:42:82:FC:CA X509v3 Authority Key Identifier: keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:ac:f3:70:8d:22:2e:7c:01:70:79:82:fd:03:4b:1d:0e:55: 82:f4:60:44:de:80:fb:5d:8f:82:1a:23:4b:d7:86:5b:59:45: 05:75:ad:c8:6b:b9:68:ea:bd:b7:a1:37:de:1c:4a:0a:28:ee: 6c:c0:e2:ee:db:16:74:b6:b2:7f:fb:fc:85:fe:aa:9b:87:6f: e1:79:6f:1e:b5:ba:32:68:4f:23:52:44:60:3b:5f:98:0a:fc: e1:66:87:d9:ab:86:ff:b7:6c:bc:e4:d3:4e:f2:2c:49:97:15: d7:51:f5:7c:c9:0b:d9:a9:14:ac:ed:f1:f4:cc:c5:62:36:31: 3d:f4:a0:8f:d6:e1:c9:ff:0c:fc:fa:c3:55:d4:72:5a:a9:c7: 75:fc:70:ec:7e:30:b5:3a:ae:cc:98:d4:c0:57:86:20:3c:c8: 6e:99:ed:83:18:20:58:e1:fe:82:f4:cc:dd:40:84:42:80:ef: 1e:19:68:88:39:12:01:ec:2b:79:71:8b:3e:5a:ff:f9:71:81: d1:28:72:50:fa:6f:1e:af:f0:f7:9d:32:7e:9c:c1:ee:5f:44: ec:50:ec:a4:27:db:8a:1a:7f:67:4b:39:a0:c1:ce:cc:7a:4f: 0e:35:07:df:48:90:ab:12:b5:c9:ee:10:7e:c2:1f:c8:98:0e: 3a:a4:33:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4M0YxMTAvBgNVBAUTKDkyOTg4OUJCNUQzNEU4NjBBQ0JGNzA4OTQzMzdBNDYy QzFENkFDMkUwHhcNMjYwMTI0MTczOTM0WhcNMjYwMTMxMTczOTM0WjAYMRYwFAYD VQQDDA02OTc1MDNkNi1kODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dqL9CZMUX1vCXqqyAjUseDc1GGxud/vkoO8amZL1rAo8yWKl4Rg3xCKUb8k HMdgwk5aC5gEIqJG7Fj/WDZGbFMXEZ2JmgwVIlkjfbxcas0Y8nYI5Uiw/Sc2kKqL HVxqtMviBkSti8w+ygPuhmDoSP2fbc4FYXdCJMDbfyBoa9kyjkY13j2fS4TwmOhb GD3H2Tyn0w8gzKPxRR7+oXWCabzHhfXwmDBE59l7jPZ7KjNkD67x/ez8d0ihtcZY YdSrjRRiYKiyyy6ud+OtlZw0m6RXlmcsG5fD0JeAenymqmT6CMX+HJtyxMrtYv5O mVNqmUn4OSbm4nuYlS0j4rDy0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDktLO5A tRAzET1PjXOfPUVCgvzKMB8GA1UdIwQYMBaAFJKYibtdNOhgrL9wiUM3pGLB1qwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjgzRi84OTIzOEVDQ0VG NEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZHQ3N2M0NKUXpla1lzSFdy QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twaUp1MTAwNkdDc3YzQ0pRemVrWXNIV3JDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjgzRi84OTIzOEVDQ0VGNEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZH Q3N2M0NKUXpla1lzSFdyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgrPNwjSIufAFweYL9A0sdDlWC9GBE3oD7XY+CGiNL14ZbWUUFda3I a7lo6r23oTfeHEoKKO5swOLu2xZ0trJ/+/yF/qqbh2/heW8etboyaE8jUkRgO1+Y CvzhZofZq4b/t2y85NNO8ixJlxXXUfV8yQvZqRSs7fH0zMViNjE99KCP1uHJ/wz8 +sNV1HJaqcd1/HDsfjC1Oq7MmNTAV4YgPMhume2DGCBY4f6C9MzdQIRCgO8eGWiI ORIB7Ct5cYs+Wv/5cYHRKHJQ+m8er/D3nTJ+nMHuX0TsUOykJ9uKGn9nSzmgwc7M ek8ONQffSJCrErXJ7hB+wh/ImA46pDPn -----END CERTIFICATE-----Generated at Sun Jan 25 04:33:14 2026 by rpki-client