This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft File: krTCppKUC1SOY1BEM1qYW-4ivaE.mft (raw, json) Hash identifier: qEuhwfzNqKxOCDhdFssYjzVRk2ROZpHvsCUxiQhKlfI= Subject key identifier: 59:FD:89:D9:4A:0F:EE:C4:1D:95:CF:6D:49:4A:B7:04:0A:A6:58:BD Authority key identifier: 92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 Certificate issuer: /CN=A91CFDD0/serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft Manifest number: 49 Signing time: Sun 25 Jan 2026 06:22:11 +0000 Manifest this update: Sun 25 Jan 2026 06:22:10 +0000 Manifest next update: Sun 01 Feb 2026 06:22:10 +0000 Files and hashes: 1: krTCppKUC1SOY1BEM1qYW-4ivaE.crl (hash: vjatW3UGayKaJfdasiHM+UfakVKN1C22k+4i9mwPAHw=) 2: 0D06C406887511F094C09643C4F9AE02.roa (hash: 8NVdhPpscq33NdTMYxVu51BUZJlZbS+DpruUrgyU1TM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFDD0, serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Validity Not Before: Jan 25 06:22:10 2026 GMT Not After : Feb 1 06:22:10 2026 GMT Subject: CN=6975b693-599a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:51:4a:86:c6:c5:8b:b6:01:32:ac:df:e7:02: ca:e6:12:c9:5a:1b:6a:8e:b0:2f:d0:0f:ed:25:01: ae:0e:e9:ae:93:cb:f0:e5:73:11:43:7b:c9:29:d9: 39:ea:b9:5f:85:ea:a9:f4:78:a3:ab:a0:d5:b5:e0: bb:ca:04:36:02:63:d5:38:4e:7b:0f:df:cc:d0:87: 2e:36:74:be:c9:f6:5c:a6:01:4c:69:fb:75:ba:60: 05:ee:21:37:de:e0:31:dc:9e:2a:ad:19:49:eb:5b: 60:66:94:46:82:2a:03:b0:61:63:3b:82:7c:df:37: f8:b3:70:87:e8:fa:ae:cc:82:db:9b:21:fc:6d:24: 18:1f:ce:82:ff:9b:83:24:0d:b0:62:32:c8:cc:ac: bb:60:31:0c:59:25:92:72:c8:da:ed:7d:05:41:72: 95:20:4f:7a:06:f6:6b:eb:4b:0c:db:36:d9:af:6c: 8c:e7:20:e3:08:ea:97:ee:fd:c8:40:83:ea:03:58: 6b:f8:1e:45:38:a3:ad:4a:0e:b0:40:9a:bf:1f:11: 16:1a:29:a7:c1:cd:aa:06:6b:6d:e4:c0:1d:00:26: 6f:2c:7e:af:74:fc:b4:75:c2:39:ae:8b:4b:7d:0b: 8c:8c:3c:43:d3:10:ce:1b:b7:b3:18:e8:f8:e4:72: 73:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FD:89:D9:4A:0F:EE:C4:1D:95:CF:6D:49:4A:B7:04:0A:A6:58:BD X509v3 Authority Key Identifier: keyid:92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:b9:62:fc:4a:c2:7e:25:8f:1e:7a:a8:23:12:fd:e7:b5:a4: 4b:32:45:6e:22:c8:f5:07:8d:1f:a1:98:16:89:65:57:09:22: ee:9c:7d:fc:54:f0:01:5b:a0:47:dc:e2:35:cb:41:ac:60:54: 50:f1:fa:7e:d8:88:00:1e:d3:18:2b:3f:c7:3c:a5:1b:aa:c7: 2b:4b:e4:ac:4e:6f:16:f3:d4:d2:9f:b9:26:0e:e2:57:54:ba: 45:c2:65:e0:f5:e3:89:b9:52:60:af:13:89:08:b5:c3:d7:ee: 48:cf:3e:ae:a3:db:1a:f3:8c:81:38:a8:87:8f:13:c0:19:e9: 7e:41:03:1c:ba:c8:84:21:25:d7:e7:4e:b8:dd:b1:51:d9:c8: 1a:83:c8:4d:35:81:49:83:56:3d:47:f0:0e:7a:eb:f9:7e:3b: da:ec:1d:ed:fb:ae:14:ac:06:9a:87:15:00:b2:f3:04:0d:47: 7e:85:c5:e4:de:c0:c2:7b:f0:6d:ac:17:6f:07:4e:ba:6f:a2: 4d:e8:29:fb:78:51:af:10:63:d8:26:ba:86:53:0e:b4:99:f7: c7:9f:9b:2c:a0:48:b3:ac:0b:e1:cd:09:48:dd:55:c3:89:0f: 3b:fa:3c:11:84:de:27:86:ea:d7:11:ea:aa:92:97:2b:04:d1: a3:27:77:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkREMDExMC8GA1UEBRMoOTJCNEMyQTY5Mjk0MEI1NDhFNjM1MDQ0MzM1QTk4NUJF RTIyQkRBMTAeFw0yNjAxMjUwNjIyMTBaFw0yNjAyMDEwNjIyMTBaMBgxFjAUBgNV BAMMDTY5NzViNjkzLTU5OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqUUqGxsWLtgEyrN/nAsrmEslaG2qOsC/QD+0lAa4O6a6Ty/DlcxFDe8kp2Tnq uV+F6qn0eKOroNW14LvKBDYCY9U4TnsP38zQhy42dL7J9lymAUxp+3W6YAXuITfe 4DHcniqtGUnrW2BmlEaCKgOwYWM7gnzfN/izcIfo+q7MgtubIfxtJBgfzoL/m4Mk DbBiMsjMrLtgMQxZJZJyyNrtfQVBcpUgT3oG9mvrSwzbNtmvbIznIOMI6pfu/chA g+oDWGv4HkU4o61KDrBAmr8fERYaKafBzaoGa23kwB0AJm8sfq90/LR1wjmui0t9 C4yMPEPTEM4bt7MY6PjkcnOjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWf2J2UoP 7sQdlc9tSUq3BAqmWL0wHwYDVR0jBBgwFoAUkrTCppKUC1SOY1BEM1qYW+4ivaEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGREQwLzlFMEVFODQ0ODg3 NDExRjA4QkQ3M0IzRkM0RjlBRTAyL2tyVENwcEtVQzFTT1kxQkVNMXFZVy00aXZh RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva3JUQ3BwS1VDMVNPWTFCRU0xcVlXLTRpdmFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG REQwLzlFMEVFODQ0ODg3NDExRjA4QkQ3M0IzRkM0RjlBRTAyL2tyVENwcEtVQzFT T1kxQkVNMXFZVy00aXZhRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFG5YvxKwn4ljx56qCMS/ee1pEsyRW4iyPUHjR+hmBaJZVcJIu6cffxU 8AFboEfc4jXLQaxgVFDx+n7YiAAe0xgrP8c8pRuqxytL5KxObxbz1NKfuSYO4ldU ukXCZeD144m5UmCvE4kItcPX7kjPPq6j2xrzjIE4qIePE8AZ6X5BAxy6yIQhJdfn TrjdsVHZyBqDyE01gUmDVj1H8A566/l+O9rsHe37rhSsBpqHFQCy8wQNR36FxeTe wMJ78G2sF28HTrpvok3oKft4Ua8QY9gmuoZTDrSZ98efmyygSLOsC+HNCUjdVcOJ Dzv6PBGE3ieG6tcR6qqSlysE0aMnd6Y= -----END CERTIFICATE-----Generated at Sun Jan 25 13:53:20 2026 by rpki-client