This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft File: JaGXWBbNnonz1upqdjAiQ77DRe4.mft (raw, json) Hash identifier: kpNP59hb4byHk54h1dS5CJeg3IUjr1Pk38AA7UlQla8= Subject key identifier: 7E:93:18:17:11:45:E4:7B:B6:1A:80:54:34:C4:C3:61:24:64:13:0C Authority key identifier: 25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE Certificate issuer: /CN=A91D488C/serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft Manifest number: 5F Signing time: Sun 25 Jan 2026 06:13:11 +0000 Manifest this update: Sun 25 Jan 2026 06:13:11 +0000 Manifest next update: Sun 01 Feb 2026 06:13:11 +0000 Files and hashes: 1: JaGXWBbNnonz1upqdjAiQ77DRe4.crl (hash: jsmp56dnkBo0ymTj1zPQOG+YLEoTrxff9l+NO1o8jyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D488C, serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE Validity Not Before: Jan 25 06:13:11 2026 GMT Not After : Feb 1 06:13:11 2026 GMT Subject: CN=6975b477-8640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:38:9e:5a:1a:49:74:f0:e1:b8:2f:d6:b9:02: 75:d1:c5:b6:3d:8c:a7:bc:5e:b9:af:95:b3:97:0d: 50:a1:28:8e:06:29:a5:af:42:6e:f4:d0:4c:b0:5d: 8c:07:b2:6f:ca:1f:1a:6e:9e:72:0e:a0:36:59:36: 67:30:04:ac:18:07:3f:8a:a0:83:ec:2c:e8:9d:c5: c7:65:6e:96:84:e5:ee:72:5c:a8:42:05:ab:d6:52: d8:9c:c3:a1:c4:ce:05:ba:95:1d:81:b2:13:ef:b2: 74:15:5f:37:87:3a:da:a6:a0:8b:fc:a8:dd:9c:78: f2:cf:e5:a8:f3:50:4a:13:c5:d8:27:90:a8:5f:cc: d3:f5:8c:01:5c:ab:36:db:79:89:1d:7e:ff:02:a2: b8:20:9c:f8:54:49:91:44:29:e0:96:ef:65:fe:f6: d7:40:7c:ca:b7:d9:81:99:a0:7e:8a:f8:41:cc:87: f5:b7:f0:d2:49:34:d6:1f:7a:52:c9:a5:37:22:38: bd:7e:99:f8:9a:34:dc:e3:5b:e4:2b:5f:8c:71:cf: 00:3c:c1:12:8c:15:b3:3d:49:8c:c4:38:0f:62:93: 63:ed:69:ac:f0:1e:b7:3b:eb:17:c9:3c:58:16:2d: a8:c2:0b:08:39:03:44:b3:86:c4:63:c6:a7:db:37: bb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:93:18:17:11:45:E4:7B:B6:1A:80:54:34:C4:C3:61:24:64:13:0C X509v3 Authority Key Identifier: keyid:25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:1c:1f:88:39:91:89:28:b9:6f:fe:6b:53:13:07:f9:4d:96: a1:ca:38:eb:35:3a:ee:19:50:e7:21:a6:83:92:af:f8:af:65: 68:34:51:7c:96:2b:65:f4:40:fe:32:50:01:b6:07:e6:81:41: 56:c4:ba:51:47:6c:e0:56:e8:f9:f9:c9:28:9f:6e:c1:e3:ab: ec:89:42:e8:9c:2b:5b:a7:79:b4:25:34:23:1d:8d:21:03:5a: f7:33:ef:68:5f:34:0f:86:f9:cd:2c:f3:24:83:9a:76:22:76: a7:0b:8b:bb:1a:cf:4f:97:b2:19:9c:3c:e4:b2:ad:71:49:c5: 30:76:73:6c:47:4e:ea:03:cf:c4:1f:e3:8b:16:37:79:a1:67: 06:39:57:07:5f:54:01:cb:d5:26:dc:61:52:87:f2:0f:44:95: e3:ce:16:cd:35:2d:55:f4:7b:a6:0d:bd:83:00:64:62:a0:aa: 01:83:68:dc:95:64:d6:6d:b5:fe:e5:6b:28:c8:15:57:ba:1c: f9:09:a4:11:ab:f5:c6:ce:28:5d:71:ff:eb:07:94:0d:ba:91: aa:51:53:9f:f9:bb:0d:a1:9f:8c:b3:3d:bb:09:c7:c6:81:93: 67:30:4a:dc:1a:fd:37:1f:17:ba:94:91:1f:64:8a:ec:56:f8: ae:54:6e:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDg4QzExMC8GA1UEBRMoMjVBMTk3NTgxNkNEOUU4OUYzRDZFQTZBNzYzMDIyNDNC RUMzNDVFRTAeFw0yNjAxMjUwNjEzMTFaFw0yNjAyMDEwNjEzMTFaMBgxFjAUBgNV BAMMDTY5NzViNDc3LTg2NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/OJ5aGkl08OG4L9a5AnXRxbY9jKe8XrmvlbOXDVChKI4GKaWvQm700EywXYwH sm/KHxpunnIOoDZZNmcwBKwYBz+KoIPsLOidxcdlbpaE5e5yXKhCBavWUticw6HE zgW6lR2BshPvsnQVXzeHOtqmoIv8qN2cePLP5ajzUEoTxdgnkKhfzNP1jAFcqzbb eYkdfv8CorggnPhUSZFEKeCW72X+9tdAfMq32YGZoH6K+EHMh/W38NJJNNYfelLJ pTciOL1+mfiaNNzjW+QrX4xxzwA8wRKMFbM9SYzEOA9ik2PtaazwHrc76xfJPFgW LajCCwg5A0SzhsRjxqfbN7upAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfpMYFxFF 5Hu2GoBUNMTDYSRkEwwwHwYDVR0jBBgwFoAUJaGXWBbNnonz1upqdjAiQ77DRe4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0ODhDLzRGNkQ2RjYwNkI4 OTExRjA5NUYxMTAyQkM0RjlBRTAyL0phR1hXQmJObm9uejF1cHFkakFpUTc3RFJl NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmFHWFdCYk5ub256MXVwcWRqQWlRNzdEUmU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 ODhDLzRGNkQ2RjYwNkI4OTExRjA5NUYxMTAyQkM0RjlBRTAyL0phR1hXQmJObm9u ejF1cHFkakFpUTc3RFJlNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMEcH4g5kYkouW/+a1MTB/lNlqHKOOs1Ou4ZUOchpoOSr/ivZWg0UXyW K2X0QP4yUAG2B+aBQVbEulFHbOBW6Pn5ySifbsHjq+yJQuicK1unebQlNCMdjSED Wvcz72hfNA+G+c0s8ySDmnYidqcLi7saz0+XshmcPOSyrXFJxTB2c2xHTuoDz8Qf 44sWN3mhZwY5VwdfVAHL1SbcYVKH8g9ElePOFs01LVX0e6YNvYMAZGKgqgGDaNyV ZNZttf7layjIFVe6HPkJpBGr9cbOKF1x/+sHlA26kapRU5/5uw2hn4yzPbsJx8aB k2cwStwa/TcfF7qUkR9kiuxW+K5Ubqk= -----END CERTIFICATE-----Generated at Sun Jan 25 10:48:16 2026 by rpki-client