This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft File: 5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json) Hash identifier: BrUA8Kn3pr1kySN8qGMzLRc/uCNiX+rl7yvFkNCPCQE= Subject key identifier: D0:7B:1D:8A:DA:75:BA:40:5B:38:FF:CA:C4:28:A9:F8:B4:A6:3E:C8 Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 Certificate issuer: /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Certificate serial: 0D2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft Manifest number: 0D20 Signing time: Sat 24 Jan 2026 17:42:52 +0000 Manifest this update: Sat 24 Jan 2026 17:42:52 +0000 Manifest next update: Sat 31 Jan 2026 17:42:52 +0000 Files and hashes: 1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: bw55XOhSR9Xv+QwH3Lc0jDTdHn/EfQvfFs3fmg9PZxg=) 2: D1C40E28183411EF99FD8776C4F9AE02.roa (hash: ovp+DvhtxAcfaLvm4B/msgxFKoL594Nnc6PIvhnqZGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3375 (0xd2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Validity Not Before: Jan 24 17:42:52 2026 GMT Not After : Jan 31 17:42:52 2026 GMT Subject: CN=6975049c-d45f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:97:a2:58:76:10:cb:69:b1:eb:88:97:b3:58: d7:82:e3:53:49:3c:b2:a4:d6:27:e9:c2:d4:a1:2d: 60:be:03:1c:cb:12:07:45:5a:b3:ef:94:1b:92:19: 03:c7:14:48:3a:e5:fa:11:68:b6:48:5e:c4:fc:53: dc:1b:eb:e4:fc:75:a9:ba:2f:7e:8e:68:72:c7:7c: 3e:85:7d:89:11:71:63:97:21:14:31:d1:55:28:84: 90:d5:6f:cf:6c:84:d1:87:58:5d:ab:95:c4:6a:3c: ff:2c:90:45:58:c3:1e:09:0f:30:ee:b9:c2:71:16: 8a:32:d1:1d:c2:f2:8e:ef:cc:e5:18:9c:eb:78:ab: 36:59:90:4a:a0:b7:5b:a5:7f:da:ca:7d:18:e5:22: dc:bd:38:e3:41:db:e1:09:5e:42:0d:98:2f:7c:1d: c7:0e:fb:7e:55:50:a8:5f:0b:cc:70:65:71:59:1f: 87:bd:b9:93:6f:53:1e:41:44:74:09:10:e5:9c:f4: 73:ae:6d:05:3c:59:ed:54:67:fe:ab:4f:98:06:db: f2:fd:f4:57:c1:5f:dd:11:4f:fd:2b:f2:6b:67:3e: ab:db:3c:6a:7e:45:c5:d9:76:62:c5:c3:7f:03:e4: ae:1e:1f:fa:d5:98:2b:e5:59:53:7c:ff:24:6d:19: 9d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7B:1D:8A:DA:75:BA:40:5B:38:FF:CA:C4:28:A9:F8:B4:A6:3E:C8 X509v3 Authority Key Identifier: keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e7:1c:ec:24:33:3d:df:97:18:ba:5e:8a:e9:fb:4d:67:7e: de:2c:98:11:10:ba:9d:ed:a5:0f:a6:79:5c:10:90:05:fb:6b: 1c:28:fe:69:5c:4b:11:25:d5:43:11:7d:27:9a:99:cc:1e:67: 22:4f:1a:50:9f:43:74:86:e1:98:2c:39:c8:83:48:f5:8f:8f: de:25:eb:e6:ce:9e:25:e6:c9:08:70:57:da:3e:be:4b:ef:76: a1:c2:64:19:b7:e6:f4:58:5d:0a:50:00:6f:4a:97:a2:22:16: 97:6b:73:68:83:fe:8e:20:77:56:05:1b:23:65:ae:38:95:d7: 7f:c0:73:57:95:f7:f1:06:bf:da:3f:70:44:3a:71:ee:ff:e8: cb:f9:08:e9:3d:71:5d:c4:b1:24:1a:5e:f5:47:d2:2b:3f:17: 16:b7:92:3e:35:c0:01:26:ba:33:43:88:1d:ab:46:d1:e8:26: 2c:36:01:a3:2f:a0:24:c3:78:65:4c:12:ef:e4:39:73:21:e9: e3:c5:01:27:a7:b3:f8:a0:25:96:07:ef:98:f7:f5:f5:fd:33: 14:17:56:10:42:7c:01:ec:2b:66:e4:3d:47:5d:23:8f:74:ea: a8:ab:85:dc:78:c9:dd:8d:02:bf:10:95:27:fe:3e:e5:c7:f2: fd:a0:4f:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwNEUxMTAvBgNVBAUTKEU0RENFQzU5NUExQkI2NzM4OTcyMjM2NTZBQzYzOUI5 NTM1MkRENzMwHhcNMjYwMTI0MTc0MjUyWhcNMjYwMTMxMTc0MjUyWjAYMRYwFAYD VQQDDA02OTc1MDQ5Yy1kNDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJeiWHYQy2mx64iXs1jXguNTSTyypNYn6cLUoS1gvgMcyxIHRVqz75QbkhkD xxRIOuX6EWi2SF7E/FPcG+vk/HWpui9+jmhyx3w+hX2JEXFjlyEUMdFVKISQ1W/P bITRh1hdq5XEajz/LJBFWMMeCQ8w7rnCcRaKMtEdwvKO78zlGJzreKs2WZBKoLdb pX/ayn0Y5SLcvTjjQdvhCV5CDZgvfB3HDvt+VVCoXwvMcGVxWR+HvbmTb1MeQUR0 CRDlnPRzrm0FPFntVGf+q0+YBtvy/fRXwV/dEU/9K/JrZz6r2zxqfkXF2XZixcN/ A+SuHh/61Zgr5VlTfP8kbRmdswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNB7HYra dbpAWzj/ysQoqfi0pj7IMB8GA1UdIwQYMBaAFOTc7FlaG7ZziXIjZWrGOblTUt1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjA0RS85MUI1QzBDMEY0 RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRuT0pjaU5sYXNZNXVWTlMz WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVOenNXVm9idG5PSmNpTmxhc1k1dVZOUzNYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjA0RS85MUI1QzBDMEY0RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRu T0pjaU5sYXNZNXVWTlMzWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf5xzsJDM935cYul6K6ftNZ37eLJgRELqd7aUPpnlcEJAF+2scKP5p XEsRJdVDEX0nmpnMHmciTxpQn0N0huGYLDnIg0j1j4/eJevmzp4l5skIcFfaPr5L 73ahwmQZt+b0WF0KUABvSpeiIhaXa3Nog/6OIHdWBRsjZa44ldd/wHNXlffxBr/a P3BEOnHu/+jL+QjpPXFdxLEkGl71R9IrPxcWt5I+NcABJrozQ4gdq0bR6CYsNgGj L6Akw3hlTBLv5DlzIenjxQEnp7P4oCWWB++Y9/X1/TMUF1YQQnwB7Ctm5D1HXSOP dOqoq4XceMndjQK/EJUn/j7lx/L9oE9g -----END CERTIFICATE-----Generated at Sun Jan 25 02:56:29 2026 by rpki-client