This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft File: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft (raw, json) Hash identifier: TyWjFmHF6oc9j3cMQMiL+yOFBeUhxKXIZjaxRTndaFI= Subject key identifier: 1C:81:FF:BE:98:C0:A4:66:05:4E:2D:33:46:94:52:0E:56:59:33:DA Authority key identifier: E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF Certificate issuer: /CN=A91D60CF/serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft Manifest number: 012C Signing time: Sun 25 Jan 2026 03:47:40 +0000 Manifest this update: Sun 25 Jan 2026 03:47:40 +0000 Manifest next update: Sun 01 Feb 2026 03:47:40 +0000 Files and hashes: 1: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl (hash: S1WxKrOX+IHyE0jmhQCE2WRf5CDpdEcGCK7UgzAItGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF, serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF Validity Not Before: Jan 25 03:47:40 2026 GMT Not After : Feb 1 03:47:40 2026 GMT Subject: CN=6975925c-700a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b6:21:c9:34:08:da:1a:f4:c9:b7:f0:3a:0c: 47:15:3b:19:85:4c:39:07:99:c3:ff:04:1c:7f:31: 3d:10:de:9c:a1:23:46:d3:56:96:61:b8:80:d9:cd: e9:87:16:e4:84:d8:d3:34:9d:93:13:52:99:99:76: 98:65:bb:f1:2b:9d:5a:1d:32:29:27:93:e5:27:33: f2:7c:13:cb:91:be:77:0b:1e:2d:b9:a1:7b:1c:44: e6:7c:cf:59:84:0d:28:2a:a1:f8:ec:da:3d:54:b1: 70:2a:3d:21:51:72:d3:4e:aa:35:a2:01:8f:55:f6: b6:f9:77:f6:2d:0d:be:49:d1:bd:f1:8c:e9:06:d3: 70:4a:0c:9d:95:1e:56:71:24:79:6b:83:7e:ea:b5: 76:98:c2:76:a8:ef:4d:d0:b6:70:52:65:b4:99:9c: e2:55:dc:a8:d0:6f:54:5a:6f:cd:fc:f8:7b:55:a8: 39:2f:c7:ba:14:98:de:6f:63:cd:5b:ac:7b:63:e4: f6:e8:1b:96:90:9f:16:83:98:d9:49:03:f7:eb:ed: 15:07:6f:ba:fa:2c:37:8c:39:02:d5:93:b0:8e:63: 75:1c:09:ce:16:53:cf:e6:4f:3c:fa:91:ba:cc:40: e1:f8:9b:95:c8:2e:e5:b1:de:2b:1e:e5:84:bb:ec: bc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:81:FF:BE:98:C0:A4:66:05:4E:2D:33:46:94:52:0E:56:59:33:DA X509v3 Authority Key Identifier: keyid:E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:18:e3:b3:cc:e2:0c:6e:ff:3b:86:fb:86:aa:89:aa:b9:bd: df:31:cb:d7:d8:04:da:91:6a:61:6a:07:6d:e8:9d:1d:80:14: 28:0c:f1:f0:76:d3:c1:ad:ae:eb:0c:5d:f5:7c:f6:a1:f3:65: d6:76:25:e9:c7:37:f9:cf:75:76:77:a4:92:de:de:6f:da:56: d1:6a:09:53:09:97:35:ca:81:4d:80:d1:ee:8d:45:e7:e6:77: 3e:e0:cf:dd:25:8d:37:1c:42:2e:b6:6b:4d:4c:1d:93:0c:27: a5:e9:50:8c:aa:63:b7:06:d9:3b:f1:72:3c:5c:f4:5e:07:b9: 4a:3f:8a:82:92:6d:9b:74:0c:a3:eb:04:e4:36:3e:69:00:58: 9b:dc:f6:3e:36:c0:0c:33:50:81:3f:4b:64:e6:fb:90:88:b0: 35:c8:5a:15:ab:41:04:fc:38:4a:db:03:ab:6d:4d:0a:04:62: 1a:ae:90:fb:66:60:d3:ca:14:ae:b1:c2:b7:57:8b:7e:d2:45: 9d:3a:a7:4f:81:c7:61:16:70:f8:67:73:16:e1:84:e0:ac:f2: b8:fe:f3:d7:ed:e0:6c:8b:77:b6:b8:75:5a:35:e4:99:35:3a: 3e:38:7a:7a:08:ea:b1:dd:dc:e2:bd:21:6c:6f:59:16:7a:d6: 0c:92:93:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKEU2NEUwMjE3NzQzNUFFRjFDQkZENjI0RTI2NjdFNjk2 OUFBRkFBRkYwHhcNMjYwMTI1MDM0NzQwWhcNMjYwMjAxMDM0NzQwWjAYMRYwFAYD VQQDDA02OTc1OTI1Yy03MDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bYhyTQI2hr0ybfwOgxHFTsZhUw5B5nD/wQcfzE9EN6coSNG01aWYbiA2c3p hxbkhNjTNJ2TE1KZmXaYZbvxK51aHTIpJ5PlJzPyfBPLkb53Cx4tuaF7HETmfM9Z hA0oKqH47No9VLFwKj0hUXLTTqo1ogGPVfa2+Xf2LQ2+SdG98YzpBtNwSgydlR5W cSR5a4N+6rV2mMJ2qO9N0LZwUmW0mZziVdyo0G9UWm/N/Ph7Vag5L8e6FJjeb2PN W6x7Y+T26BuWkJ8Wg5jZSQP36+0VB2+6+iw3jDkC1ZOwjmN1HAnOFlPP5k88+pG6 zEDh+JuVyC7lsd4rHuWEu+y8QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByB/76Y wKRmBU4tM0aUUg5WWTPaMB8GA1UdIwQYMBaAFOZOAhd0Na7xy/1iTiZn5paar6r/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FRjgxMzdFNDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi81azRDRjNRMXJ2SExfV0pPSm1mbWxwcXZx djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVrNENGM1ExcnZITF9XSk9KbWZtbHBxdnF2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FRjgxMzdFNDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi81azRDRjNRMXJ2 SExfV0pPSm1mbWxwcXZxdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmGOOzzOIMbv87hvuGqomqub3fMcvX2ATakWphagdt6J0dgBQoDPHw dtPBra7rDF31fPah82XWdiXpxzf5z3V2d6SS3t5v2lbRaglTCZc1yoFNgNHujUXn 5nc+4M/dJY03HEIutmtNTB2TDCel6VCMqmO3Btk78XI8XPReB7lKP4qCkm2bdAyj 6wTkNj5pAFib3PY+NsAMM1CBP0tk5vuQiLA1yFoVq0EE/DhK2wOrbU0KBGIarpD7 ZmDTyhSuscK3V4t+0kWdOqdPgcdhFnD4Z3MW4YTgrPK4/vPX7eBsi3e2uHVaNeSZ NTo+OHp6COqx3dzivSFsb1kWetYMkpPQ -----END CERTIFICATE-----Generated at Sun Jan 25 08:04:07 2026 by rpki-client