This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft File: hkuImlN4cQmFJlQfDrkSVv2vp7E.mft (raw, json) Hash identifier: 0+6WiKzRZcZKZDCHXh0GzlI2/lxthNWHkMCW9lfzXqw= Subject key identifier: 77:EB:B0:A9:19:45:93:01:99:B1:1B:DD:61:CB:9E:F2:1C:EB:C0:05 Authority key identifier: 86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1 Certificate issuer: /CN=A91DB53B/serialNumber=864B889A537871098526541F0EB91256FDAFA7B1 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft Manifest number: 13 Signing time: Fri 23 Jan 2026 07:01:04 +0000 Manifest this update: Fri 23 Jan 2026 07:01:04 +0000 Manifest next update: Fri 30 Jan 2026 07:01:04 +0000 Files and hashes: 1: hkuImlN4cQmFJlQfDrkSVv2vp7E.crl (hash: g9Ft+KmnDwWtos74j4/x6Bvw2cH9Eor72MgmKGXJ4Rw=) 2: 53F3631AE09A11F0A599D036446F56BC.roa (hash: cen/2QQHHB2Ce/BPby3zzwtq3/K2nBJUeNhySuETspw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB53B, serialNumber=864B889A537871098526541F0EB91256FDAFA7B1 Validity Not Before: Jan 23 07:01:04 2026 GMT Not After : Jan 30 07:01:04 2026 GMT Subject: CN=69731cb0-ffcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:48:70:61:52:66:06:59:1b:8d:c7:e7:67:99: 5b:ab:2b:c3:42:97:e8:f2:91:44:e6:f3:de:35:b6: 7f:37:f0:14:58:b1:5f:b8:28:48:60:94:0d:58:e9: c2:41:d8:cf:31:9d:c8:a4:e5:0d:d5:99:bc:ec:c7: 22:af:c4:5c:67:3a:cd:22:0b:8b:17:9e:98:aa:c1: 9f:a8:31:09:4a:be:83:4a:ce:c9:0a:bd:61:4c:c9: 85:ca:d4:fa:43:fe:21:0d:eb:d7:12:0e:96:53:2a: 89:7c:70:3a:cb:fc:de:e2:57:13:b9:74:a7:8e:ce: 28:13:45:ca:0f:89:30:80:85:59:ae:e0:11:c9:3d: e0:31:4e:30:71:10:1c:a5:6f:ba:14:3f:1f:fe:f4: e6:94:57:94:6d:d7:cd:69:f8:de:d2:ad:dc:cf:89: 07:03:8e:af:c8:6d:d7:05:eb:06:72:c2:d1:6e:13: 7f:14:63:e9:79:67:bf:9d:b8:6b:e8:ad:c4:ce:7a: 75:f3:04:e1:85:31:fd:75:b4:e7:63:97:79:a8:0e: c5:6d:0b:7f:d1:76:f2:6c:7f:7b:49:17:3d:70:77: bf:01:e8:d6:97:03:d4:41:7c:8c:4e:41:f5:1f:6e: 78:5c:e6:56:0f:58:35:bb:b8:72:0a:44:ac:c5:33: 13:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:EB:B0:A9:19:45:93:01:99:B1:1B:DD:61:CB:9E:F2:1C:EB:C0:05 X509v3 Authority Key Identifier: keyid:86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:f6:2e:c3:15:fd:57:fa:62:ae:99:ae:40:33:b6:a6:1c:c5: e2:5c:08:36:12:c1:f3:59:cb:58:44:63:95:54:bc:38:9f:8e: 56:9f:c0:72:74:c0:35:bc:90:02:5a:4a:fe:ce:3b:e4:7d:ca: 57:b5:4c:2d:e3:0f:d7:3b:68:2a:56:80:c4:c4:fb:7b:7e:02: ad:ab:09:ca:1f:10:a1:3f:c5:f8:b2:cb:f6:8e:9d:42:c3:27: 3b:ef:b0:32:4d:38:ab:13:b6:b2:b5:08:c3:02:fb:6b:2e:3a: 83:17:b1:b7:5e:f5:b3:89:77:cd:2c:be:da:d1:98:8d:c2:a8: 0d:10:4d:33:95:8f:b8:d3:24:47:fb:29:0c:45:f5:95:4f:ad: 14:c2:8b:38:bb:ac:e3:23:44:4e:c5:33:d3:c1:cf:b4:55:b8: a1:e7:03:07:9a:80:22:78:2f:47:ba:d6:60:bf:81:2b:a6:ed: 31:40:60:7f:2e:9f:dc:d6:09:12:f6:56:1f:c9:de:e3:f2:08: fd:a0:c2:8c:22:aa:29:92:16:05:9a:27:15:4d:80:34:eb:73: 9d:fd:78:dc:b7:21:be:60:87:05:93:15:1a:ed:c8:56:d1:ad: dc:54:aa:4e:a0:4d:00:fb:0a:70:59:55:0a:78:eb:7f:e4:3c: 9a:ea:c7:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFE QjUzQjExMC8GA1UEBRMoODY0Qjg4OUE1Mzc4NzEwOTg1MjY1NDFGMEVCOTEyNTZG REFGQTdCMTAeFw0yNjAxMjMwNzAxMDRaFw0yNjAxMzAwNzAxMDRaMBgxFjAUBgNV BAMMDTY5NzMxY2IwLWZmY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3SHBhUmYGWRuNx+dnmVurK8NCl+jykUTm8941tn838BRYsV+4KEhglA1Y6cJB 2M8xncik5Q3VmbzsxyKvxFxnOs0iC4sXnpiqwZ+oMQlKvoNKzskKvWFMyYXK1PpD /iEN69cSDpZTKol8cDrL/N7iVxO5dKeOzigTRcoPiTCAhVmu4BHJPeAxTjBxEByl b7oUPx/+9OaUV5Rt181p+N7SrdzPiQcDjq/IbdcF6wZywtFuE38UY+l5Z7+duGvo rcTOenXzBOGFMf11tOdjl3moDsVtC3/RdvJsf3tJFz1wd78B6NaXA9RBfIxOQfUf bnhc5lYPWDW7uHIKRKzFMxNLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd+uwqRlF kwGZsRvdYcue8hzrwAUwHwYDVR0jBBgwFoAUhkuImlN4cQmFJlQfDrkSVv2vp7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCNTNCLzAwREE5RDY4RTAx QTExRjA4QUQzRUI4RDYyNkY1NkJDL2hrdUltbE40Y1FtRkpsUWZEcmtTVnYydnA3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGt1SW1sTjRjUW1GSmxRZkRya1NWdjJ2cDdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC NTNCLzAwREE5RDY4RTAxQTExRjA4QUQzRUI4RDYyNkY1NkJDL2hrdUltbE40Y1Ft RkpsUWZEcmtTVnYydnA3RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJn2LsMV/Vf6Yq6ZrkAztqYcxeJcCDYSwfNZy1hEY5VUvDifjlafwHJ0 wDW8kAJaSv7OO+R9yle1TC3jD9c7aCpWgMTE+3t+Aq2rCcofEKE/xfiyy/aOnULD JzvvsDJNOKsTtrK1CMMC+2suOoMXsbde9bOJd80svtrRmI3CqA0QTTOVj7jTJEf7 KQxF9ZVPrRTCizi7rOMjRE7FM9PBz7RVuKHnAweagCJ4L0e61mC/gSum7TFAYH8u n9zWCRL2Vh/J3uPyCP2gwowiqimSFgWaJxVNgDTrc539eNy3Ib5ghwWTFRrtyFbR rdxUqk6gTQD7CnBZVQp463/kPJrqx3I= -----END CERTIFICATE-----Generated at Sun Jan 25 02:48:34 2026 by rpki-client