This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft File: RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft (raw, json) Hash identifier: X0IcxF6dF/xllSGfO2Geb+vKBHYwahKMYZWUnAw31YY= Subject key identifier: 6C:CB:8A:AC:D2:7E:CB:4A:16:5D:A2:B7:C5:3F:F7:A1:0D:12:54:58 Authority key identifier: 44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A Certificate issuer: /CN=A91DB53B/serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft Manifest number: 19 Signing time: Sun 25 Jan 2026 07:01:43 +0000 Manifest this update: Sun 25 Jan 2026 07:01:43 +0000 Manifest next update: Sun 01 Feb 2026 07:01:43 +0000 Files and hashes: 1: RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl (hash: yRMF2fKxVSQ5ZnEDPRmk/QJ9rpBHv1HXsyOXXTKTFQc=) 2: 200677EEE20D11F0A1D1F931636F56BC.roa (hash: A9TJfeTTGCzUbWIl+PF8tZRdsVm8zwFCg9Xz2ODp3t4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB53B, serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A Validity Not Before: Jan 25 07:01:43 2026 GMT Not After : Feb 1 07:01:43 2026 GMT Subject: CN=6975bfd7-7777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:59:05:3b:64:03:a9:b7:90:09:c3:aa:5c:9a: f3:52:f9:3d:cf:e6:d7:65:f1:30:d8:df:4d:62:90: 8a:09:52:8f:14:f4:6e:16:f0:d4:88:1d:dc:3d:5f: 95:fd:23:6b:3a:25:98:b4:1e:e2:bd:fe:7f:03:31: 4d:4b:4e:f3:b2:c4:e2:54:82:83:f3:92:b3:11:02: 73:a2:64:04:80:a9:52:65:29:35:d1:37:c7:34:9c: 8b:6a:bc:f5:57:a3:ef:bc:61:01:55:ef:ec:1b:4f: 3a:56:c9:57:6d:92:e1:ee:59:ce:58:58:c6:3e:0e: 59:72:2c:c4:a0:97:91:5b:5b:a3:a4:a3:ae:9a:dc: 0e:7d:17:8a:8e:8f:00:e6:c6:bf:6d:ee:a3:01:13: a0:12:29:17:7d:ca:eb:0b:16:d8:f5:83:9b:ae:ae: 46:d4:33:51:d0:8e:a3:7b:80:3a:47:cd:5d:56:fd: 9b:64:90:85:d0:d7:cd:33:e8:9e:d1:21:06:68:56: 37:3b:14:98:45:c3:fe:35:63:bb:e5:25:2b:63:76: 19:58:71:0a:8c:be:f7:2d:af:bc:56:b7:06:32:b8: c4:f5:6b:ba:ea:d7:ab:2c:02:74:b0:05:38:4f:8d: 48:b7:ba:f8:81:60:a5:57:07:11:01:5d:f9:88:77: e3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CB:8A:AC:D2:7E:CB:4A:16:5D:A2:B7:C5:3F:F7:A1:0D:12:54:58 X509v3 Authority Key Identifier: keyid:44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:bc:7a:2b:2a:24:fa:31:1f:51:57:00:36:e8:69:c3:1f:fa: 0a:e4:fe:f4:a8:af:bc:c2:76:54:c4:49:60:da:9a:a1:b7:c2: 62:ea:25:90:2d:5a:05:ad:6a:8d:10:3a:d2:96:ad:5c:35:2b: f9:2e:4d:5b:3d:b1:f0:33:f0:1c:60:56:04:ce:73:8b:91:75: 55:9a:be:13:86:fc:bd:69:e9:e5:80:33:96:c7:05:d3:bb:a3: be:ca:16:83:5c:9f:13:68:5c:fd:81:7c:68:11:75:4c:d7:94: cd:b9:3e:9b:27:09:ad:f8:1f:b5:28:f3:1f:c7:77:91:ea:a7: b2:b4:0b:86:c5:fa:e5:93:a8:72:41:6c:6f:f2:47:be:a6:e7: 87:3a:86:3d:42:d4:c2:73:36:5f:bc:71:e2:d1:17:0a:17:6b: b3:89:f2:80:37:fe:23:2d:ec:33:0f:19:07:a8:41:bf:89:0b: 5d:f8:08:ba:a8:21:5a:3a:56:dd:8d:7f:e2:8e:93:b2:99:11: 5b:79:e6:cb:83:67:02:68:31:00:d5:a8:0c:9b:a1:b2:54:93: 52:25:15:b5:08:04:31:45:30:54:25:9d:f7:ad:4c:4f:d7:8f: 90:48:12:a0:a5:39:62:18:9a:56:36:f7:ee:d7:03:a7:a7:ef: 96:7e:d1:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFE QjUzQjExMC8GA1UEBRMoNDRBNkE1RTREMUMyQjhFRkUzOUU5RDAzQUEzQjM3OTBC QzBCODMyQTAeFw0yNjAxMjUwNzAxNDNaFw0yNjAyMDEwNzAxNDNaMBgxFjAUBgNV BAMMDTY5NzViZmQ3LTc3NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAWQU7ZAOpt5AJw6pcmvNS+T3P5tdl8TDY301ikIoJUo8U9G4W8NSIHdw9X5X9 I2s6JZi0HuK9/n8DMU1LTvOyxOJUgoPzkrMRAnOiZASAqVJlKTXRN8c0nItqvPVX o++8YQFV7+wbTzpWyVdtkuHuWc5YWMY+DllyLMSgl5FbW6Oko66a3A59F4qOjwDm xr9t7qMBE6ASKRd9yusLFtj1g5uurkbUM1HQjqN7gDpHzV1W/ZtkkIXQ180z6J7R IQZoVjc7FJhFw/41Y7vlJStjdhlYcQqMvvctr7xWtwYyuMT1a7rq16ssAnSwBThP jUi3uviBYKVXBxEBXfmId+PvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbMuKrNJ+ y0oWXaK3xT/3oQ0SVFgwHwYDVR0jBBgwFoAURKal5NHCuO/jnp0Dqjs3kLwLgyow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCNTNCL0Y3RUQ1QkEwRTAx OTExRjA4QUQzRUI4RDYyNkY1NkJDL1JLYWw1TkhDdU9fam5wMERxanMza0x3TGd5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkthbDVOSEN1T19qbnAwRHFqczNrTHdMZ3lvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC NTNCL0Y3RUQ1QkEwRTAxOTExRjA4QUQzRUI4RDYyNkY1NkJDL1JLYWw1TkhDdU9f am5wMERxanMza0x3TGd5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG28eisqJPoxH1FXADboacMf+grk/vSor7zCdlTESWDamqG3wmLqJZAt WgWtao0QOtKWrVw1K/kuTVs9sfAz8BxgVgTOc4uRdVWavhOG/L1p6eWAM5bHBdO7 o77KFoNcnxNoXP2BfGgRdUzXlM25PpsnCa34H7Uo8x/Hd5Hqp7K0C4bF+uWTqHJB bG/yR76m54c6hj1C1MJzNl+8ceLRFwoXa7OJ8oA3/iMt7DMPGQeoQb+JC134CLqo IVo6Vt2Nf+KOk7KZEVt55suDZwJoMQDVqAybobJUk1IlFbUIBDFFMFQlnfetTE/X j5BIEqClOWIYmlY29+7XA6en75Z+0aA= -----END CERTIFICATE-----Generated at Sun Jan 25 10:07:28 2026 by rpki-client