This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft File: bCTOJGStN3HjLDMIGNG32gFMaQk.mft (raw, json) Hash identifier: CZZt+Fq03SIm0PZHRkCHC/isy5wTz5YC94WUATZgpts= Subject key identifier: A5:78:AF:D7:96:93:4B:ED:CF:4C:21:AC:19:F2:C9:4C:C1:FC:00:5F Authority key identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 Certificate issuer: /CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft Manifest number: 0173 Signing time: Sun 25 Jan 2026 03:06:39 +0000 Manifest this update: Sun 25 Jan 2026 03:06:39 +0000 Manifest next update: Sun 01 Feb 2026 03:06:39 +0000 Files and hashes: 1: bCTOJGStN3HjLDMIGNG32gFMaQk.crl (hash: Uwa2PoQLk0e9kc09ohzyab/DwUpJ0Qvy1lFtvFpW5Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC84C, serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Validity Not Before: Jan 25 03:06:39 2026 GMT Not After : Feb 1 03:06:39 2026 GMT Subject: CN=697588bf-a576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:4c:50:d3:f6:86:dc:0d:29:20:ab:b4:a0:4a: 0f:0a:aa:77:c1:49:ba:27:6c:1e:9f:98:10:7d:b1: 32:da:87:ba:50:25:d9:07:a5:2e:2f:3e:36:9d:00: 88:89:c3:34:a4:e9:77:50:a0:ed:ca:c1:4f:67:ac: 86:a1:ff:3c:26:20:c6:94:26:5e:e8:b4:1b:83:2d: a7:e5:30:a1:5f:6a:17:01:fe:90:34:61:3c:6e:64: 08:07:8f:28:cd:7c:eb:d1:de:6f:42:04:18:be:87: 66:28:fc:aa:f6:a9:58:c4:dd:76:b8:77:31:73:6d: 77:30:fc:e2:47:ac:d7:cd:e9:63:b8:81:06:5d:c3: 5e:96:40:0b:0d:83:73:e8:e5:5f:42:4f:cc:fa:5d: 5f:51:07:81:21:08:bf:9b:82:a6:36:b5:fd:db:12: 2b:89:96:0b:24:66:b6:95:be:73:e9:ff:8f:f3:e1: 1a:36:f8:03:c8:1c:00:ef:52:04:9e:59:19:ca:ad: 9b:56:c6:77:6e:80:d3:84:8a:40:94:b8:ac:e1:ef: 70:56:a0:b1:2b:d9:63:7d:10:70:6b:6c:aa:98:f3: 0d:43:4f:bb:3f:69:91:08:60:34:6f:f1:31:8e:cf: 16:3f:7c:4a:50:88:62:38:b9:9e:03:07:1a:6a:f9: 9a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:78:AF:D7:96:93:4B:ED:CF:4C:21:AC:19:F2:C9:4C:C1:FC:00:5F X509v3 Authority Key Identifier: keyid:6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f4:c2:ba:97:49:7c:69:ea:1b:2c:4e:27:86:ee:3c:bb:ee: 51:ac:0e:69:2a:d1:97:cf:fd:2e:49:2f:ba:3d:0f:4d:4b:43: 1e:d9:6b:0f:21:8d:80:08:30:4c:6d:3a:b6:a8:b4:d4:50:58: 26:bb:75:66:82:fd:8e:33:60:02:1d:47:cf:67:4f:2f:6a:f1: 07:0f:cf:b1:91:4d:41:b2:f5:01:f9:d0:57:db:7f:0b:21:04: 79:e2:6a:f6:f7:8f:72:0e:27:c9:17:62:f1:96:21:fe:bf:2e: f3:d3:66:40:36:1e:e1:21:87:60:b5:69:39:0a:ba:7a:1d:57: dd:de:4c:e2:8b:8b:00:64:b7:88:a5:cb:ce:43:5d:2d:96:f9: 98:a2:0a:e9:74:40:bf:13:5b:ac:e4:18:58:dc:f8:00:cb:8d: fc:0b:b3:9a:27:be:55:2b:6b:48:5a:17:ca:af:c1:81:60:90: 22:40:41:d2:f8:e7:cc:af:f9:1b:16:d9:61:14:1e:c8:c5:ad: d0:29:b4:01:c0:1b:14:f4:50:c1:5a:98:20:f2:b3:be:1d:81: 5c:be:2b:83:3b:64:b5:2c:df:59:cc:0c:4e:e4:8f:a5:85:bc: 69:17:67:23:9d:7b:aa:e4:9f:58:9b:5e:13:ea:b3:96:eb:fc: 76:1b:54:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx REM4NEMxMTAvBgNVBAUTKDZDMjRDRTI0NjRBRDM3NzFFMzJDMzMwODE4RDFCN0RB MDE0QzY5MDkwHhcNMjYwMTI1MDMwNjM5WhcNMjYwMjAxMDMwNjM5WjAYMRYwFAYD VQQDDA02OTc1ODhiZi1hNTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+UxQ0/aG3A0pIKu0oEoPCqp3wUm6J2wen5gQfbEy2oe6UCXZB6UuLz42nQCI icM0pOl3UKDtysFPZ6yGof88JiDGlCZe6LQbgy2n5TChX2oXAf6QNGE8bmQIB48o zXzr0d5vQgQYvodmKPyq9qlYxN12uHcxc213MPziR6zXzeljuIEGXcNelkALDYNz 6OVfQk/M+l1fUQeBIQi/m4KmNrX92xIriZYLJGa2lb5z6f+P8+EaNvgDyBwA71IE nlkZyq2bVsZ3boDThIpAlLis4e9wVqCxK9ljfRBwa2yqmPMNQ0+7P2mRCGA0b/Ex js8WP3xKUIhiOLmeAwcaavma8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKV4r9eW k0vtz0whrBnyyUzB/ABfMB8GA1UdIwQYMBaAFGwkziRkrTdx4ywzCBjRt9oBTGkJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg0Qy9GMzVCMzA1RUJG MzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4zSGpMRE1JR05HMzJnRk1h UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JDVE9KR1N0TjNIakxETUlHTkczMmdGTWFRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzg0Qy9GMzVCMzA1RUJGMzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4z SGpMRE1JR05HMzJnRk1hUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR9MK6l0l8aeobLE4nhu48u+5RrA5pKtGXz/0uSS+6PQ9NS0Me2WsP IY2ACDBMbTq2qLTUUFgmu3Vmgv2OM2ACHUfPZ08vavEHD8+xkU1BsvUB+dBX238L IQR54mr2949yDifJF2LxliH+vy7z02ZANh7hIYdgtWk5Crp6HVfd3kzii4sAZLeI pcvOQ10tlvmYogrpdEC/E1us5BhY3PgAy438C7OaJ75VK2tIWhfKr8GBYJAiQEHS +OfMr/kbFtlhFB7Ixa3QKbQBwBsU9FDBWpgg8rO+HYFcviuDO2S1LN9ZzAxO5I+l hbxpF2cjnXuq5J9Ym14T6rOW6/x2G1QR -----END CERTIFICATE-----Generated at Sun Jan 25 10:42:51 2026 by rpki-client