This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft File: oNGf1mnyVeFici98GdiGS7Brc5k.mft (raw, json) Hash identifier: Fn5yfztZbGv/m8rEIvLKIC4GlBLD38nuhiJyOm0f6Ho= Subject key identifier: 5B:62:52:08:F7:92:EA:86:1D:11:97:1D:2D:78:08:A6:54:9F:EF:C9 Authority key identifier: A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 Certificate issuer: /CN=A91DEC72/serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft Manifest number: 01CA Signing time: Sun 25 Jan 2026 02:12:31 +0000 Manifest this update: Sun 25 Jan 2026 02:12:31 +0000 Manifest next update: Sun 01 Feb 2026 02:12:31 +0000 Files and hashes: 1: oNGf1mnyVeFici98GdiGS7Brc5k.crl (hash: N85qcZt307KcRKADytCykKKv1mdVLt2wrWBY2DI/Onc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC72, serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Validity Not Before: Jan 25 02:12:31 2026 GMT Not After : Feb 1 02:12:31 2026 GMT Subject: CN=69757c0f-92d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1b:e2:2f:b3:da:3a:a3:64:32:90:c6:f4:98: 5e:3e:1c:2a:57:08:92:62:fc:31:cb:1a:40:2d:48: 05:9e:11:80:e2:bd:7a:c0:b8:0b:cb:bb:6d:45:bf: 85:57:3b:72:16:73:b7:f4:10:e8:d8:4d:77:f9:8f: 6a:64:2e:76:f2:d3:4a:58:17:ab:42:68:38:d8:27: e7:8d:9a:3c:57:2c:d8:06:be:31:09:d5:9e:7c:a2: e5:f3:fd:4b:44:45:65:dc:7d:bb:b8:a4:8c:51:c3: 97:4c:c3:68:d9:07:f1:5d:6f:4f:02:d6:75:e1:95: 12:e5:52:14:03:58:57:15:d2:2a:9c:2b:87:2e:91: 98:57:f3:f3:da:07:14:1e:76:22:ee:75:f0:15:1a: 59:7f:1f:75:83:31:18:a4:b5:61:92:a9:7c:97:c2: 50:ac:8a:99:81:3c:be:22:f1:8c:b6:f1:30:40:66: 5f:91:4b:45:02:3e:5f:c8:c3:6e:36:20:da:f4:60: ac:cc:28:58:b7:79:95:48:f8:6c:4a:8d:6f:f9:64: 1b:65:a6:04:c3:e5:b2:e6:72:57:ab:7e:cb:46:8b: 1f:70:5d:52:5c:db:a1:52:5f:a1:ac:8a:82:ed:44: 54:b6:54:03:01:b4:cf:7b:10:42:c8:7a:f4:d5:dc: 75:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:62:52:08:F7:92:EA:86:1D:11:97:1D:2D:78:08:A6:54:9F:EF:C9 X509v3 Authority Key Identifier: keyid:A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:31:88:89:da:26:a6:76:e6:f3:5d:a8:b1:0f:13:f0:2b:57: 67:d1:54:a2:00:45:c8:18:0d:73:ab:03:5c:30:66:41:78:1b: 11:4f:81:f2:34:e9:4a:21:72:89:8d:13:76:96:3b:31:23:e5: b5:f7:22:86:9c:48:b6:2a:47:d8:0c:58:9a:52:17:e9:af:a1: 71:a0:02:e0:96:c8:8e:c0:25:a5:f8:e9:eb:cd:20:91:f9:29: 1d:4a:9d:7f:a2:ff:b9:38:14:73:dc:4c:21:7e:4b:f1:3b:78: 06:98:3d:50:10:d9:13:f1:d3:aa:c7:a2:29:0d:10:5d:43:0e: d2:0e:9c:1b:40:a3:0a:30:eb:6d:3a:25:b7:3a:5b:29:96:39: 75:e0:5e:b4:16:48:0a:9f:e2:34:57:49:26:7e:2c:47:5c:f2: 03:2b:e6:52:f3:68:95:3c:f8:61:bb:dd:f7:88:08:f2:1e:a3: 27:d0:27:64:fb:70:37:df:ba:46:33:67:80:90:42:e1:cb:c1: 90:0b:fc:42:6e:75:63:80:fd:04:af:bc:b9:a8:e3:84:79:54: 4f:6c:ee:94:aa:30:08:44:9f:09:cb:eb:c2:59:36:c3:d2:21: 37:4e:ea:4e:f6:9f:74:d6:08:16:72:c7:2c:47:1d:02:65:01: 25:37:48:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDNzIxMTAvBgNVBAUTKEEwRDE5RkQ2NjlGMjU1RTE2MjcyMkY3QzE5RDg4NjRC QjA2QjczOTkwHhcNMjYwMTI1MDIxMjMxWhcNMjYwMjAxMDIxMjMxWjAYMRYwFAYD VQQDDA02OTc1N2MwZi05MmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkhviL7PaOqNkMpDG9JhePhwqVwiSYvwxyxpALUgFnhGA4r16wLgLy7ttRb+F VztyFnO39BDo2E13+Y9qZC528tNKWBerQmg42CfnjZo8VyzYBr4xCdWefKLl8/1L REVl3H27uKSMUcOXTMNo2QfxXW9PAtZ14ZUS5VIUA1hXFdIqnCuHLpGYV/Pz2gcU HnYi7nXwFRpZfx91gzEYpLVhkql8l8JQrIqZgTy+IvGMtvEwQGZfkUtFAj5fyMNu NiDa9GCszChYt3mVSPhsSo1v+WQbZaYEw+Wy5nJXq37LRosfcF1SXNuhUl+hrIqC 7URUtlQDAbTPexBCyHr01dx1IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtiUgj3 kuqGHRGXHS14CKZUn+/JMB8GA1UdIwQYMBaAFKDRn9Zp8lXhYnIvfBnYhkuwa3OZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUM3Mi8zRjcxRkY4ODNC OTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZlRmljaTk4R2RpR1M3QnJj NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OR2YxbW55VmVGaWNpOThHZGlHUzdCcmM1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUM3Mi8zRjcxRkY4ODNCOTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZl RmljaTk4R2RpR1M3QnJjNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1MYiJ2iamdubzXaixDxPwK1dn0VSiAEXIGA1zqwNcMGZBeBsRT4Hy NOlKIXKJjRN2ljsxI+W19yKGnEi2KkfYDFiaUhfpr6FxoALglsiOwCWl+OnrzSCR +SkdSp1/ov+5OBRz3EwhfkvxO3gGmD1QENkT8dOqx6IpDRBdQw7SDpwbQKMKMOtt OiW3Olspljl14F60FkgKn+I0V0kmfixHXPIDK+ZS82iVPPhhu933iAjyHqMn0Cdk +3A337pGM2eAkELhy8GQC/xCbnVjgP0Er7y5qOOEeVRPbO6UqjAIRJ8Jy+vCWTbD 0iE3TupO9p901ggWcscsRx0CZQElN0iM -----END CERTIFICATE-----Generated at Sun Jan 25 12:21:07 2026 by rpki-client