This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft File: kROhaGm30B54nuCf4m5q-jfPPkc.mft (raw, json) Hash identifier: GQGcZQs4bJvPDl0eEGJRYkk2a21AO6hDk46W+QLouVw= Subject key identifier: 09:43:40:33:51:9D:ED:C4:D7:DB:09:E1:06:41:9C:46:FD:95:C5:98 Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47 Certificate issuer: /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47 Certificate serial: 04C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft Manifest number: 04BA Signing time: Sat 24 Jan 2026 23:09:09 +0000 Manifest this update: Sat 24 Jan 2026 23:09:08 +0000 Manifest next update: Sat 31 Jan 2026 23:09:08 +0000 Files and hashes: 1: kROhaGm30B54nuCf4m5q-jfPPkc.crl (hash: ogeluOW7nocYunPd+vtQ0qSuxek9xuMMbP0k7825gT8=) 2: 2F74D644ABC711EF9CD3CE81C4F9AE02.roa (hash: wmmIaxLCg5K0uFc5rnys8oy6i0z0O/e/VdhovEca3nw=) 3: 8628E1BA210611F082BE7E10C4F9AE02.roa (hash: wGvigc7YwHG59J2rGqwJ7WYeY96T+112b/PUTqhl/lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1220 (0x4c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47 Validity Not Before: Jan 24 23:09:08 2026 GMT Not After : Jan 31 23:09:08 2026 GMT Subject: CN=69755114-76ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:23:c7:57:5d:54:16:d0:67:e3:f3:ff:f3:fa: 87:38:a8:0c:e0:8e:aa:f7:d5:ae:ab:a0:45:c2:8d: d3:b5:47:03:75:7c:5c:ef:3f:42:46:dc:f4:93:f0: b3:90:5a:ce:ea:13:87:54:26:02:44:df:f9:19:9f: 46:dc:37:54:a4:b0:ba:ed:6b:08:72:a0:96:6f:7d: a8:a3:d1:69:5a:e0:45:e1:57:9f:f0:4f:a0:89:5f: 1e:8f:f3:3d:8c:1d:8a:52:6c:2c:d6:8b:8a:e6:6d: 98:29:52:64:2b:8d:26:34:23:fc:50:9e:34:a7:47: ab:20:d4:90:2f:cc:74:26:7a:03:a6:ad:67:2f:2e: 01:91:8c:9a:18:fe:3e:67:35:29:54:9c:f4:f9:ff: e2:bc:39:20:ac:42:24:28:54:c0:2d:5a:44:39:dd: 36:24:61:e4:e3:9b:38:b5:0d:55:5f:20:dd:87:61: 54:5d:77:12:ff:82:98:32:03:17:5b:07:bc:8c:5d: 3a:78:5b:62:b5:1e:18:88:9f:9a:b7:e9:17:70:18: 6a:77:c9:77:b1:4f:c1:4a:0b:b0:52:36:e4:8b:78: a6:1b:2f:d1:09:6a:5c:05:65:e7:22:5d:f5:83:d2: b8:20:4b:8b:9e:34:b8:57:e1:05:20:46:b6:4d:6d: 1d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:43:40:33:51:9D:ED:C4:D7:DB:09:E1:06:41:9C:46:FD:95:C5:98 X509v3 Authority Key Identifier: keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:37:f9:40:66:02:db:10:08:77:6a:c8:f2:22:7e:2a:6c:7b: 19:5d:ac:88:ce:40:eb:1c:f4:38:11:08:75:23:61:fe:19:2b: 44:13:a5:13:60:a4:56:e1:75:c9:b7:64:7b:d7:25:16:f6:87: d5:28:d0:4e:39:12:33:c9:ef:11:66:e2:45:35:04:18:2e:ee: e3:b2:8a:55:19:3d:4a:1b:3b:01:70:0c:08:d2:68:ba:9d:31: 75:a5:ca:b3:36:28:a7:f6:bc:a3:c0:6f:f6:39:7e:28:54:a7: f4:13:1d:01:2d:df:21:74:ab:3b:84:2d:17:7b:41:1a:89:04: d6:41:73:13:36:7f:fc:f4:1c:16:df:86:0b:ba:d7:67:cb:50: 5c:90:13:5e:e4:90:45:72:89:90:c1:86:8f:3f:13:a7:60:4a: 41:b2:b2:65:a7:9e:7e:84:ee:76:19:00:03:07:ae:7e:e1:90: dc:6d:3a:a4:ba:36:6a:27:ed:a0:43:11:33:03:b8:35:6b:ee: e0:07:68:77:09:65:2f:7b:a4:20:31:8f:ab:a7:c3:03:8f:08: 37:6c:e7:f9:f4:58:0c:58:d7:5e:52:50:1a:50:97:8f:7d:53: 68:a1:bb:6b:4f:01:32:0a:c4:16:2a:d8:57:a1:ed:21:6e:3a: 8f:70:93:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM4MTQxMTAvBgNVBAUTKDkxMTNBMTY4NjlCN0QwMUU3ODlFRTA5RkUyNkU2QUZB MzdDRjNFNDcwHhcNMjYwMTI0MjMwOTA4WhcNMjYwMTMxMjMwOTA4WjAYMRYwFAYD VQQDDA02OTc1NTExNC03NmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCPHV11UFtBn4/P/8/qHOKgM4I6q99Wuq6BFwo3TtUcDdXxc7z9CRtz0k/Cz kFrO6hOHVCYCRN/5GZ9G3DdUpLC67WsIcqCWb32oo9FpWuBF4Vef8E+giV8ej/M9 jB2KUmws1ouK5m2YKVJkK40mNCP8UJ40p0erINSQL8x0JnoDpq1nLy4BkYyaGP4+ ZzUpVJz0+f/ivDkgrEIkKFTALVpEOd02JGHk45s4tQ1VXyDdh2FUXXcS/4KYMgMX Wwe8jF06eFtitR4YiJ+at+kXcBhqd8l3sU/BSguwUjbki3imGy/RCWpcBWXnIl31 g9K4IEuLnjS4V+EFIEa2TW0dMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlDQDNR ne3E19sJ4QZBnEb9lcWYMB8GA1UdIwQYMBaAFJEToWhpt9AeeJ7gn+Juavo3zz5H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzgxNC8yNTQyQjQyMjVE NzExMUVDOTkwODkxNERDNEY5QUUwMi9rUk9oYUdtMzBCNTRudUNmNG01cS1qZlBQ a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tST2hhR20zMEI1NG51Q2Y0bTVxLWpmUFBrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzgxNC8yNTQyQjQyMjVENzExMUVDOTkwODkxNERDNEY5QUUwMi9rUk9oYUdtMzBC NTRudUNmNG01cS1qZlBQa2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFN/lAZgLbEAh3asjyIn4qbHsZXayIzkDrHPQ4EQh1I2H+GStEE6UT YKRW4XXJt2R71yUW9ofVKNBOORIzye8RZuJFNQQYLu7jsopVGT1KGzsBcAwI0mi6 nTF1pcqzNiin9ryjwG/2OX4oVKf0Ex0BLd8hdKs7hC0Xe0EaiQTWQXMTNn/89BwW 34YLutdny1BckBNe5JBFcomQwYaPPxOnYEpBsrJlp55+hO52GQADB65+4ZDcbTqk ujZqJ+2gQxEzA7g1a+7gB2h3CWUve6QgMY+rp8MDjwg3bOf59FgMWNdeUlAaUJeP fVNoobtrTwEyCsQWKthXoe0hbjqPcJPG -----END CERTIFICATE-----Generated at Sun Jan 25 17:03:45 2026 by rpki-client